CVE-2006-5654

Unspecified vulnerability in the Network Security Services (NSS) in Sun Java System Web Server 6.0 before SP 10 and ONE Application Server 7 before Update 3, when SSLv2 is enabled, allows remote authenticated users to cause a denial of service (application crash) via unspecified vectors. NOTE: due to lack of details from the vendor, it is unclear whether this is related to vector 1 in CVE-2006-5201 or CVE-2006-3127.

Score

CVSS 2.0 4.0 Medium

Status

Modified - cve@mitre.org

Published

2006-11-03

Last modified

2024-08-07

Affected products

• Java System Web Server (Sun)
• One Application Server (Sun)

References

• http://secunia.com/advisories/22646
• http://securitytracker.com/id?1017143
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102670-1
• http://www.securityfocus.com/bid/20846
• http://www.vupen.com/english/advisories/2006/4299
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29946