PT-2005-4782 · Sun · Sun Java System Application Server Enterprise Edition 8.1+2

Published 2005-12-07 · Updated 2011-03-08 · CVE-2005-4046

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Sun Java System Application Server Standard Edition 7 2004Q2 Sun Java System Application Server Enterprise Edition 8.1 2005Q1 Sun ONE Application Server 7 Standard Edition

Description The issue allows remote attackers to conduct man-in-the-middle (MITM) attacks and compromise data privacy.

Recommendations For Sun Java System Application Server Standard Edition 7 2004Q2, update to a version that fixes this issue. For Sun Java System Application Server Enterprise Edition 8.1 2005Q1, update to a version that fixes this issue. For Sun ONE Application Server 7 Standard Edition, update to a version that fixes this issue.

Fix

Related Identifiers

CVE-2005-4046

Affected Products

Sun Java System Application Server Enterprise Edition 8.1

Sun Java System Application Server Standard Edition 7

Sun One Application Server 7

References · 7

• http://secunia.com/advisories/17873 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4046 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4046 · Note
• http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102012-1 · Patch, Vendor Advisory
• http://vupen.com/english/advisories/2005/2753 · Note
• http://securitytracker.com/id?1015312 · Note
• http://securityfocus.com/bid/15728 · Note