CVE-2007-5281

Severity Score

7.5

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer's Kit for Java in various Hitachi Cosminexus 7.5 products before 07-50-01, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service via certain SSL/TLS handshake requests. NOTE: this may be the same as CVE-2007-3698.

La extensión Java Secure Socket Extension (JSSE) en el Hitachi Cosminexus Developer's Kit para Java de varios productos Hitachi Cosminexus 7.5 anteriores a 07-50-01, cuando usan JSSE para el soporte SSL/TLS, permite a atacantes remotos provocar una denegación de servicio mediante determinadas peticiones de negociación SSL/TLS. NOTA: podría ser la misma que CVE-2007-3698.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2007-10-08 CVE Reserved
2007-10-09 CVE Published
2024-08-07 CVE Updated
2025-03-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-20: Improper Input Validation

CAPEC

References (5)

URL	Tag	Source
http://www.hitachi-support.com/security_e/vuls_e/HS07-031_e/index-e.html	X_refsource_confirm
http://www.securityfocus.com/bid/25935	Vdb Entry
http://www.vupen.com/english/advisories/2007/3375	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/36965	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/27075	2017-07-29

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Hitachi Search vendor "Hitachi"		Ucosminexus Application Server Enterprise Search vendor "Hitachi" for product "Ucosminexus Application Server Enterprise"				07_50 Search vendor "Hitachi" for product "Ucosminexus Application Server Enterprise" and version "07_50"		-		Affected
Hitachi Search vendor "Hitachi"		Ucosminexus Application Server Standard Search vendor "Hitachi" for product "Ucosminexus Application Server Standard"				7_50 Search vendor "Hitachi" for product "Ucosminexus Application Server Standard" and version "7_50"		-		Affected
Hitachi Search vendor "Hitachi"		Ucosminexus Client Search vendor "Hitachi" for product "Ucosminexus Client"				07_50 Search vendor "Hitachi" for product "Ucosminexus Client" and version "07_50"		-		Affected
Hitachi Search vendor "Hitachi"		Ucosminexus Developer Professional Search vendor "Hitachi" for product "Ucosminexus Developer Professional"				07_50 Search vendor "Hitachi" for product "Ucosminexus Developer Professional" and version "07_50"		-		Affected
Hitachi Search vendor "Hitachi"		Ucosminexus Developer Standard Search vendor "Hitachi" for product "Ucosminexus Developer Standard"				07_50 Search vendor "Hitachi" for product "Ucosminexus Developer Standard" and version "07_50"		-		Affected
Hitachi Search vendor "Hitachi"		Ucosminexus Operator Search vendor "Hitachi" for product "Ucosminexus Operator"				07_50 Search vendor "Hitachi" for product "Ucosminexus Operator" and version "07_50"		-		Affected
Hitachi Search vendor "Hitachi"		Ucosminexus Service Architect Search vendor "Hitachi" for product "Ucosminexus Service Architect"				7_50 Search vendor "Hitachi" for product "Ucosminexus Service Architect" and version "7_50"		-		Affected
Hitachi Search vendor "Hitachi"		Ucosminexus Service Platform Search vendor "Hitachi" for product "Ucosminexus Service Platform"				7_50 Search vendor "Hitachi" for product "Ucosminexus Service Platform" and version "7_50"		-		Affected