PT-2008-5047 · Sun · Sun Java System Web Proxy Server

Published 2008-08-14 · Updated 2017-08-08 · CVE-2008-3683

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Sun Java System Web Proxy Server versions 4.0 through 4.0.5 before SP6

Description The issue is related to an unspecified vulnerability in the FTP subsystem, which allows remote attackers to cause a denial of service by preventing the server from accepting connections. The attack vectors are unknown, but it is likely related to the exhaustion of file descriptors.

Recommendations For Sun Java System Web Proxy Server versions 4.0 through 4.0.5, apply SP6 to resolve the issue.

Fix

Related Identifiers

CVE-2008-3683

Affected Products

Sun Java System Web Proxy Server

References · 8

• http://securityfocus.com/bid/30671 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2008-3683 · Security Note
• http://secunia.com/advisories/31476 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3683 · Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-240327-1 · Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44413 · Note
• http://securitytracker.com/id?1020696 · Note
• http://vupen.com/english/advisories/2008/2366 · Note