Interstage Application Server: 権限のないクライアントからのリクエストが実行されてしまう脆弱性(CVE-2008-3271) (2009年3月3日)
1. 脆弱性の説明
IPアドレスに基づくアクセス制限をした際に、許可されないはずのIPアドレスからのリクエストが実行される可能性があります。
Interstageについては以下のページを参照してください。
http://www.fujitsu.com/jp/products/software/middleware/business-middleware/interstage/
富士通は、3.に示すセキュリティパッチを提供していますので、早急に適用する様にお願いします。
2. 脆弱性のもたらす脅威
権限のないクライアントからのリクエストが実行されるため、具体的な影響はシステムの処理内容により異なりますが、情報漏えいなどが考えられます。
本脆弱性の深刻度に関しては、「4. 関連情報」に示すJVN情報をご覧ください。
3. 該当システム・対策情報
3-1.該当システム
GP7000F, PRIMEPOWER, GP-S, PRIMERGY, GP5000, CELSIUS, FMVシリーズ, AT互換機, PRIMEQUEST
3-2.該当製品・対策Patch
Interstage Application Framework Suite
Interstage Application Server
Interstage Apworks
Interstage Business Application Server
Interstage Job Workload Server
| 製品名 | 対象OS | パッケージ名 | Patch ID |
|---|---|---|---|
| Interstage Application Framework Suite Enterprise Edition 6.0 | Solaris 8, 9 | FJSVjs4 | T0114S-06 |
| Interstage Application Framework Suite Enterprise Edition 6.0.1 | Solaris 8, 9 | FJSVjs4 | T0163S-08 |
| Interstage Application Framework Suite Enterprise Edition 6.0.2 | Solaris 8, 9 | FJSVjs4 | T0315S-02 |
| Interstage Application Framework Suite Enterprise Edition 7.0.1 | Solaris 8, 9, 10 | FJSVjs4 | T020LS-08 |
| Interstage Application Framework Suite Standard Edition 6.0 | Solaris 8, 9 | FJSVjs4 | T0114S-06 |
| Interstage Application Framework Suite Standard Edition 6.0.1 | Solaris 8, 9 | FJSVjs4 | T0163S-08 |
| Interstage Application Framework Suite Standard Edition 6.0.2 | Solaris 8, 9 | FJSVjs4 | T0315S-02 |
| Interstage Application Framework Suite Standard Edition 7.0 | Solaris 8, 9 | FJSVjs4 | T020LS-08 |
| Interstage Application Framework Suite Standard Edition 7.0.2 | Solaris 8, 9, 10 | FJSVjs4 | T020LS-08 |
| Interstage Application Framework Suite Web Edition 6.0 | Solaris 8, 9 | FJSVjs4 | T0114S-06 |
| Interstage Application Framework Suite Web Edition 6.0.1 | Solaris 8, 9 | FJSVjs4 | T0163S-08 |
| Interstage Application Framework Suite Web Edition 6.0.2 | Solaris 8, 9 | FJSVjs4 | T0315S-02 |
| Interstage Application Framework Suite Web Edition 7.0 | Solaris 8, 9 | FJSVjs4 | T020LS-08 |
| Interstage Application Framework Suite Web Edition 7.0.2 | Solaris 8, 9, 10 | FJSVjs4 | T020LS-08 |
| Interstage Application Framework Suite Enterprise Edition V6.0L10 | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0 | F3FMjs4 | TK00047 |
| Interstage Application Framework Suite Enterprise Edition V6.0L10B | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0 | F3FMjs4 | TK00047 |
| Interstage Application Framework Suite Enterprise Edition V6.0L10C | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0 | F3FMjs4 | TK00047 |
| Interstage Application Framework Suite Standard Edition V6.0L10 | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0 | F3FMjs4 | TK00047 |
| Interstage Application Framework Suite Standard Edition V6.0L10B | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0 | F3FMjs4 | TK00047 |
| Interstage Application Framework Suite Standard Edition V6.0L10C | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0 | F3FMjs4 | TK00047 |
| Interstage Application Framework Suite Standard Edition V7.0L10 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | TP09961 |
| Interstage Application Framework Suite Standard Edition V7.0L11 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | TP09961 |
| Interstage Application Framework Suite Web Edition V6.0L10 | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0 | F3FMjs4 | TK00047 |
| Interstage Application Framework Suite Web Edition V6.0L10A | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0 | F3FMjs4 | TK00047 |
