CVE-2008-2405 Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in HTTP requests to unspecified ASP applications.
HighCVSS 7.5
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in HTTP requests to unspecified ASP applications.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun java active server pages | <= 4.0.2 | No fix listed |
| sun java active server pages | = 4.0.0 | No fix listed |
| sun java active server pages | = 4.0.1 | No fix listed |
References
- 20080603 Sun Java System Active Server Pages Multiple Command Injection Vulnerabilities third-party-advisory
- 30523 third-party-advisory
- 238184 vendor-advisory
- 1020190 vdb-entry
- ADV-2008-1742 vdb-entry
- sun-jsasp-command-execution(42829) vdb-entry