From: Secunia Security Advisories (sec-advsecunia.com)
Date: Wed Mar 10 2004 - 04:30:05 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

TITLE:
Sun Java System (Sun ONE) SSL Vulnerabilities

SECUNIA ADVISORY ID:
SA11082

VERIFY ADVISORY:
http://secunia.com/advisories/11082/

CRITICAL:
Highly critical

IMPACT:
DoS, System access

WHERE:
From remote

SOFTWARE:
Sun ONE/iPlanet Web Server 6.x
Sun ONE/iPlanet Web Server 4.x
Sun ONE Application Server 7.x

DESCRIPTION:
Sun has issued updated packages for Sun Java System Web Server and
Application Server (formerly Sun ONE). These fix various
vulnerabilities, which can be exploited by malicious people to cause
a Denial of Service and potentially compromise a vulnerable system.

For more information:
SA9886

The vulnerabilities affect the following versions:
* Sun Java System Web Server 4.1, Enterprise Edition
* Sun Java System Web Server 6.0
* Sun Java System Web Server 6.1
* Sun Java System Application Server 7

Formerly known as:
Sun ONE Application Server and Sun ONE/iPlanet Web Server.

SOLUTION:
The vulnerabilities have been fixed in:

* Sun Java System Web Server 4.1, Enterprise Edition, Service Pack 14
(final release)
* Sun Java System Web Server 6.0 Service Pack 7 and later
* Sun Java System Web Server 6.1 Service Pack 1 and later
* Sun Java System Application Server 7, Update 2 Upgrade and later

Sun Java System Application Server:
http://wwws.sun.com/software/download/app_servers.html

Sun Java System Web Server:
http://wwws.sun.com/software/download/inter_ecom.html#webs

ORIGINAL ADVISORY:
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57498

OTHER REFERENCES:
SA9886:
http://secunia.com/advisories/9886/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]