PT-2008-2089 · Symantec+1 · Symantec Backup Exec System Recovery Manager+1

Titon · Published 2008-02-07 · Updated 2018-10-15 · CVE-2008-0457

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Backup Exec System Recovery Manager versions 7.0 through 7.0.1

Description The issue is related to an unrestricted file upload vulnerability in the FileUpload class of the Symantec LiveState Apache Tomcat server. This vulnerability allows remote attackers to upload and execute arbitrary JSP files.

Recommendations For Symantec Backup Exec System Recovery Manager versions 7.0 through 7.0.1, consider restricting access to the FileUpload class as a temporary workaround until a patch is available.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-0457

Affected Products

Apache Tomcat

Symantec Backup Exec System Recovery Manager

References · 11

• 🔥 http://securityfocus.com/bid/27487 · Exploit
• 🔥 https://exploit-db.com/exploits/5078 · Exploit
• 🔥 https://exploit-db.com/exploits/31072 · Exploit
• http://vupen.com/english/advisories/2008/0413 · Vendor Advisory
• http://secunia.com/advisories/28787 · Vendor Advisory
• http://symantec.com/avcenter/security/Content/2008.02.04.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2008-0457 · Security Note
• http://seer.entsupport.symantec.com/docs/297171.htm · Patch
• http://securityfocus.com/archive/1/487688/100/0/threaded · Note
• http://zerodayinitiative.com/advisories/ZDI-08-003.html · Note
• http://securitytracker.com/id?1019303 · Note