Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2009-1101

Unspecified vulnerability in the lightweight HTTP server implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to cause a denial of service (probably resource consumption) for a JAX-WS service endpoint via a connection without any data, which triggers a file descriptor "leak."

Published

2009-03-25T23:30:00.377

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: PARTIAL

Exploitability Score

10.0

Impact Score

2.9

Weaknesses

Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	sun	jdk	≤ 1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jre	≤ 1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes

References

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 ([email protected])
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html ([email protected])
http://marc.info/?l=bugtraq&m=124344236532162&w=2 ([email protected])
http://secunia.com/advisories/34489 Vendor Advisory ([email protected])
http://secunia.com/advisories/34496 Vendor Advisory ([email protected])
http://secunia.com/advisories/34632 Vendor Advisory ([email protected])
http://secunia.com/advisories/34675 Vendor Advisory ([email protected])
http://secunia.com/advisories/35156 Vendor Advisory ([email protected])
http://secunia.com/advisories/35223 ([email protected])
http://secunia.com/advisories/35255 Vendor Advisory ([email protected])
http://secunia.com/advisories/35776 Vendor Advisory ([email protected])
http://secunia.com/advisories/36185 ([email protected])
http://secunia.com/advisories/37386 ([email protected])
http://secunia.com/advisories/37460 ([email protected])
http://security.gentoo.org/glsa/glsa-200911-02.xml ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-21-125137-14-1 Patch ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-66-254609-1 Patch, Vendor Advisory ([email protected])
http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm ([email protected])
http://www.debian.org/security/2009/dsa-1769 ([email protected])
http://www.mandriva.com/security/advisories?name=MDVSA-2009:137 ([email protected])
http://www.mandriva.com/security/advisories?name=MDVSA-2009:162 ([email protected])
http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html ([email protected])
http://www.redhat.com/support/errata/RHSA-2009-0392.html ([email protected])
http://www.redhat.com/support/errata/RHSA-2009-1038.html ([email protected])
http://www.securityfocus.com/archive/1/507985/100/0/threaded ([email protected])
http://www.securityfocus.com/bid/34240 ([email protected])
http://www.securitytracker.com/id?1021918 ([email protected])
http://www.ubuntu.com/usn/usn-748-1 ([email protected])
http://www.vmware.com/security/advisories/VMSA-2009-0016.html ([email protected])
http://www.vupen.com/english/advisories/2009/1426 Vendor Advisory ([email protected])
http://www.vupen.com/english/advisories/2009/3316 ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10152 ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6412 ([email protected])
https://rhn.redhat.com/errata/RHSA-2009-0377.html ([email protected])
https://rhn.redhat.com/errata/RHSA-2009-1198.html ([email protected])
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 (af854a3a-2127-422b-91ae-364da2661108)
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=124344236532162&w=2 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/34489 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/34496 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/34632 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/34675 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/35156 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/35223 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/35255 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/35776 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/36185 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/37386 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/37460 (af854a3a-2127-422b-91ae-364da2661108)
http://security.gentoo.org/glsa/glsa-200911-02.xml (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-21-125137-14-1 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-66-254609-1 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2009/dsa-1769 (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDVSA-2009:137 (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDVSA-2009:162 (af854a3a-2127-422b-91ae-364da2661108)
http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2009-0392.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2009-1038.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/507985/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/34240 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1021918 (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/usn-748-1 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/security/advisories/VMSA-2009-0016.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2009/1426 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2009/3316 (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10152 (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6412 (af854a3a-2127-422b-91ae-364da2661108)
https://rhn.redhat.com/errata/RHSA-2009-0377.html (af854a3a-2127-422b-91ae-364da2661108)
https://rhn.redhat.com/errata/RHSA-2009-1198.html (af854a3a-2127-422b-91ae-364da2661108)