Sign-up

ID

VAR-201001-0287


CVE

CVE-2010-0389


TITLE

Sun Java System Web Server of admin Service disruption at the server (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2010-005253

DESCRIPTION

The admin server in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an HTTP request that lacks a method token. Sun Java System Web Server is a high-performance WEB server

Trust: 2.25

sources: NVD: CVE-2010-0389 // JVNDB: JVNDB-2010-005253 // CNVD: CNVD-2010-0170 // VULMON: CVE-2010-0389

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2010-0170

AFFECTED PRODUCTS

vendor:sunmodel:java system web serverscope:eqversion:7.0

Trust: 1.6

vendor:sun microsystemsmodel:java system web serverscope:eqversion:7.0 update 6

Trust: 0.8

vendor:nomodel: - scope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2010-0170 // JVNDB: JVNDB-2010-005253 // CNNVD: CNNVD-201001-260 // NVD: CVE-2010-0389

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2010-0389
value: MEDIUM

Trust: 1.0

NVD: CVE-2010-0389
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-201001-260
value: MEDIUM

Trust: 0.6

VULMON: CVE-2010-0389
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2010-0389
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

sources: VULMON: CVE-2010-0389 // JVNDB: JVNDB-2010-005253 // CNNVD: CNNVD-201001-260 // NVD: CVE-2010-0389

PROBLEMTYPE DATA

problemtype:NVD-CWE-Other

Trust: 1.0

problemtype:CWE-Other

Trust: 0.8

sources: JVNDB: JVNDB-2010-005253 // NVD: CVE-2010-0389

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201001-260

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-201001-260

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2010-005253

PATCH
title:Top Pageurl:http://www.oracle.com/us/sun/index.htm
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2010-005253

EXTERNAL IDS
db:NVDid:CVE-2010-0389
Trust: 3.1
db:JVNDBid:JVNDB-2010-005253
Trust: 0.8
db:CNVDid:CNVD-2010-0170
Trust: 0.6
db:CNNVDid:CNNVD-201001-260
Trust: 0.6
db:VULMONid:CVE-2010-0389
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2010-0170 // 
            
            
            
            VULMON: CVE-2010-0389 // 
            
            
            
            JVNDB: JVNDB-2010-005253 // 
            
            
            
            CNNVD: CNNVD-201001-260 // 
            
            
            
            NVD: CVE-2010-0389

REFERENCES
url:http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70-admin.html
Trust: 2.3
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-0389
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2010-0389
Trust: 0.8
url:https://cwe.mitre.org/data/definitions/.html
Trust: 0.1
url:https://nvd.nist.gov
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2010-0170 // 
            
            
            
            VULMON: CVE-2010-0389 // 
            
            
            
            JVNDB: JVNDB-2010-005253 // 
            
            
            
            CNNVD: CNNVD-201001-260 // 
            
            
            
            NVD: CVE-2010-0389

SOURCES
db:CNVDid:CNVD-2010-0170
db:VULMONid:CVE-2010-0389
db:JVNDBid:JVNDB-2010-005253
db:CNNVDid:CNNVD-201001-260
db:NVDid:CVE-2010-0389

LAST UPDATE DATE
2025-04-11T23:10:10.192000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2010-0170date:2010-01-27T00:00:00
db:VULMONid:CVE-2010-0389date:2010-01-31T00:00:00
db:JVNDBid:JVNDB-2010-005253date:2012-12-20T00:00:00
db:CNNVDid:CNNVD-201001-260date:2010-01-26T00:00:00
db:NVDid:CVE-2010-0389date:2025-04-11T00:51:21.963

SOURCES RELEASE DATE
db:CNVDid:CNVD-2010-0170date:2010-01-27T00:00:00
db:VULMONid:CVE-2010-0389date:2010-01-25T00:00:00
db:JVNDBid:JVNDB-2010-005253date:2012-12-20T00:00:00
db:CNNVDid:CNNVD-201001-260date:2010-01-25T00:00:00
db:NVDid:CVE-2010-0389date:2010-01-25T19:30:01.840