Sun Java System Web Server Two Vulnerabilities

Some vulnerabilities have been reported in Sun Java System Web Server, which can be exploited by malicious people to disclose sensitive information and potentially compromise a vulnerable system.

1. Due to a boundary error when processing the "OPTIONS" requests which can be exploited to cause a stack-based buffer overflow via an overly long path name in the request.Successful exploitation allows execution of arbitrary code, but may require that DAV support is enabled.

2. Due to an error in the processing of "TRACE" requests which can be exploited to cause a heap-based buffer overflow and allows disclosing potentially sensitive information.