Java Asp Server
Approved changes feed: RSS · Atom
cpe:2.3:a:sun:java_asp_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sun (f793a52f-9733-5503-ba70-29fa391cdd2b) |
|---|---|
| Product | Java Asp Server (b6d65a65-aafd-5097-8f64-ccb99af5d4e8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-2406 |
vulnerable | 2026-06-08 04:50:23.961082 |
Details available
The administration application server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to bypass authentication via direct requests on TCP port 5102.
Published: 2008-06-04T20:00:00.000Z
Updated: 2024-08-07T08:58:02.349Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-2404 |
vulnerable | 2026-06-08 04:50:23.958200 |
Details available
Stack-based buffer overflow in the request handling implementation in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to execute arbitrary code via an unspecified string field.
Published: 2008-06-04T20:00:00.000Z
Updated: 2024-08-07T08:58:02.599Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-2403 |
vulnerable | 2026-06-08 04:50:23.956814 |
Details available
Multiple directory traversal vulnerabilities in unspecified ASP applications in Sun Java Active Server Pages (ASP) Server before 4.0.3 allow remote attackers to read or delete arbitrary files via a .. (dot dot) in the Path parameter to the MapPath method.
Published: 2008-06-04T20:00:00.000Z
Updated: 2024-08-07T08:58:02.335Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-2402 |
vulnerable | 2026-06-08 04:50:23.955849 |
Details available
The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read password hashes and configuration data via direct requests for unspecified documents.
Published: 2008-06-04T20:00:00.000Z
Updated: 2024-08-07T08:58:02.327Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.