CVE-2016-5725

Related Files

Red Hat Security Advisory 2017-3115-01

Posted Nov 2, 2017

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2017-3115-01 - Red Hat JBoss Fuse, based on Apache ServiceMix, provides a small-footprint, flexible, open source enterprise service bus and integration platform. Red Hat JBoss A-MQ, based on Apache ActiveMQ, is a standards compliant messaging system that is tailored for use in mission critical applications. This patch is an update to Red Hat JBoss Fuse 6.3 and Red Hat JBoss A-MQ 6.3. It includes bug fixes and enhancements, which are documented in the readme.txt file included with the patch files. Multiple security issues have been addressed.

tags | advisory

systems | linux, redhat

advisories | CVE-2015-3254, CVE-2016-5725, CVE-2016-9878

SHA-256 | c0bed40df8f1940b41e2482af7c455e5c471ee724837c44da6bf160cf08f7a3d

Download | Favorite | View

jsch 0.1.53 Path Traversal

Posted Sep 21, 2016

Authored by oststrom

A malicious sftp server may force a client-side relative path traversal in jsch's implementation for recursive sftp-get allowing the server to write files outside the clients download basedir with effective permissions of the jsch sftp client process. Versions 0.1.53 and below are affected.

tags | exploit

advisories | CVE-2016-5725

SHA-256 | dfd3deafc8949119431558bc8219895f763a1d7d6a7b008eccb812e5d19ba8c3

Download | Favorite | View