CVE-2008-1040

Buffer overflow in the Single Sign-On function in Fujitsu Interstage Application Server 8.0.0 through 8.0.3 and 9.0.0, Interstage Studio 8.0.1 and 9.0.0, and Interstage Apworks 8.0.0 allows remote attackers to execute arbitrary code via a long URI.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2008-02-27

Last modified

2024-08-07

Weaknesses

CWE-119

Affected products

• Interstage Application Server Enterprise (Fujitsu)
• Interstage Application Server Standard J (Fujitsu)
• Interstage Apworks Enterprise (Fujitsu)
• Interstage Apworks Standard J (Fujitsu)
• Interstage Studio Enterprise (Fujitsu)
• Interstage Studio Standard J (Fujitsu)

References

• http://secunia.com/advisories/29088
• http://www.fujitsu.com/global/support/software/security/products-f/interstage-200804e.html
• http://www.securityfocus.com/bid/27966
• http://www.vupen.com/english/advisories/2008/0662