CVE-2009-2445
published 2009-07-13CVE-2009-2445: Oracle iPlanet Web Server (formerly Sun Java System Web Server or Sun ONE Web Server) 6.1 before SP12, and 7.0 through Update 6, when running on Windows…
PriorityP274medium5CVSS 2.0
AVNACLAuNCPINAN
ITWVulnCheck KEV
Exploited in the wild
EPSS
2.52%
83.0th percentile
Oracle iPlanet Web Server (formerly Sun Java System Web Server or Sun ONE Web Server) 6.1 before SP12, and 7.0 through Update 6, when running on Windows, allows remote attackers to read arbitrary JSP files via an alternate data stream syntax, as demonstrated by a .jsp::$DATA URI.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sun | java_system_web_server | — | — |
| sun | java_system_web_server | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
vulncheck5.0MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-69vf-m5h7-8fwr: Oracle iPlanet Web Server (formerly Sun Java System Web Server or Sun ONE Web Server) 6
ghsa_unreviewed·2022-05-02
CVE-2009-2445 [MEDIUM] CWE-200 GHSA-69vf-m5h7-8fwr: Oracle iPlanet Web Server (formerly Sun Java System Web Server or Sun ONE Web Server) 6
Oracle iPlanet Web Server (formerly Sun Java System Web Server or Sun ONE Web Server) 6.1 before SP12, and 7.0 through Update 6, when running on Windows, allows remote attackers to read arbitrary JSP files via an alternate data stream syntax, as demonstrated by a .jsp::$DATA URI.
VulnCheck
sun java_system_web_server Exposure of Sensitive Information to an Unauthorized Actor
vulncheck·2009·CVSS 5.0
CVE-2009-2445 [MEDIUM] sun java_system_web_server Exposure of Sensitive Information to an Unauthorized Actor
sun java_system_web_server Exposure of Sensitive Information to an Unauthorized Actor
Oracle iPlanet Web Server (formerly Sun Java System Web Server or Sun ONE Web Server) 6.1 before SP12, and 7.0 through Update 6, when running on Windows, allows remote attackers to read arbitrary JSP files via an alternate data stream syntax, as demonstrated by a .jsp::$DATA URI.
Affected: sun java_system_web_server
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Exploitation References: https://go.catonetworks.com/rs/245-RJK-441/images/CATO-NETWORKS-THREAT-REPORT2024.pdf; https://go.catonetworks.com/rs/245-RJK-441/images/Q2_24_Cato_CTRL_Threat_Report.pdf; https://go.catonetworks.com/rs/245-RJK-
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://isowarez.de/SunOne_Webserver.txthttp://jvn.jp/en/jp/JVN47124169/index.htmlhttp://jvndb.jvn.jp/jvndb/JVNDB-2009-002069http://secunia.com/advisories/35701http://securitytracker.com/id?1022511http://sunsolve.sun.com/search/document.do?assetkey=1-26-266429-1http://www.osvdb.org/55655http://www.vupen.com/english/advisories/2009/1786http://isowarez.de/SunOne_Webserver.txthttp://jvn.jp/en/jp/JVN47124169/index.htmlhttp://jvndb.jvn.jp/jvndb/JVNDB-2009-002069http://secunia.com/advisories/35701http://securitytracker.com/id?1022511http://sunsolve.sun.com/search/document.do?assetkey=1-26-266429-1http://www.osvdb.org/55655http://www.vupen.com/english/advisories/2009/1786
2009-07-13
Published
Exploited in the wild