JVNDB-2008-001647

Jasmine WebLink Template Multiple Vulnerabilities

Jasmin WebLink is vulnerable to buffer overflow (BOF), denial of service
(DoS) and cross-site scripting (XSS) when executing templates.

Base Metrics: 7.5 (High) [IPA Score]

• Access Vector: Network
• Access Complexity: Low
• Authentication: None
• Confidentiality Impact: Partial
• Integrity Impact: Partial
• Availability Impact: Partial

FUJITSU

• Jasmine Enterprise Edition 2.0
• Jasmine Enterprise Edition 2.0.1
• Jasmine Enterprise Edition 2.0.2
• Jasmine Enterprise Edition 3.1
• Jasmine Enterprise Edition for Windows NT V2.0L10
• Jasmine Enterprise Edition for Windows NT V2.0L10a
• Jasmine Enterprise Edition V3.1L10
• Jasmine Enterprise Edition for Windows NT V2.0L11
• Jasmine Enterprise Edition for Windows NT V1.2L10
• Jasmine Enterprise Edition for Windows NT V1.2L11
• Jasmine Enterprise Edition 1.2.1
• Jasmine Workgroup Edition for Windows NT V2.0L10
• Jasmine Workgroup Edition for Windows NT V2.0L10a
• Jasmine Workgroup Edition for Windows NT V1.2L10
• Jasmine Workgroup Edition for Windows NT V1.2L11

A remote attacker could execute arbitrary code or cause a Denial of
Service (DoS) condition against vulnerable Web sites.

Please refer to the 'Vendor Information' and 'References' section for
appropriate countermeasure.

FUJITSU

• FUJITSU : jasmine200801 (Japanese)

1. Buffer Errors(CWE-119) [IPA Evaluation]
2. Cross-site Scripting(CWE-79) [IPA Evaluation]

1. JVN iPedia (Japanese) : JVNDB-2008-001647

[2008/09/18]
  Web page published
[2009/03/30]
  Affected Products : Updated FUJITSU (jasmine200801).