CVE-2008-2405

CVE-2008-2405 affects Sun Java System Active Server Pages (ASP) Server prior to 4.0.3. The issue is that several of the administration ASP applications fail to filter or escape user input before using it to generate commands, allowing remote attackers to inject shell commands via HTTP requests to...