CVE-2009-3878

Buffer overflow in Sun Java System Web Server 7.0 Update 6 has unspecified impact and remote attack vectors, as demonstrated by the vd_sjws module in VulnDisco Pack Professional 8.12. NOTE: as of 20091105, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.

• CWE-119

• http://intevydis.com/vd-list.shtml
• http://secunia.com/advisories/37115Vendor Advisory
• http://www.h-online.com/security/news/item/Alleged-critical-vulnerability-in-Sun-Java-System-Web-Server-839598.html
• http://www.intevydis.com/blog/?p=79
• http://www.osvdb.org/59497
• http://www.vupen.com/english/advisories/2009/3024Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54065
• http://intevydis.com/vd-list.shtml
• http://secunia.com/advisories/37115Vendor Advisory
• http://www.h-online.com/security/news/item/Alleged-critical-vulnerability-in-Sun-Java-System-Web-Server-839598.html
• http://www.intevydis.com/blog/?p=79
• http://www.osvdb.org/59497
• http://www.vupen.com/english/advisories/2009/3024Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54065

Published

Nov 5, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-3872Unspecified vulnerability in the JPEG JFIF Decoder in Sun Ja…
• CVE-2009-3873The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 befo…
• CVE-2009-3874Integer overflow in the JPEGImageReader implementation in th…
• CVE-2009-3875The MessageDigest.isEqual function in Java Runtime Environme…
• CVE-2009-3876Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 …
• CVE-2009-3877Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 …
• CVE-2009-3879Multiple unspecified vulnerabilities in the (1) X11 and (2) …
• CVE-2009-3880The Abstract Window Toolkit (AWT) in Java Runtime Environmen…
• CVE-2009-3881Sun Java SE 5.0 before Update 22 and 6 before Update 17, and…
• CVE-2009-3882Multiple unspecified vulnerabilities in the Swing implementa…
• CVE-2009-3883Multiple unspecified vulnerabilities in the Windows Pluggabl…
• CVE-2009-3884The TimeZone.getTimeZone method in Sun Java SE 5.0 before Up…