Sun Java System Web And Application Servers Remote Denial Of Service Vulnerability
BID:11593
Info
Sun Java System Web And Application Servers Remote Denial Of Service Vulnerability
| Bugtraq ID: | 11593 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 03 2004 12:00AM |
| Updated: | Nov 03 2004 12:00AM |
| Credit: | The individual responsible for the discovery of this issue is currently unknown; the vendor disclosed this issue. |
| Vulnerable: |
Sun Java System Web Server 6.1 SP1 Sun Java System Web Server 6.1 Sun Java System Web Server 6.0 SP7 Sun Java System Web Server 6.0 SP6 Sun Java System Web Server 6.0 SP5 Sun Java System Web Server 6.0 SP4 Sun Java System Web Server 6.0 SP3 Sun Java System Web Server 6.0 SP2 Sun Java System Web Server 6.0 SP1 Sun Java System Web Server 6.0 Sun Java System Application Server 7.0 Standard Edition Sun Java System Application Server 7.0 Platform Edition Sun Java System Application Server 7.0 2004Q2 |
| Not Vulnerable: |
Sun Java System Web Server 6.1 SP2 Sun Java System Web Server 6.0 SP8 |
Discussion
Sun Java System Web And Application Servers Remote Denial Of Service Vulnerability
A remote denial of service vulnerability affects the Sun Java Web Server and the Sun Java Application Server. This issue is due to a failure of the server applications to process malformed data.
An attacker may exploit this issue to cause the affected server to crash, denying service to legitimate users.
A remote denial of service vulnerability affects the Sun Java Web Server and the Sun Java Application Server. This issue is due to a failure of the server applications to process malformed data.
An attacker may exploit this issue to cause the affected server to crash, denying service to legitimate users.
Exploit / POC
Sun Java System Web And Application Servers Remote Denial Of Service Vulnerability
No exploit is required to leverage this issue.
No exploit is required to leverage this issue.
Solution / Fix
Sun Java System Web And Application Servers Remote Denial Of Service Vulnerability
Solution:
The vendor has released fixes and service packs resolving this issue in the affected software. Please see the referenced vendor advisory for more information.
Sun Java System Web Server 6.0 SP7
Sun Java System Web Server 6.1 SP1
Sun Java System Application Server 7.0 Standard Edition
Sun Java System Application Server 7.0 2004Q2
Sun Java System Application Server 7.0 Platform Edition
Solution:
The vendor has released fixes and service packs resolving this issue in the affected software. Please see the referenced vendor advisory for more information.
Sun Java System Web Server 6.0 SP7
-
Sun Java Systems Web Server 6.0 Service Pack 8
http://wwws.sun.com/software/download/products/40968fe6.html
Sun Java System Web Server 6.1 SP1
-
Sun Java Systems Web Server 6.1 Service Pack 2
http://wwws.sun.com/software/download/products/415a094d.html
Sun Java System Application Server 7.0 Standard Edition
-
Sun Java Systems Application Server 7.0 Standard Edition Update 5
http://wwws.sun.com/software/download/products/414b472d.html
Sun Java System Application Server 7.0 2004Q2
-
Sun Java Systems Application Server 7.0 2004Q2 Update 1
http://wwws.sun.com/software/download/products/4154c5a5.html
Sun Java System Application Server 7.0 Platform Edition
-
Sun Java Systems Application Server 7.0 Platform Edition Update 5
http://wwws.sun.com/software/download/products/4151fe59.html
References
Sun Java System Web And Application Servers Remote Denial Of Service Vulnerability
References:
References: