Product: Sun ONE Application Server 7, Standard Edition, Sun Java System Web Server 6.1, Sun Java System Web Server 6.0 Service Pack 8, Sun Java System Application Server Enterprise Edition 7 2004Q2, Sun Java System Application Server Enterprise Edition 8.1 2005Q1, Sun ONE Application Server 7, Platform Edition

A security vulnerability in Sun Java System Application Server (SJSAS) and Sun Java System Web Server (SJSWS) may allow a remote unprivileged user to read files outside of the configured document root directory of the system upon which SJSAS or SJSWS is running.

Avoidance: Patch, Upgrade
State: Resolved
First released: 27-Jul-2006
Permalink | Comments [0]

Trackback URL: http://blogs.sun.com/security/entry/sun_alert_102521_security_vulnerability
Comments:

Post a Comment:

Name:
E-Mail:
URL:

Your Comment:

HTML Syntax: NOT allowed