Matt Moore has discovered a vulnerability in Cisco Collaboration Server (CCS), which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an error within the UploadServlet in the ServletExec subcomponent, allowing arbitrary files to be uploaded and executed.

Successful exploitation may reportedly grant a malicious person administrative privileges.

The vulnerability affects CCS (prior to 5.0) using a ServletExec version prior to 3.0E.

Solution
Various solutions are available.
Further details available in Customer Area

Provided and/or discovered by
Matt Moore

Changelog
Further details available in Customer Area

Original Advisory
Cisco:
http://www.cisco.com/warp/public/707/cisco-sa-20040630-CCS.shtml

Pentest Limited:
http://www.pentest.co.uk/documents/ptl-2004-05.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area