JBoss EAP unprivileged local xml file access
Published Mar 9, 2009
5.0
MEDIUMCVSS 2.0
EPSS 1.80%
Description
The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0.CP04 does not properly validate the resource path during a request for a WSDL file with a custom web-service endpoint, which allows remote attackers to read arbitrary XML files via a crafted request.
Affected products
No data.
- 4.2.0
- 4.2.0
- 4.2.0
- 4.2.0
- 4.2.0
- 4.2.0
- 4.3.0
- 4.3.0
- 4.3.0
- 4.3.0
No data.
JBEAP 4.2.0 for RHEL 4
glassfish-jsf-0:1.2_10-0jpp.ep1.5.ep5.el4
Fixed · RHSA-2009:0346
JBEAP 4.2.0 for RHEL 4
hibernate3-1:3.2.4-1.SP1_CP07.0jpp.ep1.14.el4
Fixed · RHSA-2009:0346
JBEAP 4.2.0 for RHEL 4
jacorb-0:2.3.0-1jpp.ep1.7.el4
Fixed · RHSA-2009:0346
JBEAP 4.2.0 for RHEL 4
jakarta-commons-fileupload-1:1.1.1-3jpp.ep1.2.el4
Fixed · RHSA-2009:0346
JBEAP 4.2.0 for RHEL 4
jakarta-commons-io-0:1.1-0.20051005.2jpp_1rh
Fixed · RHSA-2009:0346
JBEAP 4.2.0 for RHEL 4
jakarta-commons-logging-jboss-0:1.1-4.ep1.el4
Fixed · RHSA-2009:0346
JBEAP 4.2.0 for RHEL 4
jboss-cache-0:1.4.1-6.SP11.1.ep1.el4
Fixed · RHSA-2009:0346
JBEAP 4.2.0 for RHEL 4
jboss-jaxr-0:1.2.0-SP2.0jpp.ep1.3.el4
Fixed · RHSA-2009:0346
JBEAP 4.2.0 for RHEL 4
jboss-remoting-0:2.2.2-3.SP11.0jpp.ep1.1.el4
Fixed · RHSA-2009:0346
JBEAP 4.2.0 for RHEL 4
jboss-seam-0:1.2.1-1.ep1.18.el4
Fixed · RHSA-2009:0346
JBEAP 4.2.0 for RHEL 4
jboss-vfs-0:1.0.0-1.ep1.el4
Fixed · RHSA-2009:0346
JBEAP 4.2.0 for RHEL 4
jbossas-0:4.2.0-4.GA_CP06.3.ep1.el4
Fixed · RHSA-2009:0346
JBEAP 4.2.0 for RHEL 4
jbossts-1:4.2.3-1.SP5_CP04.1jpp.ep1.1.el4
Fixed · RHSA-2009:0346
JBEAP 4.2.0 for RHEL 4
jbossweb-0:2.0.0-6.CP09.0jpp.ep1.1.el4
Fixed · RHSA-2009:0346
JBEAP 4.2.0 for RHEL 4
jgroups-1:2.4.5-2.ep1.el4
Fixed · RHSA-2009:0346
JBEAP 4.2.0 for RHEL 4
rh-eap-docs-0:4.2.0-5.GA_CP06.ep1.3.el4
Fixed · RHSA-2009:0346
JBEAP 4.2.0 for RHEL 4
tanukiwrapper-0:3.2.1-2jpp.ep1.2.el4
Fixed · RHSA-2009:0346
JBEAP 4.2.0 for RHEL 4
ws-commons-policy-0:1.0-2jpp.ep1.7.el4
Fixed · RHSA-2009:0346
JBEAP 4.2.0 for RHEL 4
ws-scout0-0:0.7-0.rc2.4.el4
Fixed · RHSA-2009:0346
JBEAP 4.2.0 for RHEL 4
xalan-j2-0:2.7.0-2jpp.ep1.5.el4
Fixed · RHSA-2009:0346
JBEAP 4.2.0 for RHEL 5
glassfish-jsf-0:1.2_10-0jpp.ep1.5.ep5.el5
Fixed · RHSA-2009:0348
JBEAP 4.2.0 for RHEL 5
hibernate3-1:3.2.4-1.SP1_CP07.0jpp.ep1.14.1.el5
Fixed · RHSA-2009:0348
JBEAP 4.2.0 for RHEL 5
jacorb-0:2.3.0-1jpp.ep1.7.1.el5
Fixed · RHSA-2009:0348
JBEAP 4.2.0 for RHEL 5
jakarta-commons-logging-jboss-0:1.1-4.1.ep1.el5
Fixed · RHSA-2009:0348
JBEAP 4.2.0 for RHEL 5
jboss-cache-0:1.4.1-6.SP11.1.ep1.el5
Fixed · RHSA-2009:0348
JBEAP 4.2.0 for RHEL 5
jboss-jaxr-0:1.2.0-SP2.0jpp.ep1.3.2.el5
Fixed · RHSA-2009:0348
JBEAP 4.2.0 for RHEL 5
jboss-remoting-0:2.2.2-3.SP11.0jpp.ep1.1.el5
Fixed · RHSA-2009:0348
JBEAP 4.2.0 for RHEL 5
jboss-seam-0:1.2.1-1.ep1.12.el5
Fixed · RHSA-2009:0348
JBEAP 4.2.0 for RHEL 5
jboss-vfs-0:1.0.0-1.ep1.el5