| Interstage Application Framework Suite Web Edition V6.0L10B | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0 | F3FMjs4 | TK00047 |
| Interstage Application Framework Suite Web Edition V6.0L10C | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0 | F3FMjs4 | TK00047 |
| Interstage Application Framework Suite Web Edition V7.0L10 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | TP09961 |
| Interstage Application Framework Suite Web Edition V7.0L11 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | TP09961 |
| Interstage Application Framework Suite Enterprise Edition V6.0L10 | RHEL-AS3(x86)/ ES3(x86) | FJSVjs4 | T00274-07 |
| Interstage Application Framework Suite Standard Edition V6.0L10 | RHEL-AS3(x86)/ ES3(x86) | FJSVjs4 | T00274-07 |
| Interstage Application Framework Suite Standard Edition V7.0L10 | RHEL-AS3(x86)/ ES3(x86) | FJSVjs4 | T00836-08 |
| Interstage Application Framework Suite Standard Edition V7.0L11 | RHEL-AS3(x86)/ ES3(x86)/ AS4(x86) | FJSVjs4 | T00836-08 |
| Interstage Application Framework Suite Web Edition V6.0L10 | RHEL-AS2.1(x86)/ ES2.1(x86) | FJSVjs4 | T00274-07 |
| Interstage Application Framework Suite Web Edition V6.0L11 | RHEL-AS2.1(x86)/ ES2.1(x86)/ AS3(x86)/ ES3(x86) | FJSVjs4 | T00274-07 |
| Interstage Application Framework Suite Web Edition V7.0L10 | RHEL-AS3(x86)/ ES3(x86) | FJSVjs4 | T00836-08 |
| Interstage Application Framework Suite Web Edition V7.0L11 | RHEL-AS3(x86)/ ES3(x86)/ AS4(x86) | FJSVjs4 | T00836-08 |
| 製品名 | 対象OS | パッケージ名 | Patch ID |
|---|---|---|---|
| Interstage Application Server Enterprise Edition 6.0 | Solaris 8, 9 | FJSVjs4 | T0114S-06 |
| Interstage Application Server Enterprise Edition 6.0.1 | Solaris 8, 9 | FJSVjs4 | T0163S-08 |
| Interstage Application Server Enterprise Edition 6.0.2 | Solaris 8, 9 | FJSVjs4 | T0315S-02 |
| Interstage Application Server Enterprise Edition 7.0 | Solaris 8, 9 | FJSVjs4 | T020LS-08 |
| Interstage Application Server Enterprise Edition 7.0.1 | Solaris 8, 9, 10 | FJSVjs4 | T020LS-08 |
| Interstage Application Server Enterprise Edition 8.0.0 | Solaris 9, 10 | FJSVjs4 | T000572SP-11 |
| Interstage Application Server Enterprise Edition 8.0.0 | Solaris 9, 10 | FJSVjs4 | T000574SP-11(注1) |
| Interstage Application Server Enterprise Edition 8.0.3 | Solaris 9, 10 | FJSVjs4 | T000572SP-11 |
| Interstage Application Server Enterprise Edition 8.0.3 | Solaris 9, 10 | FJSVjs4 | T000574SP-11(注1) |
| Interstage Application Server Standard Edition 6.0 | Solaris 8, 9 | FJSVjs4 | T0114S-06 |
| Interstage Application Server Standard Edition 6.0.1 | Solaris 8, 9 | FJSVjs4 | T0163S-08 |
| Interstage Application Server Standard Edition 6.0.2 | Solaris 8, 9 | FJSVjs4 | T0315S-02 |
| Interstage Application Server Standard Edition 7.0 | Solaris 8, 9 | FJSVjs4 | T020LS-08 |
| Interstage Application Server Standard Edition 7.0.1 | Solaris 8, 9, 10 | FJSVjs4 | T020LS-08 |
| Interstage Application Server Standard-J Edition 8.0.0 | Solaris 9, 10 | FJSVjs4 | T000573SP-11 |
| Interstage Application Server Standard-J Edition 8.0.0 | Solaris 9, 10 | FJSVjs4 | T000574SP-11(注1) |
| Interstage Application Server Standard-J Edition 8.0.3 | Solaris 9, 10 | FJSVjs4 | T000573SP-11 |
| Interstage Application Server Standard-J Edition 8.0.3 | Solaris 9, 10 | FJSVjs4 | T000574SP-11(注1) |
| Interstage Application Server Web-J Edition 6.0 | Solaris 8, 9 | FJSVjs4 | T0114S-06 |
| Interstage Application Server Web-J Edition 6.0.1 | Solaris 8, 9 | FJSVjs4 | T0163S-08 |
| Interstage Application Server Web-J Edition 6.0.2 | Solaris 8, 9 | FJSVjs4 | T0315S-02 |
| Interstage Application Server Web-J Edition 7.0 | Solaris 8, 9 | FJSVjs4 | T020LS-08 |
