Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2008-0457

CWE-20 — Improper Input Validation5 documents4 sources

Severity

10.0CRITICAL

EPSS

29.8%

top 3.37%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Symantec Backupexec System Recovery

Timeline

PublishedFeb 7

Latest updateMay 1

Description

Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exec System Recovery Manager 7.0 and 7.0.1, allows remote attackers to upload and execute arbitrary JSP files via unknown vectors.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

▶NVDsymantec/backupexec_system_recovery7.0, 7.01+1

Patches

Patch: seer.entsupport.symantec.com ↗Patch: www.symantec.com ↗Patch: seer.entsupport.symantec.com ↗

🔴Vulnerability Details

GHSA

GHSA-8wh6-mr76-hmrp: Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exec↗2022-05-01

▶

CVEList

CVE-2008-0457: Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exec↗2008-02-07

▶

💥Exploits & PoCs

Exploit-DB

Backup Exec System Recovery Manager 7.0.1 - Arbitrary File Upload↗2008-02-07

▶

Exploit-DB

Symantec Backup Exec System Recovery Manager 7.0 - FileUpload Class Unauthorized File Upload↗2007-01-05

▶