Vulnerability Name:

CVE-2007-0114 (CCN-31345)

Assigned:2007-01-05
Published:2007-01-05
Updated:2017-07-29
Summary:Sun Java System Content Delivery Server 5.0 and 5.0 PU1 allows remote attackers to obtain sensitive information regarding "content details" via unspecified vectors.
CVSS v3 Severity:5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): None
Availibility (A): None
CVSS v2 Severity:5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)
3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): None
Availibility (A): None
5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): None
Availibility (A): None
Vulnerability Type:CWE-Other
Vulnerability Consequences:Obtain Information
References:Source: MITRE
Type: CNA
CVE-2007-0114

Source: OSVDB
Type: UNKNOWN
32645

Source: CCN
Type: SA23630
Sun Java System Content Delivery Server Content Details Disclosure

Source: SECUNIA
Type: Patch, Vendor Advisory
23630

Source: CCN
Type: Sun Alert ID: 102764
Security Vulnerability in the Sun Java System Content Delivery Server May Allow Unauthorized Viewing of Content Details

Source: SUNALERT
Type: Patch
102764

Source: CCN
Type: ASA-2007-028
Security Vulnerability in the Sun Java System Content Delivery Server May Allow Unauthorized Viewing of Content Details (Sun 102764)

Source: CCN
Type: OSVDB ID: 32645
Sun Java System Content Delivery Server Content Details Disclosure

Source: BID
Type: UNKNOWN
21908

Source: CCN
Type: BID-21908
Sun Java Runtime System Content Delivery Server Information Disclosure Vulnerability

Source: VUPEN
Type: UNKNOWN
ADV-2007-0076

Source: XF
Type: UNKNOWN
sun-java-cds-info-disclosure(31345)

Source: XF
Type: UNKNOWN
sun-java-cds-info-disclosure(31345)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:sun:java_system_content_delivery_server:5.0:*:solaris:*:*:*:*:*
  • OR cpe:/a:sun:java_system_content_delivery_server:5.0:pu1:solaris:*:*:*:*:*

  • Configuration CCN 1:
  • cpe:/a:sun:java_system_content_delivery_server:5.0:*:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_content_delivery_server:5.0:pu1:solaris:*:*:*:*:*
  • AND
  • cpe:/o:sun:solaris:9::sparc:*:*:*:*:*
  • OR cpe:/o:sun:solaris:10::64bit:*:*:*:*:*

  • * Denotes that component is vulnerable
    BACK
    sun java system content delivery server 5.0
    sun java system content delivery server 5.0 pu1
    sun java system content delivery server 5.0
    sun java system content delivery server 5.0 pu1
    sun solaris 9
    sun solaris 10