CVEvulnerability
CVE-2008-1040
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-02-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in the Single Sign-On function in Fujitsu Interstage Application Server 8.0.0 through 8.0.3 and 9.0.0, Interstage Studio 8.0.1 and 9.0.0, and Interstage Apworks 8.0.0 allows remote attackers to execute arbitrary code via a long URI.
Affected configurations
• fujitsu interstage application server enterprise 8.0.0
• fujitsu interstage application server enterprise 8.0.1
• fujitsu interstage application server enterprise 8.0.2
• fujitsu interstage application server enterprise 8.0.3
• fujitsu interstage application server enterprise v9.0.0
• fujitsu interstage application server enterprise v9.0.0a
• fujitsu interstage application server standard j 8.0.0
• fujitsu interstage application server standard j 8.0.2
• fujitsu interstage application server standard j 8.0.3
• fujitsu interstage application server standard j v9.0.0.0
• fujitsu interstage application server standard j v9.0.0a
• fujitsu interstage apworks enterprise 8.0.0
• fujitsu interstage apworks standard j 8.0.0
• fujitsu interstage studio enterprise 8.0.1
• fujitsu interstage studio enterprise v9.0.0
• fujitsu interstage studio standard j 8.0.1
• fujitsu interstage studio standard j v9.0.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/29088 Vendor Advisory
- http://www.fujitsu.com/global/support/software/security/products-f/interstage-200804e.html www.fujitsu.com
- http://www.securityfocus.com/bid/27966 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/0662 www.vupen.com
- http://secunia.com/advisories/29088 Vendor Advisory
- http://www.fujitsu.com/global/support/software/security/products-f/interstage-200804e.html www.fujitsu.com
- http://www.securityfocus.com/bid/27966 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/0662 www.vupen.com