{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-07-30T00:00:00", "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System (SPS) 5.2 and 6.0 allows remote authenticated SPS users to gain administrative access to the web server via unknown attack vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-07T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "239566", "tags": ["vendor-advisory", "x_refsource_SUNALERT"], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239566-1"}, {"name": "31301", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/31301"}, {"name": "1020608", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1020608"}, {"name": "ADV-2008-2261", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/2261/references"}, {"name": "sun-n1sps-sjsws-unauth-access(44114)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44114"}, {"name": "30451", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/30451"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2008-3425", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System (SPS) 5.2 and 6.0 allows remote authenticated SPS users to gain administrative access to the web server via unknown attack vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "239566", "refsource": "SUNALERT", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239566-1"}, {"name": "31301", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/31301"}, {"name": "1020608", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1020608"}, {"name": "ADV-2008-2261", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/2261/references"}, {"name": "sun-n1sps-sjsws-unauth-access(44114)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44114"}, {"name": "30451", "refsource": "BID", "url": "http://www.securityfocus.com/bid/30451"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2008-3425", "datePublished": "2008-07-31T22:00:00", "dateReserved": "2008-07-31T00:00:00", "dateUpdated": "2017-08-07T12:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sun:java_system_web_server_plugin:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "09517A56-F177-4B76-A07A-F5B3D9331E08", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:n1_service_provisioning_system:5.2:*:*:*:*:*:*:*", "matchCriteriaId": "5AA7BB07-DB3E-4DA0-A2CE-9B10230ADD3B", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:n1_service_provisioning_system:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "2D002A0B-1406-4A21-A0E8-D5B3D6B0AD7E", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System (SPS) 5.2 and 6.0 allows remote authenticated SPS users to gain administrative access to the web server via unknown attack vectors."}, {"lang": "es", "value": "Vulnerabilidad sin especificar en el Plugin Sun Java System Web Server 7.0 de Sun N1 Service Provisioning System (SPS) 5.2 y 6.0, permite a los usuarios remotos autenticados de SPS obtener acceso administrativo al web server a trav\u00e9s de vectores de ataque desconocidos."}], "id": "CVE-2008-3425", "lastModified": "2017-08-08T01:31:52.577", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2008-07-31T22:41:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/31301"}, {"source": "cve@mitre.org", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239566-1"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/30451"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1020608"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2008/2261/references"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44114"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}