CVE-2007-1526

MediumCVSS 6.0/10Last modified Jun 16, 2026

Description

Sun Java System Web Server 6.1 before 20070314 allows remote authenticated users with revoked client certificates to bypass the Certificate Revocation List (CRL) authorization control and access secure web server instances running under an account different from that used for the admin server via unspecified vectors.

Metrics

CVSS 2.0 6.0/10AV:N/AC:M/Au:S/C:P/I:P/A:P

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Mar 20, 2007
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2007

CVE-2007-15275.0The LLTD Mapper in Microsoft Windows Vista does not verify that an IP address in a TLV type 0x07 field in a HELLO packet corresponds to a vaCVE-2007-15285.0The LLTD Mapper in Microsoft Windows Vista allows remote attackers to spoof hosts, and nonexistent bridge relationships, into the network toCVE-2007-15294.3The LLTD Responder in Microsoft Windows Vista does not send the Mapper a response to a DISCOVERY packet if another host has sent a spoofed rCVE-2007-15305.0The LLTD Mapper in Microsoft Windows Vista does not properly gather responses to EMIT packets, which allows remote attackers to cause a deniCVE-2007-15315.0Microsoft Windows XP and Vista overwrites ARP table entries included in gratuitous ARP, which allows remote attackers to cause a denial of sCVE-2007-15326.4The neighbor discovery implementation in Microsoft Windows Vista allows remote attackers to conduct a redirect attack by (1) responding to qCVE-2007-15335.0The Teredo implementation in Microsoft Windows Vista uses the same nonce for communication with different UDP ports within a solicitation seCVE-2007-15349.3DFSR.exe in Windows Meeting Space in Microsoft Windows Vista remains available for remote connections on TCP port 5722 for 2 minutes after WCVE-2007-15357.5Microsoft Windows Vista establishes a Teredo address without user action upon connection to the Internet, contrary to documentation that TerCVE-2007-15369.3Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackers to execute arbitrary code viaCVE-2007-15373.6\Device\NdisTapi (NDISTAPI.sys) in Microsoft Windows XP SP2 and 2003 SP1 uses weak permissions, which allows local users to write to the devCVE-2007-15387.5McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, which allows local users to bypass local pa
CVE-2007-1526: Medium severity, CVSS 6.0 | Vulnix