CVE-2009-1101

Published Mar 25, 2009

Last updated 6 years ago

Overview

Description: Unspecified vulnerability in the lightweight HTTP server implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to cause a denial of service (probably resource consumption) for a JAX-WS service endpoint via a connection without any data, which triggers a file descriptor "leak."
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:sun:jdk:*:update_12:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8C826CA0-A25F-4A10-BD9E-791372BF8F06",
            "versionEndIncluding": "1.6.0"
          },
          {
            "criteria": "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A3A4FEC7-A4A0-4B5C-A56C-8F80AE19865E"
          },
          {
            "criteria": "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "722A93D8-B5BC-42F3-92A2-E424F61269A8"
          },
          {
            "criteria": "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "775F2611-F11C-4B84-8F40-0D034B81BF18"
          },
          {
            "criteria": "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D98175BF-B084-4FA5-899D-9E80DC3923EE"
          },
          {
            "criteria": "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "820632CE-F8DF-47EE-B716-7530E60008B7"
          },
          {
            "criteria": "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"
          },
          {
            "criteria": "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D54AB785-E9B7-47BD-B756-0C3A629D67DD"
          },
          {
            "criteria": "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E9412098-0353-4F7B-9245-010557E6C651"
          },
          {
            "criteria": "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AD30DAEB-4893-41CF-A455-B69C463B9337"
          },
          {
            "criteria": "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "21D6CE7E-A036-496C-8E08-A87F62B5290A"
          },
          {
            "criteria": "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"
          },
          {
            "criteria": "cpe:2.3:a:sun:jre:*:update_12:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1F38BA27-0EBC-47EC-99BF-A018E0BB0D53",
            "versionEndIncluding": "1.6.0"
          },
          {
            "criteria": "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CBCD143C-057D-4F42-B487-46801E14ACF7"
          },
          {
            "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "09027C19-D442-446F-B7A8-21DB6787CF43"
          },
          {
            "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
          },
          {
            "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
          },
          {
            "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          },
          {
            "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          },
          {
            "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
          },
          {
            "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A99DAB4C-272B-4C91-BC70-7729E1152590"
          },
          {
            "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
          },
          {
            "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References