The host is running GlassFish Server and is prone to denial of service vulnerability.

Successful exploitation could allow remote attackers to cause a denial of service via a specially crafted form sent in a HTTP POST request. Impact Level: Application/System

Apply the updates from below link, http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html

The flaw is due to an error within a hash generation function when hashing form posts and updating a hash table. This can be exploited to cause a hash collision resulting in high CPU consumption via a specially crafted form sent in a HTTP POST request.

Oracle GlassFish version 3.1.1 and prior.

• http://www.kb.cert.org/vuls/id/903934
• http://www.ocert.org/advisories/ocert-2011-003.html

---

Updated on 2015-03-25