PT-2011-4051 · Emc · Emc Documentum Eroom

Publicado 2011-11-09 · Atualizado 2012-02-14 · CVE-2011-2739

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC Documentum eRoom versions 7.3.x through 7.4.x before 7.4.3.g EMC Documentum eRoom version 7.4.x before 7.4.3.g can be omitted as it is already included in the range, so the final output is: EMC Documentum eRoom versions 7.3.x through 7.4.x before 7.4.3.g can be further simplified to: EMC Documentum eRoom versions 7.3.x through 7.4.2

However, to maintain the original meaning and include all versions up to but not including 7.4.3.g, the correct simplification is: EMC Documentum eRoom versions 7.3.x through 7.4.2

But to be more precise with the given information: EMC Documentum eRoom versions 7.3.x through 7.4.x before 7.4.3.g

Description The file-blocking feature does not properly restrict the uploading and opening of files with dangerous file types, allowing remote authenticated users to execute arbitrary code via an uploaded file.

Recommendations For EMC Documentum eRoom versions 7.3.x through 7.4.x before 7.4.3.g, update to version 7.4.3.g or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-2739

Produtos afetados

Emc Documentum Eroom

Referências · 3

• http://securityreason.com/securityalert/8528 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-2739 · Nota de Segurança
• http://securityfocus.com/archive/1/520372 · Nota