CVE-2009-1934: XSS
Published Jun 5, 2009
·Updated
Cross-site scripting (XSS) vulnerability in the Reverse Proxy Plug-in in Sun Java System Web Server 6.1 before SP11 allows remote attackers to inject arbitrary web script or HTML via the query string in situations that result in a 502 Gateway error.
Affected Software
66 affected components
Sun Java System Web Server=6.1-sp10
Sun Java System Web Server=6.1-sp4
Sun Java System Web Server=6.1-sp5
Sun Java System Web Server=6.1-sp6
Sun Java System Web Server=6.1-sp7
Sun Java System Web Server=6.1-sp8
Sun Java System Web Server=6.1-sp9
Sun ONE Web Server=6.1
Sun ONE Web Server=6.1-sp1
Sun ONE Web Server=6.1-sp2
Sun ONE Web Server=6.1-sp3
Sun Java System Web Server=6.1-sp10
Sun Java System Web Server=6.1-sp4
Sun Java System Web Server=6.1-sp5
Sun Java System Web Server=6.1-sp6
Sun Java System Web Server=6.1-sp7
Sun Java System Web Server=6.1-sp8
Sun Java System Web Server=6.1-sp9
Sun ONE Web Server=6.1
Sun ONE Web Server=6.1-sp1
Sun ONE Web Server=6.1-sp2
Sun ONE Web Server=6.1-sp3
Sun Java System Web Server=6.1-sp10
Sun Java System Web Server=6.1-sp4
Sun Java System Web Server=6.1-sp5
Sun Java System Web Server=6.1-sp6
Sun Java System Web Server=6.1-sp7
Sun Java System Web Server=6.1-sp8
Sun Java System Web Server=6.1-sp9
Sun ONE Web Server=6.1
Sun ONE Web Server=6.1-sp1
Sun ONE Web Server=6.1-sp2
Sun ONE Web Server=6.1-sp3
Sun Java System Web Server=6.1-sp10
Sun Java System Web Server=6.1-sp4
Sun Java System Web Server=6.1-sp5
Sun Java System Web Server=6.1-sp6
Sun Java System Web Server=6.1-sp7
Sun Java System Web Server=6.1-sp8
Sun Java System Web Server=6.1-sp9
Sun ONE Web Server=6.1
Sun ONE Web Server=6.1-sp1
Sun ONE Web Server=6.1-sp2
Sun ONE Web Server=6.1-sp3
Sun Java System Web Server=6.1-sp10
Sun Java System Web Server=6.1-sp4
Sun Java System Web Server=6.1-sp5
Sun Java System Web Server=6.1-sp6
Sun Java System Web Server=6.1-sp7
Sun Java System Web Server=6.1-sp8
Sun Java System Web Server=6.1-sp9
Sun ONE Web Server=6.1
Sun ONE Web Server=6.1-sp1
Sun ONE Web Server=6.1-sp2
Sun ONE Web Server=6.1-sp3
Sun Java System Web Server=6.1-sp10
Sun Java System Web Server=6.1-sp4
Sun Java System Web Server=6.1-sp48
Sun Java System Web Server=6.1-sp5
Sun Java System Web Server=6.1-sp6
Sun Java System Web Server=6.1-sp7
Sun Java System Web Server=6.1-sp9
Sun ONE Web Server=6.1
Sun ONE Web Server=6.1-sp1
Sun ONE Web Server=6.1-sp2
Sun ONE Web Server=6.1-sp3
Remediation
Event History
Jun 5, 2009
CVE Published
via MITRE·03:25 PM
Data Sourced
via MITRE·03:25 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-1934?
CVE-2009-1934 is classified as a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary scripts.
2
How do I fix CVE-2009-1934?
To fix CVE-2009-1934, you should upgrade to Sun Java System Web Server version 6.1 SP11 or later.
3
What systems are affected by CVE-2009-1934?
CVE-2009-1934 affects several versions of Sun Java System Web Server 6.1, specifically SP1 through SP10.
4
What type of vulnerability is CVE-2009-1934?
CVE-2009-1934 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2009-1934 be exploited without authentication?
Yes, CVE-2009-1934 can be exploited remotely without requiring authentication.