PT-2009-6102 · Oracle+3 · Jdk+6

Published 2009-11-05 · Updated 2018-10-30 · CVE-2009-3877

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Sun Java SE versions prior to 1.3.1 27 Sun Java SE versions prior to 1.4.2 24 JDK versions prior to 5.0 Update 22 JDK versions prior to 6 Update 17 JRE versions prior to 5.0 Update 22 JRE versions prior to 6 Update 17 SDK versions prior to 1.3.1 27 SDK versions prior to 1.4.2 24

Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, via crafted HTTP headers. These headers are not properly parsed by the ASN.1 DER input stream parser.

Recommendations For JDK versions prior to 5.0 Update 22, update to version 5.0 Update 22 or later. For JDK versions prior to 6 Update 17, update to version 6 Update 17 or later. For JRE versions prior to 5.0 Update 22, update to version 5.0 Update 22 or later. For JRE versions prior to 6 Update 17, update to version 6 Update 17 or later. For SDK versions prior to 1.3.1 27, update to version 1.3.1 27 or later. For SDK versions prior to 1.4.2 24, update to version 1.4.2 24 or later. As a temporary workaround, consider restricting access to the ASN.1 DER input stream parser until a patch is available.

Exploit

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2009-3877

HPSBUX02503

RHSA-2009:1551

RHSA-2009:1560

RHSA-2009:1571

RHSA-2009:1584

RHSA-2009:1643

RHSA-2009:1647

RHSA-2009:1662

RHSA-2009:1694

RHSA-2009_1584

RHSA-2010:0043

Affected Products

Hp-Ux

Jdk

Jre

Java Platform

Java Se

Red Hat

Sdk

References · 59

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_setdifficm_bof.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_getsoundbank_bof.rb · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3876 · Security Note
• http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3872 · Security Note
• http://redhat.com/support/errata/RHSA-2009-1694.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3871 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3873 · Security Note
• https://bdu.fstec.ru/vul/2015-03444 · Security Note
• http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2010:084 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-270476-1 · Vendor Advisory
• http://vupen.com/english/advisories/2009/3131 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3877 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2009-3877 · Security Note