CVE-2004-2216

Published: Dec 31, 2004Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier and 6.1 SP1 and earlier, and Application Server 7 Update 4 and earlier, allows remote attackers to cause a denial of service (crash) via a malformed client certificate.

Affected (13)

Products: Sun: Java System Application Server, Java System Web Server

Sun

2 products

Java System Application Server

Java System Web Server

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Sun Java System Application Server	Version 7.0
Sun Java System Application Server	Version 7.0
Sun Java System Application Server	Version 7.0
Sun Java System Web Server	Version 6.0
Sun Java System Web Server	Version 6.0 sp1
Sun Java System Web Server	Version 6.0 sp2
Sun Java System Web Server	Version 6.0 sp3
Sun Java System Web Server	Version 6.0 sp4
Sun Java System Web Server	Version 6.0 sp5
Sun Java System Web Server	Version 6.0 sp6
Sun Java System Web Server	Version 6.0 sp7
Sun Java System Web Server	Version 6.1
Sun Java System Web Server	Version 6.1 sp1