CVE-2003-1573 The PointBase 4.6 database component in the J2EE 1.4 reference implementation (J2EE/RI) allows remote attackers to execute arbitrary programs, conduct a denial of service, and obtain sensitive informa...
HighCVSS 10.0
EPSS 5.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The PointBase 4.6 database component in the J2EE 1.4 reference implementation (J2EE/RI) allows remote attackers to execute arbitrary programs, conduct a denial of service, and obtain sensitive information via a crafted SQL statement, related to "inadequate security settings and library bugs in sun.* and org.apache.* packages."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun j2ee | = 1.4 | No fix listed |
References
- 20040118 Proof-Of-Concept Denial-Of-Service Pointbase 4.6 Java SQL-DB exploit mailing-list
- 20040118 Proof-Of-Concept Denial-Of-Service Pointbase 4.6 Java SQL-DB exploit mailing-list
- 20031216 J2EE 1.4 reference implementation: database component allows remote code execution mailing-list
- 10460 third-party-advisory vendor-advisory
- 1008491 vdb-entry
- 9230 vdb-entry
- j2ee-pointbase-sql-injection(14008) vdb-entry
- pointbase-insecure-permissions-dos(14881) vdb-entry
- pointbase-information-disclosure(14882) vdb-entry
- pointbase-command-execution(14883) vdb-entry