Fixed · RHSA-2009:0348
JBEAP 4.2.0 for RHEL 5
jbossas-0:4.2.0-4.GA_CP06.3.1.ep1.el5
Fixed · RHSA-2009:0348
JBEAP 4.2.0 for RHEL 5
jbossts-1:4.2.3-1.SP5_CP04.1jpp.ep1.2.el5
Fixed · RHSA-2009:0348
JBEAP 4.2.0 for RHEL 5
jbossweb-0:2.0.0-6.CP09.0jpp.ep1.1.el5
Fixed · RHSA-2009:0348
JBEAP 4.2.0 for RHEL 5
jbossws-jboss42-0:1.2.1-1.1.ep1.el5
Fixed · RHSA-2009:0348
JBEAP 4.2.0 for RHEL 5
jgroups-1:2.4.5-2.1.ep1.el5
Fixed · RHSA-2009:0348
JBEAP 4.2.0 for RHEL 5
rh-eap-docs-0:4.2.0-5.GA_CP06.ep1.3.1.el5
Fixed · RHSA-2009:0348
JBEAP 4.2.0 for RHEL 5
tanukiwrapper-0:3.2.1-2jpp.ep1.2.el5
Fixed · RHSA-2009:0348
JBEAP 4.2.0 for RHEL 5
ws-commons-policy-0:1.0-2jpp.ep1.7.el5
Fixed · RHSA-2009:0348
JBEAP 4.2.0 for RHEL 5
ws-scout0-0:0.7-0.rc2.4.el5
Fixed · RHSA-2009:0348
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
glassfish-jaxb-0:2.1.4-1.6.ep1.el4
Fixed · RHSA-2009:0347
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
glassfish-jsf-0:1.2_10-0jpp.ep1.5.ep5.el4
Fixed · RHSA-2009:0347
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
hibernate3-1:3.2.4-1.SP1_CP07.0jpp.ep1.14.el4
Fixed · RHSA-2009:0347
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jacorb-0:2.3.0-1jpp.ep1.7.el4
Fixed · RHSA-2009:0347
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jakarta-commons-fileupload-1:1.1.1-3jpp.ep1.2.el4
Fixed · RHSA-2009:0347
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jakarta-commons-io-0:1.1-0.20051005.2jpp_1rh
Fixed · RHSA-2009:0347
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jakarta-commons-logging-jboss-0:1.1-4.ep1.el4
Fixed · RHSA-2009:0347
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jboss-cache-0:1.4.1-6.SP11.1.ep1.el4
Fixed · RHSA-2009:0347
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jboss-jaxr-0:1.2.0-SP2.0jpp.ep1.3.el4
Fixed · RHSA-2009:0347
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jboss-messaging-0:1.4.0-2.SP3_CP07.1.ep1.el4
Fixed · RHSA-2009:0347
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jboss-remoting-0:2.2.2-3.SP11.0jpp.ep1.1.el4
Fixed · RHSA-2009:0347
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jboss-seam-0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.14.el4
Fixed · RHSA-2009:0347
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jboss-vfs-0:1.0.0-1.ep1.el4
Fixed · RHSA-2009:0347
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jbossas-0:4.3.0-3.GA_CP04.3.ep1.el4
Fixed · RHSA-2009:0347
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jbossts-1:4.2.3-1.SP5_CP04.1jpp.ep1.1.el4
Fixed · RHSA-2009:0347
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jbossweb-0:2.0.0-6.CP09.0jpp.ep1.1.el4
Fixed · RHSA-2009:0347
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jbossws-0:2.0.1-3.SP2_CP05.4.ep1.el4
Fixed · RHSA-2009:0347
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jbossws-common-0:1.0.0-2.GA_CP03.1.ep1.el4
Fixed · RHSA-2009:0347
