Oracle Sun Java System Web Proxy Server CVE-2010-2385 Administration Server Remote Vulnerability

Bugtraq ID:	41618
Class:	Unknown
CVE:	CVE-2010-2385
Remote:	Yes
Local:	No
Published:	Jul 13 2010 12:00AM
Updated:	Jul 13 2010 12:00AM
Credit:	Oracle
Vulnerable:	Sun Java System Web Proxy Server 4.0.13 Sun Java System Web Proxy Server 4.0.12 Sun Java System Web Proxy Server 4.0.5 Sun Java System Web Proxy Server 4.0
Not Vulnerable:

Oracle Sun Java System Web Proxy Server CVE-2010-2385 Administration Server Remote Vulnerability

Oracle Sun Java System Web Proxy Server is prone to a remote vulnerability.

The vulnerability can be exploited over the 'HTTP' protocol. The 'Administration Server' sub component is affected.

This vulnerability affects the following supported versions:
4.0.13

Oracle Sun Java System Web Proxy Server CVE-2010-2385 Administration Server Remote Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Oracle Sun Java System Web Proxy Server CVE-2010-2385 Administration Server Remote Vulnerability

Solution:
Vendor updates are available. Please contact the vendor for more information.

Oracle Sun Java System Web Proxy Server CVE-2010-2385 Administration Server Remote Vulnerability

References:

• Oracle Critical Patch Update Advisory - July 2010 (Oracle)