CVE-2007-3011 The DBAsciiAccess CGI Script in the web interface in Fujitsu-Siemens Computers ServerView before 4.50.09 allows remote attackers to execute arbitrary commands via shell metacharacters in the Servernam...
HighCVSS 7.5
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The DBAsciiAccess CGI Script in the web interface in Fujitsu-Siemens Computers ServerView before 4.50.09 allows remote attackers to execute arbitrary commands via shell metacharacters in the Servername subparameter of the ParameterList parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fujitsu serverview | = 2.50 | No fix listed |
| fujitsu serverview | = 3.60l98 | No fix listed |
| fujitsu serverview | = 3.60l99 | No fix listed |
| fujitsu serverview | = 4.10l11 | No fix listed |
| fujitsu serverview | = 4.11l11b | No fix listed |
| fujitsu serverview | = 4.11l81 | No fix listed |
| fujitsu serverview | = 4.30.1 | No fix listed |
| fujitsu serverview | = 4.30.2 | No fix listed |
| fujitsu serverview | = 4.30.3 | No fix listed |
| fujitsu serverview | = 4.30.4 | No fix listed |
| fujitsu serverview | = 4.30.5 | No fix listed |
| fujitsu serverview | = 4.30.6 | No fix listed |
| fujitsu serverview | = 4.30.7 | No fix listed |
| fujitsu serverview | = 4.30.8 | No fix listed |
| fujitsu serverview | = 4.30.9 | No fix listed |
| fujitsu serverview | = 4.30.10 | No fix listed |
| fujitsu serverview | = 4.30.11 | No fix listed |
| fujitsu serverview | = 4.30.12 | No fix listed |
| fujitsu serverview | = 4.30.13 | No fix listed |
| fujitsu serverview | = 4.40.1 | No fix listed |
| fujitsu serverview | = 4.40.2 | No fix listed |
| fujitsu serverview | = 4.40.3 | No fix listed |
| fujitsu serverview | = 4.40.4 | No fix listed |
| fujitsu serverview | = 4.40.5 | No fix listed |
| fujitsu serverview | = 4.40.6 | No fix listed |
Show 8 more
| Product | Affected versions | Fixed in |
|---|---|---|
| fujitsu serverview | = 4.50.1 | No fix listed |
| fujitsu serverview | = 4.50.2 | No fix listed |
| fujitsu serverview | = 4.50.3 | No fix listed |
| fujitsu serverview | = 4.50.4 | No fix listed |
| fujitsu serverview | = 4.50.5 | No fix listed |
| fujitsu serverview | = 4.50.6 | No fix listed |
| fujitsu serverview | = 4.50.7 | No fix listed |
| fujitsu serverview | = 4.50.8 | No fix listed |
References
- 37835 vdb-entry
- 25944 patch third-party-advisory vendor-advisory
- 2858 third-party-advisory
- www.redteam-pentesting.de exploit patch vendor-advisory
- 20070704 Fujitsu-Siemens ServerView Remote Command Execution mailing-list
- 24762 exploit patch vdb-entry
- ADV-2007-2441 vdb-entry
- serverview-servername-command-execution(35257) vdb-entry