CVE-2009-3878: Sun Java System Web Server

High severity, CVSS 9.3. EPSS: 2.5% chance of exploitation in the next 30 days.

Buffer overflow in Sun Java System Web Server 7.0 Update 6 has unspecified impact and remote attack vectors, as demonstrated by the vd_sjws module in VulnDisco Pack Professional 8.12. NOTE: as of 20091105, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.

Affected products

• Sun Java System Web Server: version 7.0 only

Published 2009-11-05. Last modified 2026-06-16.