Sun Java System Web Server is prone to a buffer overflow vulnerability, which could be exploited to execute arbitrary code on the affected system.

No security patch or update is available as of February 11, 2010.
The customers are advised to visit vendor's site for any update.

Sun Java System Web Server is a well known web server designed for medium and large business applications. There exists a heap-based buffer overflow vulnerability in Sun Java System Web Server 7.0 update 7

The flaw exists due to improper bounds checking by the webservd and admin server. An attacker may exploit this vulnerability by sending a specially-crafted HTTP request containing long string in an "Authorization: Digest" HTTP header. Successful exploitation allows remote code execution within the context of the affected application or cause the server to crash.