PT-2009-3679 · Oracle+2 · Java Se Development Kit+4

Published 2009-03-25 · Updated 2018-10-10 · CVE-2009-1101

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Java SE Development Kit (JDK) and Java Runtime Environment (JRE) versions 6 Update 12 and earlier

Description The issue is related to an unspecified vulnerability in the lightweight HTTP server implementation, which allows remote attackers to cause a denial of service, likely due to resource consumption, for a JAX-WS service endpoint. This can be triggered by a connection without any data, leading to a file descriptor "leak."

Recommendations For Java SE Development Kit (JDK) and Java Runtime Environment (JRE) versions 6 Update 12 and earlier, update to a version later than 6 Update 12 to resolve the issue.

Fix

Related Identifiers

CVE-2009-1101

DSA-1769-1

HPSBUX02429

RHSA-2009:0377

RHSA-2009:0392

RHSA-2009:1038

RHSA-2009:1198

RHSA-2009_0377

RHSA-2010:0043

Affected Products

Hp-Ux

Java Platform

Java Runtime Environment

Java Se Development Kit

Red Hat

References · 80

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1101 · Security Note
• https://rhn.redhat.com/errata/RHSA-2009-1198.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1101 · Security Note
• https://rhn.redhat.com/errata/RHSA-2009-0377.html · Vendor Advisory
• http://secunia.com/advisories/35255 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06299 · Security Note
• https://bdu.fstec.ru/vul/2015-03027 · Security Note
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-254609-1 · Vendor Advisory
• http://vupen.com/english/advisories/2009/1426 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1103 · Security Note
• https://bdu.fstec.ru/vul/2015-03026 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2009:137 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2009:162 · Vendor Advisory