Format string vulnerability in libwebconsole_services.so in Sun Java Web Console 2.2.2 through 2.2.5 allows remote attackers to cause a denial of service (application crash), obtain sensitive information, and possibly execute arbitrary code via unspecified vectors during a failed login attempt, related to syslog.

SunOS 5.10_x86: Sun Java Web Console (Lockhart) Patch.
Date this patch was last updated by Sun : Apr/16/07

SunOS 5.10: Sun Java Web Console (Lockhart) Patch.
Date this patch was last updated by Sun : Apr/16/07

The remote host is running SUN Java Web Console. 

The remote version of this service does not properly sanitize calls to the syslog function. By sending a specially crafted request it is possible to exploit this format string error.
An attacker can exploit it to execute code with the privileges of the web server.

SunOS 5.10_x86: Sun Java Web Console (Lockhart) Patch.
Date this patch was last updated by Sun : Apr/16/07

This plugin has been deprecated and either replaced with individual 121212 patch-revision plugins, or deemed non-security related.

SunOS 5.10: Sun Java Web Console (Lockhart) Patch.
Date this patch was last updated by Sun : Apr/16/07

This plugin has been deprecated and either replaced with individual 121211 patch-revision plugins, or deemed non-security related.

ID	Name	Product	Family	Severity
107876	Solaris 10 (x86) : 121212-02	Nessus	Solaris Local Security Checks	high
107375	Solaris 10 (sparc) : 121211-02	Nessus	Solaris Local Security Checks	high
25082	Sun Java Web Console LibWebconsole_Services.SO Remote Format String	Nessus	Web Servers	high
25072	Solaris 10 (x86) : 121212-02 (deprecated)	Nessus	Solaris Local Security Checks	high
25070	Solaris 10 (sparc) : 121211-02 (deprecated)	Nessus	Solaris Local Security Checks	high

Detections

Analytics

CVE-2007-1681

critical

Tenable Plugins

high

high

high

high

high