CyberSec.Space Logo
Back to CVE Browser

CVE-2008-2406

HIGH
7.5
CVSS Severity Score
EPSS Score0.1500%
EPSS Percentile5.40th
PublishedJun 4, 2008
Last ModifiedApr 23, 2026

Vulnerability Description

The administration application server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to bypass authentication via direct requests on TCP port 5102.

Affected Platforms (CPE)

📦
Sun

Java Asp Server

<= 4.0.2
📦
Sun

Java Asp Server

= 4.0

References & Advisories

🔗 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=710
🔗 http://secunia.com/advisories/30523
🔗 http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1
🔗 http://www.securityfocus.com/bid/29539
🔗 http://www.securitytracker.com/id?1020191
🔗 http://www.vupen.com/english/advisories/2008/1742/references
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/42833
🔗 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=710

Related Vulnerabilities

CVE-2008-240310.0

Multiple directory traversal vulnerabilities in unspecified ASP applications in Sun Java Active Server Pages (ASP) Server before 4...

CVE-2008-240410.0

Stack-based buffer overflow in the request handling implementation in Sun Java Active Server Pages (ASP) Server before 4.0.3 allow...

CVE-2008-24017.5

The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to append to arbitrary new or e...

CVE-2008-24057.5

Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to execute arbitrary commands via shell metacharact...