| Interstage Application Server Web-J Edition 7.0.1 | Solaris 8, 9, 10 | FJSVjs4 | T020LS-08 |
| Interstage Application Server Web-J Edition 8.0.0 | Solaris 9, 10 | FJSVjs4 | T000574SP-11 |
| Interstage Application Server Web-J Edition 8.0.3 | Solaris 9, 10 | FJSVjs4 | T000574SP-11 |
| Interstage Application Server Plus 6.0 | Solaris 8, 9 | FJSVjs4 | T0114S-06 |
| Interstage Application Server Plus 6.0.1 | Solaris 8, 9 | FJSVjs4 | T0163S-08 |
| Interstage Application Server Plus 6.0.2 | Solaris 8, 9 | FJSVjs4 | T0315S-02 |
| Interstage Application Server Plus 7.0 | Solaris 8, 9 | FJSVjs4 | T020LS-08 |
| Interstage Application Server Plus 7.0.1 | Solaris 8, 9, 10 | FJSVjs4 | T020LS-08 |
| Interstage Application Server Enterprise Edition V6.0L10 | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0 | F3FMjs4 | TK00047 |
| Interstage Application Server Enterprise Edition V6.0L10B | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0 | F3FMjs4 | TK00047 |
| Interstage Application Server Enterprise Edition V6.0L10C | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0 | F3FMjs4 | TK00047 |
| Interstage Application Server Enterprise Edition V7.0L10 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | TP09961 |
| Interstage Application Server Enterprise Edition V7.0L11 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | TP09961 |
| Interstage Application Server Enterprise Edition 8.0.0 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | T000685WP-05 |
| Interstage Application Server Enterprise Edition 8.0.0 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | T000687WP-05(注1) |
| Interstage Application Server Enterprise Edition 8.0.1 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | T000685WP-05 |
| Interstage Application Server Enterprise Edition 8.0.1 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | T000687WP-05(注1) |
| Interstage Application Server Enterprise Edition 8.0.3 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | T000685WP-05 |
| Interstage Application Server Enterprise Edition 8.0.3 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | T000687WP-05(注1) |
| Interstage Application Server Standard Edition V6.0L10 | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0 | F3FMjs4 | TK00047 |
| Interstage Application Server Standard Edition V6.0L10B | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0 | F3FMjs4 | TK00047 |
| Interstage Application Server Standard Edition V6.0L10C | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0 | F3FMjs4 | TK00047 |
| Interstage Application Server Standard Edition V7.0L10 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | TP09961 |
| Interstage Application Server Standard Edition V7.0L11 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | TP09961 |
| Interstage Application Server Standard-J Edition 8.0.0 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | T000686WP-05 |
| Interstage Application Server Standard-J Edition 8.0.0 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | T000687WP-05(注1) |
| Interstage Application Server Standard-J Edition 8.0.1 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | T000686WP-05 |
| Interstage Application Server Standard-J Edition 8.0.1 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | T000687WP-05(注1) |
| Interstage Application Server Standard-J Edition 8.0.3 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | T000686WP-05 |
| Interstage Application Server Standard-J Edition 8.0.3 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | T000687WP-05(注1) |
