CVE-2008-3126

The CVE-2008-3126 issue affects Fujitsu Siemens Computers ServerView (04.60.07 and earlier), specifically the ServerView web interface component SnmpGetMibValues.exe. The root cause is multiple stack-based buffer overflows that allow remote authenticated users to execute arbitrary code via a craf...

KLA10323 ACE vulnerabilities ServerView

A buffer overflow was found in ServerView. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed URL. Original advisories - Related products ServerView CVE list CVE-2008-3126 high Solution Update to lates...

ServerView 'SnmpGetMibValues.exe'多个未明缓冲区溢出漏洞

BUGTRAQ ID: 30081 CNCAN ID：CNCAN-2008070706 Fujitsu ServerView是一款用于进行自动分析和版本维护的资产管理工具。 Fujitsu ServerView不正确检查用户提交的数据，远程攻击者可以利用漏洞进行缓冲区溢出攻击，可能以应用程序权限执行任意指令。 目前没有详细漏洞细节提供。 Fujitsu ServerView 4.60.7 可联系供应商获得补丁信息：...

CVE-2008-2674

Unspecified vulnerability in the Interstage Management Console, as used in Fujitsu Interstage Application Server 6.0 through 9.0.0A, Apworks Modelers-J 6.0 through 7.0, and Studio 8.0.1 and 9.0.0, allows remote attackers to read or delete arbitrary files via unspecified vectors...

Code injection

Unspecified vulnerability in the Interstage Management Console, as used in Fujitsu Interstage Application Server 6.0 through 9.0.0A, Apworks Modelers-J 6.0 through 7.0, and Studio 8.0.1 and 9.0.0, allows remote attackers to read or delete arbitrary files via unspecified vectors...

CVE-2008-2674

CVE-2008-2674 describes an unspecified vulnerability in the Interstage Management Console used by Fujitsu Interstage Application Server 6.0–9.0.0A, Apworks Modelers-J 6.0–7.0, and Studio 8.0.1–9.0.0. The issue allows remote attackers to read or delete arbitrary files via unspecified vectors. Conn...

CVE-2008-2674

Unspecified vulnerability in the Interstage Management Console, as used in Fujitsu Interstage Application Server 6.0 through 9.0.0A, Apworks Modelers-J 6.0 through 7.0, and Studio 8.0.1 and 9.0.0, allows remote attackers to read or delete arbitrary files via unspecified vectors...

Fujitsu Java Runtime Environment reflection API vulnerability

Overview A vulnerability exists in the reflection API in the Java Runtime Environment that may allow a Java applet to elevate its privileges bypassing its security restrictions. This problem was reported by Sun Microsystems as a vulnerability in Java Runtime Environment. Fujitsu's product is...

ServerView cross-site scripting vulnerability

Overview ServerView, server-monitoring software included with Fujitsu servers, contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution None...

FENCE-Pro and Systemwalker Desktop Encryption self-decoding file vulnerability

Overview Fujitsu's encryption software FENCE-Pro and Systemwalker Desktop Encryption share the same components. A vulnerability exists in self-decoding files created using this software. Impact The third party could view the contents of self-decoding files and obtain the passwords used for the...

Interstage Application Server cross-site scripting vulnerability

Overview The Servlet Service for Interstage Business Application and the Servlet Service for Interstage Management Console may be referred to as "Servlet Service for Interstage Operation Management" in certain versions included in the Interstage product series from Fujitsu contain a cross-site...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Fujitsu Interstage Smart Repository, as used in multiple Fujitsu Interstage products, allow remote attackers to cause a denial of service daemon crash via 1 an invalid request or 2 a large amount of data sent to the registered attribute value...

CVE-2008-1207

Multiple unspecified vulnerabilities in Fujitsu Interstage Smart Repository, as used in multiple Fujitsu Interstage products, allow remote attackers to cause a denial of service daemon crash via 1 an invalid request or 2 a large amount of data sent to the registered attribute value...

CVE-2008-1207

Multiple unspecified vulnerabilities in Fujitsu Interstage Smart Repository, as used in multiple Fujitsu Interstage products, allow remote attackers to cause a denial of service daemon crash via 1 an invalid request or 2 a large amount of data sent to the registered attribute value...

CVE-2008-1207

CVE-2008-1207 affects Fujitsu Interstage Smart Repository as used by Interstage products. The described vulnerability is a denial of service caused by either (1) an invalid request or (2) sending a large amount of data to the registered attribute value, impacting the daemon’s stability. The conne...

Fujitsu Interstage Smart Repository多个未明拒绝服务漏洞

BUGTRAQ ID: 28114 CNCAN ID:CNCAN-2008030704 Fujitsu Interstage Smart Repository包含的InterstageInterstage Application Server, Interstage Apworks, Interstage Business Application Server和Interstage Job Workload Server存在多个安全问题，攻击者发送超大数据给注册的属性值，可导致应用程序崩溃。 目前没有详细漏洞细节提供。 Fujitsu Interstage Smart Repositor...

CVE-2008-1040

Buffer overflow in the Single Sign-On function in Fujitsu Interstage Application Server 8.0.0 through 8.0.3 and 9.0.0, Interstage Studio 8.0.1 and 9.0.0, and Interstage Apworks 8.0.0 allows remote attackers to execute arbitrary code via a long URI...

Buffer overflow

Buffer overflow in the Single Sign-On function in Fujitsu Interstage Application Server 8.0.0 through 8.0.3 and 9.0.0, Interstage Studio 8.0.1 and 9.0.0, and Interstage Apworks 8.0.0 allows remote attackers to execute arbitrary code via a long URI...

CVE-2008-1040

Buffer overflow in the Single Sign-On function in Fujitsu Interstage Application Server 8.0.0 through 8.0.3 and 9.0.0, Interstage Studio 8.0.1 and 9.0.0, and Interstage Apworks 8.0.0 allows remote attackers to execute arbitrary code via a long URI...

CVE-2008-1040

The CVE-2008-1040 issue affects Fujitsu Interstage products: Interstage Application Server (versions 8.0.0–8.0.3 and 9.0.0), Interstage Studio (8.0.1 and 9.0.0), and Interstage Apworks 8.0.0. It is a buffer overflow in the Single Sign-On function caused by improper URI handling, which enables a r...