Vulnerability Name:

CVE-2008-7194 (CCN-39847)

Assigned:2008-01-22
Published:2008-01-22
Updated:2017-08-17
Summary:Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server 5.0, 7.0, 7.0.1, and 8.0.0 for Windows, allows attackers to cause a denial of service via a crafted request.
CVSS v3 Severity:5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
Vulnerability Type:CWE-noinfo
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2008-7194

Source: CCN
Type: SA28606
Interstage HTTP Server Multiple Vulnerabilities

Source: SECUNIA
Type: Vendor Advisory
28606

Source: CCN
Type: FUJITSU Web site
Cross site scripting (XSS) and denial of service (DoS) vulnerabilities in Interstage HTTP Server. January 22nd, 2008

Source: CONFIRM
Type: Patch, Vendor Advisory
http://www.fujitsu.com/global/support/software/security/products-f/interstage-200802e.html

Source: CCN
Type: OSVDB ID: 57959
Interstage Application Server HTTP Server on Windows Unspecified Crafted Request DoS

Source: BID
Type: UNKNOWN
27391

Source: CCN
Type: BID-27391
Fujitsu Interstage HTTP Server Multiple Unspecified Denial Of Service Vulnerabilities

Source: VUPEN
Type: Vendor Advisory
ADV-2008-0233

Source: XF
Type: UNKNOWN
interstagehttpserver-requests-dos(39847)

Source: XF
Type: UNKNOWN
interstagehttpserver-requests-dos(39847)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:fujitsu:interstage_application_server:5.0:*:*:*:*:*:*:*
  • OR cpe:/a:fujitsu:interstage_application_server:5.0:*:enterprise:*:*:*:*:*
  • OR cpe:/a:fujitsu:interstage_application_server:5.0:*:standard:*:*:*:*:*
  • OR cpe:/a:fujitsu:interstage_application_server:5.0:*:standard_windows:*:*:*:*:*
  • OR cpe:/a:fujitsu:interstage_application_server:5.0:*:web_j:*:*:*:*:*
  • OR cpe:/a:fujitsu:interstage_application_server:5.0:*:web_j_windows:*:*:*:*:*
  • OR cpe:/a:fujitsu:interstage_application_server:7.0:*:*:*:*:*:*:*
  • OR cpe:/a:fujitsu:interstage_application_server:7.0:*:enterprise:*:*:*:*:*
  • OR cpe:/a:fujitsu:interstage_application_server:7.0:*:enterprise_windows:*:*:*:*:*
  • OR cpe:/a:fujitsu:interstage_application_server:7.0:*:plus:*:*:*:*:*
  • OR cpe:/a:fujitsu:interstage_application_server:7.0:*:plus_developer:*:*:*:*:*
  • OR cpe:/a:fujitsu:interstage_application_server:7.0:*:plus_developer_windows:*:*:*:*:*
  • OR cpe:/a:fujitsu:interstage_application_server:7.0:*:plus_windows:*:*:*:*:*
  • OR cpe:/a:fujitsu:interstage_application_server:7.0:*:standard:*:*:*:*:*
  • OR cpe:/a:fujitsu:interstage_application_server:7.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:fujitsu:interstage_application_server:7.0.1:*:enterprise:*:*:*:*:*
  • OR cpe:/a:fujitsu:interstage_application_server:7.0.1:*:enterprise_windows:*:*:*:*:*
  • OR cpe:/a:fujitsu:interstage_application_server:7.0.1:*:plus:*:*:*:*:*
  • OR cpe:/a:fujitsu:interstage_application_server:7.0.1:*:plus_windows:*:*:*:*:*
  • OR cpe:/a:fujitsu:interstage_application_server:8.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:fujitsu:interstage_application_server:8.0.0:*:enterprise:*:*:*:*:*
  • OR cpe:/a:fujitsu:interstage_application_server:8.0.0:*:enterprise_windows:*:*:*:*:*
  • OR cpe:/a:fujitsu:interstage_application_server:8.0.0:*:standard_j:*:*:*:*:*
  • OR cpe:/a:fujitsu:interstage_application_server:8.0.0:*:standard_j_windows:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:fujitsu:interstage_application_server_plus:7.0:*:*:*:*:*:*:*
  • OR cpe:/a:fujitsu:interstage_application_server_plus:7.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:fujitsu:interstage_apworks_modelers_j:7.0:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    fujitsu interstage application server 5.0
    fujitsu interstage application server 5.0
    fujitsu interstage application server 5.0
    fujitsu interstage application server 5.0
    fujitsu interstage application server 5.0
    fujitsu interstage application server 5.0
    fujitsu interstage application server 7.0
    fujitsu interstage application server 7.0
    fujitsu interstage application server 7.0
    fujitsu interstage application server 7.0
    fujitsu interstage application server 7.0
    fujitsu interstage application server 7.0
    fujitsu interstage application server 7.0
    fujitsu interstage application server 7.0
    fujitsu interstage application server 7.0.1
    fujitsu interstage application server 7.0.1
    fujitsu interstage application server 7.0.1
    fujitsu interstage application server 7.0.1
    fujitsu interstage application server 7.0.1
    fujitsu interstage application server 8.0.0
    fujitsu interstage application server 8.0.0
    fujitsu interstage application server 8.0.0
    fujitsu interstage application server 8.0.0
    fujitsu interstage application server 8.0.0
    fujitsu interstage application server plus 7.0
    fujitsu interstage application server plus 7.0.1
    fujitsu interstage apworks modelers j 7.0