Sun Java Web Console Information Disclosure Weakness

Bugtraq ID:	28155
Class:	Unknown
CVE:	CVE-2008-1286
Remote:	Yes
Local:	No
Published:	Mar 07 2008 12:00AM
Updated:	Apr 16 2015 06:05PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9_sparc Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 10_x86 Sun Solaris 10_sparc Sun Java Web Console 3.0.2
Not Vulnerable:

Sun Java Web Console Information Disclosure Weakness

Sun Java Web Console is prone to an information-disclosure weakness due to an unspecified error.

Unauthorized attackers can exploit this issue to determine the presence of files or directories. This may help in other attacks.

This issue affects Sun Java Web Console 3.0.2, Solaris 8, 9, and 10.

Sun Java Web Console Information Disclosure Weakness

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Java Web Console Information Disclosure Weakness

Solution:
The vendor released an advisory and patches to address this issue. Please see the references for more information.


Sun Solaris 9_x86

• Sun 125951-07
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -125951-07-1

Sun Solaris 8_x86

• Sun 136986-01
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -136986-01-1

Sun Solaris 8_sparc

• Sun 136987-01
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -136987-01-1

Sun Solaris 10_x86

• Sun 125953-07
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -125953-07-1

Sun Java Web Console 3.0.2

• Sun 125954-07
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -125954-07-1

Sun Java Web Console Information Disclosure Weakness

References:

• 231526 (Sun)