PT-2013-6277 · Fujitsu · Fujitsu Interstage Application Server+2

Published 2013-12-14 · Updated 2013-12-20 · CVE-2013-7105

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Fujitsu Interstage Application Server versions 9.0.0 through 10.0.0 Fujitsu Interstage Studio versions 9.0.0 through 10.0.0

Description A buffer overflow issue exists in the log functionality of the Interstage HTTP Server, which is used in Fujitsu Interstage Application Server and Interstage Studio. The issue is related to "ihsrlog/rotatelogs" and has an unspecified impact and attack vectors.

Recommendations For Fujitsu Interstage Application Server versions 9.0.0 through 10.0.0, update to a version that addresses the buffer overflow issue in the Interstage HTTP Server log functionality. For Fujitsu Interstage Studio versions 9.0.0 through 10.0.0, update to a version that addresses the buffer overflow issue in the Interstage HTTP Server log functionality. As a temporary workaround, consider restricting access to the "ihsrlog/rotatelogs" functionality until a patch is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-7105

Affected Products

Fujitsu Interstage Application Server

Fujitsu Interstage Studio

Interstage Http Server

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-7105 · Security Note
• http://fujitsu.com/global/support/software/security/products-f/interstage-201302e.html · Vendor Advisory
• http://securityfocus.com/bid/63929 · Note
• http://securitytracker.com/id/1029398 · Note