CVE-2008-2403
Multiple directory traversal vulnerabilities in unspecified ASP applications in Sun Java Active...
Multiple directory traversal vulnerabilities in unspecified ASP applications in Sun Java Active Server Pages (ASP) Server before 4.0.3 allow remote attackers to read or delete arbitrary files via a .. (dot dot) in the Path parameter to the MapPath method.
Exploit likelihood
What each source reports
NVD Score used
Multiple directory traversal vulnerabilities in unspecified ASP applications in Sun Java Active Server Pages (ASP) Server before 4.0.3 allow remote attackers to read or delete arbitrary files via a .. (dot dot) in the Path parameter to the MapPath method.
- Record
CVE-2008-2403- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
Multiple directory traversal vulnerabilities in unspecified ASP applications in Sun Java Active Server Pages (ASP) Server before 4.0.3 allow remote attackers to read or delete arbitrary files via a .. (dot dot) in the Path parameter to the MapPath method.
- Record
CVE-2008-2403- Updated
- 2026-11-02
EUVDEUVD-2008-2398 No score
Multiple directory traversal vulnerabilities in unspecified ASP applications in Sun Java Active Server Pages (ASP) Server before 4.0.3 allow remote attackers to read or delete arbitrary files via a .. (dot dot) in the Path parameter to the MapPath method.
- Record
EUVD-2008-2398- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p683-ffvw-hc4p No score
Multiple directory traversal vulnerabilities in unspecified ASP applications in Sun Java Active...
Multiple directory traversal vulnerabilities in unspecified ASP applications in Sun Java Active Server Pages (ASP) Server before 4.0.3 allow remote attackers to read or delete arbitrary files via a .. (dot dot) in the Path parameter to the MapPath method.
- Record
GHSA-p683-ffvw-hc4p- Weakness
- CWE-22
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-2403 is a high vulnerability (CVSS 10.0) in Sun Java Asp Server, published June 4, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 19.4%, the 97th percentile. No source names a fixed version.
References
securityfocus.com/bid/29538
labs.idefense.com/intelligence/vulnerabilities/display.php?id=707
securitytracker.com/id?1020188
sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1
vupen.com/english/advisories/2008/1742/references
secunia.com/advisories/30523
exchange.xforce.ibmcloud.com/vulnerabilities/42831
nvd.nist.gov/vuln/detail/CVE-2008-2403
github.com/advisories/GHSA-p683-ffvw-hc4p