CVE-2007-3011

2007-07-0519:30:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

fujitsu-siemens

serverview

dbasciiaccess

cgi script

remote command execution

cve-2007-3011

security vulnerability

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.027 Low

EPSS

Percentile

90.3%

JSON

The DBAsciiAccess CGI Script in the web interface in Fujitsu-Siemens Computers ServerView before 4.50.09 allows remote attackers to execute arbitrary commands via shell metacharacters in the Servername subparameter of the ParameterList parameter.

CPENameOperatorVersion
fujitsu:serverviewfujitsu servervieweq4.30.4
fujitsu:serverviewfujitsu servervieweq4.30.8
fujitsu:serverviewfujitsu servervieweq4.10l11
fujitsu:serverviewfujitsu servervieweq4.30.9
fujitsu:serverviewfujitsu servervieweq4.50.2
fujitsu:serverviewfujitsu servervieweq4.40.1
fujitsu:serverviewfujitsu servervieweq3.60l98
fujitsu:serverviewfujitsu servervieweq4.30.5
fujitsu:serverviewfujitsu servervieweq4.50.7
fujitsu:serverviewfujitsu servervieweq4.40.3

CPE	Name	Operator	Version
fujitsu:serverview	fujitsu serverview	eq	4.30.4
fujitsu:serverview	fujitsu serverview	eq	4.30.8
fujitsu:serverview	fujitsu serverview	eq	4.10l11
fujitsu:serverview	fujitsu serverview	eq	4.30.9
fujitsu:serverview	fujitsu serverview	eq	4.50.2
fujitsu:serverview	fujitsu serverview	eq	4.40.1
fujitsu:serverview	fujitsu serverview	eq	3.60l98
fujitsu:serverview	fujitsu serverview	eq	4.30.5
fujitsu:serverview	fujitsu serverview	eq	4.50.7
fujitsu:serverview	fujitsu serverview	eq	4.40.3