CVE-2008-0656

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-02-07 · updated 2026-06-16
Weakness: CWE-20

Description

Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317 allows remote attackers to overwrite arbitrary files via the filename attribute.

Affected products

EMC Documentum Administrator: 4.2.8, 5.2.5, 5.2.5_sp2, 5.3.0.313
EMC Documentum Webtop: 5.2.5, 5.2.5_sp2, 5.3.0.317

References

http://secunia.com/advisories/28810
http://securityreason.com/securityalert/3626
http://www.cybsec.com/vuln/CYBSEC-Security_Advisory_Documentum_dmclTrace_Arbitrary_file_overwrite.pdf
http://www.securityfocus.com/archive/1/487603/100/0/threaded
http://www.securityfocus.com/bid/27632
http://www.securitytracker.com/id?1019305
http://www.vupen.com/english/advisories/2008/0439
http://secunia.com/advisories/28810
http://securityreason.com/securityalert/3626
http://www.cybsec.com/vuln/CYBSEC-Security_Advisory_Documentum_dmclTrace_Arbitrary_file_overwrite.pdf
http://www.securityfocus.com/archive/1/487603/100/0/threaded
http://www.securityfocus.com/bid/27632

Get alerted when CVE-2008-0656 or the next vulnerability affects your stack