CVE-2007-3011

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The DBAsciiAccess CGI Script in the web interface in Fujitsu-Siemens Computers ServerView before 4.50.09 allows remote attackers to execute arbitrary commands via shell metacharacters in the Servername subparameter of the ParameterList parameter.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/37835
http://secunia.com/advisories/25944Patch, Vendor Advisory
http://securityreason.com/securityalert/2858
http://www.redteam-pentesting.de/advisories/rt-sa-2007-002.phpExploit, Patch, Vendor Advisory
http://www.securityfocus.com/archive/1/472800/100/0/threaded
http://www.securityfocus.com/bid/24762Exploit, Patch
http://www.vupen.com/english/advisories/2007/2441
https://exchange.xforce.ibmcloud.com/vulnerabilities/35257
http://osvdb.org/37835
http://secunia.com/advisories/25944Patch, Vendor Advisory
http://securityreason.com/securityalert/2858
http://www.redteam-pentesting.de/advisories/rt-sa-2007-002.phpExploit, Patch, Vendor Advisory
http://www.securityfocus.com/archive/1/472800/100/0/threaded
http://www.securityfocus.com/bid/24762Exploit, Patch
http://www.vupen.com/english/advisories/2007/2441
https://exchange.xforce.ibmcloud.com/vulnerabilities/35257

Timeline

Published: Jul 5, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007

CVE-2007-30125.0The web interface in Fujitsu-Siemens Computers PRIMERGY BX300 Switch Blade allows remote attackers to obtain sensitive information by cancel CVE-2007-30136.5SQL injection vulnerability in activeWeb contentserver before 5.6.2964 allows remote authenticated users with edit permission to execute arb CVE-2007-30144.3Multiple cross-site scripting (XSS) vulnerabilities in activeWeb contentserver before 5.6.2964 allow remote attackers to inject arbitrary we CVE-2007-30174.0The WYSIWYG editor applet in activeWeb contentserver CMS before 5.6.2964 only filters malicious tags from articles sent to admin/applets/wys CVE-2007-30184.0activeWeb contentserver CMS before 5.6.2964 does not limit the file-creation ability of editors who have restricted accounts, which allows t CVE-2007-30217.5Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec An CVE-2007-30224.3Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec An CVE-2007-302310.0unsp.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 does not properly calculate the end of a certain buffer, with unknown impact and remo CVE-2007-30242.1libclamav/others.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 uses insecure permissions for temporary files that are created by the cli CVE-2007-30255.0Unspecified vulnerability in libclamav/phishcheck.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1, when running on Solaris, allows remote CVE-2007-30269.3Integer overflow in Panda Software AdminSecure allows remote attackers to execute arbitrary code via crafted packets with modified length va CVE-2007-30279.3Race condition in Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer