Linux Distros Unpatched Vulnerability : CVE-2011-4461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote...

RHEL 6 : jetty-eclipse (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - jetty: hash table collisions CPU usage DoS oCERT-2011-003 CVE-2011-4461 Note that Nessus has not tested for this...

Security Bulletin: Potential Denial of Service (DoS) security vulnerability in IBM Sterling External Authentication Server

Abstract Potential Denial of Service DoS security vulnerability in IBM Sterling External Authentication Server due to a Java HashTable security vulnerability in Jetty CVE-2011-4461. Content SUMMARY: Potential Denial of Service DoS security vulnerability in IBM Sterling External Authentication...

Security Bulletin: Denial of service in IBM InfoSphere Data Replication Dashboard (CVE-2011-4461)

Abstract InfoSphere Data Replication Dashboard includes Jetty which has a known security vulnerability that can lead to a denial of service. Content VULNERABILITY DETAILS: CVE ID: CVE-2011-4461 DESCRIPTION: An attacker, using specially crafted HTTP requests, can cause up to 100% CPU usage,...

Security Bulletin: Potential Denial of Service (DoS) security vulnerability in IBM Sterling Connect:Enterprise for UNIX

Abstract Potential Denial of Service DoS security vulnerability in IBM Sterling Connect:Enterprise for UNIX due to a Java HashTable security vulnerability in Jetty CVE-2011-4461. Content SUMMARY: Potential Denial of Service DoS security vulnerability in IBM Sterling Connect:Enterprise for UNIX du...

net.peachjean.modularwebapp:modularwebapp (1.0.0), org.apache.jena:jena-fuseki (0.2.5) +53 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.6.5.v20120716)

org.eclipse.jetty:jetty-server MAVEN version 7.6.5.v20120716 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - net.peachjean.modularwebapp:modularwebapp 1.0.0 - org.apache.jena:jena-fuseki 0.2.5 -...

org.codehaus.cargo:cargo-jetty-7-and-onwards-deployer (1.2.3), org.cometd.java:cometd-java-examples (>=2.4.3, <=2.5.0-beta2) +51 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.6.4.v20120524)

org.eclipse.jetty:jetty-server MAVEN version 7.6.4.v20120524 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.codehaus.cargo:cargo-jetty-7-and-onwards-deployer 1.2.3 -...

org.eclipse.jetty.aggregate:jetty-all (7.6.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.6.0.rc0) +45 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.6.0.rc0)

org.eclipse.jetty:jetty-server MAVEN version 7.6.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.6.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

com.cognifide.aet:w3chtml5validator (>=2.0.0-rc2, <=2.1.3), com.ganshane.lichen:lichen-creeper (>=0.5.9, <=0.5.10.2) +179 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.6.9.v20130131)

org.eclipse.jetty:jetty-server MAVEN version 7.6.9.v20130131 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.cognifide.aet:w3chtml5validator =2.0.0-rc2, =0.5.9, =0.5.9, =0.5.9, =0.8.0, =0.3.0,...

com.hazelcast:hazelcast-jetty7-sessionmanager (>=1.0, <=1.0.2), org.akhikhl.gretty:gretty-runner-jetty7 (>=1.1.9, <=2.0.0) +52 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.6.16.v20140903)

org.eclipse.jetty:jetty-server MAVEN version 7.6.16.v20140903 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.hazelcast:hazelcast-jetty7-sessionmanager =1.0, =1.1.9, =1.4.10, =1.4.14 -...

com.confluex:qpid-in-a-can (0.2.0), com.propensive:rapture-extras_2.10 (>=2.0.0-m4, <=2.0.0-m9) +89 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.6.10.v20130312)

org.eclipse.jetty:jetty-server MAVEN version 7.6.10.v20130312 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.confluex:qpid-in-a-can 0.2.0 - com.propensive:rapture-extras2.10 =2.0.0-m4, =2.0.0-m...

com.bacoder.jgit:org.eclipse.jgit.junit.http (>=3.1.0-201308312337-r, <=3.1.0-201309071158-r), org.apache.tapestry:tapestry-runner (>=5.4-beta-3, <=5.4.5) +57 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.6.11.v20130520)

org.eclipse.jetty:jetty-server MAVEN version 7.6.11.v20130520 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.bacoder.jgit:org.eclipse.jgit.junit.http =3.1.0-201308312337-r, =5.4-beta-3,...

org.apache.felix:org.apache.felix.http.bundle (2.2.1), org.apache.felix:org.apache.felix.http.jetty (2.2.1) +54 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.6.12.v20130726)

org.eclipse.jetty:jetty-server MAVEN version 7.6.12.v20130726 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.apache.felix:org.apache.felix.http.bundle 2.2.1 -...

com.cloudhopper:ch-jetty (1.0.2), com.cloudhopper:ch-mq-remote (>=3.0.3, <=3.0.4) +57 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.6.14.v20131031)

org.eclipse.jetty:jetty-server MAVEN version 7.6.14.v20131031 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.cloudhopper:ch-jetty 1.0.2 - com.cloudhopper:ch-mq-remote =3.0.3,...

com.qualinsight.plugins.jetty:qualinsight-plugins-jetty-7.6.x (>=1.0.1, <=1.0.2), org.codehaus.cargo:cargo-jetty-7-and-onwards-deployer (>=1.4.15, <=1.6.7) +39 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.6.17.v20150415)

org.eclipse.jetty:jetty-server MAVEN version 7.6.17.v20150415 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.qualinsight.plugins.jetty:qualinsight-plugins-jetty-7.6.x =1.0.1, =1.4.15, =1.6.7 -...

com.xuxueli:xxl-job-core (>=1.4.1, <=1.5.0), org.eclipse.jetty.aggregate:jetty-all (7.6.19.v20160209) +38 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.6.19.v20160209)

org.eclipse.jetty:jetty-server MAVEN version 7.6.19.v20160209 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.xuxueli:xxl-job-core =1.4.1, =1.5.0 - org.eclipse.jetty.aggregate:jetty-all...

br.com.caelum.vraptor:vraptor-test (1.0.0), net.javacrumbs:mock-socket-http (>=0.1, <=0.6) +18 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.0.0.m2)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - br.com.caelum.vraptor:vraptor-test 1.0.0 - net.javacrumbs:mock-socket-http =0.1, =0.6 -...

org.cometd.java:cometd-examples-java (1.0.beta10), org.cometd.java:cometd-java-oort (1.0.beta10) +29 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.0.0.m4)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.cometd.java:cometd-examples-java 1.0.beta10 - org.cometd.java:cometd-java-oort 1.0.beta10 -...

org.cometd.java:cometd-examples-java (1.0.0rc0), org.cometd.java:cometd-java-oort (1.0.0rc0) +33 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.0.0.rc4)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.rc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.cometd.java:cometd-examples-java 1.0.0rc0 - org.cometd.java:cometd-java-oort 1.0.0rc0 -...

com.googlecode.playn:playn-server (>=1.0, <=1.8), com.tacitknowledge:simulator-core (1.1) +148 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.2.2.v20101205)

org.eclipse.jetty:jetty-server MAVEN version 7.2.2.v20101205 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.googlecode.playn:playn-server =1.0, =0.1.0, =0.2.2, =0.2.3, =0.1.0, =0.1.0, =0.1.0,...