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jbossws-framework-0:2.0.1-1.GA_CP03.2.ep1.el4
Fixed · RHSA-2009:0347
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jgroups-1:2.4.5-2.ep1.el4
Fixed · RHSA-2009:0347
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
rh-eap-docs-0:4.3.0-4.GA_CP04.ep1.3.el4
Fixed · RHSA-2009:0347
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
tanukiwrapper-0:3.2.1-2jpp.ep1.2.el4
Fixed · RHSA-2009:0347
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
ws-commons-policy-0:1.0-2jpp.ep1.7.el4
Fixed · RHSA-2009:0347
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
ws-scout0-0:0.7-0.rc2.4.el4
Fixed · RHSA-2009:0347
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
xalan-j2-0:2.7.0-2jpp.ep1.5.el4
Fixed · RHSA-2009:0347
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
glassfish-jaxb-0:2.1.4-1.6.1.ep1.el5
Fixed · RHSA-2009:0349
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
glassfish-jsf-0:1.2_10-0jpp.ep1.5.ep5.el5
Fixed · RHSA-2009:0349
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
hibernate3-1:3.2.4-1.SP1_CP07.0jpp.ep1.14.1.el5
Fixed · RHSA-2009:0349
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jacorb-0:2.3.0-1jpp.ep1.7.1.el5
Fixed · RHSA-2009:0349
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jakarta-commons-logging-jboss-0:1.1-4.1.ep1.el5
Fixed · RHSA-2009:0349
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jboss-cache-0:1.4.1-6.SP11.1.ep1.el5
Fixed · RHSA-2009:0349
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jboss-jaxr-0:1.2.0-SP2.0jpp.ep1.3.2.el5
Fixed · RHSA-2009:0349
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jboss-messaging-0:1.4.0-2.SP3_CP07.1.ep1.el5
Fixed · RHSA-2009:0349
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jboss-remoting-0:2.2.2-3.SP11.0jpp.ep1.1.el5
Fixed · RHSA-2009:0349
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jboss-seam-0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.10.el5.1
Fixed · RHSA-2009:0349
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jboss-vfs-0:1.0.0-1.ep1.el5
Fixed · RHSA-2009:0349
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jbossas-0:4.3.0-3.GA_CP04.2.1.ep1.el5
Fixed · RHSA-2009:0349
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jbossts-1:4.2.3-1.SP5_CP04.1jpp.ep1.2.el5
Fixed · RHSA-2009:0349
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jbossweb-0:2.0.0-6.CP09.0jpp.ep1.1.el5
Fixed · RHSA-2009:0349
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jbossws-0:2.0.1-3.SP2_CP05.3.1.ep1.el5
Fixed · RHSA-2009:0349
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jbossws-common-0:1.0.0-2.GA_CP03.1.ep1.el5
Fixed · RHSA-2009:0349
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jbossws-framework-0:2.0.1-1.GA_CP03.2.ep1.el5
Fixed · RHSA-2009:0349
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jgroups-1:2.4.5-2.1.ep1.el5
Fixed · RHSA-2009:0349
