CVE-2008-3425

Published: Jul 31, 2008Modified: Apr 23, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System (SPS) 5.2 and 6.0 allows remote authenticated SPS users to gain administrative access to the web server via unknown attack vectors.

Affected (3)

Products: Sun: Java System Web Server Plugin, N1 Service Provisioning System

Sun

2 products

Java System Web Server Plugin

N1 Service Provisioning System

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Sun Java System Web Server Plugin	Version 7.0
Sun N1 Service Provisioning System	Version 5.2
Sun N1 Service Provisioning System	Version 6.0

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (12)

http://secunia.com/advisories/31301

Source: cve@mitre.org

Vendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-239566-1

Source: cve@mitre.org

http://www.securityfocus.com/bid/30451

Source: cve@mitre.org

http://www.securitytracker.com/id?1020608

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2261/references

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/44114

Source: cve@mitre.org

http://secunia.com/advisories/31301