CVE-2008-4541

Sun Java System Web Proxy Server 4.0-4.0.7 - Remote Code Execution via FTP Subsystem Heap Overflow

Title source: llm
STIX 2.1

Description

Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arbitrary code via a crafted HTTP GET request.

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/45782
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/31691
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/32227
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1021038
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/2781
Third Party Advisory third-party-advisory x_refsource_idefense
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=747
Vendor Advisory vendor-advisory x_refsource_sunalert
http://sunsolve.sun.com/search/document.do?assetkey=1-26-242986-1

Scores

EPSS 0.1579
EPSS Percentile 94.8%

Details

CWE
CWE-119
Status published
Products (8)
sun/java_system_web_proxy_server 4.0 (2 CPE variants)
sun/java_system_web_proxy_server 4.0.1 (7 CPE variants)
sun/java_system_web_proxy_server 4.0.2 (7 CPE variants)
sun/java_system_web_proxy_server 4.0.3 (7 CPE variants)
sun/java_system_web_proxy_server 4.0.4 (7 CPE variants)
sun/java_system_web_proxy_server 4.0.5 (7 CPE variants)
sun/java_system_web_proxy_server 4.0.6 (5 CPE variants)
sun/java_system_web_proxy_server 4.0.7 (6 CPE variants)
Published Oct 13, 2008
Tracked Since Feb 18, 2026