PT-2006-4454 · Fujitsu · Fujitsu Serverview

Published 2006-07-13 · Updated 2008-09-05 · CVE-2006-3579

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Fujitsu ServerView versions 2.50 through 3.60L98 Fujitsu ServerView versions 4.10L11 through 4.11L81

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This could potentially lead to unauthorized access or control of user sessions.

Recommendations For versions 2.50 through 3.60L98, update to a version later than 3.60L98 to resolve the issue. For versions 4.10L11 through 4.11L81, update to a version later than 4.11L81 to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2006-3579

Affected Products

Fujitsu Serverview

References · 7

• http://jvn.jp/jp/JVN%2376686161/index.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-3579 · Security Note
• http://software.fujitsu.com/jp/security/vulnerabilities/jvn-73368472-76686161.html · Patch
• http://jvn.jp/jp/JVN%2373368472/index.html · Patch
• http://secunia.com/advisories/21011 · Vendor Advisory
• http://osvdb.org/27105 · Note
• http://securityfocus.com/bid/18950 · Note