PT-2007-4944 · Sun+1 · Jre+4

Published 2007-07-11 · Updated 2018-10-30 · CVE-2007-3698

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Sun JDK and JRE 6 versions Update 1 and earlier Sun JDK and JRE 5.0 versions Updates 7 through 11 Sun SDK and JRE 1.4.2 versions 1.4.2 11 through 1.4.2 14

Description The Java Secure Socket Extension (JSSE) in Sun JDK and JRE, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service (CPU consumption) via certain SSL/TLS handshake requests.

Recommendations For Sun JDK and JRE 6 Update 1 and earlier, update to a version later than Update 1. For Sun JDK and JRE 5.0 Updates 7 through 11, update to a version later than Update 11. For Sun SDK and JRE 1.4.2 11 through 1.4.2 14, update to a version later than 1.4.2 14.

Fix

Related Identifiers

CVE-2007-3698

RHSA-2007:0818

RHSA-2007:0956

RHSA-2007:1086

RHSA-2008:0100

RHSA-2008:0132

Affected Products

Jdk

Jre

Jsse

Java Platform

Sdk

References · 42

• http://vupen.com/english/advisories/2007/4224 · Vendor Advisory
• http://secunia.com/advisories/29897 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102997-1 · Vendor Advisory
• http://vupen.com/english/advisories/2007/2660 · Vendor Advisory
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01269450 · Vendor Advisory
• http://secunia.com/advisories/27635 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-3698 · Security Note
• http://redhat.com/support/errata/RHSA-2007-0956.html · Vendor Advisory
• http://secunia.com/advisories/27716 · Vendor Advisory
• http://secunia.com/advisories/26015 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0818.html · Vendor Advisory
• http://secunia.com/advisories/28115 · Vendor Advisory
• http://secunia.com/advisories/26221 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200709-15.xml · Vendor Advisory
• http://secunia.com/advisories/26631 · Vendor Advisory