About Us | Contact Us

 


 

VUPEN Free Resources

 
  VUPEN Security Advisories
 
  VUPEN Security Blog & News
  Zero-day Attacks Monitor
  Daily Security Mailinglist
  Explanation of Terms
  Advanced Search Engine
 
   

Sun Java System Web Server Remote Buffer Overflow Vulnerabilities

VUPEN ID VUPEN/ADV-2010-0182
CVE ID CVE-2010-0360 - CVE-2010-0361 - CVE-2010-0386 - CVE-2010-0387 - CVE-2010-0388 - CVE-2010-0389
 
CWE ID Available in VUPEN VNS Customer Area
CVSS V2 Available in VUPEN VNS Customer Area
Rated as Critical 
Impact Available in VUPEN VNS Customer Area
Authentication Level Available in VUPEN VNS Customer Area
Access Vector Available in VUPEN VNS Customer Area
Release Date 2010-01-21
Share Twitter LinkedIn Facebook Delicious Digg Slashdot

Technical Description

Multiple vulnerabilities have been identified in Sun Java System Web Server, which could be exploited by remote attackers to cause a denial of service or compromise a vulnerable system. These issues are caused by buffer overflow errors when processing malformed "TRACE", "OPTIONS" or "WebDAV" requests, or overly long "Authorization: Digest" headers, which could be exploited by attackers to crash an affected server or execute arbitrary code.

Affected Products

Sun Java System Web Server version 7.0 Update 7 (7.0u7) and prior
Sun Java System Web Server version 6.1 Service Pack 11 and prior
Sun Java System Web Proxy Server version 4.0 Service pack 12 and prior

Solution 

Upgrade to Sun Java System Web Server version 7.0 Release 8 or later, or version 6.1 Service Pack 12 or later :
http://sunsolve.sun.com/search/document.do?assetkey=1-66-275850-1

References

http://www.vupen.com/english/advisories/2010/0182
http://sunsolve.sun.com/search/document.do?assetkey=1-66-275850-1

Credits 

Vulnerabilities reported by Intevydis.

Changelog 

2010-01-21 : Initial release
2010-01-26 : Updated Solution

Feedback 

If you have additional information or corrections for this security advisory please submit them via our contact form.

 

Monthly Statistics 

 

 VUPEN Security Advisories By Criticality: Aug 2010


  Critical Risk

: 0%

  High Risk
: 0%

  Moderate Risk
: 0%

  Low Risk
: 100%

Get a real-time view of the vulnerabilities affecting your systems using the VUPEN VNS reporting capabilities.
 

 

Try VUPEN VNS 

 

 





© 2004-2010 VUPEN Security - Copyright - Privacy Policy