CVE-2007-5366

The Tomcat 4.1-based Servlet Service in Fujitsu Interstage Application Server 7.0 through 9.0.0 and Interstage Apworks/Studio 7.0 through 9.0.0 allows remote attackers to obtain sensitive information (web root path) via unspecified vectors that trigger an error message, probably related to enabling the useCanonCaches Java Virtual Machine (JVM) option.

Link	Resource
http://www.fujitsu.com/global/support/software/security/products-f/interstage-200705e.html
http://www.securityfocus.com/bid/25988
http://secunia.com/advisories/27136	Vendor Advisory
http://osvdb.org/41318
https://exchange.xforce.ibmcloud.com/vulnerabilities/37026

Configuration 1

cpe:2.3:a:fujitsu:interstage_application_server:8.0.2:*:enterprise:*:*:*:*:* cpe:2.3:a:fujitsu:interstage_application_server:8.0.2:*:standard_j:*:*:*:*:* cpe:2.3:a:fujitsu:interstage_application_server:8.0.3:*:standard_j:*:*:*:*:* cpe:2.3:a:fujitsu:interstage_application_server:9.0a:*:enterprise:*:*:*:*:* cpe:2.3:a:fujitsu:interstage_application_server:8.0.0:*:standard_j:*:*:*:*:* cpe:2.3:a:fujitsu:interstage_application_server:8.0.1:*:standard_j:*:*:*:*:* cpe:2.3:a:fujitsu:interstage_apworks:7.0:*:modelers_j:*:*:*:*:* cpe:2.3:a:fujitsu:interstage_studio:8.01:*:enterprise:*:*:*:*:* cpe:2.3:a:fujitsu:interstage_studio:9.0:*:standard_j:*:*:*:*:* cpe:2.3:a:fujitsu:interstage_application_server:7.0:*:enterprise:*:*:*:*:* cpe:2.3:a:fujitsu:interstage_application_server:7.0.1:*:plus:*:*:*:*:* cpe:2.3:a:fujitsu:interstage_studio:9.0:*:enterprise:*:*:*:*:* cpe:2.3:a:fujitsu:interstage_application_server:9.0:*:standard_j:*:*:*:*:* cpe:2.3:a:fujitsu:interstage_application_server:7.0:*:plus_developer:*:*:*:*:* cpe:2.3:a:fujitsu:interstage_application_server:9.0a:*:standard_j:*:*:*:*:* cpe:2.3:a:fujitsu:interstage_application_server:7.0:*:plus:*:*:*:*:* cpe:2.3:a:fujitsu:interstage_application_server:9.0:*:enterprise:*:*:*:*:* cpe:2.3:a:fujitsu:interstage_apworks:8.0:*:enterprise:*:*:*:*:* cpe:2.3:a:fujitsu:interstage_application_server:8.0.3:*:enterprise:*:*:*:*:* cpe:2.3:a:fujitsu:interstage_apworks:8.0:*:standard_j:*:*:*:*:* cpe:2.3:a:fujitsu:interstage_studio:8.01:*:standard_j:*:*:*:*:* cpe:2.3:a:fujitsu:interstage_application_server:7.0.1:*:enterprise:*:*:*:*:* cpe:2.3:a:fujitsu:interstage_application_server:8.0.1:*:enterprise:*:*:*:*:* cpe:2.3:a:fujitsu:interstage_application_server:8.0.0:*:enterprise:*:*:*:*:*

---

Published : 2007-10-11 10:17

Updated : 2017-07-29 01:33

---

NVD link : CVE-2007-5366

Mitre link : CVE-2007-5366

Fujitsu

Interstage Studio

CWE-22