| Interstage Application Server Web-J Edition V6.0L10 | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0 | F3FMjs4 | TK00047 |
| Interstage Application Server Web-J Edition V6.0L10A | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0 | F3FMjs4 | TK00047 |
| Interstage Application Server Web-J Edition V6.0L10B | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0 | F3FMjs4 | TK00047 |
| Interstage Application Server Web-J Edition V6.0L10C | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0 | F3FMjs4 | TK00047 |
| Interstage Application Server Web-J Edition V7.0L10 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | TP09961 |
| Interstage Application Server Web-J Edition V7.0L10A | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | TP09961 |
| Interstage Application Server Web-J Edition V7.0L11 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | TP09961 |
| Interstage Application Server Web-J Edition 8.0.0 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | T000687WP-05 |
| Interstage Application Server Web-J Edition 8.0.1 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | T000687WP-05 |
| Interstage Application Server Web-J Edition 8.0.3 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | T000687WP-05 |
| Interstage Application Server Plus V6.0L10 | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0 | F3FMjs4 | TK00047 |
| Interstage Application Server Plus V6.0L10A | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0 | F3FMjs4 | TK00047 |
| Interstage Application Server Plus V6.0L10B | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0 | F3FMjs4 | TK00047 |
| Interstage Application Server Plus V6.0L10C | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0 | F3FMjs4 | TK00047 |
| Interstage Application Server Plus V7.0L10 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | TP09961 |
| Interstage Application Server Plus V7.0L11 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | TP09961 |
| Interstage Application Server Plus Developer V6.0L10 | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0/ Windows XP | F3FMjs4 | TK00047 |
| Interstage Application Server Plus Developer V7.0L10 | Windows Server 2003/ Windows 2000 Server/ Windows XP | F3FMjs4 | TP09961 |
| Interstage Application Server Enterprise Edition 8.0.0 | Windows Server 2003(IPF) | F3FMjs4 | - |
| Interstage Application Server Enterprise Edition 8.0.3 | Windows Server 2003(IPF) | F3FMjs4 | - |
| Interstage Application Server Enterprise Edition V6.0L10 | RHEL-AS3(x86)/ ES3(x86) | FJSVjs4 | T00274-07 |
| Interstage Application Server Enterprise Edition V7.0L10 | RHEL-AS3(x86)/ ES3(x86) | FJSVjs4 | T00836-08 |
| Interstage Application Server Enterprise Edition V7.0L11 | RHEL-AS3(x86)/ ES3(x86)/ AS4(x86) | FJSVjs4 | T00836-08 |
| Interstage Application Server Enterprise Edition 8.0.0 | RHEL-AS4(x86)/ AS4(EM64T) | FJSVjs4 | T000682LP-06 |
| Interstage Application Server Enterprise Edition 8.0.0 | RHEL-AS4(x86)/ AS4(EM64T) | FJSVjs4 | T000684LP-06(注1) |
| Interstage Application Server Enterprise Edition 8.0.3 | RHEL-AS4(x86)/ AS4(EM64T) | FJSVjs4 | T000682LP-06 |
| Interstage Application Server Enterprise Edition 8.0.3 | RHEL-AS4(x86)/ AS4(EM64T) | FJSVjs4 | T000684LP-06(注1) |
| Interstage Application Server Standard Edition V6.0L10 | RHEL-AS3(x86)/ ES3(x86) | FJSVjs4 | T00274-07 |
| Interstage Application Server Standard Edition V7.0L10 | RHEL-AS3(x86)/ ES3(x86) | FJSVjs4 | T00836-08 |
| Interstage Application Server Standard Edition V7.0L11 | RHEL-AS3(x86)/ ES3(x86)/ AS4(x86) | FJSVjs4 | T00836-08 |
| Interstage Application Server Standard-J Edition 8.0.0 | RHEL-AS4(x86)/ AS4(EM64T) | FJSVjs4 | T000683LP-06 |
