Sun Java Runtime Environment InitialDirContext Remote Denial Of Service Vulnerability
BID:11619
Info
Sun Java Runtime Environment InitialDirContext Remote Denial Of Service Vulnerability
| Bugtraq ID: | 11619 |
| Class: | Design Error |
| CVE: |
CVE-2004-1503 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 08 2004 12:00AM |
| Updated: | Jul 12 2009 08:06AM |
| Credit: | Discovery of this issue is credited to Kurt Huwig <[email protected]>. |
| Vulnerable: |
Sun Java 2 Runtime Environment 1.5 Sun Java 2 Runtime Environment 1.4.2 _03 Sun Java 2 Runtime Environment 1.4.2 |
| Not Vulnerable: | |
Discussion
Sun Java Runtime Environment InitialDirContext Remote Denial Of Service Vulnerability
A remote denial of service vulnerability reportedly affects the Sun Java Runtime Environment. This issue is due to a design error that fails to keep track of DNS requests.
An attacker may leverage this issue to cause an application running on the affected software to fail to make DNS requests, causing a denial of service condition on network-based Java applications.
Reports from Harry Johnston indicate the OraClient 10g component of Oracle Database Server 10g incorporates a vulnerable version of the Java Runtime Environment and is therefore vulnerable to this issue.
A remote denial of service vulnerability reportedly affects the Sun Java Runtime Environment. This issue is due to a design error that fails to keep track of DNS requests.
An attacker may leverage this issue to cause an application running on the affected software to fail to make DNS requests, causing a denial of service condition on network-based Java applications.
Reports from Harry Johnston indicate the OraClient 10g component of Oracle Database Server 10g incorporates a vulnerable version of the Java Runtime Environment and is therefore vulnerable to this issue.
Exploit / POC
Sun Java Runtime Environment InitialDirContext Remote Denial Of Service Vulnerability
No exploit is required to leverage this issue.
No exploit is required to leverage this issue.
Solution / Fix
Sun Java Runtime Environment InitialDirContext Remote Denial Of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Sun Java Runtime Environment InitialDirContext Remote Denial Of Service Vulnerability
References:
References:
- Java Homepage (Sun)
- DOS against Java JNDI/DNS (Kurt Huwig