CVEvulnerability
CVE-2008-2406
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-06-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-287
Description
The administration application server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to bypass authentication via direct requests on TCP port 5102.
Affected configurations
• sun java asp server (<= 4.0.2)
• sun java asp server 4.0
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=710 labs.idefense.com
- http://secunia.com/advisories/30523 secunia.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1 sunsolve.sun.com
- http://www.securityfocus.com/bid/29539 www.securityfocus.com
- http://www.securitytracker.com/id?1020191 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/1742/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42833 exchange.xforce.ibmcloud.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=710 labs.idefense.com
- http://secunia.com/advisories/30523 secunia.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1 sunsolve.sun.com
- http://www.securityfocus.com/bid/29539 www.securityfocus.com
- http://www.securitytracker.com/id?1020191 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/1742/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42833 exchange.xforce.ibmcloud.com