ESA-2014-064: EMC Documentum Content Server Privilege Escalation
--_002_37F0BE0896DB1544B5BEFBE34F79D0534F935908MX103CL01corpem_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
--_002_37F0BE0896DB1544B5BEFBE34F79D0534F935908MX103CL01corpem_
Content-Type: text/plain; name="ESA-2014-064.txt"
Content-Description: ESA-2014-064.txt
Content-Disposition: attachment; filename="ESA-2014-064.txt"; size=4078;
creation-date="Tue, 01 Jul 2014 14:12:41 GMT";
modification-date="Mon, 07 Jul 2014 18:19:28 GMT"
Content-Transfer-Encoding: base64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--_002_37F0BE0896DB1544B5BEFBE34F79D0534F935908MX103CL01corpem_--