CVE-2007-1681: High severity Sun Java Web Console vulnerability
Format string vulnerability in libwebconsoleservices.so in Sun Java Web Console 2.2.2 through 2.2.5 allows remote attackers to cause a denial of service (application crash), obtain sensitive information, and possibly execute arbitrary code via unspecified vectors during a failed login attempt, related to syslog.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1681?
CVE-2007-1681 is considered to have a high severity due to its potential to cause denial of service and arbitrary code execution.
How do I fix CVE-2007-1681?
The recommended fix for CVE-2007-1681 is to upgrade to a version of Sun Java Web Console that is not affected, such as version 2.2.6 or later.
What impact does CVE-2007-1681 have on systems?
CVE-2007-1681 can lead to application crashes, exposure of sensitive information, and possibly remote code execution during failed login attempts.
Which versions of Sun Java Web Console are affected by CVE-2007-1681?
CVE-2007-1681 affects Sun Java Web Console versions 2.2.2 through 2.2.5.
Who can exploit CVE-2007-1681?
Remote attackers can exploit CVE-2007-1681 through unspecified vectors during failed login attempts to trigger the vulnerability.