PT-2011-4533 · Oracle · Sun Java System App Server+2

Published 2011-10-18 · Updated 2017-08-29 · CVE-2011-3559

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Oracle Communications Server version 2.0 GlassFish Enterprise Server versions 2.1.1, 3.0.1, and 3.1.1 Sun Java System App Server versions 8.1 and 8.2

Description The issue affects availability and can be exploited by remote attackers via unknown vectors related to the Web Container.

Recommendations For Oracle Communications Server version 2.0, update to a version that addresses this issue. For GlassFish Enterprise Server versions 2.1.1, 3.0.1, and 3.1.1, update to a version that addresses this issue. For Sun Java System App Server versions 8.1 and 8.2, update to a version that addresses this issue.

Fix

Related Identifiers

CVE-2011-3559

Affected Products

Glassfish Enterprise Server

Oracle Communications Server

Sun Java System App Server

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2011-3559 · Security Note
• http://oracle.com/technetwork/topics/security/cpuoct2011-330135.html · Vendor Advisory
• http://osvdb.org/76476 · Note
• http://securitytracker.com/id?1026222 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3559 · Note
• http://secunia.com/advisories/46523 · Note
• http://secunia.com/advisories/46524 · Note
• http://securityfocus.com/bid/50204 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/70816 · Note