ServerView Multiple Unspecified Input Validation Vulnerabilities

Bugtraq ID:	18950
Class:	Input Validation Error
CVE:	CVE-2006-3579
Remote:	Yes
Local:	No
Published:	Jul 06 2006 12:00AM
Updated:	Jul 06 2016 01:33PM
Credit:	The vendor disclosed these issues.
Vulnerable:	Fujitsu ServerView 4.11 L81 Fujitsu ServerView 4.10 L11 Fujitsu ServerView 3.60 L98 Fujitsu ServerView 2.5
Not Vulnerable:	Fujitsu ServerView 4.11 L11B Fujitsu ServerView 3.60 L99

ServerView Multiple Unspecified Input Validation Vulnerabilities

ServerView is prone to cross-site scripting and directory-traversal vulnerabilities because the application fails to properly sanitize user-supplied input.

A successful exploit of these vulnerabilities could allow an attacker to access sensitive information or execute script code in the browser of an unsuspecing user. This may help the atacker steal cookie-based authentication credentials and launch other attacks.

ServerView Multiple Unspecified Input Validation Vulnerabilities

Attackers can exploit these issues through a web client.

ServerView Multiple Unspecified Input Validation Vulnerabilities

Solution:
The vendor released versions V3.60L99 and V4.20L11B to address these issues.

ServerView Multiple Unspecified Input Validation Vulnerabilities

References:

• ServerView Homepage (Fujitsu)
  
• ServerView Security Advisory (Fujitsu)