Vulnerabilites related to FUJITSU - SystemcastWizard Lite
jvndb-2011-000102
Vulnerability from jvndb
Published
2011-12-15 16:26
Modified
2011-12-20 18:14
Summary
Multiple vulnerabilities in products that use the Preboot Execution Environment (PXE) SDK
Details
Products that use the Preboot Execution Environment (PXE) SDK sample code provided by Intel contain multiple vulnerabilities.
Products that use the PXE SDK sample code provided by Intel contain directory traversal and buffer overflow vulnerabilities.
Nobuyuki Kanaya of Fujitsu Laboratories Ltd. reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
► | Type | URL |
---|---|---|
|
Impacted products
{ "@rdf:about": "https://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000102.html", "dc:date": "2011-12-20T18:14+09:00", "dcterms:issued": "2011-12-15T16:26+09:00", "dcterms:modified": "2011-12-20T18:14+09:00", "description": "Products that use the Preboot Execution Environment (PXE) SDK sample code provided by Intel contain multiple vulnerabilities.\r\n\r\nProducts that use the PXE SDK sample code provided by Intel contain directory traversal and buffer overflow vulnerabilities.\r\n\r\nNobuyuki Kanaya of Fujitsu Laboratories Ltd. reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.", "link": "https://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000102.html", "sec:cpe": [ { "#text": "cpe:/a:fujitsu:systemcastwizard_lite", "@product": "SystemcastWizard Lite", "@vendor": "FUJITSU", "@version": "2.2" }, { "#text": "cpe:/a:hitachi:jp1_serverconductor_deployment_manager", "@product": "JP1/ServerConductor/Deployment Manager", "@vendor": "Hitachi, Ltd", "@version": "2.2" }, { "#text": "cpe:/a:hitachi:serverconductor_deployment_manager", "@product": "ServerConductor/Deployment Manager", "@vendor": "Hitachi, Ltd", "@version": "2.2" }, { "#text": "cpe:/a:nec:websam_deploymentmanager", "@product": "WebSAM DeploymentManager", "@vendor": "NEC Corporation", "@version": "2.2" } ], "sec:cvss": { "@score": "8.3", "@severity": "High", "@type": "Base", "@vector": "AV:A/AC:L/Au:N/C:C/I:C/A:C", "@version": "2.0" }, "sec:identifier": "JVNDB-2011-000102", "sec:references": [ { "#text": "https://jvn.jp/en/jp/JVN05255562/index.html", "@id": "JVN#05255562", "@source": "JVN" }, { "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0270", "@id": "CVE-2009-0270", "@source": "CVE" }, { "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-0270", "@id": "CVE-2009-0270", "@source": "NVD" }, { "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html", "@id": "CWE-119", "@title": "Buffer Errors(CWE-119)" }, { "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html", "@id": "CWE-22", "@title": "Path Traversal(CWE-22)" } ], "title": "Multiple vulnerabilities in products that use the Preboot Execution Environment (PXE) SDK" }