4.0.1

DATE	CVE	VULNERABILITY TITLE	RISK
2008-10-13	CVE-2008-4541	Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in SUN Java System web Proxy Server Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arbitrary code via a crafted HTTP GET request. network low complexity sun CWE-119 critical	10.0
2008-08-14	CVE-2008-3683	Denial of Service vulnerability in Sun Java System Web Proxy Server FTP Subsystem Unspecified vulnerability in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.5 before SP6 allows remote attackers to cause a denial of service (failure to accept connections) via unknown vectors, probably related to exhaustion of file descriptors. network low complexity sun	5.0