jvndb - jvndb-2010-000018

jvndb-2010-000018

Vulnerability from jvndb

Published

2010-05-17 16:42

Modified

2010-05-17 16:42

Severity ?

() - -

Summary

Interstage Application Server vulnerable in request processing

Details

The Servlet service provided by the Interstage Application Server from Fujitsu Limited, contains a vulnerability where certain requests are not processed properly. The Servlet service provided by the Interstage Application Server from Fujitsu Limited, contains a vulnerability where certain requests may be handled improperly depending on the settings at the load balancing device.

References

▼	Type	URL
	JVN	http://jvn.jp/en/jp/JVN90248889/index.html
	CVE	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1942
	NVD	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1942
	SECUNIA	http://secunia.com/advisories/39803
	BID	http://www.securityfocus.com/bid/40189
	VUPEN	http://www.vupen.com/english/advisories/2010/1165
	OSVDB	http://osvdb.org/64703
	No Mapping(CWE-noinfo)	https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html

Impacted products

▼	Vendor	Product
	FUJITSU	Interstage Application Framework Suite
	FUJITSU	Interstage Application Server
	FUJITSU	Interstage Business Application Manager
	FUJITSU	Interstage List Manager

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000018.html",
  "dc:date": "2010-05-17T16:42+09:00",
  "dcterms:issued": "2010-05-17T16:42+09:00",
  "dcterms:modified": "2010-05-17T16:42+09:00",
  "description": "The Servlet service provided by the Interstage Application Server from Fujitsu Limited, contains a vulnerability where certain requests are not processed properly.\r\n\r\nThe Servlet service provided by the Interstage Application Server from Fujitsu Limited, contains a vulnerability where certain requests may be handled improperly depending on the settings at the load balancing device.",
  "link": "https://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000018.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:fujitsu:interstage_application_framework_suite",
      "@product": "Interstage Application Framework Suite",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:fujitsu:interstage_application_server",
      "@product": "Interstage Application Server",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:fujitsu:interstage_business_application_manager",
      "@product": "Interstage Business Application Manager",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:fujitsu:interstage_list_manager",
      "@product": "Interstage List Manager",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "6.4",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2010-000018",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN90248889/index.html",
      "@id": "JVN#90248889",
      "@source": "JVN"
    },
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1942",
      "@id": "CVE-2010-1942",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1942",
      "@id": "CVE-2010-1942",
      "@source": "NVD"
    },
    {
      "#text": "http://secunia.com/advisories/39803",
      "@id": "SA39803",
      "@source": "SECUNIA"
    },
    {
      "#text": "http://www.securityfocus.com/bid/40189",
      "@id": "40189",
      "@source": "BID"
    },
    {
      "#text": "http://www.vupen.com/english/advisories/2010/1165",
      "@id": "VUPEN/ADV-2010-1165",
      "@source": "VUPEN"
    },
    {
      "#text": "http://osvdb.org/64703",
      "@id": "64703",
      "@source": "OSVDB"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-noinfo",
      "@title": "No Mapping(CWE-noinfo)"
    }
  ],
  "title": "Interstage Application Server vulnerable in request processing"
}

cve-2010-1942

Vulnerability from cvelistv5

Published

2010-05-18 16:00

Modified

2024-08-07 02:17

Severity ?

Summary

Unspecified vulnerability in the Servlet service in Fujitsu Limited Interstage Application Server 3.0 through 7.0, as used in Interstage Application Framework Suite, Interstage Business Application Server, and Interstage List Manager, allows attackers to obtain sensitive information or force invalid requests to be processed via unknown vectors related to unspecified invalid requests and settings on the load balancing device.

References

▼	URL	Tags
	http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000018.html	third-party-advisory, x_refsource_JVNDB
	http://software.fujitsu.com/jp/security/vulnerabilities/jvn-90248889.html	x_refsource_CONFIRM
	http://osvdb.org/64703	vdb-entry, x_refsource_OSVDB
	https://exchange.xforce.ibmcloud.com/vulnerabilities/58634	vdb-entry, x_refsource_XF
	http://www.fujitsu.com/global/support/software/security/products-f/interstage-201001e.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/40189	vdb-entry, x_refsource_BID
	http://www.vupen.com/english/advisories/2010/1165	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/39803	third-party-advisory, x_refsource_SECUNIA
	http://jvn.jp/en/jp/JVN90248889/index.html	third-party-advisory, x_refsource_JVN

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T02:17:14.164Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "JVNDB-2010-000018",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVNDB",
              "x_transferred"
            ],
            "url": "http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000018.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://software.fujitsu.com/jp/security/vulnerabilities/jvn-90248889.html"
          },
          {
            "name": "64703",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/64703"
          },
          {
            "name": "interstage-servlet-information-disclosure(58634)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58634"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.fujitsu.com/global/support/software/security/products-f/interstage-201001e.html"
          },
          {
            "name": "40189",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/40189"
          },
          {
            "name": "ADV-2010-1165",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1165"
          },
          {
            "name": "39803",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39803"
          },
          {
            "name": "JVN#90248889",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN90248889/index.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-05-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Servlet service in Fujitsu Limited Interstage Application Server 3.0 through 7.0, as used in Interstage Application Framework Suite, Interstage Business Application Server, and Interstage List Manager, allows attackers to obtain sensitive information or force invalid requests to be processed via unknown vectors related to unspecified invalid requests and settings on the load balancing device."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-16T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "JVNDB-2010-000018",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVNDB"
          ],
          "url": "http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000018.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://software.fujitsu.com/jp/security/vulnerabilities/jvn-90248889.html"
        },
        {
          "name": "64703",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/64703"
        },
        {
          "name": "interstage-servlet-information-disclosure(58634)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58634"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.fujitsu.com/global/support/software/security/products-f/interstage-201001e.html"
        },
        {
          "name": "40189",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/40189"
        },
        {
          "name": "ADV-2010-1165",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1165"
        },
        {
          "name": "39803",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39803"
        },
        {
          "name": "JVN#90248889",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN90248889/index.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-1942",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Servlet service in Fujitsu Limited Interstage Application Server 3.0 through 7.0, as used in Interstage Application Framework Suite, Interstage Business Application Server, and Interstage List Manager, allows attackers to obtain sensitive information or force invalid requests to be processed via unknown vectors related to unspecified invalid requests and settings on the load balancing device."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "JVNDB-2010-000018",
              "refsource": "JVNDB",
              "url": "http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000018.html"
            },
            {
              "name": "http://software.fujitsu.com/jp/security/vulnerabilities/jvn-90248889.html",
              "refsource": "CONFIRM",
              "url": "http://software.fujitsu.com/jp/security/vulnerabilities/jvn-90248889.html"
            },
            {
              "name": "64703",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/64703"
            },
            {
              "name": "interstage-servlet-information-disclosure(58634)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58634"
            },
            {
              "name": "http://www.fujitsu.com/global/support/software/security/products-f/interstage-201001e.html",
              "refsource": "CONFIRM",
              "url": "http://www.fujitsu.com/global/support/software/security/products-f/interstage-201001e.html"
            },
            {
              "name": "40189",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/40189"
            },
            {
              "name": "ADV-2010-1165",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1165"
            },
            {
              "name": "39803",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39803"
            },
            {
              "name": "JVN#90248889",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN90248889/index.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-1942",
    "datePublished": "2010-05-18T16:00:00",
    "dateReserved": "2010-05-18T00:00:00",
    "dateUpdated": "2024-08-07T02:17:14.164Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted