Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2009-2445 | First vendor Publication | 2009-07-13 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:N/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 5 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Oracle iPlanet Web Server (formerly Sun Java System Web Server or Sun ONE Web Server) 6.1 before SP12, and 7.0 through Update 6, when running on Windows, allows remote attackers to read arbitrary JSP files via an alternate data stream syntax, as demonstrated by a .jsp::$DATA URI. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2445 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-200 | Information Exposure |
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2009-07-22 | Name : Sun Java System Web Server '.jsp' Information Disclosure Vulnerability (Win) File : nvt/gb_sun_java_sys_web_serv_info_disc_vuln.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 55655 | Sun Java System Web Server ::$DATA Extension Request JSP Resource Disclosure |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2014-01-10 | Oracle ONE Web Server JSP source code disclosure attempt RuleID : 16682 - Revision : 9 - Type : SERVER-WEBAPP |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2009-07-07 | Name : The remote web server is affected by a source code disclosure vulnerability. File : sun_web_svr_jsp_src_disclosure.nasl - Type : ACT_ATTACK |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:10:53 |
|
| 2024-11-28 12:19:23 |
|
| 2021-05-04 12:09:48 |
|
| 2021-04-22 01:10:09 |
|
| 2020-05-23 00:24:02 |
|
| 2016-06-28 17:45:53 |
|
| 2016-04-26 18:58:12 |
|
| 2014-02-17 10:50:44 |
|
| 2014-01-19 21:26:00 |
|
| 2013-05-10 23:53:52 |
|
