Sun JSSE SSL/TLS握手处理拒绝服务漏洞

BUGTRAQ ID: 24846 CNCAN ID:CNCAN-2007071109 Sun JSSE是一款用于应用程序中提供数据传输安全性的安全套接字扩展。 多个Java实时环境中的Sun JSSE不正确处理SSL/TLS握手请求，远程攻击者可以利用漏洞对使用JSSE支持SSL/TLS的应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun SDK (Windows Production Release) 1.4.2 _15 Sun SDK (Windows Production Release) 1.4.2_14 Sun SDK (Windows Production Release) 1.4.2_13 Sun SDK (Windows Production Release) 1.4.2_12 Sun SDK (Windows Production Release) 1.4.2_11 Sun SDK (Solaris Production Release) 1.4.2_15 Sun SDK (Solaris Production Release) 1.4.2_14 Sun SDK (Solaris Production Release) 1.4.2_13 Sun SDK (Solaris Production Release) 1.4.2_12 Sun SDK (Solaris Production Release) 1.4.2_11 Sun SDK (Linux Production Release) 1.4.2 _15 Sun SDK (Linux Production Release) 1.4.2_14 Sun SDK (Linux Production Release) 1.4.2_13 Sun SDK (Linux Production Release) 1.4.2_12 Sun SDK (Linux Production Release) 1.4.2_11 Sun JRE (Windows Production Release) 1.4.2_15 Sun JRE (Windows Production Release) 1.4.2_14 Sun JRE (Windows Production Release) 1.4.2_13 Sun JRE (Windows Production Release) 1.4.2_12 Sun JRE (Windows Production Release) 1.4.2_11 Sun JRE (Solaris Production Release) 1.4.2_15 Sun JRE (Solaris Production Release) 1.4.2_14 Sun JRE (Solaris Production Release) 1.4.2_13 Sun JRE (Solaris Production Release) 1.4.2_12 Sun JRE (Solaris Production Release) 1.4.2_11 Sun JRE (Linux Production Release) 1.4.2 Sun JRE (Linux Production Release) 1.4.2_15 Sun JRE (Linux Production Release) 1.4.2_14 Sun JRE (Linux Production Release) 1.4.2_13 Sun JRE (Linux Production Release) 1.4.2_11 Sun JRE 6.0 Update 2 Sun JDK (Windows Production Release) 1.6.0_01 Sun JDK (Linux Production Release) 1.6.0_01 Sun JDK 6.0 Update 2 Sun JDK 5.0 Update 9 Sun JDK 5.0 Update 8 Sun JDK 5.0 Update 7 Sun JDK 5.0 Update 11 Sun JDK 5.0 Update 10 Sun Java 2 Standard Edition SDK 1.4.2 _13 Sun Java 2 Standard Edition SDK 1.4.2 _12 Sun Java 2 Standard Edition SDK 1.4.2 _11 Sun Java 2 Standard Edition SDK 1.4.2 升级程序： Sun JRE (Linux Production Release) 1.4.2_11 * Sun J2SE 1.4.2 fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris <a href="http://java.sun.com/j2se/1.4.2/download.html" target="_blank">http://java.sun.com/j2se/1.4.2/download.html</a> Sun JDK 5.0 Update 8 * Sun JDK and JRE 5.0 Update 12 <a href="http://java.sun.com/j2se/1.5.0/download.jsp" target="_blank">http://java.sun.com/j2se/1.5.0/download.jsp</a> Sun JRE (Linux Production Release) 1.4.2_14 * Sun J2SE 1.4.2 fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris <a href="http://java.sun.com/j2se/1.4.2/download.html" target="_blank">http://java.sun.com/j2se/1.4.2/download.html</a> Sun JRE (Solaris Production Release) 1.4.2_13 * Sun J2SE 1.4.2 fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris <a href="http://java.sun.com/j2se/1.4.2/download.html" target="_blank">http://java.sun.com/j2se/1.4.2/download.html</a> Sun SDK (Linux Production Release) 1.4.2_11 * Sun J2SE 1.4.2 fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris <a href="http://java.sun.com/j2se/1.4.2/download.html" target="_blank">http://java.sun.com/j2se/1.4.2/download.html</a> Sun SDK (Linux Production Release) 1.4.2_13 * Sun J2SE 1.4.2 fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris <a href="http://java.sun.com/j2se/1.4.2/download.html" target="_blank">http://java.sun.com/j2se/1.4.2/download.html</a> Sun SDK (Windows Production Release) 1.4.2_12 * Sun J2SE 1.4.2 fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris <a href="http://java.sun.com/j2se/1.4.2/download.html" target="_blank">http://java.sun.com/j2se/1.4.2/download.html</a> Sun JDK (Linux Production Release) 1.6.0_01 * Sun JDK and JRE 6 Update 2 <a href="http://java.sun.com/javase/downloads/index.jsp" target="_blank">http://java.sun.com/javase/downloads/index.jsp</a> Sun SDK (Windows Production Release) 1.4.2_11 * Sun J2SE 1.4.2 fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris <a href="http://java.sun.com/j2se/1.4.2/download.html" target="_blank">http://java.sun.com/j2se/1.4.2/download.html</a> Sun SDK (Solaris Production Release) 1.4.2_13 * Sun J2SE 1.4.2 fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris <a href="http://java.sun.com/j2se/1.4.2/download.html" target="_blank">http://java.sun.com/j2se/1.4.2/download.html</a> Sun JDK 5.0 Update 11 * Sun JDK and JRE 5.0 Update 12 <a