Oracle Sun Multiple Application Servers CVE-2010-2397 Local Vulnerability

Bugtraq ID:	41638
Class:	Unknown
CVE:	CVE-2010-2397
Remote:	No
Local:	Yes
Published:	Jul 13 2010 12:00AM
Updated:	Jul 13 2010 12:00AM
Credit:	Oracle
Vulnerable:	Sun Java System Application Server 8.0 Platform Edition Sun Java System Application Server 8.2 Sun Java System Application Server 8.1 Sun Java System Application Server 8.0 Sun Glassfish Enterprise Server 2.1.1 Sun Glassfish Enterprise Server 2.1
Not Vulnerable:

Oracle Sun Multiple Application Servers CVE-2010-2397 Local Vulnerability

Oracle Sun GlassFish Enterprise Server and Sun Java System Application Server are prone to a local vulnerability.

The 'GUI' sub component is affected.

This vulnerability affects the following supported versions:
Sun Java System Application Server 8.0, 8.1, 8.2
Sun GlassFish Enterprise Server v2.1.1

Oracle Sun Multiple Application Servers CVE-2010-2397 Local Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Oracle Sun Multiple Application Servers CVE-2010-2397 Local Vulnerability

Solution:
Vendor updates are available. Please contact the vendor for more information.

Oracle Sun Multiple Application Servers CVE-2010-2397 Local Vulnerability

References:

• Oracle Critical Patch Update Advisory - July 2010 (Oracle)