Lucene search

K
cveMitreCVE-2010-0388
HistoryJan 25, 2010 - 7:30 p.m.

CVE-2010-0388

2010-01-2519:30:01
CWE-134
mitre
web.nvd.nist.gov
24
cve-2010-0388
format string vulnerability
sun java system web server
webdav
denial of service

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

High

EPSS

0.853

Percentile

98.6%

Format string vulnerability in the WebDAV implementation in webservd in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in the encoding attribute of the XML declaration in a PROPFIND request.

Affected configurations

Nvd
Node
sunjava_system_web_serverMatch7.0update_6
VendorProductVersionCPE
sunjava_system_web_server7.0cpe:2.3:a:sun:java_system_web_server:7.0:update_6:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

High

EPSS

0.853

Percentile

98.6%

Related for CVE-2010-0388