Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 14/10/2010 Updated: 11/11/2010

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 6.1 and 7.0 allows remote malicious users to affect integrity via unknown vectors related to Web Container.

Vulnerable Product	Search on Vulmon	Subscribe to Product
oracle sun products suite 7.0
oracle sun products suite 6.1

Description Security-Assessmentcom discovered that is possible to successfully perform an HTTP Response Splitting attack against applications served by Sun Java System Web Server The vulnerability can be exploited if user supplied input is used to generate the value of an HTTP header, as shown in the testjsp page below: testjsp – Source Cod ...

NVD-CWE-noinfo http://www.us-cert.gov/cas/techalerts/TA10-287A.html http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html https://nvd.nist.gov https://www.exploit-db.com/exploits/15290/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2010-3514

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect