ID CVE-2005-4805
Summary Unspecified vulnerability in Sun Java System Application Server 7 Standard and Platform Edition 6 and earlier, and 2004Q2 Standard and Platform Edition Update 2 and earlier, allows remote attackers to obtain the source code for Java Server pages (JSP) via unknown vectors.
References
Vulnerable Configurations
  • cpe:2.3:a:sun:java_system_application_server:6.0:*:platform:*:*:*:*:*
    cpe:2.3:a:sun:java_system_application_server:6.0:*:platform:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_application_server:7.0:*:*:*:*:*:*:*
    cpe:2.3:a:sun:java_system_application_server:7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_application_server:7.0:*:enterprise:*:*:*:*:*
    cpe:2.3:a:sun:java_system_application_server:7.0:*:enterprise:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_application_server:7.0:*:platform:*:*:*:*:*
    cpe:2.3:a:sun:java_system_application_server:7.0:*:platform:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_application_server:7.0:*:standard:*:*:*:*:*
    cpe:2.3:a:sun:java_system_application_server:7.0:*:standard:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_application_server:7.0:ur1:standard:*:*:*:*:*
    cpe:2.3:a:sun:java_system_application_server:7.0:ur1:standard:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_application_server:7.0:ur2:platform:*:*:*:*:*
    cpe:2.3:a:sun:java_system_application_server:7.0:ur2:platform:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_application_server:7.0:ur2:standard:*:*:*:*:*
    cpe:2.3:a:sun:java_system_application_server:7.0:ur2:standard:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_application_server:7.0:ur4:*:*:*:*:*:*
    cpe:2.3:a:sun:java_system_application_server:7.0:ur4:*:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_application_server:7.0:ur5:platform:*:*:*:*:*
    cpe:2.3:a:sun:java_system_application_server:7.0:ur5:platform:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_application_server:7.0:ur5:standard:*:*:*:*:*
    cpe:2.3:a:sun:java_system_application_server:7.0:ur5:standard:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_application_server:7.0:ur6:platform:*:*:*:*:*
    cpe:2.3:a:sun:java_system_application_server:7.0:ur6:platform:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_application_server:7.0:ur6:standard:*:*:*:*:*
    cpe:2.3:a:sun:java_system_application_server:7.0:ur6:standard:*:*:*:*:*
CVSS
Base: 5.0 (as of 05-09-2008 - 20:57)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:N/A:N
refmap via4
bid 15084
osvdb 19950
sectrack 1015047
secunia 17164
sunalert 101910
Last major update 05-09-2008 - 20:57
Published 31-12-2005 - 05:00
Last modified 05-09-2008 - 20:57
Back to Top