PT-2013-6277 · Fujitsu · Fujitsu Interstage Application Server+2

Publicado 2013-12-14 · Atualizado 2013-12-20 · CVE-2013-7105

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Fujitsu Interstage Application Server versions 9.0.0 through 10.0.0 Fujitsu Interstage Studio versions 9.0.0 through 10.0.0

Description A buffer overflow issue exists in the log functionality of the Interstage HTTP Server, which is used in Fujitsu Interstage Application Server and Interstage Studio. The issue is related to "ihsrlog/rotatelogs" and has an unspecified impact and attack vectors.

Recommendations For Fujitsu Interstage Application Server versions 9.0.0 through 10.0.0, update to a version that addresses the buffer overflow issue in the Interstage HTTP Server log functionality. For Fujitsu Interstage Studio versions 9.0.0 through 10.0.0, update to a version that addresses the buffer overflow issue in the Interstage HTTP Server log functionality. As a temporary workaround, consider restricting access to the "ihsrlog/rotatelogs" functionality until a patch is available.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2013-7105

Produtos afetados

Fujitsu Interstage Application Server

Fujitsu Interstage Studio

Interstage Http Server

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-7105 · Nota de Segurança
• http://securityfocus.com/bid/63929 · Nota
• http://securitytracker.com/id/1029398 · Nota
• http://fujitsu.com/global/support/software/security/products-f/interstage-201302e.html · Aviso do Fabricante