CyberSec.Space Logo
CVEブラウザに戻る

CVE-2008-1040

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0320%
EPSS Percentile0.15th
Published2008年2月27日
Last Modified2026年4月23日

Vulnerability Description

Buffer overflow in the Single Sign-On function in Fujitsu Interstage Application Server 8.0.0 through 8.0.3 and 9.0.0, Interstage Studio 8.0.1 and 9.0.0, and Interstage Apworks 8.0.0 allows remote attackers to execute arbitrary code via a long URI.

Affected Platforms (CPE)

📦
Fujitsu

Interstage Application Server Enterprise

= 8.0.0
📦
Fujitsu

Interstage Application Server Enterprise

= 8.0.0
📦
Fujitsu

Interstage Application Server Enterprise

= 8.0.0
📦
Fujitsu

Interstage Application Server Enterprise

= 8.0.0
📦
Fujitsu

Interstage Application Server Enterprise

= 8.0.1
📦
Fujitsu

Interstage Application Server Enterprise

= 8.0.2
📦
Fujitsu

Interstage Application Server Enterprise

= 8.0.2
📦
Fujitsu

Interstage Application Server Enterprise

= 8.0.2
📦
Fujitsu

Interstage Application Server Enterprise

= 8.0.2
📦
Fujitsu

Interstage Application Server Enterprise

= 8.0.3
📦
Fujitsu

Interstage Application Server Enterprise

= 8.0.3
📦
Fujitsu

Interstage Application Server Enterprise

= 8.0.3
📦
Fujitsu

Interstage Application Server Enterprise

= 8.0.3
📦
Fujitsu

Interstage Application Server Enterprise

= v9.0.0
📦
Fujitsu

Interstage Application Server Enterprise

= v9.0.0
📦
Fujitsu

Interstage Application Server Enterprise

= v9.0.0
📦
Fujitsu

Interstage Application Server Enterprise

= v9.0.0
📦
Fujitsu

Interstage Application Server Enterprise

= v9.0.0
📦
Fujitsu

Interstage Application Server Enterprise

= v9.0.0
📦
Fujitsu

Interstage Application Server Enterprise

= v9.0.0
📦
Fujitsu

Interstage Application Server Enterprise

= v9.0.0
📦
Fujitsu

Interstage Application Server Enterprise

= v9.0.0a
📦
Fujitsu

Interstage Application Server Enterprise

= v9.0.0a
📦
Fujitsu

Interstage Application Server Enterprise

= v9.0.0a
📦
Fujitsu

Interstage Application Server Standard J

= 8.0.0
📦
Fujitsu

Interstage Application Server Standard J

= 8.0.0
📦
Fujitsu

Interstage Application Server Standard J

= 8.0.0
📦
Fujitsu

Interstage Application Server Standard J

= 8.0.0
📦
Fujitsu

Interstage Application Server Standard J

= 8.0.2
📦
Fujitsu

Interstage Application Server Standard J

= 8.0.2
📦
Fujitsu

Interstage Application Server Standard J

= 8.0.2
📦
Fujitsu

Interstage Application Server Standard J

= 8.0.2
📦
Fujitsu

Interstage Application Server Standard J

= 8.0.3
📦
Fujitsu

Interstage Application Server Standard J

= 8.0.3
📦
Fujitsu

Interstage Application Server Standard J

= 8.0.3
📦
Fujitsu

Interstage Application Server Standard J

= 8.0.3
📦
Fujitsu

Interstage Application Server Standard J

= v9.0.0.0
📦
Fujitsu

Interstage Application Server Standard J

= v9.0.0.0
📦
Fujitsu

Interstage Application Server Standard J

= v9.0.0.0
📦
Fujitsu

Interstage Application Server Standard J

= v9.0.0.0
📦
Fujitsu

Interstage Application Server Standard J

= v9.0.0.0
📦
Fujitsu

Interstage Application Server Standard J

= v9.0.0.0
📦
Fujitsu

Interstage Application Server Standard J

= v9.0.0.0
📦
Fujitsu

Interstage Application Server Standard J

= v9.0.0.0
📦
Fujitsu

Interstage Application Server Standard J

= v9.0.0a
📦
Fujitsu

Interstage Apworks Enterprise

= 8.0.0
📦
Fujitsu

Interstage Apworks Standard J

= 8.0.0
📦
Fujitsu

Interstage Studio Enterprise

= 8.0.1
📦
Fujitsu

Interstage Studio Enterprise

= v9.0.0
📦
Fujitsu

Interstage Studio Standard J

= 8.0.1
📦
Fujitsu

Interstage Studio Standard J

= v9.0.0

References & Advisories

🔗 http://secunia.com/advisories/29088
🔗 http://www.fujitsu.com/global/support/software/security/products-f/interstage-200804e.html
🔗 http://www.securityfocus.com/bid/27966
🔗 http://www.vupen.com/english/advisories/2008/0662
🔗 http://secunia.com/advisories/29088
🔗 http://www.fujitsu.com/global/support/software/security/products-f/interstage-200804e.html
🔗 http://www.securityfocus.com/bid/27966
🔗 http://www.vupen.com/english/advisories/2008/0662

関連する脆弱性情報

CVE-2008-71955.0

Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server Enterprise Edition 7.0.1 for...

CVE-2008-535310.0

The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and...

CVE-2008-665110.0

Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbitrary PHP c...

CVE-2008-535510.0

The "Java Update" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 1...