CVE-2009-1101

published 2009-03-25

CVE-2009-1101: Unspecified vulnerability in the lightweight HTTP server implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and…

medium 5 CVSS 3.1

AV N AC L Au N C N I N A P

Unspecified vulnerability in the lightweight HTTP server implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to cause a denial of service (probably resource consumption) for a JAX-WS service endpoint via a connection without any data, which triggers a file descriptor "leak."

Affected

9 ranges

Vendor	Product	Version range	Fixed in
sun	jdk	<= 1.6.0	—
sun	jdk	—	—
sun	jre	<= 1.6.0	—
sun	jre	—	—
vmware	esxi	—	—
vmware	vmware_tools	—	—
vmware	vmware_vcenter_server	—	—
vmware	vmware_vsphere	—	—
vmware	vmware_workstation	—	—