CVE-2010-0272
published 2010-01-08CVE-2010-0272: Heap-based buffer overflow in Sun Java System Web Server 7.0 Update 6 on Linux allows remote attackers to discover process memory locations via crafted data to…
PriorityP337high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
2.54%
83.1th percentile
Heap-based buffer overflow in Sun Java System Web Server 7.0 Update 6 on Linux allows remote attackers to discover process memory locations via crafted data to TCP port 80, as demonstrated by the vd_sjws2 module in VulnDisco. NOTE: as of 20100106, this disclosure has no actionable information. However, because the VulnDisco author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sun | java_system_web_server | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-q7vp-7fgq-v95q: Heap-based buffer overflow in Sun Java System Web Server 7
ghsa_unreviewed·2022-05-02
CVE-2010-0272 [HIGH] CWE-119 GHSA-q7vp-7fgq-v95q: Heap-based buffer overflow in Sun Java System Web Server 7
Heap-based buffer overflow in Sun Java System Web Server 7.0 Update 6 on Linux allows remote attackers to discover process memory locations via crafted data to TCP port 80, as demonstrated by the vd_sjws2 module in VulnDisco. NOTE: as of 20100106, this disclosure has no actionable information. However, because the VulnDisco author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
GHSA
GHSA-4q82-xq88-g8g4: Sun Java System Web Server (aka SJWS) 7
ghsa_unreviewed·2022-05-02·CVSS 7.5
CVE-2010-0360 [HIGH] CWE-20 GHSA-4q82-xq88-g8g4: Sun Java System Web Server (aka SJWS) 7
Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to overwrite memory locations in the heap, and discover the contents of memory locations, via a malformed HTTP TRACE request that includes a long URI and many empty headers, related to an "overflow." NOTE: this might overlap CVE-2010-0272 and CVE-2010-0273.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2010-01-08
Published