| Interstage Application Server Standard-J Edition 8.0.0 | RHEL-AS4(x86)/ AS4(EM64T) | FJSVjs4 | T000684LP-06(注1) |
| Interstage Application Server Standard-J Edition 8.0.3 | RHEL-AS4(x86)/ AS4(EM64T) | FJSVjs4 | T000683LP-06 |
| Interstage Application Server Standard-J Edition 8.0.3 | RHEL-AS4(x86)/ AS4(EM64T) | FJSVjs4 | T000684LP-06(注1) |
| Interstage Application Server Web-J Edition V6.0L10 | RHEL-AS2.1(x86)/ ES2.1(x86) | FJSVjs4 | T00274-07 |
| Interstage Application Server Web-J Edition V6.0L11 | RHEL-AS2.1(x86)/ ES2.1(x86)/ AS3(x86)/ ES3(x86) | FJSVjs4 | T00274-07 |
| Interstage Application Server Web-J Edition V7.0L10 | RHEL-AS3(x86)/ ES3(x86) | FJSVjs4 | T00836-08 |
| Interstage Application Server Web-J Edition V7.0L11 | RHEL-AS3(x86)/ ES3(x86)/ AS4(x86) | FJSVjs4 | T00836-08 |
| Interstage Application Server Web-J Edition 8.0.0 | RHEL-AS4(x86)/ AS4(EM64T) | FJSVjs4 | T000684LP-06 |
| Interstage Application Server Web-J Edition 8.0.3 | RHEL-AS4(x86)/ AS4(EM64T) | FJSVjs4 | T000684LP-06 |
| Interstage Application Server Plus V6.0L10 | RHEL-AS2.1(x86)/ ES2.1(x86) | FJSVjs4 | T00274-07 |
| Interstage Application Server Plus V6.0L11 | RHEL-AS2.1(x86)/ ES2.1(x86)/ AS3(x86)/ ES3(x86) | FJSVjs4 | T00274-07 |
| Interstage Application Server Plus V7.0L10 | RHEL-AS3(x86)/ ES3(x86) | FJSVjs4 | T00836-08 |
| Interstage Application Server Plus V7.0L11 | RHEL-AS3(x86)/ ES3(x86)/ AS4(x86) | FJSVjs4 | T00836-08 |
| Interstage Application Server Enterprise Edition V7.0L10 | RHEL-AS4(IPF) | FJSVjs4 | T001343QP-02 |
| Interstage Application Server Enterprise Edition 8.0.0 | RHEL-AS4(IPF) | FJSVjs4 | T000109QP-06 |
| Interstage Application Server Enterprise Edition 8.0.1 | RHEL-AS4(IPF) | FJSVjs4 | T000681QP-04 |
| Interstage Application Server Enterprise Edition 8.0.3 | RHEL-AS4(IPF) | FJSVjs4 | T000681QP-04 |
| 製品名 | 対象OS | パッケージ名 | Patch ID |
|---|---|---|---|
| Interstage Apworks Enterprise Edition V6.0L10 | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0/ Windows XP | F3FMjs4 | TK00047 |
| Interstage Apworks Enterprise Edition V6.0L10A | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0/ Windows XP | F3FMjs4 | TK00047 |
| Interstage Apworks Enterprise Edition V6.0L10B | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0/ Windows XP | F3FMjs4 | TK00047 |
| Interstage Apworks Enterprise Edition V7.0L10 | Windows Server 2003/ Windows 2000 Server/ Windows XP | F3FMjs4 | TP09961 |
| Interstage Apworks Enterprise Edition 8.0.0 | Windows Server 2003/ Windows 2000 Server/ Windows XP | F3FMjs4 | T000685WP-05 |
| Interstage Apworks Enterprise Edition 8.1.0 | Windows Server 2003/ Windows 2000 Server/ Windows XP | F3FMjs4 | T000685WP-05 |
| Interstage Apworks Standard Edition V6.0L10 | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0/ Windows XP | F3FMjs4 | TK00047 |
| Interstage Apworks Standard Edition V6.0L10A | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0/ Windows XP | F3FMjs4 | TK00047 |
| Interstage Apworks Standard Edition V7.0L10 | Windows Server 2003/ Windows 2000 Server/ Windows XP | F3FMjs4 | TP09961 |
| Interstage Apworks Standard-J Edition 8.0.1 | Windows Server 2003/ Windows 2000 Server/ Windows XP | F3FMjs4 | T000686WP-05 |
| Interstage Apworks Modelers-J Edition V6.0L10 | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0/ Windows XP | F3FMjs4 | TK00047 |
| Interstage Apworks Modelers-J Edition V6.0L10A | Windows Server 2003/ Windows 2000 Server/ Windows NT Server 4.0/ Windows XP | F3FMjs4 | TK00047 |
| Interstage Apworks Modelers-J Edition V7.0L10 | Windows Server 2003/ Windows 2000 Server/ Windows XP | F3FMjs4 | TP09961 |
