Description
UploadServlet in Cisco Collaboration Server (CCS) running ServletExec before 3.0E allows remote attackers to upload and execute arbitrary files via a direct call to the UploadServlet URL.
References
- VU#718896 third-party-advisory
- 20040630 Cisco Collaboration Server Vulnerability vendor-advisory
- 10639 vdb-entry
- 11979 third-party-advisory
- ccs-servletexec-gain-privileges(16553) vdb-entry