Sun JSSE SSL/TLS Handshake Processing Denial Of Service Vulnerability
BID:24846
Info
Sun JSSE SSL/TLS Handshake Processing Denial Of Service Vulnerability
| Bugtraq ID: | 24846 |
| Class: | Design Error |
| CVE: |
CVE-2007-3698 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 10 2007 12:00AM |
| Updated: | Mar 19 2015 08:44AM |
| Credit: | The vendor disclosed this issue. |
| Vulnerable: |
SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 10 SP1 SuSE SUSE Linux Enterprise SDK 10.SP1 SuSE SUSE Linux Enterprise Desktop 10 SP1 Sun SDK (Windows Production Release) 1.4.2 _15 Sun SDK (Windows Production Release) 1.4.2_14 Sun SDK (Windows Production Release) 1.4.2_13 Sun SDK (Windows Production Release) 1.4.2_12 Sun SDK (Windows Production Release) 1.4.2_11 Sun SDK (Solaris Production Release) 1.4.2 _15 Sun SDK (Solaris Production Release) 1.4.2_14 Sun SDK (Solaris Production Release) 1.4.2_13 Sun SDK (Solaris Production Release) 1.4.2_12 Sun SDK (Solaris Production Release) 1.4.2_11 Sun SDK (Linux Production Release) 1.4.2 _15 Sun SDK (Linux Production Release) 1.4.2 Sun SDK (Linux Production Release) 1.4.2_14 Sun SDK (Linux Production Release) 1.4.2_13 Sun SDK (Linux Production Release) 1.4.2_12 Sun SDK (Linux Production Release) 1.4.2_11 Sun JRE (Windows Production Release) 1.4.2_15 Sun JRE (Windows Production Release) 1.4.2_14 Sun JRE (Windows Production Release) 1.4.2_13 Sun JRE (Windows Production Release) 1.4.2_12 Sun JRE (Windows Production Release) 1.4.2_11 Sun JRE (Solaris Production Release) 1.4.2_15 Sun JRE (Solaris Production Release) 1.4.2_14 Sun JRE (Solaris Production Release) 1.4.2_13 Sun JRE (Solaris Production Release) 1.4.2_12 Sun JRE (Solaris Production Release) 1.4.2_11 Sun JRE (Linux Production Release) 1.4.2 _10 Sun JRE (Linux Production Release) 1.6.0_02 Sun JRE (Linux Production Release) 1.4.2_15 Sun JRE (Linux Production Release) 1.4.2_14 Sun JRE (Linux Production Release) 1.4.2_13 Sun JRE (Linux Production Release) 1.4.2_11 Sun JDK (Windows Production Release) 1.6.0_01 Sun JDK (Linux Production Release) 1.6 _01 Sun JDK (Linux Production Release) 1.5 0_10 Sun JDK (Linux Production Release) 1.5 _07 Sun JDK (Linux Production Release) 1.6.0_02 Sun JDK (Linux Production Release) 1.5.0.0_11 Sun JDK (Linux Production Release) 1.5.0.0_09 Sun JDK (Linux Production Release) 1.5.0.0_08 Slackware Linux 10.2 Slackware Linux 10.1 Slackware Linux 10.0 Slackware Linux 9.1 Slackware Linux 9.0 Slackware Linux 8.1 Slackware Linux 12.0 Slackware Linux 11.0 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Novell Linux POS 9 S.u.S.E. CORE 9 RedHat Enterprise Linux Extras 4 RedHat Enterprise Linux Extras 3 Red Hat Enterprise Linux Supplementary 5 server Red Hat Enterprise Linux Desktop Supplementary 5 client HP OpenView Operations 8.0 HP OpenView Operations 7.1 HP OpenView Network Node Manager 7.53 HP OpenView Network Node Manager 7.51 HP OpenView Network Node Manager 7.01 Gentoo Linux Cisco Unified Presence Server 6.0 Cisco Unified Presence Server 1.0(3) Cisco Unified Presence Server 1.0(2) Cisco Unified Presence Server 1.0 Cisco Unified CallManager 6.0 Cisco Unified CallManager 5.1 Cisco Unified CallManager 5.0(4a)SU1 Cisco Unified CallManager 5.0(4) Cisco Unified CallManager 5.0(3a) Cisco Unified CallManager 5.0(3) Cisco Unified CallManager 5.0(2) Cisco Unified CallManager 5.0(1) Cisco Unified CallManager 5.0 BEA Systems JRockit 1.4.2 BEA Systems JRockit R27.3.1 BEA Systems JRockit 7.0 BEA Systems JRockit 6 BEA Systems JRockit 5.0 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.10 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10 |
| Not Vulnerable: |
Cisco Unified Presence Server 6.0(1) Cisco Unified Communications Manager 6.0(1) Cisco Unified Communications Manager 5.1(2) |
Discussion
Sun JSSE SSL/TLS Handshake Processing Denial Of Service Vulnerability
The Sun JSSE (Java Secure Socket Extension) is prone to a denial-of-service vulnerability.
