PT-2008-3635 · Sun · Sun Java System Application Server+1

Published 2008-05-09 · Updated 2017-08-08 · CVE-2008-2120

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sun Java System Application Server 7 versions 2004Q2 through 2004Q2 before Update 6 Sun Java System Web Server 6.1 versions prior to SP8 Sun Java System Web Server 7.0 versions prior to Update 1

Description The issue allows remote attackers to obtain the source code of JSP files. The exact vectors used for the attack are not specified.

Recommendations For Sun Java System Application Server 7 versions 2004Q2 through 2004Q2 before Update 6, apply Update 6. For Sun Java System Web Server 6.1 versions prior to SP8, apply SP8. For Sun Java System Web Server 7.0 versions prior to Update 1, apply Update 1.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2008-2120

Affected Products

Sun Java System Application Server

Sun Java System Web Server

References · 9

• http://securityfocus.com/bid/29088 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2008-2120 · Security Note
• http://secunia.com/advisories/30122 · Vendor Advisory
• http://securitytracker.com/id?1019986 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2120 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42266 · Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-201255-1 · Patch, Vendor Advisory
• http://securitytracker.com/id?1019985 · Note
• http://vupen.com/english/advisories/2008/1457/references · Note