CVEvulnerability

CVE-2010-0360

10.0 HIGH Published 2010-01-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-01-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to overwrite memory locations in the heap, and discover the contents of memory locations, via a malformed HTTP TRACE request that includes a long URI and many empty headers, related to an "overflow." NOTE: this might overlap CVE-2010-0272 and CVE-2010-0273.

Affected configurations

• sun java system web server 7.0

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References