PT-2007-2896 · Fujitsu · Fence-Pro+1

Publicado 2007-03-19 · Atualizado 2017-08-17 · CVE-2007-1505

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Fujitsu FENCE-Pro versions prior to V5L01 Systemwalker Desktop Encryption versions V12.0L10, V12.0L10A, V12.0L10B, V12.0L20, V13.0.0

Description The issue allows local users to obtain sensitive information by extracting the decoding password from certain "self-decoding" file types.

Recommendations For Fujitsu FENCE-Pro versions prior to V5L01, update to version V5L01 or later. For Systemwalker Desktop Encryption versions V12.0L10, V12.0L10A, V12.0L10B, V12.0L20, V13.0.0, consider restricting access to sensitive files until a patch is available.

Correção

Identificadores relacionados

CVE-2007-1505

Produtos afetados

Fence-Pro

Systemwalker Desktop Encryption

Referências · 9

• http://secunia.com/advisories/24537 · Aviso do Fabricante
• http://software.fujitsu.com/jp/security/products-fujitsu/solution/systemwalker_dte_200701.html · Nota
• http://secunia.com/advisories/24549 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33029 · Nota
• http://jvn.jp/jp/JVN%2319795972/index.html · Nota
• http://osvdb.org/34184 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1505 · Nota de Segurança
• http://securityfocus.com/bid/23001 · Nota
• http://segroup.fujitsu.com/secure/products/fence/notice/alert20070316.html · Nota