CVSS: 8.5EPSS: 0%CPEs: 4EXPL: 0CVE-2011-2739
https://notcve.org/view.php?id=CVE-2011-2739
The file-blocking feature in EMC Documentum eRoom 7.3.x and 7.4.x before 7.4.3.g does not properly restrict the uploading and opening of files with dangerous file types, which allows remote authenticated users to execute arbitrary code via an uploaded file. La funcionalidad file-blocking en EMC Documentum eRoom v7.3.x y v7.4.x antes de v7.4.3.g no restringe adecuadamente la subida y apertura de archivos peligrosos, lo que permite a usuarios autenticados remotamente ejecutar código de su elección mediante la subida de un archivo. • http://securityreason.com/securityalert/8528 http://www.securityfocus.com/archive/1/520372 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 10.0EPSS: 27%CPEs: 3EXPL: 0CVE-2011-1741 – EMC Documentum eRoom Indexing Server OpenText HummingBird Connector Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2011-1741
Stack-based buffer overflow in ftserver.exe in the OpenText Hummingbird Client Connector, as used in the Indexing Server in EMC Documentum eRoom 7.x before 7.4.3.f and other products, allows remote attackers to execute arbitrary code by sending a crafted message over TCP. Desbordamiento de búfer basado en pila en ftserver.exe en OpenText Hummingbird Client Connector, como el usado en Indexing Server en EMC Documentum eRoom v7.x before v7.4.3.f y otros productos, permite a atacantes remotos ejecutar código de su elección mandando un mensaje manipulado sobre TCP. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Documentum eRoom Indexing Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the bundled implementation of OpenText's HummingBird Connector. When parsing a particular packet received from a TCP connection, the application will attempt to copy part of the packet's contents into a buffer located on the stack. • http://securityreason.com/securityalert/8311 http://securitytracker.com/id?1025790 http://www.securityfocus.com/archive/1/518897/100/0/threaded http://www.securityfocus.com/archive/1/518913/100/0/threaded http://www.securityfocus.com/bid/48712 http://www.zerodayinitiative.com/advisories/ZDI-11-236 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •