Approved changes feed: RSS · Atom

cpe:2.3:a:sun:java_system_web_server:7.0:update_7:*:*:*:*:*:*

part: a version: 7.0 update: update_7

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductJava System Web Server (8d3d91c0-14f0-5a23-a9c1-a530b357541b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-0389 vulnerable 2026-06-08 04:52:02.122264 Details available
The admin server in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an HTTP request that lacks a method token.
Published: 2010-01-25T19:00:00.000Z
Updated: 2024-09-16T23:30:40.645Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0387 vulnerable 2026-06-08 04:52:02.120530 Details available
Multiple heap-based buffer overflows in (1) webservd and (2) the admin server in Sun Java System Web Server 7.0 Update 7 allow remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long string in an "Authorization: Digest" HTTP header.
Published: 2010-01-25T19:00:00.000Z
Updated: 2024-08-07T00:45:12.160Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0361 vulnerable 2026-06-08 04:52:01.963626 Details available
Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long URI in an HTTP OPTIONS request.
Published: 2010-01-20T16:00:00.000Z
Updated: 2024-09-17T02:01:34.413Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0360 vulnerable 2026-06-08 04:52:01.963273 Details available
Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to overwrite memory locations in the heap, and discover the contents of memory locations, via a malformed HTTP TRACE request that includes a long URI and many empty headers, related to an "overflow." NOTE: this might overlap CVE-2010-0272 and CVE-2010-0273.
Published: 2010-01-20T16:00:00.000Z
Updated: 2024-09-16T23:16:20.163Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.