CVE-2007-5366: fujitsu interstage_application_server Path Traversal

Vulnerability summary

CVE-2007-5366 is a medium (CVSS 5.0) Path Traversal vulnerability in fujitsu interstage_application_server. EPSS estimates a 2.17% chance of exploitation in the next 30 days, higher than 82% of scored vulnerabilities.

Timeline

1. 11-10-2007
   PublishedVulnerability first disclosed.
2. 07-08-2024
   Last modifiedVulnerability information updated.

Description

The Tomcat 4.1-based Servlet Service in Fujitsu Interstage Application Server 7.0 through 9.0.0 and Interstage Apworks/Studio 7.0 through 9.0.0 allows remote attackers to obtain sensitive information (web root path) via unspecified vectors that trigger an error message, probably related to enabling the useCanonCaches Java Virtual Machine (JVM) option.

• CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.