CVE-2013-2186
CVE-2013-2186
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance.
EPSS 12,7% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
libcommons-fileupload-java Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.3-2.1
Actualiza a 1.3-2.1
libcommons-fileupload-java Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.3-2.1
Actualiza a 1.3-2.1
libcommons-fileupload-java Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.3-2.1
Actualiza a 1.3-2.1
Fuentes originales
- http://rhn.redhat.com/errata/RHSA-2013-1430.html
- http://rhn.redhat.com/errata/RHSA-2013-1429.html
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88133
- http://lists.opensuse.org/opensuse-updates/2013-10/msg00033.html
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
- http://secunia.com/advisories/55716
- http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
- http://lists.opensuse.org/opensuse-updates/2013-10/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00008.html
- http://rhn.redhat.com/errata/RHSA-2013-1428.html
- http://www.debian.org/security/2013/dsa-2827
- https://access.redhat.com/errata/RHSA-2016:0070
- https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01
- http://rhn.redhat.com/errata/RHSA-2013-1442.html
- http://rhn.redhat.com/errata/RHSA-2013-1448.html
- https://www.tenable.com/security/research/tra-2016-23
- http://www.securityfocus.com/bid/63174
- http://ubuntu.com/usn/usn-2029-1
- https://nvd.nist.gov/vuln/detail/CVE-2013-2186