CVE-2013-7105
critical
CVSS v3
—
CVSS v2
10.0
VIR risk
10.0
Description
Buffer overflow in the Interstage HTTP Server log functionality, as used in Fujitsu Interstage Application Server 9.0.0, 9.1.0, 9.2.0, 9.3.1, and 10.0.0; and Interstage Studio 9.0.0, 9.1.0, 9.2.0, and 10.0.0, has unspecified impact and attack vectors related to "ihsrlog/rotatelogs."
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: cve@mitre.org — http://www.fujitsu.com/global/support/software/security/products-f/interstage-201302e.html
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| fujitsu | interstage_application_server | 9.0.0 | |
| fujitsu | interstage_application_server | 9.1.0 | |
| fujitsu | interstage_application_server | 9.2.0 | |
| fujitsu | interstage_application_server | 9.3.1 | |
| fujitsu | interstage_application_server | 10.0.0 | |
| fujitsu | interstage_studio | 9.0.0 | |
| fujitsu | interstage_studio | 9.1.0 | |
| fujitsu | interstage_studio | 9.2.0 | |
| fujitsu | interstage_studio | 10.0.0 | |
References
- http://www.fujitsu.com/global/support/software/security/products-f/interstage-201302e.html
- http://www.securityfocus.com/bid/63929
- http://www.securitytracker.com/id/1029398
- http://www.fujitsu.com/global/support/software/security/products-f/interstage-201302e.html
- http://www.securityfocus.com/bid/63929
- http://www.securitytracker.com/id/1029398
CWEs
CWE-119
Verify integrity in audit chain (admin only). AS-IS.