| 製品名 | 対象OS | パッケージ名 | Patch ID |
|---|---|---|---|
| Interstage Business Application Server Enterprise Edition 7.0 | Solaris 8, 9 | FJSVjs4 | T020LS-08 |
| Interstage Business Application Server Enterprise Edition 7.0.1 | Solaris 8, 9 | FJSVjs4 | T020LS-08 |
| Interstage Business Application Server Enterprise Edition 8.0.0 | Solaris 9, 10 | FJSVjs4 | T000572SP-11 |
| Interstage Business Application Server Enterprise Edition 8.0.0 | Solaris 9, 10 | FJSVjs4 | T000574SP-11(注1) |
| Interstage Business Application Server Enterprise Edition 8.0.1 | Solaris 9, 10 | FJSVjs4 | T000572SP-11 |
| Interstage Business Application Server Enterprise Edition 8.0.1 | Solaris 9, 10 | FJSVjs4 | T000574SP-11(注1) |
| Interstage Business Application Server Standard Edition 8.0.0 | Solaris 9, 10 | FJSVjs4 | T000572SP-11 |
| Interstage Business Application Server Standard Edition 8.0.0 | Solaris 9, 10 | FJSVjs4 | T000574SP-11(注1) |
| Interstage Business Application Server Standard Edition 8.0.0 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | T000685WP-05 |
| Interstage Business Application Server Standard Edition 8.0.0 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | T000687WP-05(注1) |
| Interstage Business Application Server Standard Edition 8.0.1 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | T000685WP-05 |
| Interstage Business Application Server Standard Edition 8.0.1 | Windows Server 2003/ Windows 2000 Server | F3FMjs4 | T000687WP-05(注1) |
| Interstage Business Application Server Standard Edition 8.0.0 | RHEL-AS4(x86)/ AS4(EM64T) | FJSVjs4 | T000682LP-06 |
| Interstage Business Application Server Standard Edition 8.0.0 | RHEL-AS4(x86)/ AS4(EM64T) | FJSVjs4 | T000684LP-06(注1) |
| Interstage Business Application Server Enterprise Edition 8.0.0 | RHEL-AS4(IPF) | FJSVjs4 | T000109QP-06 |
| Interstage Business Application Server Enterprise Edition 8.0.1 | RHEL-AS4(IPF) | FJSVjs4 | T000681QP-04 |
| Interstage Business Application Server Standard Edition 8.0.0 | RHEL-AS4(IPF) | FJSVjs4 | T000109QP-06 |
| Interstage Business Application Server Standard Edition 8.0.1 | RHEL-AS4(IPF) | FJSVjs4 | T000109QP-06 |
| 製品名 | 対象OS | パッケージ名 | Patch ID |
|---|---|---|---|
| Interstage Job Workload Server 8.1.1 | Solaris 9, 10 | FJSVjs4 | T000572SP-11 |
| Interstage Job Workload Server 8.0.0 | RHEL-AS4(IPF) | FJSVjs4 | T000109QP-06 |
| Interstage Job Workload Server 8.0.1 | RHEL-AS4(IPF) | FJSVjs4 | T000109QP-06 |
| Interstage Job Workload Server 8.1.0 | RHEL-AS4(IPF) | FJSVjs4 | T000109QP-06 |
| Interstage Job Workload Server 8.1.1 | RHEL-AS4(IPF) | FJSVjs4 | T000681QP-04 |
Patch IDの表記のみ、あるいはIDの記載のない製品に関しては、当社サポートセンターにお問い合わせください。
(注1) Web Packageをご利用の場合。
参考: 該当製品の確認方法
- V6系の場合
- Solaris版の場合
FJSVisasパッケージのパッケージ情報を確認します。
pkginfo -l FJSVisas - Windows版の場合
[ソフトウェア説明書]の表題を確認します。
[スタートボタン]
→[プログラム]
→[Interstage]
→[Application Server | Application Framework Suite | Apworks]
→[ソフトウェア説明書] - Linux版の場合
FJSVisasパッケージのパッケージ情報を確認します。
rpm -q FJSVisas
- Solaris版の場合
- V7系以降の場合
isprintvlコマンドで確認します。
isprintvl
3-3. 回避方法
ありません。
4. 関連情報
本問題は、Apache Tomcatの脆弱性 JVN#30732239／CVE-2008-3271に該当します。
- JVN#30732239 「Apache Tomcatにおいて権限のないクライアントからのリクエストが実行されてしまう脆弱性」
http://jvn.jp/jp/JVN30732239/index.html - CVE-2008-3271 Tomcat information disclosure vulnerability
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3271
5. 改版履歴
- 2009年3月3日 第6版 「3-2. 該当製品・対策Patch」へ、T0315S-02を掲載
- 2008年12月26日 第5版 「3-2. 該当製品・対策Patch」へ、T0114S-06を掲載
- 2008年11月20日 第4版 「3-2. 該当製品・対策Patch」へ、RHEL-AS4(IPF)系のPatch IDを掲載
- 2008年10月23日 第3版 「3-2. 該当製品・対策Patch」にて、T0163S-08 のダウンロード提供を開始
- 2008年10月15日 第2版 「3-2. 該当製品・対策Patch」からV9系の製品情報を削除
- 2008年10月10日 新規掲載
