Press CTR-C to copy XML [help]

# Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

## Project: Sample Application

Scan Information (show all):

- dependency-check version: 1.2.1
- Report Generated On: May 10, 2014 at 07:22:54 EDT
- Dependencies Scanned: 155
- Vulnerable Dependencies: 24
- Vulnerabilities Found: 141
- Vulnerabilities Suppressed: 0
- ...
- NVD CVE 2002: 08/05/2014 07:02:21
- NVD CVE 2003: 08/05/2014 06:39:27
- NVD CVE 2004: 08/05/2014 06:34:28
- NVD CVE 2005: 08/05/2014 06:25:21
- NVD CVE 2006: 08/05/2014 06:09:48
- NVD CVE 2007: 08/05/2014 05:44:36
- NVD CVE 2008: 08/05/2014 05:21:04
- NVD CVE 2009: 08/05/2014 04:55:13
- NVD CVE 2010: 08/05/2014 04:35:59
- NVD CVE 2011: 08/05/2014 04:13:25
- NVD CVE 2012: 08/05/2014 03:53:38
- NVD CVE 2013: 08/05/2014 03:30:48
- NVD CVE 2014: 08/05/2014 03:05:21
- NVD CVE Modified: 10/05/2014 06:02:26

Dependency Display: show all

- activation-1.1.jar
- annogen-0.1.0.jar
- ant-1.7.0.jar
- ant-launcher-1.7.0.jar
- aopalliance-1.0.jar
- axiom-api-1.2.7.jar
- axiom-dom-1.2.7.jar
- axiom-impl-1.2.7.jar
- axis-1.4.jar
- axis2-kernel-1.4.1.jar
  - axis2-adb-1.4.1.jar
  - axis2-spring-1.4.1.jar
- backport-util-concurrent-3.1.jar
- batik-util-1.7.jar
- bcprov-jdk14-140.jar
- commons-cli-1.2.jar
- commons-codec-1.2.jar
- commons-fileupload-1.2.1.jar
- commons-httpclient-3.1.jar
- commons-pool-1.5.3.jar
- commons-validator-1.4.0.jar
- daytrader-ear-2.1.7.ear
- daytrader-ear-2.1.7.ear\dt-ejb.jar
- daytrader-ear-2.1.7.ear\geronimo-jaxrpc_1.1_spec-2.0.0.jar
- daytrader-ear-2.1.7.ear\streamer.jar
- daytrader-ear-2.1.7.ear\web.war
- daytrader-ear-2.1.7.ear\wsappclient.jar
- dojo-war-1.3.0.war
- ehcache-core-2.2.0.jar
- FileHelpers.2.0.0.0.nupkg
- FileHelpers.2.0.0.0.nupkg\FileHelpers.dll
- FileHelpers.2.0.0.0.nupkg\FileHelpers.ExcelStorage.dll
- FileHelpers.2.0.0.0.nupkg\FileHelpers.nuspec
- FileHelpers.2.0.0.0.nupkg\Interop.Excel.dll
- FileHelpers.2.0.0.0.nupkg\Interop.Office.dll
- freemarker-2.3.12.jar
- gcm-server-1.0.2.jar
- geronimo-javamail_1.4_spec-1.2.jar
- geronimo-jms_1.1_spec-1.1.1.jar
  - geronimo-jta_1.1_spec-1.1.1.jar
- geronimo-jpa_2.0_spec-1.1.jar
- geronimo-stax-api_1.0_spec-1.0.1.jar
  - geronimo-activation_1.1_spec-1.0.1.jar
- guice-3.0.jar
- hazelcast-2.5.jar
- hibernate3.jar
- httpcore-4.0-beta1.jar
- httpcore-nio-4.0-beta1.jar
- javax.inject-1.jar
- jaxb-xercesImpl-1.5.jar
- jaxen-1.1.1.jar
- jetty-6.1.0.jar
  - jetty-util-6.1.0.jar
- jruby-1.6.3.jar
- jruby-1.6.3.jar\jffi-1.0.dll
- jruby-1.6.3.jar\jffi-1.0.dll
- jruby-1.6.3.jar\jline32.dll
  - jython-standalone-2.7-b1.jar\jline32.dll
- jruby-1.6.3.jar\jline64.dll
  - jython-standalone-2.7-b1.jar\jline64.dll
- jruby-complete-1.7.4.jar
- jruby-complete-1.7.4.jar\bcpkix-jdk15on-147.jar
- jruby-complete-1.7.4.jar\bcprov-jdk15on-147.jar
- jruby-complete-1.7.4.jar\generator.jar
- jruby-complete-1.7.4.jar\jansi.dll
- jruby-complete-1.7.4.jar\jansi.dll
- jruby-complete-1.7.4.jar\jffi-1.2.dll
  - jython-standalone-2.7-b1.jar\jffi-1.2.dll
- jruby-complete-1.7.4.jar\jffi-1.2.dll
  - jython-standalone-2.7-b1.jar\jffi-1.2.dll
- jruby-complete-1.7.4.jar\jopenssl.jar
