CVE-2010-0272
Heap-based buffer overflow in Sun Java System Web Server 7.0 Update 6 on Linux allows remote attackers to discover process memory locations via crafted data to TCP port 80, as demonstrated by the vd_sjws2 module in VulnDisco. NOTE: as of 20100106, this disclosure has no actionable information. However, because the VulnDisco author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
- Affected products
- Sun Java System Web Server
- Sun Java System Web Server
- = 7.0
- Fix
- Available
- CVSS 2.0
- 7.5 HIGH
- EPSS
- 2.5% (83th percentile)
- Weakness
- CWE-119
- NVD status
- Modified
- Published
- 2010-01-08
CVE-2010-0272 at NVD
No indexed exploits for CVE-2010-0272 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2010-0272 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.