CVE-2007-1681

Format string vulnerability in libwebconsole_services.so in Sun Java Web Console 2.2.2 through 2.2.5 allows remote attackers to cause a denial of service (application crash), obtain sensitive information, and possibly execute arbitrary code via unspecified vectors during a failed login attempt, related to syslog.

Date published : 2007-04-19

http://www.securityfocus.com/bid/23539

http://www.securityfocus.com/archive/1/466048/100/0/threaded