PT-2008-4119 · Fujitsu · Fujitsu Interstage Application Server+2

Published 2008-06-12 · Updated 2017-08-08 · CVE-2008-2674

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Fujitsu Interstage Application Server versions 6.0 through 9.0.0A Apworks Modelers-J versions 6.0 through 7.0 Studio versions 8.0.1 and 9.0.0

Description The issue allows remote attackers to read or delete arbitrary files via unspecified vectors.

Recommendations For Fujitsu Interstage Application Server versions 6.0 through 9.0.0A, update to a version that is not affected by this issue. For Apworks Modelers-J versions 6.0 through 7.0, update to a version that is not affected by this issue. For Studio versions 8.0.1 and 9.0.0, update to a version that is not affected by this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2008-2674

Affected Products

Apworks Modelers-J

Fujitsu Interstage Application Server

Studio

References · 7

• http://secunia.com/advisories/30589 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-2674 · Security Note
• http://securityfocus.com/bid/29624 · Note
• http://vupen.com/english/advisories/2008/1771/references · Note
• http://securitytracker.com/id?1020235 · Note
• http://fujitsu.com/global/support/software/security/products-f/interstage-200805e.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42949 · Note