Unscored CVE-2008-2405 EUVD-2008-2400GHSA-qjrh-9263-wxrw

Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in HT…

Published Jun 4, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in HTTP requests to unspecified ASP applications.

References

238184 vendor-advisory
ADV-2008-1742 vdb-entry
30523 third-party-advisory
20080603 Sun Java System Active Server Pages Multiple Command Injection Vulnerabilities third-party-advisory
sun-jsasp-command-execution(42829) vdb-entry
1020190 vdb-entry