Exploit for Symantec Backup Exec系统还原管理器FileUpload类非授权文件上传漏洞

seebug · 2008-02-14

Description

Symantec Backup Exec System Recovery Manager FileUpload类非授权文件上传漏

Affected Symantec Backupexec System Recovery versions

Symantec Backupexec System Recovery= 7.0, 7.01

All known vulnerabilities by product

Apache Tomcat Symantec Backup Exec System Recovery Manager

CVSS 10.0 for CVE-2008-0457

10.0

HIGH SEVERITY

VectorAV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/

EPSS Score

11.9%higher than 95.5% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2008-02-14 00:00

Last Seen:2017-11-19 21:48

Reporter:Root

Tags

symantecbackup execsystem recovery managerfileupload非授权文件上传安全漏洞http post请求jsp脚本执行任意代码升级补丁厂商文件下载exploit

Other exploits for CVE-2008-0457

Symantec Backup Exec系统还原管理器目录遍历漏洞

2008-05-29 RootSEEBUG

Backup Exec System Recovery Manager 7.0.1 - Arbitrary File Upload

2008-02-07 titonEXPLOITDB

Symantec Backup Exec System Recovery Manager 7.0 - FileUpload Class Unauthorized File Upload

2007-01-05 titonEXPLOITDB

Exploit Code

MARKDOWN17 lines

## https://sploitus.com/exploit?id=SSV:2891
BUGTRAQ  ID: 27487
CVE(CAN) ID: CVE-2008-0457

Symantec Backup Exec是一款全面的数据备份解决方案。

Symantec Backup Exec系统还原管理器的运行在Symantec LiveState Apache Tomcat服务器（TCP 8080端口）上的FileUpload类存在安全漏洞。如果远程攻击者向该服务器提交了恶意的HTTP POST请求的话，就可以向公开可访问的web目录上传JSP脚本，导致执行任意代码。



Symantec Backup Exec System Recovery Manager 7.0.1
Symantec Backup Exec System Recovery Manager 7.0
 Symantec
--------
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：

<a href=https://fileconnect.symantec.com/ target=_blank>https://fileconnect.symantec.com/</a>