Unscored CVE-2008-2406 EUVD-2008-2401GHSA-4jgq-fhgh-wpfp

The administration application server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to bypass authentic…

Published Jun 4, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

The administration application server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to bypass authentication via direct requests on TCP port 5102.

References

29539 vdb-entry
1020191 vdb-entry
238184 vendor-advisory
ADV-2008-1742 vdb-entry
30523 third-party-advisory
sun-jsasp-admin-auth-bypass(42833) vdb-entry
20080603 Sun Java System Active Server Pages Authorization Bypass Vulnerability third-party-advisory