CVE-2010-0387

Multiple heap-based buffer overflows in (1) webservd and (2) the admin server in Sun Java System...

7.5 HighPublic exploit

Multiple heap-based buffer overflows in (1) webservd and (2) the admin server in Sun Java System Web Server 7.0 Update 7 allow remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long string in an "Authorization: Digest" HTTP header.

Exploit likelihood

7.70%Up 3.2 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2010-0387
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Record: CVE-2010-0387
Updated: 2026-11-02

EUVDEUVD-2010-0418 No score

Record: EUVD-2010-0418
Updated: 2026-11-03

GitHub AdvisoriesGHSA-43pq-r97m-pgc4 No score

Multiple heap-based buffer overflows in (1) webservd and (2) the admin server in Sun Java System...

Record: GHSA-43pq-r97m-pgc4
Weakness: CWE-119
Updated: 2026-11-02

Affected products

sun java system web server

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Sun Java System Web Server 6.1/7.0 - Digest Authentication Remote Buffer Overflow	2010-01-21

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-0387 is a high vulnerability (CVSS 7.5) in Sun Java System Web Server, published January 25, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.70%, the 94th percentile. No source names a fixed version.