Description
Format string vulnerability in libwebconsole_services.so in Sun Java Web Console 2.2.2 through 2.2.5 allows remote attackers to cause a denial of service (application crash), obtain sensitive information, and possibly execute arbitrary code via unspecified vectors during a failed login attempt, related to syslog.
References
- javawebconsole-libcsyslog-format-string(33731) vdb-entry
- 102854 vendor-advisory
- 1017930 vdb-entry
- 24927 third-party-advisory
- ADV-2007-1443 vdb-entry
- 20070417 n.runs-SA-2007.007 - Sun Solaris 10 - Format string vulnerability mailing-list
- 34902 vdb-entry
- 23539 vdb-entry
- http://www.nruns.com/security_advisory_sun_java_format_string.php
- oval:org.mitre.oval:def:1252 vdb-entry signature