Vulnerability record · CVE-2008-3683 · published 14 August 2008

CVE-2008-3683: Sun java system web proxy server vulnerability

Sun · Java System Web Proxy Server

Unspecified vulnerability in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.5 before SP6 allows remote attackers to cause a denial of service (failure to accept connections) via unknown vectors, probably related to exhaustion of file descriptors.

5.0 CVSS 2.0 Medium EPSS 2.5% · top 16.0%

5.0CVSS 2.0 base score

2.5%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

12References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Java System Web Proxy Server Sun

References

Link	Tags
http://secunia.com/advisories/31476	PatchVendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-240327-1	Patch
http://www.securityfocus.com/bid/30671	Patch
http://www.securitytracker.com/id?1020696
http://www.vupen.com/english/advisories/2008/2366
https://exchange.xforce.ibmcloud.com/vulnerabilities/44413
http://secunia.com/advisories/31476	PatchVendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-240327-1	Patch
http://www.securityfocus.com/bid/30671	Patch
http://www.securitytracker.com/id?1020696
http://www.vupen.com/english/advisories/2008/2366
https://exchange.xforce.ibmcloud.com/vulnerabilities/44413

Track CVE-2008-3683 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2008-4541Sun java system web proxy server memory buffer overflow vulnerabilityHeap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arbitrary co…EPSS 8.4%13 Oct 2008 10.0CVE-2007-2881Sun java system web proxy server vulnerabilityMultiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to execute …EPSS 26%29 May 2007 7.5CVE-2005-1232Sun java system web proxy server vulnerabilityBuffer overflow in Sun Java System Web Proxy Server (aka Sun ONE Proxy Server) 3.6 SP6 allows remote attackers to execute arbitrary code via unknown …EPSS 3.4%2 May 2005 7.5CVE-2004-1350Sun java system web proxy server vulnerabilityMultiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6 through 3.6 SP4 allow remote attackers to execute a…EPSS 7.7%30 Oct 2004 6.8CVE-2006-6276Sun java system application server http request smuggling vulnerabilityHTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java S…EPSS 3.6%4 Dec 2006 5.0CVE-2005-4806Sun java system web proxy server vulnerabilityMultiple unspecified vulnerabilities in Sun Java System Web Proxy Server 3.6 SP7 and earlier allow remote attackers to cause a denial of service (unr…EPSS 2.5%31 Dec 2005 4.3CVE-2007-6569Sun java system web proxy server cross-site scripting vulnerabilityCross-site scripting (XSS) vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 allows remote attac…EPSS 1.9%28 Dec 2007 4.3CVE-2007-6570Sun java system web proxy server cross-site scripting vulnerabilityCross-site scripting (XSS) vulnerability in the View URL Database functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 and 3.x before 3…EPSS 2.2%28 Dec 2007

Source: NIST National Vulnerability Database (record CVE-2008-3683), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.