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
rh-eap-docs-0:4.3.0-4.GA_CP04.ep1.3.1.el5
Fixed · RHSA-2009:0349
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
tanukiwrapper-0:3.2.1-2jpp.ep1.2.el5
Fixed · RHSA-2009:0349
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
ws-commons-policy-0:1.0-2jpp.ep1.7.el5
Fixed · RHSA-2009:0349
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
ws-scout0-0:0.7-0.rc2.4.el5
Fixed · RHSA-2009:0349
| Product | Package | State | Advisory |
|---|---|---|---|
| JBEAP 4.2.0 for RHEL 4 | glassfish-jsf-0:1.2_10-0jpp.ep1.5.ep5.el4 | Fixed | RHSA-2009:0346 |
| JBEAP 4.2.0 for RHEL 4 | hibernate3-1:3.2.4-1.SP1_CP07.0jpp.ep1.14.el4 | Fixed | RHSA-2009:0346 |
| JBEAP 4.2.0 for RHEL 4 | jacorb-0:2.3.0-1jpp.ep1.7.el4 | Fixed | RHSA-2009:0346 |
| JBEAP 4.2.0 for RHEL 4 | jakarta-commons-fileupload-1:1.1.1-3jpp.ep1.2.el4 | Fixed | RHSA-2009:0346 |
| JBEAP 4.2.0 for RHEL 4 | jakarta-commons-io-0:1.1-0.20051005.2jpp_1rh | Fixed | RHSA-2009:0346 |
| JBEAP 4.2.0 for RHEL 4 | jakarta-commons-logging-jboss-0:1.1-4.ep1.el4 | Fixed | RHSA-2009:0346 |
| JBEAP 4.2.0 for RHEL 4 | jboss-cache-0:1.4.1-6.SP11.1.ep1.el4 | Fixed | RHSA-2009:0346 |
| JBEAP 4.2.0 for RHEL 4 | jboss-jaxr-0:1.2.0-SP2.0jpp.ep1.3.el4 | Fixed | RHSA-2009:0346 |
| JBEAP 4.2.0 for RHEL 4 | jboss-remoting-0:2.2.2-3.SP11.0jpp.ep1.1.el4 | Fixed | RHSA-2009:0346 |
| JBEAP 4.2.0 for RHEL 4 | jboss-seam-0:1.2.1-1.ep1.18.el4 | Fixed | RHSA-2009:0346 |
| JBEAP 4.2.0 for RHEL 4 | jboss-vfs-0:1.0.0-1.ep1.el4 | Fixed | RHSA-2009:0346 |
| JBEAP 4.2.0 for RHEL 4 | jbossas-0:4.2.0-4.GA_CP06.3.ep1.el4 | Fixed | RHSA-2009:0346 |
| JBEAP 4.2.0 for RHEL 4 | jbossts-1:4.2.3-1.SP5_CP04.1jpp.ep1.1.el4 | Fixed | RHSA-2009:0346 |
| JBEAP 4.2.0 for RHEL 4 | jbossweb-0:2.0.0-6.CP09.0jpp.ep1.1.el4 | Fixed | RHSA-2009:0346 |
| JBEAP 4.2.0 for RHEL 4 | jgroups-1:2.4.5-2.ep1.el4 | Fixed | RHSA-2009:0346 |
| JBEAP 4.2.0 for RHEL 4 | rh-eap-docs-0:4.2.0-5.GA_CP06.ep1.3.el4 | Fixed | RHSA-2009:0346 |
| JBEAP 4.2.0 for RHEL 4 | tanukiwrapper-0:3.2.1-2jpp.ep1.2.el4 | Fixed | RHSA-2009:0346 |
| JBEAP 4.2.0 for RHEL 4 | ws-commons-policy-0:1.0-2jpp.ep1.7.el4 | Fixed | RHSA-2009:0346 |
| JBEAP 4.2.0 for RHEL 4 | ws-scout0-0:0.7-0.rc2.4.el4 | Fixed | RHSA-2009:0346 |
| JBEAP 4.2.0 for RHEL 4 | xalan-j2-0:2.7.0-2jpp.ep1.5.el4 | Fixed | RHSA-2009:0346 |
| JBEAP 4.2.0 for RHEL 5 | glassfish-jsf-0:1.2_10-0jpp.ep1.5.ep5.el5 | Fixed | RHSA-2009:0348 |
| JBEAP 4.2.0 for RHEL 5 | hibernate3-1:3.2.4-1.SP1_CP07.0jpp.ep1.14.1.el5 | Fixed | RHSA-2009:0348 |
| JBEAP 4.2.0 for RHEL 5 | jacorb-0:2.3.0-1jpp.ep1.7.1.el5 | Fixed | RHSA-2009:0348 |
| JBEAP 4.2.0 for RHEL 5 | jakarta-commons-logging-jboss-0:1.1-4.1.ep1.el5 | Fixed | RHSA-2009:0348 |
| JBEAP 4.2.0 for RHEL 5 | jboss-cache-0:1.4.1-6.SP11.1.ep1.el5 | Fixed | RHSA-2009:0348 |
| JBEAP 4.2.0 for RHEL 5 | jboss-jaxr-0:1.2.0-SP2.0jpp.ep1.3.2.el5 | Fixed | RHSA-2009:0348 |
