A vulnerability has been reported in multiple Oracle products, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error within a hash generation function when hashing form posts and updating a hash table. This can be exploited to cause a hash collision resulting in high CPU consumption via a specially crafted form sent in a HTTP POST request.

The vulnerability is reported in the following products:
* Oracle Application Server 10g Release 3 version 10.1.3.5.0.
* Oracle WebLogic Server versions 9.2.4, 10.0.2, 11gR1 (10.3.5, 10.3.6), and 12cR1 (12.1.1).
* Oracle iPlanet Web Server 7.0.
* Oracle iPlanet Web Server (formerly Oracle Java System Web Server) 6.1.

Solution
Apply patch.
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Oracle:
http://www.oracle.com/technetwork/topics/security/alert-cve-2011-5035-1506603.html
http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html#AppendixFMW

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers