Oval Definition:oval:org.opensuse.security:def:20093877
Revision Date:2022-05-20Version:1
Title:CVE-2009-3877
Description:

Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2009-3877
Mitre CVE-2009-3877
SUSE CVE-2009-3877
SUSE-SA:2009:058
SUSE-SA:2009:058
SUSE-SA:2010:002
SUSE-SA:2010:002
SUSE-SA:2010:004
SUSE-SA:2010:004
Platform(s):Open Enterprise Server
openSUSE 11.0
openSUSE 11.1
openSUSE 11.2
SUSE Linux Enterprise 11 Moblin 2.0
SUSE Linux Enterprise Desktop 10 SP3 for AMD64 and Intel EM64T
SUSE Linux Enterprise Desktop 10 SP3 for x86
SUSE Linux Enterprise Desktop 11 GA
SUSE Linux Enterprise SDK 10 SP2
SUSE Linux Enterprise SDK 10 SP3
SUSE Linux Enterprise SDK 11 GA
SUSE Linux Enterprise Server 10 SP3
SUSE Linux Enterprise Server 11
SUSE Linux Enterprise Server 11 GA
SUSE Linux Enterprise Server for SAP 10 SP2
SUSE Linux Enterprise Server for SAP Applications 11
Product(s):
Definition Synopsis
  • Release Information
  • sles10-sp2-sap is installed
  • AND
  • java-1_5_0-ibm-32bit less than 1.5.0_sr11-0.4.1
  • OR java-1_5_0-ibm-alsa-32bit less than 1.5.0_sr11-0.4.1
  • OR java-1_5_0-ibm-devel-32bit less than 1.5.0_sr11-0.4.1
  • OR java-1_5_0-ibm-devel less than 1.5.0_sr11-0.4.1
  • OR java-1_5_0-ibm-fonts less than 1.5.0_sr11-0.4.1
  • OR java-1_5_0-ibm less than 1.5.0_sr11-0.4.1
  • OR Package Information
  • sles10-sp3 is installed
  • AND
  • java-1_4_2-ibm-devel less than 1.4.2_sr13.2-0.4.1
  • OR java-1_4_2-ibm-jdbc less than 1.4.2_sr13.2-0.4.1
  • OR java-1_4_2-ibm less than 1.4.2_sr13.2-0.4.1
  • OR Package Information
  • sles10-sp2-sdk is installed
  • AND
  • java-1_4_2-ibm-devel less than 1.4.2_sr13.2-0.4.1
  • OR java-1_4_2-ibm-jdbc less than 1.4.2_sr13.2-0.4.1
  • OR java-1_4_2-ibm-plugin less than 1.4.2_sr13.2-0.4.1
  • OR java-1_4_2-ibm less than 1.4.2_sr13.2-0.4.1
  • OR Package Information
  • sles10-sp3 is installed
  • AND
  • java-1_5_0-ibm-32bit less than 1.5.0_sr11-0.4.2
  • OR java-1_5_0-ibm-64bit less than 1.5.0_sr11-0.4.2
  • OR java-1_5_0-ibm-alsa-32bit less than 1.5.0_sr11-0.4.2
  • OR java-1_5_0-ibm-devel-32bit less than 1.5.0_sr11-0.4.2
  • OR java-1_5_0-ibm-devel less than 1.5.0_sr11-0.4.2
  • OR java-1_5_0-ibm-fonts less than 1.5.0_sr11-0.4.2
  • OR java-1_5_0-ibm-jdbc less than 1.5.0_sr11-0.4.2
  • OR java-1_5_0-ibm-plugin less than 1.5.0_sr11-0.4.2
  • OR java-1_5_0-ibm less than 1.5.0_sr11-0.4.2
  • Definition Synopsis
  • SUSE Linux Enterprise Server 11 is installed
  • AND Package Information
  • java-1_6_0-ibm-1.6.0_sr7.0-1.1 is installed
  • OR java-1_6_0-ibm-alsa-1.6.0-124.6 is installed
  • OR java-1_6_0-ibm-alsa-x86-1.6.0-124.7 is installed
  • OR java-1_6_0-ibm-fonts-1.6.0_sr7.0-1.1 is installed
  • OR java-1_6_0-ibm-jdbc-1.6.0_sr7.0-1.1 is installed
  • OR java-1_6_0-ibm-plugin-1.6.0-124.6 is installed
  • OR java-1_6_0-ibm-x86-1.6.0-124.7 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 11 is installed
  • AND Package Information
  • java-1_6_0-ibm-1.6.0_sr7.0-1.1.1 is installed
  • OR java-1_6_0-ibm-alsa-1.6.0_sr7.0-1.1.1 is installed
  • OR java-1_6_0-ibm-alsa-x86-1.6.0-124.7.1 is installed
  • OR java-1_6_0-ibm-fonts-1.6.0_sr7.0-1.1.1 is installed
  • OR java-1_6_0-ibm-jdbc-1.6.0_sr7.0-1.1.1 is installed
  • OR java-1_6_0-ibm-plugin-1.6.0_sr7.0-1.1.1 is installed
  • OR java-1_6_0-ibm-x86-1.6.0-124.7.1 is installed
  • BACK