Unknown vulnerability in Sun Java System Application Server 7.0 Update 2 and earlier, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service (memory consumption).
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Coldfusion | Macromedia | 6.0 (including) | 6.0 (including) |
| Coldfusion | Macromedia | 6.1 (including) | 6.1 (including) |
| Jrun | Macromedia | 4.0 (including) | 4.0 (including) |
| Jrun | Macromedia | 4.0-sp1 (including) | 4.0-sp1 (including) |
| Jrun | Macromedia | 4.0-sp1a (including) | 4.0-sp1a (including) |
| Jrun | Macromedia | 4.0_build_61650 (including) | 4.0_build_61650 (including) |
| One_application_server | Sun | 7.0 (including) | 7.0 (including) |
| One_application_server | Sun | 7.0-ur1 (including) | 7.0-ur1 (including) |
| One_application_server | Sun | 7.0-ur2 (including) | 7.0-ur2 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=107936690702515\u0026w=2
- http://secunia.com/advisories/11130
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-57517-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201713-1
- http://www.securityfocus.com/bid/9877
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15473
- http://marc.info/?l=bugtraq\u0026m=107936690702515\u0026w=2
- http://secunia.com/advisories/11130
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-57517-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201713-1
- http://www.securityfocus.com/bid/9877
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15473