CVE-2007-3698 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2007-3698
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-3698

Description: The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1 and earlier, JDK and JRE 5.0 Updates 7 through 11, and SDK and JRE 1.4.2_11 through 1.2.2_14, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service (CPU consumption) via certain SSL/TLS handshake requests.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/35333 SUSE http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-102997-1 ST 1018357 SAID Secunia Advisory: SA29897 Secunia Advisory: SA29340 Secunia Advisory: SA28880 Secunia Advisory: SA28777 Secunia Advisory: SA28115 Secunia Advisory: SA28056 Secunia Advisory: SA27716 Secunia Advisory: SA27635 Secunia Advisory: SA26645 Secunia Advisory: SA27203 Secunia Advisory: SA26933 Secunia Advisory: SA26631 Secunia Advisory: SA26314 Secunia Advisory: SA26015 Secunia Advisory: SA26221 REDHAT http://www.redhat.com/support/errata/RHSA-2007-1086.html http://www.redhat.com/support/errata/RHSA-2008-0100.html http://www.redhat.com/support/errata/RHSA-2008-0132.html http://www.redhat.com/support/errata/RHSA-2007-0956.html http://www.redhat.com/support/errata/RHSA-2007-0818.html MISC http://docs.info.apple.com/article.html?artnum=307177 HP http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01269450 GENTOO http://www.gentoo.org/security/en/glsa/glsa-200709-15.xml CONFIRM http://www.cisco.com/warp/public/707/cisco-sr-20070725-jsse.shtml http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html CISCO http://www.cisco.com/en/US/products/products_security_response09186a008088bd19.html BID 24846 BEA http://dev2dev.bea.com/pub/advisory/249 APPLE http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html

Return to the previous page.