Fujitsu Jasmine2000 Enterprise Edition Multiple Remote Vulnerabilities
BID:33940
Info
Fujitsu Jasmine2000 Enterprise Edition Multiple Remote Vulnerabilities
| Bugtraq ID: | 33940 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 02 2009 12:00AM |
| Updated: | Mar 03 2009 05:36PM |
| Credit: | Fujitsu |
| Vulnerable: |
Fujitsu Jasmine2000 Enterprise Edition 0 |
| Not Vulnerable: | |
Discussion
Fujitsu Jasmine2000 Enterprise Edition Multiple Remote Vulnerabilities
Fujitsu Jasmine2000 Enterprise Edition is prone to multiple remote vulnerabilities, including a denial-of-service issue, a buffer-overflow issue, and an HTML-injection issue.
An attacker can exploit these issues to steal cookie-based authentication credentials, control how the site is rendered to the user, execute arbitrary code within the context of the affected application, or crash the application, denying service to legitimate users.
Fujitsu Jasmine2000 Enterprise Edition is prone to multiple remote vulnerabilities, including a denial-of-service issue, a buffer-overflow issue, and an HTML-injection issue.
An attacker can exploit these issues to steal cookie-based authentication credentials, control how the site is rendered to the user, execute arbitrary code within the context of the affected application, or crash the application, denying service to legitimate users.
Exploit / POC
Fujitsu Jasmine2000 Enterprise Edition Multiple Remote Vulnerabilities
An attacker can exploit the HTML-injection issue via a browser.
Currently we are not aware of any working exploits for the buffer-overflow or denial-of-service issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
An attacker can exploit the HTML-injection issue via a browser.
Currently we are not aware of any working exploits for the buffer-overflow or denial-of-service issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Fujitsu Jasmine2000 Enterprise Edition Multiple Remote Vulnerabilities
Solution:
The vendor has released an update. Please see the references for more information.
Solution:
The vendor has released an update. Please see the references for more information.
References
Fujitsu Jasmine2000 Enterprise Edition Multiple Remote Vulnerabilities
References:
References: