CVE-2007-5153: Code Injection
First published: Mon Oct 01 2007(Updated: )
Unspecified vulnerability in Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 8.x container, allows remote attackers to execute arbitrary code via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Access Manager | =7.1 | |
| Oracle Access Manager | =7.1 | |
| Oracle Access Manager | =7.1 | |
| Oracle Access Manager | =7.1 | |
| Oracle Access Manager | =7.1 | |
| Sun ONE Application Server | =8.1 | |
| Sun ONE Application Server | =8.1-ur1 | |
| Sun ONE Application Server | =8.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-103069-1
- http://www.securityfocus.com/bid/25842
- http://securitytracker.com/id?1018753
- http://secunia.com/advisories/26976
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-200839-1
- http://osvdb.org/37757
- http://www.vupen.com/english/advisories/2007/3282
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36847
Frequently Asked Questions
What is the severity of CVE-2007-5153?
CVE-2007-5153 is considered a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2007-5153?
To fix CVE-2007-5153, you should apply the latest security patches provided by Sun for the affected versions of Sun Java System Access Manager and Sun Java System Application Server.
What versions are affected by CVE-2007-5153?
CVE-2007-5153 affects Sun Java System Access Manager version 7.1 and Sun Java System Application Server versions 8.1 and 8.2.
Can CVE-2007-5153 be exploited remotely?
Yes, CVE-2007-5153 can be exploited remotely, allowing attackers to execute arbitrary code without physical access to the system.
What to do if I cannot patch against CVE-2007-5153?
If you cannot patch against CVE-2007-5153, consider implementing network segmentation and firewall rules to restrict access to affected services.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/sun
- canonical/oracle access manager
- version/oracle access manager/7.1
- canonical/sun one application server
- version/sun one application server/8.1
- version/sun one application server/8.1-ur1
- version/sun one application server/8.2