First published: Tue Oct 09 2007(Updated: )
The Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer's Kit for Java in various Hitachi Cosminexus 7.5 products before 07-50-01, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service via certain SSL/TLS handshake requests. NOTE: this may be the same as CVE-2007-3698.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Hitachi ucosminexus application server | =07_50 | |
Hitachi ucosminexus application server | =7_50 | |
Hitachi Cosminexus Client | =07_50 | |
Hitachi ucosminexus Developer | =07_50 | |
Hitachi ucosminexus Developer | =07_50 | |
Hitachi ucosminexus operator | =07_50 | |
Hitachi ucosminexus Service Architect | =7_50 | |
Hitachi ucosminexus service platform | =7_50 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-5281 is classified as a high severity vulnerability due to its potential to cause denial of service.
To remediate CVE-2007-5281, upgrade the affected Hitachi Cosminexus products to version 07-50-01 or later.
CVE-2007-5281 affects various Hitachi Cosminexus 7.5 products including the application server, client, and developer kits.
CVE-2007-5281 is a denial of service vulnerability that occurs during SSL/TLS handshake processes.
Yes, CVE-2007-5281 can be exploited by remote attackers to create denial of service conditions.