CVE-2010-0272

Heap-based buffer overflow in Sun Java System Web Server 7.0 Update 6 on Linux allows remote attackers to discover process memory locations via crafted data to TCP port 80, as demonstrated by the vd_sjws2 module in VulnDisco. NOTE: as of 20100106, this disclosure has no actionable information. However, because the VulnDisco author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
Configurations

Configuration 1 (hide)

cpe:2.3:a:sun:java_system_web_server:7.0:update_6:linux:*:*:*:*:*

History

No history.

Information

Published : 2010-01-08 17:30

Updated : 2024-02-04 17:54


NVD link : CVE-2010-0272

Mitre link : CVE-2010-0272

CVE.ORG link : CVE-2010-0272


JSON object : View

Products Affected

sun

  • java_system_web_server
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer