Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2007-3698
HistoryJul 11, 2007 - 10:30 p.m.

CVE-2007-3698

2007-07-1122:30:00
[email protected]
web.nvd.nist.gov
24
cve-2007-3698
jsse
sun jdk
jre
ssl
tls
denial of service
cpu consumption

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.2 Medium

AI Score

Confidence

Low

0.449 Medium

EPSS

Percentile

97.4%

JSON

The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1 and earlier, JDK and JRE 5.0 Updates 7 through 11, and SDK and JRE 1.4.2_11 through 1.4.2_14, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service (CPU consumption) via certain SSL/TLS handshake requests.

Affected configurations

NVD
Node
sunjdkMatch1.5.0update10
OR
sunjdkMatch1.5.0update11
OR
sunjdkMatch1.5.0update7
OR
sunjdkMatch1.5.0update8
OR
sunjdkMatch1.5.0update9
OR
sunjdkMatch1.6.0update1
OR
sunjreMatch1.4.2_11
OR
sunjreMatch1.4.2_12
OR
sunjreMatch1.4.2_13
OR
sunjreMatch1.4.2_14
OR
sunjreMatch1.5.0update10
OR
sunjreMatch1.5.0update11
OR
sunjreMatch1.5.0update7
OR
sunjreMatch1.5.0update8
OR
sunjreMatch1.5.0update9
OR
sunjreMatch1.6.0update_1
OR
sunsdkMatch1.4.2_11
OR
sunsdkMatch1.4.2_12
OR
sunsdkMatch1.4.2_13
OR
sunsdkMatch1.4.2_14

References

Related

prion 2
cvelist 2
nvd 2
ubuntucve 1
nessus 18
cve 1
redhat 5
openvas 12
gentoo 1
suse 1
prion
prion
Design/Logic Flaw
2007-07-11 22:30:00
Design/Logic Flaw
2007-10-09 00:17:00
cvelist
cvelist
CVE-2007-3698
2007-07-11 22:00:00
CVE-2007-5281
2007-10-09 00:00:00
nvd
nvd
CVE-2007-3698
2007-07-11 22:30:00
CVE-2007-5281
2007-10-09 00:17:00
ubuntucve
ubuntucve
CVE-2007-3698
2007-07-11 00:00:00
nessus
nessus
HP-UX PHSS_37197 : HP OpenView Operations (OVO) Running on HP-UX and Solaris, Remote Unauthorized Access, Denial of Service (DoS) (HPSBMA02288 SSRT071465 rev.1)
2007-11-20 00:00:00
HP-UX PHSS_37182 : HP OpenView Operations (OVO) Running on HP-UX and Solaris, Remote Unauthorized Access, Denial of Service (DoS) (HPSBMA02288 SSRT071465 rev.1)
2007-11-20 00:00:00
HP-UX PHSS_37183 : HP OpenView Operations (OVO) Running on HP-UX and Solaris, Remote Unauthorized Access, Denial of Service (DoS) (HPSBMA02288 SSRT071465 rev.1)
2007-11-20 00:00:00
cve
cve
CVE-2007-5281
2007-10-09 00:17:00
redhat
redhat
(RHSA-2007:0818) Critical: java-1.5.0-sun security update
2007-08-06 00:00:00
(RHSA-2007:1086) Moderate: java-1.4.2-bea security update
2007-12-12 00:00:00
(RHSA-2007:0956) Moderate: java-1.5.0-bea security update
2007-10-16 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200709-15 (jrockit-jdk-bin)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200709-15 (jrockit-jdk-bin)
2008-09-24 00:00:00
SLES9: Security update for IBMJava5-JRE,IBMJava5-SDK
2009-10-10 00:00:00
gentoo
gentoo
BEA JRockit: Multiple vulnerabilities
2007-09-23 00:00:00
suse
suse
remote code execution in IBMJava2,IBMJava5,java-1_4_2-ibm,java-1_5_0-ibm
2008-04-25 14:46:33

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.2 Medium

AI Score

Confidence

Low

0.449 Medium

EPSS

Percentile

97.4%

JSON
Related for CVE-2007-3698
prion2cvelist2nvd2ubuntucve1nessus18cve1redhat5openvas12gentoo1suse1