CVEvulnerability
CVE-2008-2404
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-06-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the request handling implementation in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to execute arbitrary code via an unspecified string field.
Affected configurations
• sun java asp server (<= 4.0.2)
• sun java asp server 4.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=708 labs.idefense.com
- http://secunia.com/advisories/30523 secunia.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1 Patch
- http://www.securitytracker.com/id?1020189 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/1742/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42830 exchange.xforce.ibmcloud.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=708 labs.idefense.com
- http://secunia.com/advisories/30523 secunia.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1 Patch
- http://www.securitytracker.com/id?1020189 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/1742/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42830 exchange.xforce.ibmcloud.com