Oracle GlassFish Server/Java System App Server CVE-2011-3559 Remote Vulnerability

Bugtraq ID:	50204
Class:	Unknown
CVE:	CVE-2011-3559
Remote:	Yes
Local:	No
Published:	Oct 18 2011 12:00AM
Updated:	Oct 18 2011 12:00AM
Credit:	Oracle
Vulnerable:	Sun Java System Application Server 8.2 Sun Java System Application Server 8.1 Sun Glassfish Enterprise Server 3.0.1 Sun Glassfish Enterprise Server 2.1.1 Oracle GlassFish Enterprise Server 3.1.1
Not Vulnerable:

Oracle GlassFish Server/Java System App Server CVE-2011-3559 Remote Vulnerability

Oracle GlassFish Server and Sun Java System Application Server are prone to a remote vulnerability.

The vulnerability can be exploited over the 'HTTP' protocol. The 'Web Container' sub component is affected.

This vulnerability affects the following supported versions:
Communications Server 2.0; GlassFish Enterprise Server 2.1.1, 3.0.1, 3.1.1; Sun Java System App Server 8.1, 8.2

Oracle GlassFish Server/Java System App Server CVE-2011-3559 Remote Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Oracle GlassFish Server/Java System App Server CVE-2011-3559 Remote Vulnerability

Solution:
Vendor updates are available. Please contact the vendor for more information.

Oracle GlassFish Server/Java System App Server CVE-2011-3559 Remote Vulnerability

References:

• Oracle Critical Patch Update Advisory - October 2011 (Oracle)