| JBEAP 4.2.0 for RHEL 5 | jboss-remoting-0:2.2.2-3.SP11.0jpp.ep1.1.el5 | Fixed | RHSA-2009:0348 |
| JBEAP 4.2.0 for RHEL 5 | jboss-seam-0:1.2.1-1.ep1.12.el5 | Fixed | RHSA-2009:0348 |
| JBEAP 4.2.0 for RHEL 5 | jboss-vfs-0:1.0.0-1.ep1.el5 | Fixed | RHSA-2009:0348 |
| JBEAP 4.2.0 for RHEL 5 | jbossas-0:4.2.0-4.GA_CP06.3.1.ep1.el5 | Fixed | RHSA-2009:0348 |
| JBEAP 4.2.0 for RHEL 5 | jbossts-1:4.2.3-1.SP5_CP04.1jpp.ep1.2.el5 | Fixed | RHSA-2009:0348 |
| JBEAP 4.2.0 for RHEL 5 | jbossweb-0:2.0.0-6.CP09.0jpp.ep1.1.el5 | Fixed | RHSA-2009:0348 |
| JBEAP 4.2.0 for RHEL 5 | jbossws-jboss42-0:1.2.1-1.1.ep1.el5 | Fixed | RHSA-2009:0348 |
| JBEAP 4.2.0 for RHEL 5 | jgroups-1:2.4.5-2.1.ep1.el5 | Fixed | RHSA-2009:0348 |
| JBEAP 4.2.0 for RHEL 5 | rh-eap-docs-0:4.2.0-5.GA_CP06.ep1.3.1.el5 | Fixed | RHSA-2009:0348 |
| JBEAP 4.2.0 for RHEL 5 | tanukiwrapper-0:3.2.1-2jpp.ep1.2.el5 | Fixed | RHSA-2009:0348 |
| JBEAP 4.2.0 for RHEL 5 | ws-commons-policy-0:1.0-2jpp.ep1.7.el5 | Fixed | RHSA-2009:0348 |
| JBEAP 4.2.0 for RHEL 5 | ws-scout0-0:0.7-0.rc2.4.el5 | Fixed | RHSA-2009:0348 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | glassfish-jaxb-0:2.1.4-1.6.ep1.el4 | Fixed | RHSA-2009:0347 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | glassfish-jsf-0:1.2_10-0jpp.ep1.5.ep5.el4 | Fixed | RHSA-2009:0347 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | hibernate3-1:3.2.4-1.SP1_CP07.0jpp.ep1.14.el4 | Fixed | RHSA-2009:0347 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jacorb-0:2.3.0-1jpp.ep1.7.el4 | Fixed | RHSA-2009:0347 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jakarta-commons-fileupload-1:1.1.1-3jpp.ep1.2.el4 | Fixed | RHSA-2009:0347 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jakarta-commons-io-0:1.1-0.20051005.2jpp_1rh | Fixed | RHSA-2009:0347 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jakarta-commons-logging-jboss-0:1.1-4.ep1.el4 | Fixed | RHSA-2009:0347 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jboss-cache-0:1.4.1-6.SP11.1.ep1.el4 | Fixed | RHSA-2009:0347 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jboss-jaxr-0:1.2.0-SP2.0jpp.ep1.3.el4 | Fixed | RHSA-2009:0347 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jboss-messaging-0:1.4.0-2.SP3_CP07.1.ep1.el4 | Fixed | RHSA-2009:0347 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jboss-remoting-0:2.2.2-3.SP11.0jpp.ep1.1.el4 | Fixed | RHSA-2009:0347 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jboss-seam-0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.14.el4 | Fixed | RHSA-2009:0347 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jboss-vfs-0:1.0.0-1.ep1.el4 | Fixed | RHSA-2009:0347 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jbossas-0:4.3.0-3.GA_CP04.3.ep1.el4 | Fixed | RHSA-2009:0347 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jbossts-1:4.2.3-1.SP5_CP04.1jpp.ep1.1.el4 | Fixed | RHSA-2009:0347 