Unrated severityNVD Advisory· Published Jun 4, 2008· Updated Jun 16, 2026

CVE-2008-2404

Description

Stack-based buffer overflow in the request handling implementation in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to execute arbitrary code via an unspecified string field.

Affected products

Sun Corporation/Java Asp Server2 versions
cpe:2.3:a:sun:java_asp_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sun:java_asp_server:*:*:*:*:*:*:*:*range: <=4.0.2
- cpe:2.3:a:sun:java_asp_server:4.0:*:*:*:*:*:*:*
Sun Corporation/Java Active Server Pagesllm-fuzzy
Range: <4.0.3

Patches

Vulnerability mechanics

References

sunsolve.sun.com/search/document.donvdPatch
labs.idefense.com/intelligence/vulnerabilities/display.phpnvd
secunia.com/advisories/30523nvd
www.securitytracker.com/idnvd
www.vupen.com/english/advisories/2008/1742/referencesnvd
exchange.xforce.ibmcloud.com/vulnerabilities/42830nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.005
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000