CVE-2007-3011

Опубликовано: 05 июл. 2007

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

The DBAsciiAccess CGI Script in the web interface in Fujitsu-Siemens Computers ServerView before 4.50.09 allows remote attackers to execute arbitrary commands via shell metacharacters in the Servername subparameter of the ParameterList parameter.

Ссылки

http://osvdb.org/37835
http://secunia.com/advisories/25944
Patch
Vendor Advisory
http://securityreason.com/securityalert/2858
http://www.redteam-pentesting.de/advisories/rt-sa-2007-002.php
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/472800/100/0/threaded
http://www.securityfocus.com/bid/24762
Exploit
Patch
http://www.vupen.com/english/advisories/2007/2441
https://exchange.xforce.ibmcloud.com/vulnerabilities/35257
http://osvdb.org/37835
http://secunia.com/advisories/25944
Patch
Vendor Advisory
http://securityreason.com/securityalert/2858
http://www.redteam-pentesting.de/advisories/rt-sa-2007-002.php
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/472800/100/0/threaded
http://www.securityfocus.com/bid/24762
Exploit
Patch
http://www.vupen.com/english/advisories/2007/2441
https://exchange.xforce.ibmcloud.com/vulnerabilities/35257

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:fujitsu:serverview:2.50:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:3.60l98:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:3.60l99:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.10l11:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.11l11b:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.11l81:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.30.1:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.30.2:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.30.3:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.30.4:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.30.5:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.30.6:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.30.7:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.30.8:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.30.9:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.30.10:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.30.11:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.30.12:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.30.13:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.40.1:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.40.2:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.40.3:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.40.4:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.40.5:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.40.6:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.50.1:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.50.2:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.50.3:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.50.4:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.50.5:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.50.6:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.50.7:*:*:*:*:*:*:*

cpe:2.3:a:fujitsu:serverview:4.50.8:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.17064

Средний

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-cgqf-q6r9-fgph

github

почти 4 года назад