- jruby-complete-1.7.4.jar\jrubyw.exe
- jruby-complete-1.7.4.jar\kryptcore.jar
- jruby-complete-1.7.4.jar\kryptproviderjdk.jar
- jruby-complete-1.7.4.jar\META-INF/maven/com.jcraft/jzlib/pom.xml
- jruby-complete-1.7.4.jar\parser.jar
- json-simple-1.1.jar
- jython-standalone-2.7-b1.jar
- jython-standalone-2.7-b1.jar\wininst-6.0.exe
- jython-standalone-2.7-b1.jar\wininst-7.1.exe
- jython-standalone-2.7-b1.jar\wininst-8.0.exe
- jython-standalone-2.7-b1.jar\wininst-9.0-amd64.exe
- jython-standalone-2.7-b1.jar\wininst-9.0.exe
- log4net.2.0.3.nuspec
- log4net.dll
- mail-1.4.jar
- maven-scm-api-1.8.1.jar
- maven-scm-provider-cvs-commons-1.8.1.jar
- maven-scm-provider-cvsexe-1.8.1.jar
- neethi-2.0.4.jar
- ognl-2.6.11.jar
- openjpa-2.0.1.jar
- org.mortbay.jetty.jar
- org.mortbay.jmx.jar
- plexus-utils-3.0.7.jar
- regexp-1.3.jar
- serp-1.13.1.jar
- servlet-api-2.5.jar
- slf4j-api-1.5.11.jar
- spring-core-2.5.5.jar
  - spring-beans-2.5.5.jar
  - spring-context-2.5.5.jar
  - spring-context-support-2.5.5.jar
  - spring-web-2.5.5.jar
  - spring-webmvc-2.5.5.jar
- spring-core-3.0.0.RELEASE.jar
- stagedhttp-modified.tar\commons-httpclient-2.0.jar
- stagedhttp-modified.tar\commons-logging.jar
- stagedhttp-modified.tar\dom4j.jar
- stagedhttp-modified.tar\jgroups-all.jar
- stagedhttp-modified.tar\log4j.jar
- stagedhttp-modified.tar\mail.jar
- stagedhttp-modified.tar\serializer.jar
- stagedhttp-modified.tar\xalan.jar
- stagedhttp-modified.tar\xmlsec-1.3.0.jar
- stagedhttp-modified.tar\xss4j.jar
- struts.jar
  - file.tar.gz\file.tar\struts.jar
  - file.tar\struts.jar
  - file.tgz\file.tar\struts.jar
- struts2-core-2.1.2.jar
- uber-1.0-SNAPSHOT.jar
- uber-1.0-SNAPSHOT.jar\META-INF/maven/com.yammer.metrics/metrics-jetty/pom.xml
- uber-1.0-SNAPSHOT.jar\META-INF/maven/org.eclipse.jetty/jetty-continuation/pom.xml
- uber-1.0-SNAPSHOT.jar\META-INF/maven/org.eclipse.jetty/jetty-http/pom.xml
- uber-1.0-SNAPSHOT.jar\META-INF/maven/org.eclipse.jetty/jetty-io/pom.xml
- uber-1.0-SNAPSHOT.jar\META-INF/maven/org.eclipse.jetty/jetty-security/pom.xml
- uber-1.0-SNAPSHOT.jar\META-INF/maven/org.eclipse.jetty/jetty-server/pom.xml
- uber-1.0-SNAPSHOT.jar\META-INF/maven/org.eclipse.jetty/jetty-servlet/pom.xml
- uber-1.0-SNAPSHOT.jar\META-INF/maven/org.eclipse.jetty/jetty-util/pom.xml
- velocity-1.7.jar
- war-4.0.war
- war-4.0.war\commons-fileupload-1.1.1.jar
- war-4.0.war\commons-io-1.3.1.jar
- war-4.0.war\console-core-4.0.jar
- war-4.0.war\dojo-ajax-nodemo-0.4.1.jar
- war-4.0.war\json-1.0.jar
- war-4.0.war\prototype-1.5.0.jar
- war-4.0.war\webui-jsf-4.0.2.10.jar
- war-4.0.war\webui-jsf-suntheme-4.0.2.10.jar
- woden-api-1.0M8.jar
- woden-impl-dom-1.0M8.jar
- wsdl4j-1.6.2.jar
- wss4j-1.5.7.jar
- wstx-asl-3.2.4.jar
- xalan-2.7.0.jar
- xercesImpl-2.8.1.jar
- xml-apis-1.3.04.jar
- xmlParserAPIs-2.6.0.jar
- xmlpull-1.1.3.1.jar
- XmlSchema-1.4.2.jar
- xmlsec-1.4.2.jar
- xpp3_min-1.1.4c.jar
- xstream-1.4.2.jar
- xwork-2.1.1.jar

## Dependencies

### activation-1.1.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\activation-1.1.jar
MD5: 8AE38E87CD4F86059C0294A8FE3E0B18
SHA1: E6CB541461C2834BDEA3EB920F1884D1EB508B50