An attacker can exploit this issue to crash the computer, denying access to legitimate users.
The Sun JSSE (Java Secure Socket Extension) is prone to a denial-of-service vulnerability.
An attacker can exploit this issue to crash the computer, denying access to legitimate users.
Exploit / POC
Sun JSSE SSL/TLS Handshake Processing Denial Of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Sun JSSE SSL/TLS Handshake Processing Denial Of Service Vulnerability
Solution:
The vendor has released Sun Alert ID: 102997 and fixes to address this issue. Please see the references for more information.
Sun JRE (Linux Production Release) 1.4.2_11
Slackware Linux 12.0
Sun JRE (Linux Production Release) 1.4.2_14
Sun JRE (Solaris Production Release) 1.4.2_13
Sun SDK (Linux Production Release) 1.4.2_11
Sun SDK (Linux Production Release) 1.4.2_13
Sun SDK (Windows Production Release) 1.4.2_12
Sun SDK (Solaris Production Release) 1.4.2_13
BEA Systems JRockit R27.3.1
Sun JRE (Windows Production Release) 1.4.2_14
Sun SDK (Linux Production Release) 1.4.2_14
Sun JDK (Windows Production Release) 1.6.0_01
Sun JRE (Linux Production Release) 1.4.2_13
Sun JRE (Windows Production Release) 1.4.2_11
Sun SDK (Windows Production Release) 1.4.2_13
Sun JRE (Solaris Production Release) 1.4.2_11
Sun SDK (Windows Production Release) 1.4.2_14
Sun JRE (Windows Production Release) 1.4.2_13
Sun JRE (Solaris Production Release) 1.4.2_14
Sun SDK (Windows Production Release) 1.4.2_11
Sun JRE (Windows Production Release) 1.4.2_12
Sun SDK (Solaris Production Release) 1.4.2_14
Sun SDK (Solaris Production Release) 1.4.2_12
Sun JRE (Solaris Production Release) 1.4.2_12
BEA Systems JRockit 6
Sun SDK (Solaris Production Release) 1.4.2_11
Sun SDK (Linux Production Release) 1.4.2_12
BEA Systems JRockit 5.0
Sun JDK (Linux Production Release) 1.6 _01
Slackware Linux 10.0
Slackware Linux 10.1
Slackware Linux 10.2
Apple Mac OS X 10.4.10
Apple Mac OS X Server 10.4.10
Apple Mac OS X 10.4.11
Apple Mac OS X Server 10.4.11
Slackware Linux 8.1
Slackware Linux 9.0
Slackware Linux 9.1
Solution:
The vendor has released Sun Alert ID: 102997 and fixes to address this issue. Please see the references for more information.
