New Atlanta ServletExec Unauthorized Access Vulnerability
BID:10639
Info
New Atlanta ServletExec Unauthorized Access Vulnerability
| Bugtraq ID: | 10639 |
| Class: | Access Validation Error |
| CVE: |
CVE-2004-0650 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 30 2004 12:00AM |
| Updated: | Jul 12 2009 05:16AM |
| Credit: | The individual responsible for the discovery of this issue is currently unknown; this issue was disclosed in the referenced Cisco advisory. |
| Vulnerable: |
Cisco Collaboration Server 4.0 Cisco Collaboration Server 3.0 2 Cisco Collaboration Server 3.0 1 Cisco Collaboration Server 3.0 |
| Not Vulnerable: |
Cisco Collaboration Server 5.0 |
Discussion
New Atlanta ServletExec Unauthorized Access Vulnerability
It has been reported that New Atlanta ServletExec is affected by an unauthorized access vulnerability; fixes are available. This issue is due to an access validation error.
This issue would allow an attacker to upload and execute files on the affected computer, facilitating unauthorized interactive access as well as other attacks. This issue might also be leveraged to cause a denial of service condition in the affected server.
It has been reported that New Atlanta ServletExec is affected by an unauthorized access vulnerability; fixes are available. This issue is due to an access validation error.
This issue would allow an attacker to upload and execute files on the affected computer, facilitating unauthorized interactive access as well as other attacks. This issue might also be leveraged to cause a denial of service condition in the affected server.
Exploit / POC
New Atlanta ServletExec Unauthorized Access Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
New Atlanta ServletExec Unauthorized Access Vulnerability
Solution:
Cisco has released Security Advisory 59687 dealing with this issue for their Collaboration Server package. Please see the referenced advisory for more information.
It is conjectured that New Atlanta has issued fixes for this issue. This cannot be confirmed at the moment. Please contact the vendor for more information. Users are advised to upgrade to a newer version of the application.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Cisco has released Security Advisory 59687 dealing with this issue for their Collaboration Server package. Please see the referenced advisory for more information.
It is conjectured that New Atlanta has issued fixes for this issue. This cannot be confirmed at the moment. Please contact the vendor for more information. Users are advised to upgrade to a newer version of the application.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
New Atlanta ServletExec Unauthorized Access Vulnerability
References:
References:
- Cisco Security Advisory: Cisco Collaboration Server Vulnerability (Cisco)
- NewAtlanta Homepage (NewAtlanta)
- ServletExec Home Page (NewAtlanta)