fujitsu Archives - CVE Vulnerability

CVE-2008-7194

Sun, 26 Feb 2023 09:11:54 +0000

Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server 5.0, 7.0, 7.0.1, and 8.0.0 for Windows, allows attackers to cause a denial of service via a crafted request.

The post CVE-2008-7194 appeared first on CVE Vulnerability.

CVE-2008-7195

Sun, 26 Feb 2023 09:11:54 +0000

Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server Enterprise Edition 7.0.1 for Solaris, allows attackers to cause a denial of service via unknown vectors related to SSL.

The post CVE-2008-7195 appeared first on CVE Vulnerability.

CVE-2007-5366

Sun, 26 Feb 2023 09:07:38 +0000

The Tomcat 4.1-based Servlet Service in Fujitsu Interstage Application Server 7.0 through 9.0.0 and Interstage Apworks/Studio 7.0 through 9.0.0 allows remote attackers to obtain sensitive information (web root path) via unspecified vectors that trigger an error message, probably related to enabling the useCanonCaches Java Virtual Machine (JVM) option.

The post CVE-2007-5366 appeared first on CVE Vulnerability.

CVE-2007-1504

Sun, 26 Feb 2023 09:05:54 +0000

Cross-site scripting (XSS) vulnerability in the Servlet Service in Fujitsu Interstage Application Server (IJServer) 8.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving web.xml and HTTP 404 and 500 status codes.

The post CVE-2007-1504 appeared first on CVE Vulnerability.

CVE-2018-1000007

Sun, 26 Feb 2023 06:44:30 +0000

libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is returned, to the host mentioned in URL in the `Location:` response header value. Sending the same set of headers to subsequent hosts is in particular a problem for applications that pass on custom `Authorization:` headers, as this header often contains privacy sensitive information or data that could allow others to impersonate the libcurl-using client’s request.

The post CVE-2018-1000007 appeared first on CVE Vulnerability.

CVE-2020-8177

Sun, 26 Feb 2023 06:43:18 +0000

curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.

The post CVE-2020-8177 appeared first on CVE Vulnerability.

CVE-2020-1968

Sun, 26 Feb 2023 06:38:46 +0000

The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted communications sent over that TLS connection. The attack can only be exploited if an implementation re-uses a DH secret across multiple TLS connections. Note that this issue only impacts DH ciphersuites and not ECDH ciphersuites. This issue affects OpenSSL 1.0.2 which is out of support and no longer receiving public updates. OpenSSL 1.1.1 is not vulnerable to this issue. Fixed in OpenSSL 1.0.2w (Affected 1.0.2-1.0.2v).

The post CVE-2020-1968 appeared first on CVE Vulnerability.

CVE-2020-13817

Sun, 26 Feb 2023 06:37:04 +0000

ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for use in spoofed packets. The victim must be relying on unauthenticated IPv4 time sources. There must be an off-path attacker who can query time from the victim’s ntpd instance.

The post CVE-2020-13817 appeared first on CVE Vulnerability.

CVE-2019-9835

Sun, 26 Feb 2023 06:35:06 +0000

The receiver (aka bridge) component of Fujitsu Wireless Keyboard Set LX901 GK900 devices allows Keystroke Injection. This occurs because it accepts unencrypted 2.4 GHz packets, even though all legitimate communication uses AES encryption.

The post CVE-2019-9835 appeared first on CVE Vulnerability.

CVE-2019-18199

Sun, 26 Feb 2023 06:31:41 +0000

An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack of proper encryption of 2.4 GHz communication, and because of password-based authentication, they are vulnerable to replay attacks.

The post CVE-2019-18199 appeared first on CVE Vulnerability.