| VID |
22382 |
| Severity |
30 |
| Port |
80, ... |
| Protocol |
TCP |
| Class |
Webproxy |
| Detailed Description |
A version of Sun Java Web Proxy Server which is older than version 3.6 SP7 is detected as running on the host. Sun Java System Web Proxy Server (formerly Sun ONE Web Proxy Server) is a data management server for various platforms. Sun Java System Web Proxy Server version 3.6 SP7 and earlier versions are vulnerable to an unspecified remote denial of service vulnerability. A remote attacker could exploit this vulnerability to cause the server to become unresponsive to requests.
* Note: This check solely relied on the banner of the remote HTTP server to assess this vulnerability, so this might be a false positive.
* References:
http://secunia.com/advisories/16757/
http://www.sun.com/software/products/web_proxy/home_web_proxy
* Platforms Affected:
Sun Java System Web Proxy Server version 3.6 SP7 and earlier versions
Any operating system Any version |
| Recommendation |
Upgrade to the latest version of Sun Java System Web Proxy Server (3.6 Service Pack 8 or later), as listed in Sun Alert Notification 101913 at http://sunsolve.sun.com/search/document.do?assetkey=1-26-101913-1 |
| Related URL |
CVE-2005-4806 (CVE) |
| Related URL |
14788 (SecurityFocus) |
| Related URL |
22210 (ISS) |
|
