CVE-2007-5366 The Tomcat 4.1-based Servlet Service in Fujitsu Interstage Application Server 7.0 through 9.0.0 and Interstage Apworks/Studio 7.0 through 9.0.0 allows remote attackers to obtain sensitive information....
MediumCVSS 5.0
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Tomcat 4.1-based Servlet Service in Fujitsu Interstage Application Server 7.0 through 9.0.0 and Interstage Apworks/Studio 7.0 through 9.0.0 allows remote attackers to obtain sensitive information (web root path) via unspecified vectors that trigger an error message, probably related to enabling the useCanonCaches Java Virtual Machine (JVM) option.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fujitsu interstage application server | = 7.0 | No fix listed |
| fujitsu interstage application server | = 7.0.1 | No fix listed |
| fujitsu interstage application server | = 8.0.0 | No fix listed |
| fujitsu interstage application server | = 8.0.1 | No fix listed |
| fujitsu interstage application server | = 8.0.2 | No fix listed |
| fujitsu interstage application server | = 8.0.3 | No fix listed |
| fujitsu interstage application server | = 9.0 | No fix listed |
| fujitsu interstage application server | = 9.0a | No fix listed |
| fujitsu interstage apworks | = 7.0 | No fix listed |
| fujitsu interstage apworks | = 8.0 | No fix listed |
| fujitsu interstage studio | = 8.01 | No fix listed |
| fujitsu interstage studio | = 9.0 | No fix listed |
References
- 41318 vdb-entry
- 27136 third-party-advisory vendor-advisory
- www.fujitsu.com
- 25988 vdb-entry
- interstage-servlet-path-disclosure(37026) vdb-entry