What’s Vulnerable › Vulnerabilities

CVE-2008-1040

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2008-02-27 · updated 2026-06-16
• Weakness: CWE-119

Description

Buffer overflow in the Single Sign-On function in Fujitsu Interstage Application Server 8.0.0 through 8.0.3 and 9.0.0, Interstage Studio 8.0.1 and 9.0.0, and Interstage Apworks 8.0.0 allows remote attackers to execute arbitrary code via a long URI.

Affected products

• Fujitsu Interstage Application Server Enterprise: 8.0.0, 8.0.1, 8.0.2, 8.0.3, v9.0.0, v9.0.0a
• Fujitsu Interstage Application Server Standard J: 8.0.0, 8.0.2, 8.0.3, v9.0.0.0, v9.0.0a
• Fujitsu Interstage Apworks Enterprise: 8.0.0
• Fujitsu Interstage Apworks Standard J: 8.0.0
• Fujitsu Interstage Studio Enterprise: 8.0.1, v9.0.0
• Fujitsu Interstage Studio Standard J: 8.0.1, v9.0.0

References

• http://secunia.com/advisories/29088
• http://www.fujitsu.com/global/support/software/security/products-f/interstage-200804e.html
• http://www.securityfocus.com/bid/27966
• http://www.vupen.com/english/advisories/2008/0662
• http://secunia.com/advisories/29088
• http://www.fujitsu.com/global/support/software/security/products-f/interstage-200804e.html
• http://www.securityfocus.com/bid/27966
• http://www.vupen.com/english/advisories/2008/0662

Get alerted when CVE-2008-1040 or the next vulnerability affects your stack