Detections
Analytics
EMC Documentum Content Server Multiple Vulnerabilities (ESA-2014-064)
high Nessus Plugin ID 77634
Language:
Synopsis
The remote host is affected by multiple vulnerabilities.Description
The remote host is running a version of EMC Documentum Content Server that is affected by multiple vulnerabilities :- A remote code execution vulnerability exists due to improper authorization checks. A remote, authenticated attacker can exploit this vulnerability to execute arbitrary code via a custom script.
(CVE-2014-2513)
- A remote code execution vulnerability exists due to improper authorization checks. A remote, authenticated attacker can exploit this vulnerability to execute arbitrary code via save RPC commands.
(CVE-2014-2514)
Solution
Apply the relevant patch referenced in the vendor advisory.See Also
https://seclists.org/bugtraq/2014/Jul/att-23/ESA-2014-064.txt
Plugin Details
Severity: High
ID: 77634
File Name: emc_documentum_content_server_ESA-2014-064.nasl
Version: 1.5
Type: local
Agent: windows
Family: Windows
Published: 9/11/2014
Updated: 11/25/2019
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 8.2
Temporal Score: 6.4
Vector: CVSS2#AV:N/AC:M/Au:S/C:C/I:C/A:P
Vulnerability Information
CPE: cpe:/a:emc:documentum_content_server
Required KB Items: installed_sw/EMC Documentum Content Server
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 7/7/2014
Vulnerability Publication Date: 7/7/2014
Reference Information
CVE: CVE-2014-2513, CVE-2014-2514