CVE-2007-5281

Description

The Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer's Kit for Java in various Hitachi Cosminexus 7.5 products before 07-50-01, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service via certain SSL/TLS handshake requests. NOTE: this may be the same as CVE-2007-3698.

Affected products

• Hitachi / ucosminexus_application_server_enterprise07_50 – 07_50
• Hitachi / ucosminexus_application_server_standard7_50 – 7_50
• Hitachi / ucosminexus_client07_50 – 07_50
• Hitachi / ucosminexus_developer_professional07_50 – 07_50
• Hitachi / ucosminexus_developer_standard07_50 – 07_50
• Hitachi / ucosminexus_operator07_50 – 07_50
• Hitachi / ucosminexus_service_architect7_50 – 7_50
• Hitachi / ucosminexus_service_platform7_50 – 7_50

References

• MISChttp://www.securityfocus.com/bid/25935
• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2007/3375
• MISChttp://www.hitachi-support.com/security_e/vuls_e/HS07-031_e/index-e.html
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/36965
• VENDOR_ADVISORYhttp://secunia.com/advisories/27075