Secunia

Keigo Yamazaki has reported a vulnerability in Sun ONE and Sun Java System Web Server, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input containing a " (Double quote) character in the URL is not properly sanitised before being returned to users in error pages. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of a vulnerable site.

The vulnerability has been reported in the following versions:
* Sun ONE Web Server 6.0 Service Pack 9 and earlier.
* Sun Java System Web Server 6.1 Service Pack 4 and earlier.
* Sun ONE Application Server 7 Platform Edition Update 6 and earlier.
* Sun ONE Application Server 7 Standard Edition Update 6 and earlier.
* Sun Java System Application Server 7 2004Q2 Standard Edition Update 2 and earlier.
* Sun Java System Application Server 7 2004Q2 Enterprise Edition Update 2 and earlier.

Solution
Apply Service Pack or updates.
Further details available in Customer Area

Provided and/or discovered by
Keigo Yamazaki, LAC

Changelog
Further details available in Customer Area

Original Advisory
Sun Microsystems:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102164-1

LAC:
http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/87_e.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area