CVE-1999-1527 — HIGH (7.5) — White Hats Nepal

Vulnerability Description

Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does not properly restrict access to IP addresses as specified in its configuration, which allows arbitrary remote attackers to access the server.

CVSS Score

7.5

HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL

Affected Products

Vendor	Product	Versions
Sun	Forte	community_1.0_beta
Sun	Netbeans Developer	3.0_beta

References

http://marc.info/?l=bugtraq&m=94338883114254&w=2
http://www.securityfocus.com/bid/816ExploitPatchVendor Advisory
http://marc.info/?l=bugtraq&m=94338883114254&w=2
http://www.securityfocus.com/bid/816ExploitPatchVendor Advisory

FAQ

What is CVE-1999-1527?

CVE-1999-1527 is a vulnerability with a CVSS score of 7.5 (HIGH). Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does not properly restrict access to IP addresses as specified in its configuration, w...

How severe is CVE-1999-1527?

CVE-1999-1527 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-1999-1527?

Check the references section above for vendor advisories and patch information. Affected products include: Sun Forte, Sun Netbeans Developer.