CVE-2008-2401 The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to append to arbitrary new or existing files via the first argument to a certain file that is include...
HighCVSS 7.5
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to append to arbitrary new or existing files via the first argument to a certain file that is included by multiple unspecified ASP applications.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun java active server | = 4.0.2 | No fix listed |
References
- 20080603 Sun Java System Active Server Pages File Creation Vulnerability third-party-advisory
- 30523 third-party-advisory
- 238184 vendor-advisory
- 1020186 vdb-entry
- ADV-2008-1742 vdb-entry
- sunjava-file-creation-code-execution(42832) vdb-entry