National Cyber Awareness System

Vulnerability Summary for CVE-2007-3698

Overview

The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1 and earlier, JDK and JRE 5.0 Updates 7 through 11, and SDK and JRE 1.4.2_11 through 1.4.2_14, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service (CPU consumption) via certain SSL/TLS handshake requests.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: BID

Name: 24846

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/24846

External Source: REDHAT

Name: RHSA-2008:0132

Type: Patch Information

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0132.html

External Source: REDHAT

Name: RHSA-2008:0100

Type: Patch Information

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0100.html

External Source: SUNALERT

Name: 102997

Type: Advisory; Patch Information

Hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102997-1

External Source: HP

Name: HPSBMA02288

Type: Advisory; Patch Information

Hyperlink:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01269450

External Source: XF

Name: sun-jsse-ssltls-dos(35333)

Hyperlink:http://xforce.iss.net/xforce/xfdb/35333

External Source: VUPEN

Name: ADV-2007-4224

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2007/4224

External Source: VUPEN

Name: ADV-2007-3861

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2007/3861

External Source: VUPEN

Name: ADV-2007-3009

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2007/3009

External Source: VUPEN

Name: ADV-2007-2660

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2007/2660

External Source: VUPEN

Name: ADV-2007-2495

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2007/2495

External Source: SECTRACK

Name: 1018357

Hyperlink:http://www.securitytracker.com/id?1018357

External Source: REDHAT

Name: RHSA-2007:1086

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-1086.html

External Source: REDHAT

Name: RHSA-2007:0956

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0956.html

External Source: REDHAT

Name: RHSA-2007:0818

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0818.html

External Source: GENTOO

Name: GLSA-200709-15

Hyperlink:http://www.gentoo.org/security/en/glsa/glsa-200709-15.xml

External Source: CONFIRM

Name: http://www.cisco.com/warp/public/707/cisco-sr-20070725-jsse.shtml

Type: Advisory

Hyperlink:http://www.cisco.com/warp/public/707/cisco-sr-20070725-jsse.shtml

External Source: CISCO

Name: 20070725 Vulnerability in Java Secure Socket Extension

Type: Advisory

Hyperlink:http://www.cisco.com/en/US/products/products_security_response09186a008088bd19.html

External Source: CONFIRM

Name: http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html

Hyperlink:http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html

External Source: SECUNIA

Name: 29897

Type: Advisory

Hyperlink:http://secunia.com/advisories/29897

External Source: SECUNIA

Name: 29340

Type: Advisory

Hyperlink:http://secunia.com/advisories/29340

External Source: SECUNIA

Name: 28880

Type: Advisory

Hyperlink:http://secunia.com/advisories/28880

External Source: SECUNIA

Name: 28777

Type: Advisory

Hyperlink:http://secunia.com/advisories/28777

External Source: SECUNIA

Name: 28115

Type: Advisory

Hyperlink:http://secunia.com/advisories/28115

External Source: SECUNIA

Name: 28056

Type: Advisory

Hyperlink:http://secunia.com/advisories/28056

External Source: SECUNIA

Name: 27716

Type: Advisory

Hyperlink:http://secunia.com/advisories/27716

External Source: SECUNIA

Name: 27635

Type: Advisory

Hyperlink:http://secunia.com/advisories/27635

External Source: SECUNIA

Name: 27203

Type: Advisory

Hyperlink:http://secunia.com/advisories/27203

External Source: SECUNIA

Name: 26933

Type: Advisory

Hyperlink:http://secunia.com/advisories/26933

External Source: SECUNIA

Name: 26645

Type: Advisory

Hyperlink:http://secunia.com/advisories/26645

External Source: SECUNIA

Name: 26631

Type: Advisory

Hyperlink:http://secunia.com/advisories/26631

External Source: SECUNIA

Name: 26314

Type: Advisory

Hyperlink:http://secunia.com/advisories/26314

External Source: SECUNIA

Name: 26221

Type: Advisory

Hyperlink:http://secunia.com/advisories/26221

External Source: SECUNIA

Name: 26015

Type: Advisory

Hyperlink:http://secunia.com/advisories/26015

External Source: OVAL

Name: oval:org.mitre.oval:def:10634

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10634

External Source: OSVDB

Name: 36663

Hyperlink:http://osvdb.org/36663

External Source: SUSE

Name: SUSE-SA:2008:025

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html

External Source: APPLE

Name: APPLE-SA-2007-12-14

Hyperlink:http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html

External Source: HP

Name: HPSBMA02288

Hyperlink:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01269450

External Source: MISC

Name: http://docs.info.apple.com/article.html?artnum=307177

Hyperlink:http://docs.info.apple.com/article.html?artnum=307177

External Source: BEA

Name: BEA07-178.00

Hyperlink:http://dev2dev.bea.com/pub/advisory/249

References to Check Content

Identifier:oval:org.mitre.oval:def:10634

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10634