Sun Java System Web Server反向代理插件跨站脚本漏洞

漏洞起因
输入验证错误
 
影响系统
Sun Java System Web Server 6.1 SP9
Sun Java System Web Server 6.1 SP8
Sun Java System Web Server 6.1 SP7
Sun Java System Web Server 6.1 SP6
Sun Java System Web Server 6.1 SP5
Sun Java System Web Server 6.1 SP4
Sun Java System Web Server 6.1 SP3
Sun Java System Web Server 6.1 SP2
Sun Java System Web Server 6.1 SP10
Sun Java System Web Server 6.1 SP1
Sun Java System Web Server 6.1
 
不受影响系统
Sun Java System Web Server 6.1 SP11
 
危害
远程攻击者可以利用漏洞获得敏感信息。
 
攻击所需条件
攻击者必须访问Sun Java System Web服务器反向代理插件。
 
漏洞信息
Sun Java System Web Server是一款基于Java的WEB服务程序。
Sun Java System Web服务器反向代理插件存在跨站脚本问题,远程攻击者可以利用漏洞在目标用户浏览器上执行任意脚本代码,获得敏感信息。
目前没有详细漏洞细节提供。
 
测试方法
 
厂商解决方案
可参考如下补丁信息:
Sun Java System Web Server 6.1 SP4
Sun 116648-23
SPARC
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116648-23-1
Sun 116649-23
x86
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116649-23-1
Sun 118202-15
Linux
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118202-15-1
Sun 121510-07
Windows
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121510-07-1
Sun 121524-07
Windows
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121524-07-1
Sun Java System Web Server 6.1 SP5
Sun 116648-23
SPARC
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116648-23-1
Sun 116649-23
x86
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116649-23-1
Sun 118202-15
Linux
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118202-15-1
Sun 121510-07
Windows
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121510-07-1
Sun 121524-07
Windows
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121524-07-1
Sun Java System Web Server 6.1 SP7
Sun 116648-23
SPARC
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116648-23-1
Sun 116649-23
x86
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116649-23-1
Sun 118202-15
Linux
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118202-15-1
Sun 121510-07
Windows
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121510-07-1
Sun 121524-07
Windows
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121524-07-1
Sun Java System Web Server 6.1 SP1
Sun 116648-23
SPARC
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116648-23-1
Sun 116649-23
x86
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116649-23-1
Sun 118202-15
Linux
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118202-15-1
Sun 121510-07
Windows
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121510-07-1
Sun 121524-07
Windows
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121524-07-1
Sun Java System Web Server 6.1 SP6
Sun 116648-23
SPARC
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116648-23-1
Sun 116649-23
x86
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116649-23-1
Sun 118202-15
Linux
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118202-15-1
Sun 121510-07
Windows
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121510-07-1
Sun 121524-07
Windows
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121524-07-1
Sun Java System Web Server 6.1
Sun 116648-23
SPARC
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116648-23-1
Sun 116649-23
x86
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116649-23-1
Sun 118202-15
Linux
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118202-15-1
Sun 121510-07
Windows
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121510-07-1
Sun 121524-07
Windows
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121524-07-1
Sun Java System Web Server 6.1 SP10
Sun 116648-23
SPARC
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116648-23-1
Sun 116649-23
x86
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116649-23-1
Sun 118202-15
Linux
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118202-15-1
Sun 121510-07
Windows
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121510-07-1
Sun 121524-07
Windows
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121524-07-1
Sun Java System Web Server 6.1 SP3
Sun 116648-23
SPARC
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116648-23-1
Sun 116649-23
x86
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116649-23-1
Sun 118202-15
Linux
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118202-15-1
Sun 121510-07
Windows
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121510-07-1
Sun 121524-07
Windows
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121524-07-1
Sun Java System Web Server 6.1 SP2
Sun 116648-23
SPARC
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116648-23-1
Sun 116649-23
x86
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116649-23-1
Sun 118202-15
Linux
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118202-15-1
Sun 121510-07
Windows
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121510-07-1
Sun 121524-07
Windows
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121524-07-1
Sun Java System Web Server 6.1 SP9
Sun 116648-23
SPARC
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116648-23-1
Sun 116649-23
x86
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116649-23-1
Sun 118202-15
Linux
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118202-15-1
Sun 121510-07
Windows
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121510-07-1
Sun 121524-07
Windows
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121524-07-1
Sun Java System Web Server 6.1 SP8
Sun 116648-23
SPARC
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116648-23-1
Sun 116649-23
x86
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116649-23-1
Sun 118202-15
Linux
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118202-15-1
Sun 121510-07
Windows
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121510-07-1
Sun 121524-07
Windows
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121524-07-1
 
漏洞提供者
Sun
 
漏洞消息链接
http://sunsolve.sun.com/search/document.do?assetkey=1-66-259588-1

发表评论?

0 条评论。

发表评论