PT-2007-4944 · Sun+1 · Jre+4

Publicado 2007-07-11 · Atualizado 2018-10-30 · CVE-2007-3698

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Sun JDK and JRE 6 versions Update 1 and earlier Sun JDK and JRE 5.0 versions Updates 7 through 11 Sun SDK and JRE 1.4.2 versions 1.4.2 11 through 1.4.2 14

Description The Java Secure Socket Extension (JSSE) in Sun JDK and JRE, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service (CPU consumption) via certain SSL/TLS handshake requests.

Recommendations For Sun JDK and JRE 6 Update 1 and earlier, update to a version later than Update 1. For Sun JDK and JRE 5.0 Updates 7 through 11, update to a version later than Update 11. For Sun SDK and JRE 1.4.2 11 through 1.4.2 14, update to a version later than 1.4.2 14.

Correção

Identificadores relacionados

CVE-2007-3698

RHSA-2007:0818

RHSA-2007:0956

RHSA-2007:1086

RHSA-2008:0100

RHSA-2008:0132

Produtos afetados

Jdk

Jre

Jsse

Java Platform

Sdk

Referências · 42

• http://vupen.com/english/advisories/2007/4224 · Aviso do Fabricante
• http://secunia.com/advisories/29897 · Aviso do Fabricante
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102997-1 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/2660 · Aviso do Fabricante
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01269450 · Aviso do Fabricante
• http://secunia.com/advisories/27635 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-3698 · Nota de Segurança
• http://redhat.com/support/errata/RHSA-2007-0956.html · Aviso do Fabricante
• http://secunia.com/advisories/27716 · Aviso do Fabricante
• http://secunia.com/advisories/26015 · Aviso do Fabricante
• http://securitytracker.com/id?1018357 · Nota
• http://osvdb.org/36663 · Nota
• http://redhat.com/support/errata/RHSA-2007-0818.html · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10634 · Nota
• http://secunia.com/advisories/28115 · Aviso do Fabricante