PT-2011-5182 · Oracle+4 · Oracle Glassfish+7

Alexander Klink + 1 · Published 2011-12-29 · Updated 2024-06-15 · CVE-2011-5035

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Oracle Glassfish versions 2.1.1 through 3.1.1

Description The issue allows remote attackers to cause a denial of service by sending many crafted parameters, resulting in CPU consumption. This is due to the computation of hash values for form parameters without restricting the ability to trigger hash collisions predictably.

Recommendations For Oracle Glassfish versions 2.1.1 through 3.1.1, consider restricting the ability to send many crafted parameters to prevent denial of service attacks. As a temporary workaround, consider implementing measures to limit CPU consumption when handling form parameters. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CESA-2012_0135

CVE-2011-5035

DSA-2420-1

HPSBUX02757

HPSBUX02784

OPENSUSE-SU-2024:10534-1

RHSA-2012:0135

RHSA-2012:0139

RHSA-2012:0322

RHSA-2012:0514

RHSA-2012_0135

RHSA-2012_0139

RHSA-2012_0322

RHSA-2012_0514

RHSA-2013:1455

Affected Products

Centos

Hp-Ux

Java Platform

Oracle Database

Oracle Glassfish

Oracle Weblogic Server

Red Hat

Suse

References · 342

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/ssl_version.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/hashcollision_dos.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_atomicreferencearray.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_ws_vmargs.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/misc/java_rmi_server.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/java_rmi_server.rb · Exploit
• 🔥 https://github.com/FireFart/HashCollision-DOS-POC/blob/master/HashtablePOC.py · Exploit
• 🔥 https://github.com/mpgn/BEAST-PoC · Exploit
• 🔥 https://exploit-db.com/exploits/2012 · Exploit
• http://security.gentoo.org/glsa/glsa-201406-32.xml · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-0514.html · Vendor Advisory
• http://marc.info/?l=bugtraq&m=134254957702612&w=2 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=134254866602253&w=2 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=139344343412337&w=2 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2013:150 · Vendor Advisory