Newsflash: Sun has security holes? Yes it does!
C|Net | at | by Mike
A flaw in Sun Microsystems' Web server software could allow hackers to gain control of Web sites, a security consulting company warned. Cambridge, Mass.-based @Stake issued a bulletin late Thursday on the vulnerability in Sun ONE Application Server. The hole is in the software's Connector Module, a Netscape server plug-in that links Sun ONE Application Server with Sun ONE Web Server, formerly known as iPlanet Enterprise Server. The module uses a buffer of fixed size to register information requests sent to the server. By sending an especially long string of data, an attacker could overwrite data on the server and so take control of the machine.