CVE-2008-4541

Related Files

iDEFENSE Security Advisory 2008-10-09.1

Posted Oct 15, 2008

Authored by iDefense Labs, Joxean Koret | Site idefense.com

iDefense Security Advisory 10.09.08 - Remote exploitation of a heap based buffer overflow in Sun Microsystems Inc.'s Sun Java Web Proxy could allow an attacker to execute arbitrary code. A heap based buffer overflow exists in the handling of FTP resources. Specifically the vulnerability resides within the code responsible for handling HTTP GET requests. Sun Java System Web Proxy Server 4.0 through 4.0.7 is vulnerable in the following versions: SPARC Platform prior to patch 120981-15, x86 Platform prior to patch 120982-15, Linux prior to patch 120983-15, HP-UX prior to patch 123532-05, Windows prior to patch 126325-05.

tags | advisory, java, remote, web, overflow, arbitrary, x86

systems | linux, windows, hpux

advisories | CVE-2008-4541

SHA-256 | f6a92e493a76a9b47f215b7530718298cbd6b92be1e2d9ac53b1345ab7319330

Download | Favorite | View