OSVDB ID: 86388

Title: Oracle GlassFish / Java System Application Server CORBA ORB Subcomponent Unspecified Remote DoS

Info

Disclosure

Oct 16, 2012

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Oct 16, 2012

Description

Oracle GlassFish / Java System Application Server contains a flaw that may allow a remote denial of service. The issue is triggered when an unspecified error related to the COBRA ORB subcomponent occurs. This may allow a remote attacker to cause a loss of availability.

Classification

Location: Remote / Network Access
Attack Type: Denial of Service
Impact: Loss of Availability
Solution: Patch / RCS
Exploit: Exploit Unknown
Disclosure: Vendor Verified, Coordinated Disclosure

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Oracle has released a patch to address this vulnerability. Check the vendor advisory in the references section.

Products

Oracle Corporation	Sun GlassFish Enterprise Server	2.1.1
	Sun Java System Application Server	8.1
		8.2
	GlassFish Server	3.0.1
		3.1.2

References

Security Tracker: 1027676 1027677
CVE ID: 2012-3155 (see also: NVD)
Secunia Advisory ID: 51017
Vendor Specific Advisory URL: http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/86388

Info

Disclosure

Discovery

Dates

Exploit

Solution

Description

Classification

Solution

Products

Oracle Corporation

Sun GlassFish Enterprise Server

Sun Java System Application Server

GlassFish Server

References

Credit