Sun Java System Application Server (AS) 8.1 and 8.2 allows remote attackers to read the Web Application configuration files in the (1) WEB-INF or (2) META-INF directory via a malformed request.

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 9.2.4, 10.0.2, 10.3.5, 10.3.6 and 12.1.1. Easily exploitable vulnerability allows successful unauthenticated network attacks via HTTP. Successful attack of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server.

Sun Java System App Server Enterprise Ed 8.1 2005Q1, _x86 Patch32.
Date this patch was last updated by Sun : Oct/18/11

The version of Sun Java System Application Server installed on the remote host is potentially affected by an information disclosure vulnerability.  A remote, unauthenticated attacker could exploit this flaw to read the Web Application configuration files in the WEB-INF or META-INF directory via a specially crafted request.

Sun Java System App Server Enterprise Ed 8.1 2005Q1, Solaris Patch.
Date this patch was last updated by Sun : Oct/18/11

ID	Name	Product	Family	Severity
107913	Solaris 10 (x86) : 124673-20	Nessus	Solaris Local Security Checks	medium
107810	Solaris 10 (x86) : 119167-43	Nessus	Solaris Local Security Checks	high
107410	Solaris 10 (sparc) : 124672-20	Nessus	Solaris Local Security Checks	medium
68958	Sun Java System Application Server Information Disclosure	Nessus	Windows	medium
27509	Solaris 8 (sparc) : 124672-20	Nessus	Solaris Local Security Checks	medium
27099	Solaris 9 (x86) : 124673-20	Nessus	Solaris Local Security Checks	medium
27092	Solaris 9 (sparc) : 124672-20	Nessus	Solaris Local Security Checks	medium
23610	Solaris 9 (x86) : 119167-43	Nessus	Solaris Local Security Checks	high
23552	Solaris 9 (sparc) : 119166-43	Nessus	Solaris Local Security Checks	high
23413	Solaris 8 (sparc) : 119166-43	Nessus	Solaris Local Security Checks	high

Detections

Analytics

CVE-2009-0278

high

Tenable Plugins

medium

high

medium

medium

medium

medium

medium

high

high

high