Unscored severity · published Jul 5, 2007
CVE-2007-3011
The DBAsciiAccess CGI Script in the web interface in Fujitsu-Siemens Computers ServerView before 4.50.09 allows remote attackers to execute arbitrary commands via shell…
–
CVSS
4.2%
EPSS
No
On KEV
Description
The DBAsciiAccess CGI Script in the web interface in Fujitsu-Siemens Computers ServerView before 4.50.09 allows remote attackers to execute arbitrary commands via shell metacharacters in the Servername subparameter of the ParameterList parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.2% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SE
Serverview · Fujitsu
2.50; 3.60l98; 3.60l99; 4.10l11; 4.11l11b; 4.11l81; +27 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3011
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3011
osvdb.org
http://osvdb.org/37835
Patch
http://secunia.com/advisories/25944
securityreason.com
http://securityreason.com/securityalert/2858
Exploit
http://www.redteam-pentesting.de/advisories/rt-sa-2007-002.php
www.securityfocus.com
http://www.securityfocus.com/archive/1/472800/100/0/threaded
Exploit
http://www.securityfocus.com/bid/24762
More from Serverview
–
CVE-2008-3126
Multiple stack-based buffer overflows in the ServerView web interface (SnmpGetMibValues.exe) in Fujitsu Siemens Computers ServerView 04.60.07 and earlier allow remote…
–
CVE-2006-3578
Directory traversal vulnerability in Fujitsu ServerView 2.50 up to 3.60L98 and 4.10L11 up to 4.11L81 allows remote attackers to read arbitrary files via unspecified vectors
–
CVE-2006-3579
Cross-site scripting (XSS) vulnerability in Fujitsu ServerView 2.50 up to 3.60L98 and 4.10L11 up to 4.11L81 allows remote attackers to inject arbitrary web script or HTML via…