Sun JRE (Linux Production Release) 1.4.2_11
-
Sun J2SE 1.4.2
fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris
http://java.sun.com/j2se/1.4.2/download.html
Slackware Linux 12.0
-
Slackware JDK: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
ftp://ftp.slackware.com/pub/slackware/slackware-12.0/extra/jdk-6/jdk-6 u2-i586-1.tgz -
Slackware JRE: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/ jre-6u2-i586-1.tgz
Sun JRE (Linux Production Release) 1.4.2_14
-
Sun J2SE 1.4.2
fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris
http://java.sun.com/j2se/1.4.2/download.html
Sun JRE (Solaris Production Release) 1.4.2_13
-
Sun J2SE 1.4.2
fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris
http://java.sun.com/j2se/1.4.2/download.html
Sun SDK (Linux Production Release) 1.4.2_11
-
Sun J2SE 1.4.2
fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris
http://java.sun.com/j2se/1.4.2/download.html
Sun SDK (Linux Production Release) 1.4.2_13
-
Sun J2SE 1.4.2
fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris
http://java.sun.com/j2se/1.4.2/download.html
Sun SDK (Windows Production Release) 1.4.2_12
-
Sun J2SE 1.4.2
fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris
http://java.sun.com/j2se/1.4.2/download.html
Sun SDK (Solaris Production Release) 1.4.2_13
-
Sun J2SE 1.4.2
fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris
http://java.sun.com/j2se/1.4.2/download.html
BEA Systems JRockit R27.3.1
-
BEA Systems jrockit-jdk1.4.2_14-linux_ia32.tar.gz
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.4.2_14-linux_ia32.tar.gz -
BEA Systems jrockit-jdk1.4.2_14-linux_ia64.tar.gz
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.4.2_14-linux_ia64.tar.gz -
BEA Systems jrockit-jdk1.4.2_14-solaris_sparcv9.tar.gz
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.4.2_14-solaris_sparcv9.tar.gz -
BEA Systems jrockit-jdk1.4.2_14-windows_ia32.zip
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.4.2_14-windows_ia32.zip -
BEA Systems jrockit-jdk1.4.2_14-windows_ia64.zip
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.4.2_14-windows_ia64.zip -
BEA Systems jrockit-jdk1.5.0_11-linux_ia32.tar.gz
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-linux_ia32.tar.gz -
BEA Systems jrockit-jdk1.5.0_11-linux_ia64.tar.gz
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-linux_ia64.tar.gz -
BEA Systems jrockit-jdk1.5.0_11-linux_x86_64.tar.gz
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-linux_x86_64.tar.gz -
BEA Systems jrockit-jdk1.5.0_11-solaris_sparcv9.tar.gz
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-solaris_sparcv9.tar.gz -
BEA Systems jrockit-jdk1.5.0_11-windows_ia32.zip
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-windows_ia32.zip -
BEA Systems jrockit-jdk1.5.0_11-windows_ia64.zip
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-windows_ia64.zip -
BEA Systems jrockit-jdk1.5.0_11-windows_x86_64.zip
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-windows_x86_64.zip -
BEA Systems jrockit-jdk1.6.0_01-linux_ia32.tar.gz
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.6.0_01-linux_ia32.tar.gz -
BEA Systems jrockit-jdk1.6.0_01-linux_x86_64.tar.gz
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.6.0_01-linux_x86_64.tar.gz -
BEA Systems jrockit-jdk1.6.0_01-windows_ia32.zip
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.6.0_01-windows_ia32.zip -
BEA Systems jrockit-jdk1.6.0_01-windows_x86_64.zip
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.6.0_01-windows_x86_64.zip
Sun JRE (Windows Production Release) 1.4.2_14
-
Sun J2SE 1.4.2
fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris
http://java.sun.com/j2se/1.4.2/download.html
Sun SDK (Linux Production Release) 1.4.2_14
