51604

33725

http://sunsolve.sun.com/search/document.do?assetkey=1-21-119166-35-1

245446

33397

ADV-2009-0208

javasystem-webinf-metainf-info-disclosure(48161)

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 9.2.4, 10.0.2, 10.3.5, 10.3.6 and 12.1.1. Easily exploitable vulnerability allows successful unauthenticated network attacks via HTTP. Successful attack of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server.

Sun Java System App Server Enterprise Ed 8.1 2005Q1, _x86 Patch32.
Date this patch was last updated by Sun : Oct/18/11

The version of Sun Java System Application Server installed on the remote host is potentially affected by an information disclosure vulnerability.  A remote, unauthenticated attacker could exploit this flaw to read the Web Application configuration files in the WEB-INF or META-INF directory via a specially crafted request.

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 9.2.4, 10.0.2, 10.3.5, 10.3.6 and 12.1.1. Easily exploitable vulnerability allows successful unauthenticated network attacks via HTTP. Successful attack of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server.

This plugin has been deprecated and either replaced with individual 124673 patch-revision plugins, or deemed non-security related.

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 9.2.4, 10.0.2, 10.3.5, 10.3.6 and 12.1.1. Easily exploitable vulnerability allows successful unauthenticated network attacks via HTTP. Successful attack of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server.

This plugin has been deprecated and either replaced with individual 124672 patch-revision plugins, or deemed non-security related.

Sun Java System App Server Enterprise Ed 8.1 2005Q1, Solaris Patch.
Date this patch was last updated by Sun : Oct/18/11

Sun Java System App Server Enterprise Ed 8.1 2005Q1, _x86 Patch32.
Date this patch was last updated by Sun : Oct/18/11

This plugin has been deprecated and either replaced with individual 119167 patch-revision plugins, or deemed non-security related.

Sun Java System App Server Enterprise Ed 8.1 2005Q1, Solaris Patch.
Date this patch was last updated by Sun : Oct/18/11

This plugin has been deprecated and either replaced with individual 119166 patch-revision plugins, or deemed non-security related.

ID	Name	Product	Family	Severity
107913	Solaris 10 (x86) : 124673-20	Nessus	Solaris Local Security Checks	medium
107810	Solaris 10 (x86) : 119167-43	Nessus	Solaris Local Security Checks	high
107410	Solaris 10 (sparc) : 124672-20	Nessus	Solaris Local Security Checks	medium
68958	Sun Java System Application Server Information Disclosure	Nessus	Windows	medium
27509	Solaris 8 (sparc) : 124672-20	Nessus	Solaris Local Security Checks	medium
27099	Solaris 9 (x86) : 124673-20	Nessus	Solaris Local Security Checks	medium
27092	Solaris 9 (sparc) : 124672-20	Nessus	Solaris Local Security Checks	medium
27077	Solaris 10 (x86) : 124673-20 (deprecated)	Nessus	Solaris Local Security Checks	medium
27072	Solaris 10 (sparc) : 124672-20 (deprecated)	Nessus	Solaris Local Security Checks	medium
23610	Solaris 9 (x86) : 119167-43	Nessus	Solaris Local Security Checks	high
23552	Solaris 9 (sparc) : 119166-43	Nessus	Solaris Local Security Checks	high
23413	Solaris 8 (sparc) : 119166-43	Nessus	Solaris Local Security Checks	high
22988	Solaris 10 (x86) : 119167-43 (deprecated)	Nessus	Solaris Local Security Checks	high
22955	Solaris 10 (sparc) : 119166-43 (deprecated)	Nessus	Solaris Local Security Checks	high

CVE-2009-0278

MEDIUM

Description

References

Details

Risk Information

CVSS v2.0

Vulnerable Software

Configuration 1

Tenable Plugins

medium

high

medium

medium

medium

medium

medium

medium

medium

high

high

high

high

high