Information disclosure in Sun Java_system_web_server
CVE-2009-2445
Oracle iPlanet Web Server (formerly Sun Java System Web Server or Sun ONE Web Server) 6.1 before SP12, and 7.0 through Update 6, when running on Windows, allows remote attackers to read arbitrary JSP files via an alternate data stream synt…
Vulnerability class: Information Disclosure
EPSS: 0.025 (82.8th percentile) — read the EPSS interpretation.
Affected products
- Sun Java_system_web_server — versions 6.1, 7.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_JVN, third-party-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_SUNALERT, Vendor Advisory)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- cve@mitre.org (x_refsource_JVNDB, third-party-advisory)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (Exploit, x_refsource_MISC)