iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages Buffer Overflow Vulnerability

iDefense Security Advisory 06.03.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 03, 2008 I. BACKGROUND Sun Java System Active Server Pages is a multi-platform ASP application server. It provides provides ASP Active Server Pages functionality to a web server. More information is...

CVE-2008-2404

CVE-2008-2404 affects Sun Java System Active Server Pages (ASP) Server prior to 4.0.3. The issue is a stack-based buffer overflow in the request handling code that allows remote code execution via an unspecified string field. Exploitation is described as possible from the web context, with no aut...