CVE-2011-1511

Description

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 and 3.0.1 allows remote attackers to execute arbitrary code via unknown vectors related to Administration.

Affected products

• oracle / sun_products_suite2.1.1 – 2.1.1
• oracle / sun_products_suite3.0.1 – 3.0.1

Exploits & proofs of concept

• exploit-dbOracle GlassFish Server - Administration Console Authentication Bypassby Core Security

References

• MISChttp://www.us-cert.gov/cas/techalerts/TA11-201A.html
• MISChttp://securityreason.com/securityalert/8254
• VENDOR_ADVISORYhttp://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html