CVE-2013-7105 Memory corruption in n/a

Critical 10.0 Published 14 Dec 2013 Updated 6 Aug 2024

A buffer overflow in the Interstage HTTP Server log functionality allows attackers to potentially execute arbitrary code or cause a denial of service.

Exploited in the wild: Not known
Login needed: Not stated
Attackable: Over the internet
Victim action needed: Not stated
Fix: None listed

What is CVE-2013-7105?

CVE-2013-7105 is a critical memory corruption vulnerability in n/a, published on 14 Dec 2013. It can be exploited over the network.

Official description

Buffer overflow in the Interstage HTTP Server log functionality, as used in Fujitsu Interstage Application Server 9.0.0, 9.1.0, 9.2.0, 9.3.1, and 10.0.0; and Interstage Studio 9.0.0, 9.1.0, 9.2.0, and 10.0.0, has unspecified impact and attack vectors related to "ihsrlog/rotatelogs."

Weakness: CWE-119

Which versions are affected by CVE-2013-7105?

It affects 2 products.

Products include Fujitsu Interstage Application Server, Fujitsu Interstage Studio.

How do I fix CVE-2013-7105?

No fix has been published for CVE-2013-7105 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2013-7105 being exploited?

There is no known exploitation of CVE-2013-7105 in the wild and no public exploit code.

Sources

Also known as GHSA-999c-6m5m-3vhc.