CVE-2010-3514

Description

Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 6.1 and 7.0 allows remote attackers to affect integrity via unknown vectors related to Web Container.

Affected products

• oracle / sun_products_suite6.1 – 6.1
• oracle / sun_products_suite7.0 – 7.0

Exploits & proofs of concept

• exploit-dbOracle Sun Java System Web Server - HTTP Response Splittingby Roberto Suggi Liverani

References

• VENDOR_ADVISORYhttp://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
• MISChttp://www.us-cert.gov/cas/techalerts/TA10-287A.html