Unrated severityNVD Advisory· Published Feb 7, 2008· Updated Jun 16, 2026
CVE-2008-0457
CVE-2008-0457
Description
Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exec System Recovery Manager 7.0 and 7.0.1, allows remote attackers to upload and execute arbitrary JSP files via unknown vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:symantec:backupexec_system_recovery:7.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:symantec:backupexec_system_recovery:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:backupexec_system_recovery:7.01:*:*:*:*:*:*:*
- Range: 7.0, 7.0.1
Patches
Vulnerability mechanics
References
9- seer.entsupport.symantec.com/docs/297171.htmnvdPatch
- www.symantec.com/avcenter/security/Content/2008.02.04.htmlnvdPatch
- www.securityfocus.com/bid/27487nvdExploit
- secunia.com/advisories/28787nvdVendor Advisory
- www.vupen.com/english/advisories/2008/0413nvdVendor Advisory
- www.securityfocus.com/archive/1/487688/100/0/threadednvd
- www.securitytracker.com/idnvd
- www.zerodayinitiative.com/advisories/ZDI-08-003.htmlnvd
- www.exploit-db.com/exploits/5078nvd
News mentions
0No linked articles in our index yet.