CVE-2008-2401

EPSS 1.57%
Veröffentlicht 04.06.2008 20:32:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to append to arbitrary new or existing files via the first argument to a certain file that is included by multiple unspecified ASP applications.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Sun ≫ Java Active Server Version4.0.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.57%	0.798

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=705

http://secunia.com/advisories/30523

http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1

http://www.securitytracker.com/id?1020186

http://www.vupen.com/english/advisories/2008/1742/references

https://exchange.xforce.ibmcloud.com/vulnerabilities/42832

https://nvd.nist.gov/vuln/detail/CVE-2008-2401

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-2401

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-2401

EUVD