CVE-2007-5281

The Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer's Kit for Java in various Hitachi Cosminexus 7.5 products before 07-50-01, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service via certain SSL/TLS handshake requests. NOTE: this may be the same as CVE-2007-3698.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2007-10-09

Last modified

2024-08-07

Weaknesses

CWE-20

Affected products

• Ucosminexus Application Server Enterprise (Hitachi)
• Ucosminexus Application Server Standard (Hitachi)
• Ucosminexus Client (Hitachi)
• Ucosminexus Developer Professional (Hitachi)
• Ucosminexus Developer Standard (Hitachi)
• Ucosminexus Operator (Hitachi)
• Ucosminexus Service Architect (Hitachi)
• Ucosminexus Service Platform (Hitachi)

References

• http://secunia.com/advisories/27075
• http://www.hitachi-support.com/security_e/vuls_e/HS07-031_e/index-e.html
• http://www.securityfocus.com/bid/25935
• http://www.vupen.com/english/advisories/2007/3375
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36965