Veracode Vulnerability DatabaseVERACODE:24098Denial Of Service (DoS)
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit is vulnerable to Denial of Service (DoS). The attack exists because it does not prevent remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
References
itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751
lists.apple.com/archives/security-announce/2010//May/msg00001.html
lists.apple.com/archives/security-announce/2010//May/msg00002.html
lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html
lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
marc.info/?l=bugtraq&m=127557596201693&w=2
marc.info/?l=bugtraq&m=134254866602253&w=2
secunia.com/advisories/39317
secunia.com/advisories/39659
secunia.com/advisories/39819
secunia.com/advisories/40211
secunia.com/advisories/40545
secunia.com/advisories/43308
support.apple.com/kb/HT4170
support.apple.com/kb/HT4171
www.ibm.com/developerworks/java/jdk/alerts/
www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html
www.redhat.com/security/updates/classification/#critical
www.redhat.com/support/errata/RHSA-2010-0337.html
www.redhat.com/support/errata/RHSA-2010-0338.html
www.redhat.com/support/errata/RHSA-2010-0383.html
www.redhat.com/support/errata/RHSA-2010-0471.html
www.redhat.com/support/errata/RHSA-2010-0489.html
www.securityfocus.com/archive/1/510548/100/0/threaded
www.securityfocus.com/archive/1/516397/100/0/threaded
www.securityfocus.com/bid/39073
www.vmware.com/security/advisories/VMSA-2011-0003.html
www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
www.vupen.com/english/advisories/2010/1191
www.vupen.com/english/advisories/2010/1454
www.vupen.com/english/advisories/2010/1523
www.vupen.com/english/advisories/2010/1793
www.zerodayinitiative.com/advisories/ZDI-10-057/
access.redhat.com/errata/RHSA-2010:0383
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13795
Related
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P