CVE

Id
26368  
CVE No.
CVE-2007-3011  
Status
Candidate  
Description
The DBAsciiAccess CGI Script in the web interface in Fujitsu-Siemens Computers ServerView before 4.50.09 allows remote attackers to execute arbitrary commands via shell metacharacters in the Servername subparameter of the ParameterList parameter.  
Phase
Assigned (20070604)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
267058 26368 CVE-2007-3011 BUGTRAQ:20070704 Fujitsu-Siemens ServerView Remote Command Execution  View
267059 26368 CVE-2007-3011 URL:http://www.securityfocus.com/archive/1/archive/1/472800/100/0/threaded  View
267060 26368 CVE-2007-3011 MISC:http://www.redteam-pentesting.de/advisories/rt-sa-2007-002.php  View
267061 26368 CVE-2007-3011 BID:24762  View
267062 26368 CVE-2007-3011 URL:http://www.securityfocus.com/bid/24762  View
267063 26368 CVE-2007-3011 VUPEN:ADV-2007-2441  View
267064 26368 CVE-2007-3011 URL:http://www.vupen.com/english/advisories/2007/2441  View
267065 26368 CVE-2007-3011 OSVDB:37835  View
267066 26368 CVE-2007-3011 URL:http://osvdb.org/37835  View
267067 26368 CVE-2007-3011 SECUNIA:25944  View
267068 26368 CVE-2007-3011 URL:http://secunia.com/advisories/25944  View
267069 26368 CVE-2007-3011 SREASON:2858  View
267070 26368 CVE-2007-3011 URL:http://securityreason.com/securityalert/2858  View
267071 26368 CVE-2007-3011 XF:serverview-servername-command-execution(35257)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53439 JVNDB-2007-002131 activeWeb contentserver における SQL インジェクションの脆弱性 activeWeb contentserver には、SQL インジェクションの脆弱性が存在します。 CVE-2007-3013 26368 6.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002131.html  View