Denial of Service Vunerabilities in Sun Java Web Proxy Server


Category :Security
Release Phase :Resolved
Product :Sun Java System Web Proxy Server 3.6  
Bug Id :6264430, 6254143, 6291212  
Date of Resolved Release :08-SEP-2005 


Impact

Three vulnerabilities may (separately) allow a remote unpriviledged user to cause various releases of the Sun Java Web Proxy Server to become unresponsive to requests, which is a Denial-of-Service (DoS) condition.


Contributing Factors

These issues can occur in the following releases on all platforms:

  • Sun Java System Web Proxy Server 3.6 Service Pack 7 and earlier

Note: For Service Pack 7 supported architectures and OS versions, please see http://docs.sun.com/app/docs/coll/S1_webproxysrvr36sp7_en.


Symptoms

If any or all of the described issues occur, the proxy server will be unable to respond to requests, and may also be accompanied by high CPU usage.


Workaround

There is no workaround. Please see the "Resolution" section below.


Resolution

These issues are addressed in the following release:

  • Sun Java System Web Proxy Server 3.6 Service Pack 8 and later

which is available for download at http://www.sun.com/download/products.xml?id=42fa5c49.






Attachments
This solution has no attachment
 
Sun support customers:
more support information is available after you sign in.
 
»   Login
»   Register
»   Lost UserName/Password
 
Login Required

You must login and have a valid contract to access Sun's Premium content which includes:

  • Sun Alerts
  • Bugs
  • Patches
  • Solutions
  • White Papers
  • Documentation
  • Support Knowledge

Login Required

You must login and have a valid contract to access Sun's contracted features

Access Legend:

(Login to access)   Sun Contracted Content
(Login to access)   Sun Contracted Feature

Please make use of SunSolve Feedback application by selecting the floating [+] to provide feedback about this specific document.

Search
Article Details
Article ID : 201575
Article Type : Sun Alert
Last reviewed : 2005-09-08
Audience : PUBLIC
Keywords :
Provide feedback  (help)
Page Tools
»  Print This Page
»  Email This Article
»  Bookmark This Article
Security Support
»   Security Center
»   Report Security Vulnerabilities
»   Security PGP Key
»   Sun Alert Notifications - RSS Feeds
»   Sun Alert Notifications - eNewsletter
»   Solaris Fingerprint Database
 
SunSolve Navigation
»   Forums for contracted customers
»   Licenses
»   Log a Service Request
»   Patches and Updates
»   Product Download Center
»   SunSystem Handbook
»   SunSolve Japan
SunSolve Feedback, Help and Updates
»   Blog
»   Community
»   Feedback
»   Help
»   Learn about SunSolve
»   Twitter
Contact About Sun News & Events Employment Site Map Privacy Terms of Use Trademarks Copyright Sun Microsystems, Inc. | SunSolve Version 7.4.0 #1