Lucene search
MitreCVELIST:CVE-2008-2402HistoryJun 04, 2008 - 8:00 p.m.
CVE-2008-2402
2008-06-0420:00:00
mitre
www.cve.org
1
The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read password hashes and configuration data via direct requests for unspecified documents.
References
labs.idefense.com/intelligence/vulnerabilities/display.php?id=706
secunia.com/advisories/30523
sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1
www.securityfocus.com/bid/29540
www.securitytracker.com/id?1020187
www.vupen.com/english/advisories/2008/1742/references
exchange.xforce.ibmcloud.com/vulnerabilities/42828
Related
securityvulns
securityvulns
prion
prion
Improper access control
2008-06-04 20:32:00
cve
cve
CVE-2008-2402
2008-06-04 20:32:00
nvd
nvd
CVE-2008-2402
2008-06-04 20:32:00
d2
d2
DSquare Exploit Pack: D2SEC_SUNASP1
2008-06-04 20:32:00
nessus
nessus
Sun Java System ASP < 4.0.3 Multiple Vulnerabilities
2004-08-18 00:00:00
Sun Java System ASP < 4.0.3 Multiple Vulnerabilities
2008-07-08 00:00:00