CVE:CVE-2008-0656
CNNVD:CNNVD-200802-123
EMC Documentum Administrator 5.3.0.313 和WEBtop 5.3.0.317的dmclTrace.jsp中的无限文件上传漏洞会允许远程攻击者利用文件名属性来反复写入任意文件。
solution:Upgrade emc documentum_administrator to a higher version than 4.2.8,5.2.5,5.2.5_sp2,5.3.0.313,and avoid the version 4.2.8,5.2.5,5.2.5_sp2,5.3.0.313; Upgrade emc documentum_webtop to a higher version than 5.2.5,5.2.5_sp2,5.3.0.317,and avoid the version 5.2.5,5.2.5_sp2,5.3.0.317