Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4q82-xq88-g8g4

Опубликовано: 02 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to overwrite memory locations in the heap, and discover the contents of memory locations, via a malformed HTTP TRACE request that includes a long URI and many empty headers, related to an "overflow." NOTE: this might overlap CVE-2010-0272 and CVE-2010-0273.

Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to overwrite memory locations in the heap, and discover the contents of memory locations, via a malformed HTTP TRACE request that includes a long URI and many empty headers, related to an "overflow." NOTE: this might overlap CVE-2010-0272 and CVE-2010-0273.

EPSS

Процентиль: 74%
0.00801
Низкий

Дефекты

CWE-20

Связанные уязвимости

nvd
около 16 лет назад

Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to overwrite memory locations in the heap, and discover the contents of memory locations, via a malformed HTTP TRACE request that includes a long URI and many empty headers, related to an "overflow." NOTE: this might overlap CVE-2010-0272 and CVE-2010-0273.

EPSS

Процентиль: 74%
0.00801
Низкий

Дефекты

CWE-20