CVE-2007-6059: Medium severity Sun Javamail vulnerability
DISPUTED Javamail does not properly handle a series of invalid login attempts in which the same e-mail address is entered as username and password, and the domain portion of this address yields a Java UnknownHostException error, which allows remote attackers to cause a denial of service (connection pool exhaustion) via a large number of requests, resulting in a SQLNestedException. NOTE: Sun disputes this issue, stating "The report makes references to source code and files that do not exist in the mentioned products."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-6059?
The severity of CVE-2007-6059 is categorized as a denial of service vulnerability.
How do I fix CVE-2007-6059?
To mitigate CVE-2007-6059, ensure that proper validation of user input is implemented to handle invalid login attempts securely.
Which software is affected by CVE-2007-6059?
CVE-2007-6059 affects Sun Javamail versions where validation of login attempts is incomplete.
Can CVE-2007-6059 be exploited remotely?
Yes, CVE-2007-6059 can be exploited remotely by attackers through repeated invalid login attempts.
What impact does CVE-2007-6059 have on application performance?
CVE-2007-6059 can lead to application downtime due to denial of service caused by excessive invalid login attempts.