high7.5
CVE-2008-2406
The administration application server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to bypass authentication via direct req…
Impact
The administration application server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to bypass authentication via direct requests on TCP port 5102.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sun | Java Asp Server | through 4.0.2 Version 4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=710
- http://secunia.com/advisories/30523
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1
- http://www.securityfocus.com/bid/29539
- http://www.securitytracker.com/id?1020191
- http://www.vupen.com/english/advisories/2008/1742/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42833
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=710
- http://secunia.com/advisories/30523
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1
- http://www.securityfocus.com/bid/29539
- http://www.securitytracker.com/id?1020191
- http://www.vupen.com/english/advisories/2008/1742/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42833