Description
Sun ONE Application Server 7.0 for Windows 2000/XP does not log the complete URI of a long HTTP request, which could allow remote attackers to hide malicious activities.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.spidynamics.com/sunone_alert.html ↗
- http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55221&zone_32=category%3Asecurity ↗
- http://www.ciac.org/ciac/bulletins/n-103.shtml ↗
- http://marc.info/?l=bugtraq&m=105409846029475&w=2 ↗
- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000610.1-1 ↗
- http://www.securityfocus.com/bid/7711 ↗