-
Sun J2SE 1.4.2
fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris
http://java.sun.com/j2se/1.4.2/download.html
Sun JDK (Windows Production Release) 1.6.0_01
-
Sun JDK and JRE 6 Update 2
http://java.sun.com/javase/downloads/index.jsp
Sun JRE (Linux Production Release) 1.4.2_13
-
Sun J2SE 1.4.2
fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris
http://java.sun.com/j2se/1.4.2/download.html
Sun JRE (Windows Production Release) 1.4.2_11
-
Sun J2SE 1.4.2
fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris
http://java.sun.com/j2se/1.4.2/download.html
Sun SDK (Windows Production Release) 1.4.2_13
-
Sun J2SE 1.4.2
fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris
http://java.sun.com/j2se/1.4.2/download.html
Sun JRE (Solaris Production Release) 1.4.2_11
-
Sun J2SE 1.4.2
fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris
http://java.sun.com/j2se/1.4.2/download.html
Sun SDK (Windows Production Release) 1.4.2_14
-
Sun J2SE 1.4.2
fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris
http://java.sun.com/j2se/1.4.2/download.html
Sun JRE (Windows Production Release) 1.4.2_13
-
Sun J2SE 1.4.2
fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris
http://java.sun.com/j2se/1.4.2/download.html
Sun JRE (Solaris Production Release) 1.4.2_14
-
Sun J2SE 1.4.2
fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris
http://java.sun.com/j2se/1.4.2/download.html
Sun SDK (Windows Production Release) 1.4.2_11
-
Sun J2SE 1.4.2
fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris
http://java.sun.com/j2se/1.4.2/download.html
Sun JRE (Windows Production Release) 1.4.2_12
-
Sun J2SE 1.4.2
fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris
http://java.sun.com/j2se/1.4.2/download.html
Sun SDK (Solaris Production Release) 1.4.2_14
-
Sun J2SE 1.4.2
fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris
http://java.sun.com/j2se/1.4.2/download.html
Sun SDK (Solaris Production Release) 1.4.2_12
-
Sun J2SE 1.4.2
fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris
http://java.sun.com/j2se/1.4.2/download.html
Sun JRE (Solaris Production Release) 1.4.2_12
-
Sun J2SE 1.4.2
fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris
http://java.sun.com/j2se/1.4.2/download.html
BEA Systems JRockit 6
-
BEA Systems jrockit-jdk1.6.0_01-linux_ia32.tar.gz
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.6.0_01-linux_ia32.tar.gz -
BEA Systems jrockit-jdk1.6.0_01-linux_x86_64.tar.gz
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.6.0_01-linux_x86_64.tar.gz -
BEA Systems jrockit-jdk1.6.0_01-windows_ia32.zip
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.6.0_01-windows_ia32.zip -
BEA Systems jrockit-jdk1.6.0_01-windows_x86_64.zip
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.6.0_01-windows_x86_64.zip
Sun SDK (Solaris Production Release) 1.4.2_11
-
Sun J2SE 1.4.2
fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris
http://java.sun.com/j2se/1.4.2/download.html
Sun SDK (Linux Production Release) 1.4.2_12
-
Sun J2SE 1.4.2
fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris
http://java.sun.com/j2se/1.4.2/download.html
BEA Systems JRockit 5.0
-
BEA Systems jrockit-jdk1.5.0_11-linux_ia32.tar.gz
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-linux_ia32.tar.gz -
BEA Systems jrockit-jdk1.5.0_11-linux_ia64.tar.gz
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-linux_ia64.tar.gz -
BEA Systems jrockit-jdk1.5.0_11-linux_x86_64.tar.gz
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-linux_x86_64.tar.gz -
BEA Systems jrockit-jdk1.5.0_11-solaris_sparcv9.tar.gz
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-solaris_sparcv9.tar.gz -
BEA Systems jrockit-jdk1.5.0_11-windows_ia32.zip