href="http://java.sun.com/j2se/1.5.0/download.jsp" target="_blank">http://java.sun.com/j2se/1.5.0/download.jsp</a> Sun JRE (Windows Production Release) 1.4.2_12 * Sun J2SE 1.4.2 fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris <a href="http://java.sun.com/j2se/1.4.2/download.html" target="_blank">http://java.sun.com/j2se/1.4.2/download.html</a> Sun SDK (Solaris Production Release) 1.4.2_14 * Sun J2SE 1.4.2 fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris <a href="http://java.sun.com/j2se/1.4.2/download.html" target="_blank">http://java.sun.com/j2se/1.4.2/download.html</a> Sun JRE (Windows Production Release) 1.4.2_14 * Sun J2SE 1.4.2 fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris <a href="http://java.sun.com/j2se/1.4.2/download.html" target="_blank">http://java.sun.com/j2se/1.4.2/download.html</a> Sun SDK (Linux Production Release) 1.4.2_14 * Sun J2SE 1.4.2 fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris <a href="http://java.sun.com/j2se/1.4.2/download.html" target="_blank">http://java.sun.com/j2se/1.4.2/download.html</a> Sun JDK (Windows Production Release) 1.6.0_01 * Sun JDK and JRE 6 Update 2 <a href="http://java.sun.com/javase/downloads/index.jsp" target="_blank">http://java.sun.com/javase/downloads/index.jsp</a> Sun JRE (Linux Production Release) 1.4.2_13 * Sun J2SE 1.4.2 fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris <a href="http://java.sun.com/j2se/1.4.2/download.html" target="_blank">http://java.sun.com/j2se/1.4.2/download.html</a> Sun JRE (Windows Production Release) 1.4.2_11 * Sun J2SE 1.4.2 fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris <a href="http://java.sun.com/j2se/1.4.2/download.html" target="_blank">http://java.sun.com/j2se/1.4.2/download.html</a> Sun SDK (Solaris Production Release) 1.4.2_12 * Sun J2SE 1.4.2 fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris <a href="http://java.sun.com/j2se/1.4.2/download.html" target="_blank">http://java.sun.com/j2se/1.4.2/download.html</a> Sun JRE (Solaris Production Release) 1.4.2_12 * Sun J2SE 1.4.2 fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris <a href="http://java.sun.com/j2se/1.4.2/download.html" target="_blank">http://java.sun.com/j2se/1.4.2/download.html</a> Sun SDK (Windows Production Release) 1.4.2_13 * Sun J2SE 1.4.2 fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris <a href="http://java.sun.com/j2se/1.4.2/download.html" target="_blank">http://java.sun.com/j2se/1.4.2/download.html</a> Sun JRE (Solaris Production Release) 1.4.2_11 * Sun J2SE 1.4.2 fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris <a href="http://java.sun.com/j2se/1.4.2/download.html" target="_blank">http://java.sun.com/j2se/1.4.2/download.html</a> Sun SDK (Solaris Production Release) 1.4.2_11 * Sun J2SE 1.4.2 fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris <a href="http://java.sun.com/j2se/1.4.2/download.html" target="_blank">http://java.sun.com/j2se/1.4.2/download.html</a> Sun SDK (Windows Production Release) 1.4.2_14 * Sun J2SE 1.4.2 fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris <a href="http://java.sun.com/j2se/1.4.2/download.html" target="_blank">http://java.sun.com/j2se/1.4.2/download.html</a> Sun JRE (Windows Production Release) 1.4.2_13 * Sun J2SE 1.4.2 fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris <a href="http://java.sun.com/j2se/1.4.2/download.html" target="_blank">http://java.sun.com/j2se/1.4.2/download.html</a> Sun JDK 5.0 Update 7 * Sun JDK and JRE 5.0 Update 12 <a href="http://java.sun.com/j2se/1.5.0/download.jsp" target="_blank">http://java.sun.com/j2se/1.5.0/download.jsp</a> Sun SDK (Linux Production Release) 1.4.2_12 * Sun J2SE 1.4.2 fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris <a href="http://java.sun.com/j2se/1.4.2/download.html" target="_blank">http://java.sun.com/j2se/1.4.2/download.html</a> Sun JDK 5.0 Update 9 * Sun JDK and JRE 5.0 Update 12 <a href="http://java.sun.com/j2se/1.5.0/download.jsp" target="_blank">http://java.sun.com/j2se/1.5.0/download.jsp</a> Sun JDK 5.0 Update 10 * Sun JDK and JRE 5.0 Update 12 <a href="http://java.sun.com/j2se/1.5.0/download.jsp" target="_blank">http://java.sun.com/j2se/1.5.0/download.jsp</a> Sun JRE (Solaris Production Release) 1.4.2_14 * Sun J2SE 1.4.2 fixes SDK and JRE 1.4.2_11, _12, _13, and _14 for Windows,Linux, and Solaris <a href="http://java.sun.com/j2se/1.4.2/download.html" target="_blank">http://java.sun.com/j2se/1.4.2/download.html</a>