ID CVE-2013-4210
Summary The org.jboss.remoting.transport.socket.ServerThread class in Red Hat JBoss Remoting for Red Hat JBoss SOA Platform 5.3.1 GA, Web Platform 5.2.0, Enterprise Application Platform 5.2.0, and other products allows remote attackers to cause a denial of service (file descriptor consumption) via unspecified vectors.
References
Vulnerable Configurations
  • cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:jboss_enterprise_brms_platform:5.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:jboss_enterprise_brms_platform:5.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:jboss_enterprise_brms_platform:5.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:jboss_enterprise_brms_platform:5.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:jboss_enterprise_soa_platform:5.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:jboss_enterprise_soa_platform:5.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:jboss_enterprise_soa_platform:5.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:jboss_enterprise_soa_platform:5.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:jboss_enterprise_web_platform:5.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:jboss_enterprise_web_platform:5.2.0:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 31-10-2013 - 03:34)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
redhat via4
advisories
  • rhsa
    id RHSA-2013:1369
  • rhsa
    id RHSA-2013:1370
  • rhsa
    id RHSA-2013:1371
  • rhsa
    id RHSA-2013:1372
  • rhsa
    id RHSA-2013:1373
  • rhsa
    id RHSA-2013:1374
  • rhsa
    id RHSA-2013:1448
rpms
  • jboss-remoting-0:2.5.4-11.SP4_patch01.ep5.el4
  • jboss-remoting-0:2.5.4-11.SP4_patch01.ep5.el5
  • jboss-remoting-0:2.5.4-11.SP4_patch01.ep5.el6
  • jboss-remoting-0:2.5.4-11.SP4_patch01.ep5.el4
  • jboss-remoting-0:2.5.4-11.SP4_patch01.ep5.el5
  • jboss-remoting-0:2.5.4-11.SP4_patch01.ep5.el6
refmap via4
Last major update 31-10-2013 - 03:34
Published 01-10-2013 - 17:55
Last modified 31-10-2013 - 03:34
Back to Top