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-windows_ia32.zip -
BEA Systems jrockit-jdk1.5.0_11-windows_ia64.zip
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-windows_ia64.zip -
BEA Systems jrockit-jdk1.5.0_11-windows_x86_64.zip
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-windows_x86_64.zip
Sun JDK (Linux Production Release) 1.6 _01
-
Sun JDK and JRE 6 Update 2
http://java.sun.com/javase/downloads/index.jsp
Slackware Linux 10.0
-
Slackware JDK: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
ftp://ftp.slackware.com/pub/slackware/slackware-12.0/extra/jdk-6/jdk-6 u2-i586-1.tgz -
Slackware JRE: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/ jre-6u2-i586-1.tgz
Slackware Linux 10.1
-
Slackware JDK: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
ftp://ftp.slackware.com/pub/slackware/slackware-12.0/extra/jdk-6/jdk-6 u2-i586-1.tgz -
Slackware JRE: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/ jre-6u2-i586-1.tgz
Slackware Linux 10.2
-
Slackware JDK: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
ftp://ftp.slackware.com/pub/slackware/slackware-12.0/extra/jdk-6/jdk-6 u2-i586-1.tgz -
Slackware JRE: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/ jre-6u2-i586-1.tgz
Apple Mac OS X 10.4.10
-
Apple Java for Mac OS X 10.4, Release 6
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16540&cat= 1&platform=osx&method=sa/JavaForMacOSX10.4Release6.dmg
Apple Mac OS X Server 10.4.10
-
Apple Java for Mac OS X 10.4, Release 6
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16540&cat= 1&platform=osx&method=sa/JavaForMacOSX10.4Release6.dmg
Apple Mac OS X 10.4.11
-
Apple Java for Mac OS X 10.4, Release 6
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16540&cat= 1&platform=osx&method=sa/JavaForMacOSX10.4Release6.dmg
Apple Mac OS X Server 10.4.11
-
Apple Java for Mac OS X 10.4, Release 6
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16540&cat= 1&platform=osx&method=sa/JavaForMacOSX10.4Release6.dmg
Slackware Linux 8.1
-
Slackware JDK: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
ftp://ftp.slackware.com/pub/slackware/slackware-12.0/extra/jdk-6/jdk-6 u2-i586-1.tgz -
Slackware JRE: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/ jre-6u2-i586-1.tgz
Slackware Linux 9.0
-
Slackware JDK: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
ftp://ftp.slackware.com/pub/slackware/slackware-12.0/extra/jdk-6/jdk-6 u2-i586-1.tgz -
Slackware JRE: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/ jre-6u2-i586-1.tgz
Slackware Linux 9.1
-
Slackware JDK: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
ftp://ftp.slackware.com/pub/slackware/slackware-12.0/extra/jdk-6/jdk-6 u2-i586-1.tgz -
Slackware JRE: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/ jre-6u2-i586-1.tgz
References
Sun JSSE SSL/TLS Handshake Processing Denial Of Service Vulnerability
References:
References:
- RHSA-2007:0818-2 - Critical: java-1.5.0-sun security update (RedHat)
- RHSA-2007:0956-3 - java-1.5.0-bea security update (RedHat)
- Security update for IBMJava5-JRE,IBMJava5-SDK (SUSE)
- Sun Microsystems Home Page (Sun Microsystems)
- About the security content of Java Release 6 for Mac OS X 10.4 (Apple)
- BEA07-177.00 Multiple Security Vulnerabilities in the Java Runtime Environment (BEA Systems)
- BEA07-178.00 Java Secure Socket Extension Does Not Correctly Process SSL/TLS H (BEA Systems)
- Cisco Security Response: Vulnerability in Java Secure Socket Extension (Cisco)
- RHSA-2007:1086-5 - java-1.4.2-bea security update (RedHat)
- RHSA-2008:0100-4 java-1.4.2-bea security update (Red Hat)
- RHSA-2008:0132-4 - java-1.4.2-ibm security update (Red Hat)
- Sun Alert ID: 102997 - Java Secure Socket Extension Does Not Correctly Process S (Sun)