Orange Business Services
Vigil@nce Vigil@nce Vigil@nce
we track for your security since 1999
 home presentation vulnerabilities documentation contact  
subscriber area subscriber area
free access free access
The Vigil@nce team watches vulnerabilities impacting your computers, and then offers solutions, a database and tools to correct them.
recent vulnerabilities recent vulnerabilities
tracked products tracked products
RSS feed RSS feed
vulnerability

vulnerability bulletin CVE-2011-4858

Tomcat, JBoss: denial of service via hash collision

Synthesis of the vulnerability

An attacker can send data generating storage collisions, in order to overload a service.
Severity: 3/4.
Creation date: 22/02/2012.

Impacted products

Description of the vulnerability

The bulletin VIGILANCE-VUL-11254 describes a vulnerability which can be used to ...

Share this bulletin

Delicious Digg Facebook Google bookmarks LinkedIn Mail Reddit StumbleUpon Technorati Twitter Yahoo 

Complete Vigil@nce bulletin

Tomcat, JBoss: denial of service via hash collision

Characteristics

Title: Tomcat, JBoss: denial of service via hash collision.
Keywords: JBoss Tomcat collision denial hash service.
Identifiers: BID-51200, c03183543, c03231290, CVE-2011-4084-REJECT, CVE-2011-4858, DSA-2401-1, HPSBMU02747, HPSBUX02741, openSUSE-SU-2012:0103-1, RHSA-2012:0041-01, RHSA-2012:0074-01, RHSA-2012:0075-01, RHSA-2012:0076-01, RHSA-2012:0077-01, RHSA-2012:0078-01, RHSA-2012:0089-01, RHSA-2012:0091-01, RHSA-2012:0325-01, RHSA-2012:0406-01, RHSA-2012:0474-01, RHSA-2012:0475-01, SSRT100728, SSRT100771, VIGILANCE-VUL-11383.
Pointed by: VIGILANCE-VUL-11254, VIGILANCE-VUL-11290.

Computer vulnerabilities tracking service

Vigil@nce provides a system vulnerability bulletin. The Vigil@nce vulnerability database contains several thousand vulnerabilities. The technology watch team tracks security threats targeting the computer system. The Vigil@nce security watch publishes vulnerability bulletins about threats impacting the information system.



















Copyright 1999-2012 Vigil@nce. Vigil@nce is a service from Orange Business Services. Site map. Legal notice. Version française