Sun GlassFish Enterprise < 2.1 Patch 02 Denial of Service

Low Nessus Plugin ID 39330


The remote web server is affected by a local denial of service vulnerability.


The remote host is running a version of Sun GlassFish Enterprise Server earlier than 2.1 Patch 02. Such versions are reportedly affected by a local denial of service vulnerability in the HTTP Engine and administration interface. A local attacker could exploit this issue to crash the affected service.


Upgrade to Sun GlassFish 2.1 Patch 02 or later.

See Also

Plugin Details

Severity: Low

ID: 39330

File Name: glassfish_2_1_02.nasl

Version: $Revision: 1.8 $

Type: remote

Family: Web Servers

Published: 2009/06/09

Modified: 2012/02/17

Dependencies: 10107

Risk Information

Risk Factor: Low


Base Score: 2.1

Temporal Score: 1.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:P

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:oracle:glassfish_server

Exploit Available: false

Exploit Ease: No known exploits are available

Reference Information

BID: 35217