Sign-up

ID

VAR-199907-0005


CVE

CVE-1999-1478


TITLE

Sun Java HotSpot DoS Vulnerability

Trust: 0.9

sources: BID: 522 // CNNVD: CNNVD-199907-008

DESCRIPTION

The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpot via a URL that includes the [ character. When IIS and Sun's Java HotSpot Performance engine are running simultaneously, the following URL will cause the system to crash: h t t p ://targethost/servlet/[ The following is the error message: # HotSpot Virtual Machine Error, Internal Error # # Error ID: 4649454C44345950450E4350500026 Affected processes are Jrun, ServletExec and IIS

Trust: 1.17

sources: NVD: CVE-1999-1478 // BID: 522

AFFECTED PRODUCTS

vendor:microsoftmodel:internet information serverscope:eqversion:4.0

Trust: 1.6

vendor:microsoftmodel:internet information serverscope:eqversion:3.0

Trust: 1.6

vendor:sunmodel:java hotspot performance enginescope:eqversion:1.0

Trust: 0.3

vendor:microsoftmodel:iisscope:eqversion:4.0

Trust: 0.3

sources: BID: 522 // CNNVD: CNNVD-199907-008 // NVD: CVE-1999-1478

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-1999-1478
value: MEDIUM

Trust: 1.0

CNNVD: CNNVD-199907-008
value: MEDIUM

Trust: 0.6

nvd@nist.gov: CVE-1999-1478
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

sources: CNNVD: CNNVD-199907-008 // NVD: CVE-1999-1478

PROBLEMTYPE DATA

problemtype:NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-1999-1478

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-199907-008

TYPE

input validation

Trust: 0.6

sources: CNNVD: CNNVD-199907-008

EXTERNAL IDS

db:BIDid:522

Trust: 1.9

db:NVDid:CVE-1999-1478

Trust: 1.6

db:NTBUGTRAQid:19990706 BUG IN SUN'S HOTSPOT VM

Trust: 0.6

db:NTBUGTRAQid:19990716 FW: (REVIEW ID: 85125) HOTSPOT CRASHES BRINGING DOWN WEBSERVER

Trust: 0.6

db:XFid:2348

Trust: 0.6

db:CNNVDid:CNNVD-199907-008

Trust: 0.6

sources: BID: 522 // CNNVD: CNNVD-199907-008 // NVD: CVE-1999-1478

REFERENCES

url:http://www.securityfocus.com/bid/522

Trust: 1.6

url:http://marc.info/?l=ntbugtraq&m=93138827429589&w=2

Trust: 1.0

url:http://marc.info/?l=ntbugtraq&m=93240220324183&w=2

Trust: 1.0

url:https://exchange.xforce.ibmcloud.com/vulnerabilities/2348

Trust: 1.0

url:http://xforce.iss.net/static/2348.php

Trust: 0.6

url:http://marc.theaimsgroup.com/?l=ntbugtraq&m=93240220324183&w=2

Trust: 0.6

url:http://marc.theaimsgroup.com/?l=ntbugtraq&m=93138827429589&w=2

Trust: 0.6

sources: CNNVD: CNNVD-199907-008 // NVD: CVE-1999-1478

CREDITS

Posted to NTBugtraq July 6, 1999 by Per Arne Johansson <perarne.johansson@NATION.SE>.

Trust: 0.9

sources: BID: 522 // CNNVD: CNNVD-199907-008

SOURCES

db:BIDid:522
db:CNNVDid:CNNVD-199907-008
db:NVDid:CVE-1999-1478

LAST UPDATE DATE

2024-08-14T15:31:22.560000+00:00


SOURCES UPDATE DATE

db:BIDid:522date:1999-07-06T00:00:00
db:CNNVDid:CNNVD-199907-008date:2005-05-02T00:00:00
db:NVDid:CVE-1999-1478date:2017-10-10T01:29:06.280

SOURCES RELEASE DATE

db:BIDid:522date:1999-07-06T00:00:00
db:CNNVDid:CNNVD-199907-008date:1999-07-06T00:00:00
db:NVDid:CVE-1999-1478date:1999-07-06T04:00:00