JBoss Web CVE-2011-4610 Remote Denial of Service Vulnerability

Bugtraq ID:	51829
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2011-4610
Remote:	Yes
Local:	No
Published:	Feb 02 2012 12:00AM
Updated:	Feb 02 2012 12:00AM
Credit:	NTT OSSC
Vulnerable:	Redhat JBoss Enterprise Web Platform 5.1.2 Redhat JBoss Enterprise Web Platform 5 EL6 Redhat JBoss Enterprise Web Platform 5 EL5 Redhat JBoss Enterprise Web Platform 5 EL4 Redhat JBoss Enterprise Application Platform 5.1.2 Redhat JBoss Enterprise Application Platform 5 EL6 Redhat JBoss Enterprise Application Platform 5 EL5 Redhat JBoss Enterprise Application Platform 5 EL4 Redhat JBoss Communications Platform 5.1.3
Not Vulnerable:

JBoss Web CVE-2011-4610 Remote Denial of Service Vulnerability

JBoss Web is prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue to cause the JBoss Web server to enter an infinite loop, which may cause denial-of-service conditions.

JBoss Web CVE-2011-4610 Remote Denial of Service Vulnerability

Attackers can exploit this issue through a browser.

JBoss Web CVE-2011-4610 Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more details.

JBoss Web CVE-2011-4610 Remote Denial of Service Vulnerability

References:

• Bug 767871 - (CVE-2011-4610) CVE-2011-4610 JBoss Web remote denial of service wh (Red Hat)
  
• JBoss Community Homepage (JBoss Group)
  
• JBoss Enterprise Application Platform Homepage (Red Hat)