Unscored severity · published Jul 10, 2008
CVE-2008-3126
Multiple stack-based buffer overflows in the ServerView web interface (SnmpGetMibValues.exe) in Fujitsu Siemens Computers ServerView 04.60.07 and earlier allow remote…
–
CVSS
2.3%
EPSS
No
On KEV
Description
Multiple stack-based buffer overflows in the ServerView web interface (SnmpGetMibValues.exe) in Fujitsu Siemens Computers ServerView 04.60.07 and earlier allow remote authenticated users to execute arbitrary code via a crafted URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SE
Serverview · Fujitsu
through 4.60.07 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3126
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3126
lists.grok.org.uk
http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063043.html
Vendor Advisory
http://secunia.com/advisories/30913
www.securityfocus.com
http://www.securityfocus.com/bid/30081
www.vupen.com
http://www.vupen.com/english/advisories/2008/2007/references
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/43611
More from Serverview
–
CVE-2007-3011
The DBAsciiAccess CGI Script in the web interface in Fujitsu-Siemens Computers ServerView before 4.50.09 allows remote attackers to execute arbitrary commands via shell…
–
CVE-2006-3578
Directory traversal vulnerability in Fujitsu ServerView 2.50 up to 3.60L98 and 4.10L11 up to 4.11L81 allows remote attackers to read arbitrary files via unspecified vectors
–
CVE-2006-3579
Cross-site scripting (XSS) vulnerability in Fujitsu ServerView 2.50 up to 3.60L98 and 4.10L11 up to 4.11L81 allows remote attackers to inject arbitrary web script or HTML via…