PT-2007-2896 · Fujitsu · Fence-Pro+1

Published 2007-03-19 · Updated 2017-08-17 · CVE-2007-1505

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Fujitsu FENCE-Pro versions prior to V5L01 Systemwalker Desktop Encryption versions V12.0L10, V12.0L10A, V12.0L10B, V12.0L20, V13.0.0

Description The issue allows local users to obtain sensitive information by extracting the decoding password from certain "self-decoding" file types.

Recommendations For Fujitsu FENCE-Pro versions prior to V5L01, update to version V5L01 or later. For Systemwalker Desktop Encryption versions V12.0L10, V12.0L10A, V12.0L10B, V12.0L20, V13.0.0, consider restricting access to sensitive files until a patch is available.

Fix

Related Identifiers

CVE-2007-1505

Affected Products

Fence-Pro

Systemwalker Desktop Encryption

References · 9

• http://secunia.com/advisories/24537 · Vendor Advisory
• http://secunia.com/advisories/24549 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1505 · Security Note
• http://software.fujitsu.com/jp/security/products-fujitsu/solution/systemwalker_dte_200701.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33029 · Note
• http://jvn.jp/jp/JVN%2319795972/index.html · Note
• http://osvdb.org/34184 · Note
• http://securityfocus.com/bid/23001 · Note
• http://segroup.fujitsu.com/secure/products/fence/notice/alert20070316.html · Note