CVE-2008-2406: High severity sun java application server vulnerability
The administration application server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to bypass authentication via direct requests on TCP port 5102.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2406?
CVE-2008-2406 is classified as a medium severity vulnerability due to its authentication bypass potential.
How do I fix CVE-2008-2406?
To fix CVE-2008-2406, upgrade the Sun Java Active Server Pages Server to version 4.0.3 or later.
What software is affected by CVE-2008-2406?
CVE-2008-2406 affects Sun Java Active Server Pages Server versions 4.0 and earlier, including both the 4.0 release and up to version 4.0.2.
Can CVE-2008-2406 be exploited remotely?
Yes, CVE-2008-2406 can be exploited remotely by attackers who send direct requests to the server's TCP port 5102.
What impact does CVE-2008-2406 have on systems?
CVE-2008-2406 allows unauthorized users to bypass authentication controls, potentially leading to unauthorized access to the system.