Secunia

Some vulnerabilities have been reported in Fujitsu SystemcastWizard Lite, which can be exploited by malicious people to disclose sensitive information or to compromise a vulnerable system.

1) A boundary error in the PXE service can be exploited to cause a buffer overflow via an overly large UDP packet.

Successful exploitation allows execution of arbitrary code.

2) An input validation error in the TFTP service can be exploited to download files from arbitrary locations via directory traversal sequences.

The vulnerabilities are reported in versions 2.0, 2.0A, and prior 1.x versions.

Solution
Apply vendor patch for versions after 1.6A.
Further details available in Customer Area

Provided and/or discovered by
1) Ruben Santamarta, Wintercore
2) Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
Fujitsu:
http://www.fujitsu.com/global/services/computing/server/primequest/products/os/windows-server-2008-2.html

Ruben Santamarta:
http://www.wintercore.com/advisories/advisory_W010109.html

Deep Links
Links available in Customer Area