CVE:CVE-2007-5281
CNNVD:CNNVD-200710-145
当使用SSL/TLS支持的JSSE时,多个Hitachi Cosminexus 7.5产品版本之前的版本07-50-01的Java中的Hitachi Cosminexus Developer's Kit的Java Secure Socket Extension (JSSE),远程攻击者可以借助特定SSL/TLS handshake 请求造成拒绝服务。
solution:Upgrade hitachi ucosminexus_application_server_enterprise to a higher version than 07_50,and avoid the version 07_50; Upgrade hitachi ucosminexus_application_server_standard to a higher version than 7_50,and avoid the version 7_50; Upgrade hitachi ucosminexus_client to a higher version than 07_50,and avoid the version 07_50; Upgrade hitachi ucosminexus_developer_professional to a higher version than 07_50,and avoid the version 07_50; Upgrade hitachi ucosminexus_developer_standard to a higher version than 07_50,and avoid the version 07_50; Upgrade hitachi ucosminexus_operator to a higher version than 07_50,and avoid the version 07_50; Upgrade hitachi ucosminexus_service_architect to a higher version than 7_50,and avoid the version 7_50; Upgrade hitachi ucosminexus_service_platform to a higher version than 7_50,and avoid the version 7_50