iDefense Security Advisory 10.09.08 – Remote exploitation of a heap based buffer overflow in Sun Microsystems Inc.’s Sun Java Web Proxy could allow an attacker to execute arbitrary code. A heap based buffer overflow exists in the handling of FTP resources. Specifically the vulnerability resides within the code responsible for handling HTTP GET requests. Sun Java System Web Proxy Server 4.0 through 4.0.7 is vulnerable in the following versions: SPARC Platform prior to patch 120981-15, x86 Platform prior to patch 120982-15, Linux prior to patch 120983-15, HP-UX prior to patch 123532-05, Windows prior to patch 126325-05.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/70946/10.09.08-1.txt
Source: https://packetstormsecurity.com/files/70946/iDEFENSE-Security-Advisory-2008-10-09.1.html