Unscored severity · published Oct 11, 2007
CVE-2007-5366
The Tomcat 4.1-based Servlet Service in Fujitsu Interstage Application Server 7.0 through 9.0.0 and Interstage Apworks/Studio 7.0 through 9.0.0 allows remote attackers to obtain…
–
CVSS
2.2%
EPSS
No
On KEV
Description
The Tomcat 4.1-based Servlet Service in Fujitsu Interstage Application Server 7.0 through 9.0.0 and Interstage Apworks/Studio 7.0 through 9.0.0 allows remote attackers to obtain sensitive information (web root path) via unspecified vectors that trigger an error message, probably related to enabling the useCanonCaches Java Virtual Machine (JVM) option.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IA
Interstage Application Server · Fujitsu
7.0; 7.0; 7.0; 7.0.1; 7.0.1; 8.0.0; +11 more · source: NVD
IA
Interstage Apworks · Fujitsu
7.0; 8.0; 8.0 · source: NVD
IS
Interstage Studio · Fujitsu
8.01; 8.01; 9.0; 9.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5366
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5366
osvdb.org
http://osvdb.org/41318
Vendor Advisory
http://secunia.com/advisories/27136
www.fujitsu.com
http://www.fujitsu.com/global/support/software/security/products-f/interstage-200705e.html
www.securityfocus.com
http://www.securityfocus.com/bid/25988
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/37026
More from Interstage Application Server
5.9
CVE-2019-13163
The Fujitsu TLS library allows a man-in-the-middle attack
–
CVE-2013-7105
Buffer overflow in the Interstage HTTP Server log functionality, as used in Fujitsu Interstage Application Server 9.0.0, 9.1.0, 9.2.0, 9.3.1, and 10.0.0; and Interstage Studio…
–
CVE-2010-1942
Unspecified vulnerability in the Servlet service in Fujitsu Limited Interstage Application Server 3.0 through 7.0, as used in Interstage Application Framework Suite, Interstage…
–
CVE-2008-7195
Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server Enterprise Edition 7.0.1 for Solaris, allows attackers to cause a denial of…
–
CVE-2008-7194
Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server 5.0, 7.0, 7.0.1, and 8.0.0 for Windows, allows attackers to cause a denial of…