CVE-2008-2406 The administration application server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to bypass authentication via direct requests on TCP port 5102.
HighCVSS 7.5
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The administration application server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to bypass authentication via direct requests on TCP port 5102.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun java asp server | <= 4.0.2 | No fix listed |
| sun java asp server | = 4.0 | No fix listed |
References
- 20080603 Sun Java System Active Server Pages Authorization Bypass Vulnerability third-party-advisory
- 30523 third-party-advisory
- 238184 vendor-advisory
- 29539 vdb-entry
- 1020191 vdb-entry
- ADV-2008-1742 vdb-entry
- sun-jsasp-admin-auth-bypass(42833) vdb-entry