Unscored severity · published Mar 20, 2007
CVE-2007-1526
Sun Java System Web Server 6.1 before 20070314 allows remote authenticated users with revoked client certificates to bypass the Certificate Revocation List (CRL) authorization…
–
CVSS
1%
EPSS
No
On KEV
Description
Sun Java System Web Server 6.1 before 20070314 allows remote authenticated users with revoked client certificates to bypass the Certificate Revocation List (CRL) authorization control and access secure web server instances running under an account different from that used for the admin server via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JS
Java System Web Server · Sun
6.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1526
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1526
osvdb.org
http://osvdb.org/34074
secunia.com
http://secunia.com/advisories/24531
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102822-1
www.securitytracker.com
http://www.securitytracker.com/id?1017777
www.vupen.com
http://www.vupen.com/english/advisories/2007/0958
More from Java System Web Server
–
CVE-2010-0389
The admin server in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an HTTP request…
–
CVE-2010-0388
Format string vulnerability in the WebDAV implementation in webservd in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of service (daemon crash)…
–
CVE-2010-0387
Multiple heap-based buffer overflows in (1) webservd and (2) the admin server in Sun Java System Web Server 7.0 Update 7 allow remote attackers to cause a denial of service…
–
CVE-2010-0361
Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to cause a denial of service…
–
CVE-2010-0360
Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to overwrite memory locations in the heap, and discover the contents of memory locations, via a…