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jbossweb-0:2.0.0-6.CP09.0jpp.ep1.1.el4 | Fixed | RHSA-2009:0347 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jbossws-0:2.0.1-3.SP2_CP05.4.ep1.el4 | Fixed | RHSA-2009:0347 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jbossws-common-0:1.0.0-2.GA_CP03.1.ep1.el4 | Fixed | RHSA-2009:0347 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jbossws-framework-0:2.0.1-1.GA_CP03.2.ep1.el4 | Fixed | RHSA-2009:0347 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jgroups-1:2.4.5-2.ep1.el4 | Fixed | RHSA-2009:0347 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | rh-eap-docs-0:4.3.0-4.GA_CP04.ep1.3.el4 | Fixed | RHSA-2009:0347 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | tanukiwrapper-0:3.2.1-2jpp.ep1.2.el4 | Fixed | RHSA-2009:0347 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | ws-commons-policy-0:1.0-2jpp.ep1.7.el4 | Fixed | RHSA-2009:0347 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | ws-scout0-0:0.7-0.rc2.4.el4 | Fixed | RHSA-2009:0347 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | xalan-j2-0:2.7.0-2jpp.ep1.5.el4 | Fixed | RHSA-2009:0347 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | glassfish-jaxb-0:2.1.4-1.6.1.ep1.el5 | Fixed | RHSA-2009:0349 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | glassfish-jsf-0:1.2_10-0jpp.ep1.5.ep5.el5 | Fixed | RHSA-2009:0349 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | hibernate3-1:3.2.4-1.SP1_CP07.0jpp.ep1.14.1.el5 | Fixed | RHSA-2009:0349 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jacorb-0:2.3.0-1jpp.ep1.7.1.el5 | Fixed | RHSA-2009:0349 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jakarta-commons-logging-jboss-0:1.1-4.1.ep1.el5 | Fixed | RHSA-2009:0349 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jboss-cache-0:1.4.1-6.SP11.1.ep1.el5 | Fixed | RHSA-2009:0349 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jboss-jaxr-0:1.2.0-SP2.0jpp.ep1.3.2.el5 | Fixed | RHSA-2009:0349 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jboss-messaging-0:1.4.0-2.SP3_CP07.1.ep1.el5 | Fixed | RHSA-2009:0349 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jboss-remoting-0:2.2.2-3.SP11.0jpp.ep1.1.el5 | Fixed | RHSA-2009:0349 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jboss-seam-0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.10.el5.1 | Fixed | RHSA-2009:0349 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jboss-vfs-0:1.0.0-1.ep1.el5 | Fixed | RHSA-2009:0349 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jbossas-0:4.3.0-3.GA_CP04.2.1.ep1.el5 | Fixed | RHSA-2009:0349 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jbossts-1:4.2.3-1.SP5_CP04.1jpp.ep1.2.el5 | Fixed | RHSA-2009:0349 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jbossweb-0:2.0.0-6.CP09.0jpp.ep1.1.el5 | Fixed | RHSA-2009:0349 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jbossws-0:2.0.1-3.SP2_CP05.3.1.ep1.el5 | Fixed | RHSA-2009:0349 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jbossws-common-0:1.0.0-2.GA_CP03.1.ep1.el5 | Fixed | RHSA-2009:0349 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jbossws-framework-0:2.0.1-1.GA_CP03.2.ep1.el5 | Fixed | RHSA-2009:0349 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jgroups-1:2.4.5-2.1.ep1.el5 | Fixed | RHSA-2009:0349 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | rh-eap-docs-0:4.3.0-4.GA_CP04.ep1.3.1.el5 | Fixed | RHSA-2009:0349 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | tanukiwrapper-0:3.2.1-2jpp.ep1.2.el5 | Fixed | RHSA-2009:0349 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | ws-commons-policy-0:1.0-2jpp.ep1.7.el5 | Fixed | RHSA-2009:0349 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | ws-scout0-0:0.7-0.rc2.4.el5 | Fixed | RHSA-2009:0349 |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (12)
- http://rhn.redhat.com/errata/RHSA-2009-0346.html vendor-advisoryx_refsource_REDHATPatch
- http://rhn.redhat.com/errata/RHSA-2009-0347.html vendor-advisoryx_refsource_REDHATPatch
- http://rhn.redhat.com/errata/RHSA-2009-0348.html vendor-advisoryx_refsource_REDHATVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2009-0349.html vendor-advisoryx_refsource_REDHATPatchVendor Advisory
- http://secunia.com/advisories/34112 third-party-advisoryx_refsource_SECUNIA
- http://www.securityfocus.com/bid/34023 vdb-entryx_refsource_BID
- http://www.securitytracker.com/id?1021817 vdb-entryx_refsource_SECTRACK
- https://access.redhat.com/security/cve/CVE-2009-0027 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=479668 x_refsource_CONFIRMIssue Tracking
- https://jira.jboss.org/jira/browse/JBPAPP-1548 x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2009-0027
- https://www.cve.org/CVERecord?id=CVE-2009-0027
| Link | Providers | Tags |
|---|---|---|
| http://rhn.redhat.com/errata/RHSA-2009-0346.html | vendor-advisoryx_refsource_REDHATPatch | |
| http://rhn.redhat.com/errata/RHSA-2009-0347.html | vendor-advisoryx_refsource_REDHATPatch | |
| http://rhn.redhat.com/errata/RHSA-2009-0348.html | vendor-advisoryx_refsource_REDHATVendor Advisory | |
| http://rhn.redhat.com/errata/RHSA-2009-0349.html | vendor-advisoryx_refsource_REDHATPatchVendor Advisory | |
| http://secunia.com/advisories/34112 | third-party-advisoryx_refsource_SECUNIA | |
| http://www.securityfocus.com/bid/34023 | vdb-entryx_refsource_BID | |
| http://www.securitytracker.com/id?1021817 | vdb-entryx_refsource_SECTRACK | |
| https://access.redhat.com/security/cve/CVE-2009-0027 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=479668 | x_refsource_CONFIRMIssue Tracking | |
| https://jira.jboss.org/jira/browse/JBPAPP-1548 | x_refsource_CONFIRM | |
| https://nvd.nist.gov/vuln/detail/CVE-2009-0027 | ||
| https://www.cve.org/CVERecord?id=CVE-2009-0027 |
Change history (0)
No recorded changes yet.