Improper input validation in Sun Java System Web Server
CVE-2010-0360
Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to overwrite memory locations in the heap, and discover the contents of memory locations, via a malformed HTTP TRACE request that includes a long URI and many empty headers, related to an "overflow." NOTE: this might overlap CVE-2010-0272 and CVE-2010-0273.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.031 (86.6th percentile) — read the EPSS interpretation.
Affected products
- Sun Java_system_web_server — versions 7.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (x_refsource_MISC)