Vulnonym.org

CVE-2008-2401 - Jacobin Ore

Description

The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to append to arbitrary new or existing files via the first argument to a certain file that is included by multiple unspecified ASP applications.

Reference

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=705 http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1 http://www.securitytracker.com/id?1020186 http://secunia.com/advisories/30523 http://www.vupen.com/english/advisories/2008/1742/references https://exchange.xforce.ibmcloud.com/vulnerabilities/42832