what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Red Hat Security Advisory 2013-1194-01

Posted Sep 4, 2013

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2013-1194-01 - JBoss Web is the web container, based on Apache Tomcat, in Red Hat JBoss Enterprise Application Platform. It provides a single deployment platform for the JavaServer Pages and Java Servlet technologies. A flaw was found in the way the DiskFileItem class handled NULL characters in file names. A remote attacker able to supply a serialized instance of the DiskFileItem class, which will be deserialized on a server, could use this flaw to write arbitrary content to any location on the server that is accessible to the user running the application server process.

tags | advisory, java, remote, web, arbitrary

systems | linux, redhat

advisories | CVE-2013-2185

SHA-256 | 6f6d113bd6057b90caa24b61b15e39fadb34cbae8328babe5c75452e98647549

Download | Favorite | View

Related Files

No related files