CVE-2009-2445

The CVE-2009-2445 issue affects Oracle iPlanet Web Server (formerly Sun Java System Web Server) on Windows, specifically 6.1 before SP12 and 7.0 through Update 6. The vulnerability permits remote attackers to disclose arbitrary JSP files by exploiting an alternate data stream syntax (for example,...

CVE-2010-0389

CVE-2010-0389 affects Sun Java System Web Server 7.0 Update 6 (admin server). The vulnerability is a NULL pointer dereference in the admin server that can be triggered by an HTTP request missing a method token, leading to a denial of service (daemon crash). OpenVAS/OpenVAS-derived entries and Red...

CVE-2004-2216

Technical details about CVE-2004-2216 are not publicly available in the provided documents. Monitor for updates from additional sources; no specific affected products, root cause, or remediation are disclosed here.

CVE-2008-2120

CVE-2008-2120 is an information-disclosure vulnerability in Sun Java System Application Server 7 (2004Q2) before Update 6, Web Server 6.1 before SP8, and Web Server 7.0 before Update 1 that allows remote attackers to obtain the source code of JSP files via unknown vectors. Affected components are...

CVE-2005-1150

The CVE-2005-1150 entry describes an unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier when running on Windows, which can allow an attacker to cause a denial of service (hang). The available connected records corroborate the affected product and Windows-based DoS impact but ...

CVE-2005-1889

Technical details about CVE-2005-1889 are not provided in the supplied documents; no concrete information on affected versions, root cause, or remediation is available here.