CVE-2007-5366

Published: Oct 11, 2007Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Tomcat 4.1-based Servlet Service in Fujitsu Interstage Application Server 7.0 through 9.0.0 and Interstage Apworks/Studio 7.0 through 9.0.0 allows remote attackers to obtain sensitive information (web root path) via unspecified vectors that trigger an error message, probably related to enabling the useCanonCaches Java Virtual Machine (JVM) option.

Affected (24)

Products: Fujitsu: Interstage Application Server, Interstage Apworks, Interstage Studio

Fujitsu

3 products

Interstage Application Server

Interstage Apworks

Interstage Studio

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Fujitsu Interstage Application Server	Version 7.0.1
Fujitsu Interstage Application Server	Version 7.0.1
Fujitsu Interstage Application Server	Version 7.0
Fujitsu Interstage Application Server	Version 7.0
Fujitsu Interstage Application Server	Version 7.0
Fujitsu Interstage Application Server	Version 8.0.0
Fujitsu Interstage Application Server	Version 8.0.0
Fujitsu Interstage Application Server	Version 8.0.1
Fujitsu Interstage Application Server	Version 8.0.1
Fujitsu Interstage Application Server	Version 8.0.2
Fujitsu Interstage Application Server	Version 8.0.2
Fujitsu Interstage Application Server	Version 8.0.3
Fujitsu Interstage Application Server	Version 8.0.3
Fujitsu Interstage Application Server	Version 9.0
Fujitsu Interstage Application Server	Version 9.0
Fujitsu Interstage Application Server	Version 9.0a
Fujitsu Interstage Application Server	Version 9.0a
Fujitsu Interstage Apworks	Version 7.0
Fujitsu Interstage Apworks	Version 8.0
Fujitsu Interstage Apworks	Version 8.0
Fujitsu Interstage Studio	Version 8.01
Fujitsu Interstage Studio	Version 8.01
Fujitsu Interstage Studio	Version 9.0
Fujitsu Interstage Studio	Version 9.0