Details of VAR-199907-0005

ID

VAR-199907-0005

CVE

CVE-1999-1478

TITLE

Sun Java HotSpot DoS Vulnerability

Trust: 0.9

sources: BID: 522 // CNNVD: CNNVD-199907-008

DESCRIPTION

The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpot via a URL that includes the [ character. When IIS and Sun's Java HotSpot Performance engine are running simultaneously, the following URL will cause the system to crash: h t t p ://targethost/servlet/[ The following is the error message: # HotSpot Virtual Machine Error, Internal Error # # Error ID: 4649454C44345950450E4350500026 Affected processes are Jrun, ServletExec and IIS

Trust: 1.17

sources: NVD: CVE-1999-1478 // BID: 522

AFFECTED PRODUCTS

vendor:	microsoft	model:	internet information server	scope:	eq	version:	4.0	Trust: 1.6
vendor:	microsoft	model:	internet information server	scope:	eq	version:	3.0	Trust: 1.6
vendor:	sun	model:	java hotspot performance engine	scope:	eq	version:	1.0	Trust: 0.3
vendor:	microsoft	model:	iis	scope:	eq	version:	4.0	Trust: 0.3

sources: BID: 522 // CNNVD: CNNVD-199907-008 // NVD: CVE-1999-1478

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-1999-1478
value:	MEDIUM
Trust: 1.0
CNNVD:	CNNVD-199907-008
value:	MEDIUM
Trust: 0.6

nvd@nist.gov:	CVE-1999-1478
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0

sources: CNNVD: CNNVD-199907-008 // NVD: CVE-1999-1478

PROBLEMTYPE DATA

problemtype:

NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-1999-1478

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-199907-008

TYPE

input validation

Trust: 0.6

sources: CNNVD: CNNVD-199907-008

EXTERNAL IDS

db:	BID	id:	522	Trust: 1.9
db:	NVD	id:	CVE-1999-1478	Trust: 1.6
db:	NTBUGTRAQ	id:	19990706 BUG IN SUN'S HOTSPOT VM	Trust: 0.6
db:	NTBUGTRAQ	id:	19990716 FW: (REVIEW ID: 85125) HOTSPOT CRASHES BRINGING DOWN WEBSERVER	Trust: 0.6
db:	XF	id:	2348	Trust: 0.6
db:	CNNVD	id:	CNNVD-199907-008	Trust: 0.6

sources: BID: 522 // CNNVD: CNNVD-199907-008 // NVD: CVE-1999-1478

REFERENCES

url:	http://www.securityfocus.com/bid/522	Trust: 2.6
url:	http://marc.info/?l=ntbugtraq&m=93138827429589&w=2	Trust: 2.0
url:	http://marc.info/?l=ntbugtraq&m=93240220324183&w=2	Trust: 2.0
url:	https://exchange.xforce.ibmcloud.com/vulnerabilities/2348	Trust: 2.0
url:	http://xforce.iss.net/static/2348.php	Trust: 0.6
url:	http://marc.theaimsgroup.com/?l=ntbugtraq&m=93240220324183&w=2	Trust: 0.6
url:	http://marc.theaimsgroup.com/?l=ntbugtraq&m=93138827429589&w=2	Trust: 0.6

sources: CNNVD: CNNVD-199907-008 // NVD: CVE-1999-1478

CREDITS

Posted to NTBugtraq July 6, 1999 by Per Arne Johansson <perarne.johansson@NATION.SE>.

Trust: 0.9

sources: BID: 522 // CNNVD: CNNVD-199907-008

SOURCES

db:	BID	id:	522
db:	CNNVD	id:	CNNVD-199907-008
db:	NVD	id:	CVE-1999-1478

LAST UPDATE DATE

2024-11-22T23:03:23.091000+00:00

SOURCES UPDATE DATE

db:	BID	id:	522	date:	1999-07-06T00:00:00
db:	CNNVD	id:	CNNVD-199907-008	date:	2005-05-02T00:00:00
db:	NVD	id:	CVE-1999-1478	date:	2024-11-20T23:31:12.767

SOURCES RELEASE DATE

db:	BID	id:	522	date:	1999-07-06T00:00:00
db:	CNNVD	id:	CNNVD-199907-008	date:	1999-07-06T00:00:00
db:	NVD	id:	CVE-1999-1478	date:	1999-07-06T04:00:00