Sun Java System Application Server JSP Source Code Disclosure Vulnerability
BID:25058
Info
Sun Java System Application Server JSP Source Code Disclosure Vulnerability
| Bugtraq ID: | 25058 |
| Class: | Design Error |
| CVE: |
CVE-2007-4025 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 25 2007 12:00AM |
| Updated: | May 07 2015 05:36PM |
| Credit: | The vendor disclosed this issue. |
| Vulnerable: |
Sun Java System Application Server Platform Edition 8.1 2005 Q1 Sun Java System Application Server Platform Edition 9.0 Sun Java System Application Server Platform Edition 8.2 Sun Java System Application Server Enterprise Edition 8.1 2005 Q1 Sun Java System Application Server Enterprise Edition 8.2 Sun Java System Application Server Enterprise Edition 8.1 2005 Q1 |
| Not Vulnerable: | |
Discussion
Sun Java System Application Server JSP Source Code Disclosure Vulnerability
Sun Java System Application Server on Microsoft Windows is prone to a vulnerability that may allow remote attackers to obtain sensitive JSP source code, which may aid them in further attacks.
Sun Java System Application Server on Microsoft Windows is prone to a vulnerability that may allow remote attackers to obtain sensitive JSP source code, which may aid them in further attacks.
Exploit / POC
Sun Java System Application Server JSP Source Code Disclosure Vulnerability
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.
Solution / Fix
Sun Java System Application Server JSP Source Code Disclosure Vulnerability
Solution:
Sun has released an alert along with fixes to address this issue. Please see the references for more information.
Sun Java System Application Server Platform Edition 8.2
Sun Java System Application Server Enterprise Edition 8.1 2005 Q1
Sun Java System Application Server Enterprise Edition 8.1 2005 Q1
Sun Java System Application Server Platform Edition 8.1 2005 Q1
Solution:
Sun has released an alert along with fixes to address this issue. Please see the references for more information.
Sun Java System Application Server Platform Edition 8.2
Sun Java System Application Server Enterprise Edition 8.1 2005 Q1
-
Sun 124678-02
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -124678-02-1 -
Sun 124684-03
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -124684-03-1
Sun Java System Application Server Enterprise Edition 8.1 2005 Q1
-
Sun 119172-18
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119172-18-1 -
Sun 122848-11
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -122848-11-1
Sun Java System Application Server Platform Edition 8.1 2005 Q1
References
Sun Java System Application Server JSP Source Code Disclosure Vulnerability
References:
References: