PT-2007-6421 · Fujitsu+1 · Fujitsu Interstage Application Server+2

Published 2007-10-11 · Updated 2017-07-29 · CVE-2007-5366

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Fujitsu Interstage Application Server versions 7.0 through 9.0.0 Fujitsu Interstage Apworks/Studio versions 7.0 through 9.0.0

Description: The issue allows remote attackers to obtain sensitive information, specifically the web root path, via unspecified vectors that trigger an error message. This is likely related to the use of the useCanonCaches Java Virtual Machine (JVM) option.

Recommendations: For Fujitsu Interstage Application Server versions 7.0 through 9.0.0, consider disabling the useCanonCaches JVM option as a temporary workaround to minimize the risk of exploitation. For Fujitsu Interstage Apworks/Studio versions 7.0 through 9.0.0, consider disabling the useCanonCaches JVM option as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2007-5366

Affected Products

Fujitsu Interstage Application Server

Fujitsu Interstage Apworks/Studio

Java Virtual Machine

References · 6

• http://secunia.com/advisories/27136 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-5366 · Security Note
• http://osvdb.org/41318 · Note
• http://fujitsu.com/global/support/software/security/products-f/interstage-200705e.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37026 · Note
• http://securityfocus.com/bid/25988 · Note