Unscored CVE-2008-2401 EUVD-2008-2396GHSA-8p56-q7gm-rvhr

The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to append to arbitrary new or existing f…

Published Jun 4, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to append to arbitrary new or existing files via the first argument to a certain file that is included by multiple unspecified ASP applications.

References

1020186 vdb-entry
238184 vendor-advisory
ADV-2008-1742 vdb-entry
30523 third-party-advisory
sunjava-file-creation-code-execution(42832) vdb-entry
20080603 Sun Java System Active Server Pages File Creation Vulnerability third-party-advisory