Secunia

A vulnerability has been reported in Sun ONE and Java System Application Server, which potentially can be exploited by malicious people to conduct MitM (Man-in-the-Middle) attacks.

The vulnerability is caused due to an unspecified error in the Proxy Plug-in for Sun ONE and Java System Application Server when the plug-in is used with a web server. This may be exploited to conduct MitM (Man-in-the-Middle) attacks. It is reportedly possible to exploit this vulnerability from outside the firewall, although it will be difficult.

The vulnerability has been reported in the following products:
* Sun ONE Application Server 7.
* Sun Java System Application Server Standard Edition 7 2004Q2.
* Sun Java System Application Server Enterprise Edition 8.1 2005Q1.

Solution
Apply updates.
Further details available in Customer Area

Provided and/or discovered by
Reported by vendor.

Original Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102012-1

Deep Links
Links available in Customer Area