CVE-2010-0770

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server (WAS) versions 6.0 through 6.0.2.40 IBM WebSphere Application Server (WAS) versions 6.1 through 6.1.0.30 IBM WebSphere Application Server (WAS) versions 7.0 through 7.0.0.8

Description The issue allows remote authenticated users to cause a denial of service by aborting an SSL handshake, resulting in an ORB ListenerThread hang.

Recommendations For versions 6.0 through 6.0.2.40, update to version 6.0.2.41 or later. For versions 6.1 through 6.1.0.30, update to version 6.1.0.31 or later. For versions 7.0 through 7.0.0.8, update to version 7.0.0.9 or later.