The DBAsciiAccess CGI Script in the web interface in Fujitsu-Siemens Computers ServerView before 4.50.09 allows remote attackers to execute arbitrary commands via shell metacharacters in the Servername subparameter of the ParameterList parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Serverview | Fujitsu | 2.50 (including) | 2.50 (including) |
| Serverview | Fujitsu | 3.60l98 (including) | 3.60l98 (including) |
| Serverview | Fujitsu | 3.60l99 (including) | 3.60l99 (including) |
| Serverview | Fujitsu | 4.10l11 (including) | 4.10l11 (including) |
| Serverview | Fujitsu | 4.11l11b (including) | 4.11l11b (including) |
| Serverview | Fujitsu | 4.11l81 (including) | 4.11l81 (including) |
| Serverview | Fujitsu | 4.30.1 (including) | 4.30.1 (including) |
| Serverview | Fujitsu | 4.30.2 (including) | 4.30.2 (including) |
| Serverview | Fujitsu | 4.30.3 (including) | 4.30.3 (including) |
| Serverview | Fujitsu | 4.30.4 (including) | 4.30.4 (including) |
| Serverview | Fujitsu | 4.30.5 (including) | 4.30.5 (including) |
| Serverview | Fujitsu | 4.30.6 (including) | 4.30.6 (including) |
| Serverview | Fujitsu | 4.30.7 (including) | 4.30.7 (including) |
| Serverview | Fujitsu | 4.30.8 (including) | 4.30.8 (including) |
| Serverview | Fujitsu | 4.30.9 (including) | 4.30.9 (including) |
| Serverview | Fujitsu | 4.30.10 (including) | 4.30.10 (including) |
| Serverview | Fujitsu | 4.30.11 (including) | 4.30.11 (including) |
| Serverview | Fujitsu | 4.30.12 (including) | 4.30.12 (including) |
| Serverview | Fujitsu | 4.30.13 (including) | 4.30.13 (including) |
| Serverview | Fujitsu | 4.40.1 (including) | 4.40.1 (including) |
| Serverview | Fujitsu | 4.40.2 (including) | 4.40.2 (including) |
| Serverview | Fujitsu | 4.40.3 (including) | 4.40.3 (including) |
| Serverview | Fujitsu | 4.40.4 (including) | 4.40.4 (including) |
| Serverview | Fujitsu | 4.40.5 (including) | 4.40.5 (including) |
| Serverview | Fujitsu | 4.40.6 (including) | 4.40.6 (including) |
| Serverview | Fujitsu | 4.50.1 (including) | 4.50.1 (including) |
| Serverview | Fujitsu | 4.50.2 (including) | 4.50.2 (including) |
| Serverview | Fujitsu | 4.50.3 (including) | 4.50.3 (including) |
| Serverview | Fujitsu | 4.50.4 (including) | 4.50.4 (including) |
| Serverview | Fujitsu | 4.50.5 (including) | 4.50.5 (including) |
| Serverview | Fujitsu | 4.50.6 (including) | 4.50.6 (including) |
| Serverview | Fujitsu | 4.50.7 (including) | 4.50.7 (including) |
| Serverview | Fujitsu | 4.50.8 (including) | 4.50.8 (including) |