Vulnerability Details : CVE-2006-5654
Unspecified vulnerability in the Network Security Services (NSS) in Sun Java System Web Server 6.0 before SP 10 and ONE Application Server 7 before Update 3, when SSLv2 is enabled, allows remote authenticated users to cause a denial of service (application crash) via unspecified vectors. NOTE: due to lack of details from the vendor, it is unclear whether this is related to vector 1 in CVE-2006-5201 or CVE-2006-3127.
Vulnerability category: Denial of service
Products affected by CVE-2006-5654
- cpe:2.3:a:sun:java_system_web_server:6.0:sp9:*:*:*:*:*:*
- cpe:2.3:a:sun:one_application_server:*:update_2:*:*:*:*:*:*
Threat overview for CVE-2006-5654
Top countries where our scanners detected CVE-2006-5654
Top open port discovered on systems with this issue
21
IPs affected by CVE-2006-5654 1
Find out if you* are
affected by CVE-2006-5654!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2006-5654
1.21%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 77 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2006-5654
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.0
|
MEDIUM | AV:N/AC:L/Au:S/C:N/I:N/A:P |
8.0
|
2.9
|
NIST |
References for CVE-2006-5654
-
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102670-1
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/29946
Sun Java Network Security Services denial of service CVE-2006-5654 Vulnerability Report
-
http://www.vupen.com/english/advisories/2006/4299
Site en constructionVendor Advisory
-
http://securitytracker.com/id?1017143
-
http://secunia.com/advisories/22646
About Secunia Research | FlexeraVendor Advisory
-
http://www.securityfocus.com/bid/20846
Jump to