PT-2007-6421 · Fujitsu+1 · Fujitsu Interstage Application Server+2

Publicado 2007-10-11 · Atualizado 2017-07-29 · CVE-2007-5366

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Fujitsu Interstage Application Server versions 7.0 through 9.0.0 Fujitsu Interstage Apworks/Studio versions 7.0 through 9.0.0

Description: The issue allows remote attackers to obtain sensitive information, specifically the web root path, via unspecified vectors that trigger an error message. This is likely related to the use of the useCanonCaches Java Virtual Machine (JVM) option.

Recommendations: For Fujitsu Interstage Application Server versions 7.0 through 9.0.0, consider disabling the useCanonCaches JVM option as a temporary workaround to minimize the risk of exploitation. For Fujitsu Interstage Apworks/Studio versions 7.0 through 9.0.0, consider disabling the useCanonCaches JVM option as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2007-5366

Produtos afetados

Fujitsu Interstage Application Server

Fujitsu Interstage Apworks/Studio

Java Virtual Machine

Referências · 6

• http://osvdb.org/41318 · Nota
• http://fujitsu.com/global/support/software/security/products-f/interstage-200705e.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37026 · Nota
• http://secunia.com/advisories/27136 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-5366 · Nota de Segurança
• http://securityfocus.com/bid/25988 · Nota