ID CVE-2004-2216
Summary Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier and 6.1 SP1 and earlier, and Application Server 7 Update 4 and earlier, allows remote attackers to cause a denial of service (crash) via a malformed client certificate.
References
Vulnerable Configurations
  • cpe:2.3:a:sun:java_system_application_server:7.0:*:*:*:*:*:*:*
    cpe:2.3:a:sun:java_system_application_server:7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_application_server:7.0:*:platform:*:*:*:*:*
    cpe:2.3:a:sun:java_system_application_server:7.0:*:platform:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_application_server:7.0:*:standard:*:*:*:*:*
    cpe:2.3:a:sun:java_system_application_server:7.0:*:standard:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_web_server:6.0:*:*:*:*:*:*:*
    cpe:2.3:a:sun:java_system_web_server:6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_web_server:6.0:sp1:*:*:*:*:*:*
    cpe:2.3:a:sun:java_system_web_server:6.0:sp1:*:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_web_server:6.0:sp2:*:*:*:*:*:*
    cpe:2.3:a:sun:java_system_web_server:6.0:sp2:*:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_web_server:6.0:sp3:*:*:*:*:*:*
    cpe:2.3:a:sun:java_system_web_server:6.0:sp3:*:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_web_server:6.0:sp4:*:*:*:*:*:*
    cpe:2.3:a:sun:java_system_web_server:6.0:sp4:*:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_web_server:6.0:sp5:*:*:*:*:*:*
    cpe:2.3:a:sun:java_system_web_server:6.0:sp5:*:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_web_server:6.0:sp6:*:*:*:*:*:*
    cpe:2.3:a:sun:java_system_web_server:6.0:sp6:*:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_web_server:6.0:sp7:*:*:*:*:*:*
    cpe:2.3:a:sun:java_system_web_server:6.0:sp7:*:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_web_server:6.1:*:*:*:*:*:*:*
    cpe:2.3:a:sun:java_system_web_server:6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_web_server:6.1:sp1:*:*:*:*:*:*
    cpe:2.3:a:sun:java_system_web_server:6.1:sp1:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 11-07-2017 - 01:31)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 11593
osvdb 11383
secunia 13072
sunalert
  • 101589
  • 57669
xf sun-java-web-application-dos(17941)
Last major update 11-07-2017 - 01:31
Published 31-12-2004 - 05:00
Last modified 11-07-2017 - 01:31
Back to Top