// For flags

CVE-2010-0273

 

Severity Score

7.5
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

2
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Unspecified vulnerability in Sun Java System Web Server 7.0 Update 6 on Linux allows remote attackers to execute arbitrary code by sending a process memory address and crafted data to TCP port 80, as demonstrated by the vd_sjws2 module in VulnDisco. NOTE: as of 20100106, this disclosure has no actionable information. However, because the VulnDisco author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.

Vulnerabilidad sin especificar en Sun Java System Web Server v7.0 Update v6 en Linux permite a atacantes remotos ejecutar código de su elección enviando una dirección del proceso de memoria y datos manipuladosal puerto 80 TCP, como se ha demostrado en el módulo vd_sjws2 en VulnDisco. NOTA: A fecha 06/01/2010 esta vulnerabilidad no contiene información determinante. Sin embargo, debido a que el autor de VulnDisco en un investigador reconocido, se le ha asignado un identificador CVE con el objetivo de realizar el seguimiento.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2010-01-08 CVE Reserved
  • 2010-01-08 CVE Published
  • 2024-09-16 CVE Updated
  • 2024-09-16 First Exploit
  • 2024-09-17 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
CAPEC
References (2)
URL Tag Source
URL Date SRC
http://intevydis.com/sjws_demo.html 2024-09-16
http://www.intevydis.com/blog/?p=102 2024-09-16
URL Date SRC
URL Date SRC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Sun
Search vendor "Sun"
 Java System Web Server
Search vendor "Sun" for product "Java System Web Server"
 7.0
Search vendor "Sun" for product "Java System Web Server" and version "7.0"
update_6, linux
Affected