Description
Sun ONE Application Server 7.0 for Windows 2000/XP does not log the complete URI of a long HTTP request, which could allow remote attackers to hide malicious activities.
References
- http://www.spidynamics.com/sunone_alert.html
- 55221 vendor-advisory
- N-103 third-party-advisory government-resource
- 20030526 Multiple Vulnerabilities in Sun-One Application Server mailing-list
- 1000610 vendor-advisory
- 7711 vdb-entry