jvndb-2009-002358
Vulnerability from jvndb
Published
2009-12-28 11:19
Modified
2009-12-28 11:19
Severity ?
() - -
Summary
Fujitsu Interstage and Systemwalker SSL Vulnerabilities
Details
Fujitsu Interstage and Systemwalker related products have the vulnerabilities listed below: - A buffer overflow vulnerability that can occur when the SSL server verifies the client's certificate. - A vulnerability that makes it possible to make an SSL connection using a server or client certificate issued by the old CA certificate after the CA certificate is renewed, regardless of the settings of the certificate environment variables. - A vulnerability where the depletion of resources, such as file descriptors, can occur on the SSL server.
References
Buffer Errors(CWE-119) https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html
Improper Authentication(CWE-287) https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html
Resource Management Errors(CWE-399) https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html
Impacted products
FUJITSUInfoDirectory
FUJITSUInfoProvider Pro
FUJITSUInfoProxy
FUJITSUInfoProxy for Middleware
FUJITSUInterstage
FUJITSUInterstage Apcoordinator
FUJITSUInterstage Application Framework Suite
FUJITSUInterstage Application Server
FUJITSUInterstage Apworks
FUJITSUInterstage Business Application Manager
FUJITSUInterstage Form Coordinator syomei option
FUJITSUInterstage Security Director
FUJITSUInterstage Traffic Director
FUJITSULinkexpress
FUJITSUSafeauthor
FUJITSUSafegate
FUJITSUsafegate Client
FUJITSUSafegate syutyu kanri
FUJITSUSymfoWARE Universal Data Interchanger
FUJITSUSystemwalker CentricMGR-A
FUJITSUSystemwalker Centric Manager
FUJITSUSystemwalker Desktop Inspection
FUJITSUSystemwalker Desktop Patrol
FUJITSUSystemwalker Formcoordinator syomei option
FUJITSUSystemWalker/InfoDirectory
FUJITSUSystemWalker IT BudgetMGR
FUJITSUSystemwalker IT Budget Manager
FUJITSUSystemwalker Software Delivery
FUJITSUTRADEMASTER
FUJITSUTRMASTER
Show details on JVN DB website

To clipboard 

{
   "@rdf:about": "https://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-002358.html",
   "dc:date": "2009-12-28T11:19+09:00",
   "dcterms:issued": "2009-12-28T11:19+09:00",
   "dcterms:modified": "2009-12-28T11:19+09:00",
   description: "Fujitsu Interstage and Systemwalker related products have the vulnerabilities listed below:\r\n- A buffer overflow vulnerability that can occur when the SSL server verifies the client's certificate.\r\n- A vulnerability that makes it possible to make an SSL connection using a server or client certificate issued by the old CA certificate after the CA certificate is renewed, regardless of the settings of the certificate environment variables.\r\n- A vulnerability where the depletion of resources, such as file descriptors, can occur on the SSL server.",
   link: "https://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-002358.html",
   "sec:cpe": [
      {
         "#text": "cpe:/a:fujitsu:infodirectory",
         "@product": "InfoDirectory",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:infoprovider_pro",
         "@product": "InfoProvider Pro",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:infoproxy",
         "@product": "InfoProxy",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:infoproxy_for_middleware",
         "@product": "InfoProxy for Middleware",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:interstage",
         "@product": "Interstage",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:interstage_apcoordinator",
         "@product": "Interstage Apcoordinator",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:interstage_application_framework_suite",
         "@product": "Interstage Application Framework Suite",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:interstage_application_server",
         "@product": "Interstage Application Server",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:interstage_apworks",
         "@product": "Interstage Apworks",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:interstage_business_application_manager",
         "@product": "Interstage Business Application Manager",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:interstage_form_coordinator_syomei_option",
         "@product": "Interstage Form Coordinator syomei option",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:interstage_security_director",
         "@product": "Interstage Security Director",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:interstage_traffic_director",
         "@product": "Interstage Traffic Director",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:linkexpress",
         "@product": "Linkexpress",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:safeauthor",
         "@product": "Safeauthor",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:safegate",
         "@product": "Safegate",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:safegate_client",
         "@product": "safegate Client",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:safegate_syutyu_kanri",
         "@product": "Safegate syutyu kanri",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:symfoware_universal_data_interchanger",
         "@product": "SymfoWARE Universal Data Interchanger",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:systemwalker_centricmgr-a",
         "@product": "Systemwalker CentricMGR-A",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:systemwalker_centric_manager",
         "@product": "Systemwalker Centric Manager",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:systemwalker_desktop_inspection",
         "@product": "Systemwalker Desktop Inspection",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:systemwalker_desktop_patrol",
         "@product": "Systemwalker Desktop Patrol",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:systemwalker_formcoordinator_syomei_option",
         "@product": "Systemwalker Formcoordinator syomei option",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:systemwalker_infodirectory",
         "@product": "SystemWalker/InfoDirectory",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:systemwalker_it_budgetmgr",
         "@product": "SystemWalker IT BudgetMGR",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:systemwalker_it_budget_manager",
         "@product": "Systemwalker IT Budget Manager",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:systemwalker_software_delivery",
         "@product": "Systemwalker Software Delivery",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:trademaster",
         "@product": "TRADEMASTER",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:fujitsu:trmaster",
         "@product": "TRMASTER",
         "@vendor": "FUJITSU",
         "@version": "2.2",
      },
   ],
   "sec:cvss": {
      "@score": "5.0",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
      "@version": "2.0",
   },
   "sec:identifier": "JVNDB-2009-002358",
   "sec:references": [
      {
         "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
         "@id": "CWE-119",
         "@title": "Buffer Errors(CWE-119)",
      },
      {
         "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
         "@id": "CWE-287",
         "@title": "Improper Authentication(CWE-287)",
      },
      {
         "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
         "@id": "CWE-399",
         "@title": "Resource Management Errors(CWE-399)",
      },
   ],
   title: "Fujitsu Interstage and Systemwalker SSL Vulnerabilities",
}


Log in or create an account to share your comment.

Security Advisory comment format.

This schema specifies the format of a comment related to a security advisory.

UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).



Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.