Remote Code Execution Vulnerability in Sun Java System Web Server by Sun Microsystems
CVE-2010-0273

Currently unrated

Key Information:

Vendor
Oracle
Status
Java System Web Server
Vendor
CVE Published:
8 January 2010

Summary

A vulnerability in Sun Java System Web Server 7.0 Update 6 running on Linux could allow remote attackers to execute arbitrary code. This is accomplished by sending carefully crafted data along with a specific process memory address to TCP port 80. This flaw has been demonstrated through the vd_sjws2 module in VulnDisco. Although initial disclosures lacked actionable information, the identification of this issue highlights its significance in cybersecurity.

References

http://intevydis.com/sjws_demo.html
x_refsource_MISC
http://www.intevydis.com/blog/?p=102
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.