Sun Java web console format string vulnerability
Published:		18.04.2007
Source:		BUGTRAQ
SecurityVulns ID:		7598
Type:		remote
Level:		5/10
Description:		Format string vulnerability in libwebconsole_services.so on syslog() call.

Affected:		SUN : Sun Java Web Console 2.2
CVE:		CVE-2007-1681 (Format string vulnerability in libwebconsole_services.so in Sun Java Web Console 2.2.2 through 2.2.5 allows remote attackers to cause a denial of service (application crash), obtain sensitive information, and possibly execute arbitrary code via unspecified vectors during a failed login attempt, related to syslog.)

Original document

security_(at)_nruns.com, n.runs-SA-2007.007 - Sun Solaris 10 - Format string vulnerability (18.04.2007)

Discuss:

Read or add your comments to this news (0 comments)