PT-2007-4535 · Xythos · Webfile Server+2

Published 2007-06-27 · Updated 2018-10-16 · CVE-2007-3256

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Xythos Enterprise Document Manager (XEDM) versions prior to 6.0.46.1 Digital Locker (XDL) versions prior to 6.0.46.1 WebFile Server versions prior to 6.0.46.1

Description The issue allows remote authenticated users to associate arbitrary Content-Type HTTP headers with documents. This could potentially facilitate malware distribution.

Recommendations For Xythos Enterprise Document Manager (XEDM) versions prior to 6.0.46.1, update to version 6.0.46.1 or later. For Digital Locker (XDL) versions prior to 6.0.46.1, update to version 6.0.46.1 or later. For WebFile Server versions prior to 6.0.46.1, update to version 6.0.46.1 or later.

Fix

Related Identifiers

CVE-2007-3256

Affected Products

Digital Locker

Webfile Server

Xythos Enterprise Document Manager

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2007-3256 · Security Note
• http://securityfocus.com/bid/24521 · Patch
• http://securitytracker.com/id?1018291 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35086 · Note
• http://symantec.com/content/en/us/enterprise/research/SYMSA-2007-004.txt · Note
• http://securityfocus.com/archive/1/472275/100/0/threaded · Note
• http://securityreason.com/securityalert/2845 · Note
• http://secunia.com/advisories/25783 · Note
• http://osvdb.org/37614 · Note
• http://securitytracker.com/id?1018292 · Note