Bug 45552 – Jetty: Unspecified Denial Of Service Vulnerability, <4.2.19

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description schaedpq 2004-03-23 14:58:38 UTC]

An unspecified denial of service vulnerability has been reported in Jetty Java HTTP Servlet Server. It is conjectured that this may be exploited remotely.

Reproducible: Didn't try
Steps to Reproduce:
1.
2.
3.




Found in bugtraq:

Jetty Unspecified Denial Of Service Vulnerability:
http://www.securityfocus.com/bid/9917/discussion/
An unspecified denial of service vulnerability has been reported in Jetty Java
HTTP Servlet Server. It is conjectured that this may be exploited remotely.

Solution:
This issue has been addressed in Jetty 4.2.19.

[Comment 1 solar (RETIRED) 2004-03-27 09:54:18 UTC]

current version in portage is net-www/jetty-4.2.17

Java herd please put a jetty-4.2.19 in the portage tree.

[Comment 2 Chris Aniszczyk (RETIRED) 2004-03-27 10:14:07 UTC]

Updated in portage. 4.2.17 is gone.

[Comment 3 solar (RETIRED) 2004-03-27 11:04:22 UTC]

Thanks for updatiung zx

Reopening bug and changing product so GLSA can be done.

[Comment 4 Kurt Lieber (RETIRED) 2004-04-06 08:57:46 UTC]

neither 4.2.17 nor 4.2.19 were/are marked stable on any arches (they're both ~masked).  As such, closing without issuing a GLSA.