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.1
file | name | activation-1.1
jar | package | activation
jar | package | javax
jar | package name | activation
jar | package name | javax
jar | package name | sun
jar (hint) | package name | oracle
Manifest | extension-name | javax.activation
Manifest | Implementation-Vendor | Sun Microsystems, Inc.
Manifest | Implementation-Vendor-Id | com.sun
Manifest | Implementation-Version | 1.1
Manifest | specification-title | JavaBeans(TM) Activation Framework Specification
Manifest | specification-vendor | Sun Microsystems, Inc.
Manifest | specification-version | 1.1
nexus | artifactid | activation
nexus | groupid | javax.activation
nexus | version | 1.1

#### Identifiers

- maven: javax.activation:activation:1.1 Confidence:HIGHEST

### annogen-0.1.0.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\annogen-0.1.0.jar
MD5: FF275C3491AC6715AD9F6C22A9660503
SHA1: A8DE34EA7AA93765D24DC16EC9C61AF5160BB899

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 0.1.0
file | name | annogen-0.1.0
jar | package | codehaus
jar | package | internal
jar | package | jam
nexus | artifactid | annogen
nexus | groupid | annogen
nexus | version | 0.1.0

#### Identifiers

- maven: annogen:annogen:0.1.0 Confidence:HIGHEST

### ant-1.7.0.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\ant-1.7.0.jar
MD5: 133E8979E9C11450F557CA890177FE0A
SHA1: 9746AF1A485E50CF18DCB232489032A847067066

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.7.0
file | name | ant-1.7.0
jar | package | ant
jar | package | apache
jar | package | tools
nexus | artifactid | ant
nexus | groupid | org.apache.ant
nexus | version | 1.7.0

#### Identifiers

- maven: org.apache.ant:ant:1.7.0 Confidence:HIGHEST

### ant-launcher-1.7.0.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\ant-launcher-1.7.0.jar
MD5: E0C8B3F9390A5D784BBDB6A21F2ABD1D
SHA1: E7E30789211E074AA70EF3EAEA59BD5B22A7FA7A

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.7.0
file | name | ant-launcher-1.7.0
jar | package | ant
jar | package | apache
jar | package | launch
jar | package | tools
nexus | artifactid | ant-launcher
nexus | groupid | org.apache.ant
nexus | version | 1.7.0

#### Identifiers

- maven: org.apache.ant:ant-launcher:1.7.0 Confidence:HIGHEST

### aopalliance-1.0.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\aopalliance-1.0.jar
MD5: 04177054E180D09E3998808EFA0401C7
SHA1: 0235BA8B489512805AC13A8F9EA77A1CA5EBE3E8

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.0
file | name | aopalliance-1.0
jar | package | aopalliance
jar | package | intercept
nexus | artifactid | aopalliance
nexus | groupid | aopalliance
nexus | version | 1.0

#### Identifiers

- maven: aopalliance:aopalliance:1.0 Confidence:HIGHEST

### axiom-api-1.2.7.jar

Description: The Axiom API

License:

    http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\axiom-api-1.2.7.jar
MD5: B06E716D6E5C3A0E3289D28126D01121
SHA1: AA260A5F3FCAEE3B95B551A9BBCBE63F56E5A2AD

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.2.7
file | name | axiom-api-1.2.7
jar | package name | apache
jar | package name | axiom
jar | package name | om
Manifest | bundle-docurl | http://www.apache.org/
Manifest | Bundle-Name | Axiom API
Manifest | bundle-symbolicname | org.apache.ws.commons.axiom.axiom-api
Manifest | Bundle-Vendor | Apache Software Foundation
Manifest | Bundle-Version | 1.2.7
nexus | artifactid | axiom-api
nexus | groupid | org.apache.ws.commons.axiom
nexus | version | 1.2.7
pom | artifactid | axiom-api
pom | description | The Axiom API
pom | name | Axiom API
pom | version | 1.2.7

#### Identifiers

- maven: org.apache.ws.commons.axiom:axiom-api:1.2.7 Confidence:HIGHEST

### axiom-dom-1.2.7.jar

Description: The Axiom DOM implementation.

License:

    http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\axiom-dom-1.2.7.jar
MD5: 9D1FF1229A42B8A93FC1DB8C349CE830
SHA1: 34F6D22244963BC617F3971A826104162EEF1DA4

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.2.7
file | name | axiom-dom-1.2.7
jar | package name | apache
jar | package name | axiom
jar | package name | impl
jar | package name | om
Manifest | bundle-docurl | http://www.apache.org/
Manifest | Bundle-Name | Axiom DOM
Manifest | bundle-symbolicname | org.apache.ws.commons.axiom.axiom-dom
Manifest | Bundle-Vendor | Apache Software Foundation
Manifest | Bundle-Version | 1.2.7
nexus | artifactid | axiom-dom
nexus | groupid | org.apache.ws.commons.axiom
nexus | version | 1.2.7
pom | artifactid | axiom-dom
pom | description | The Axiom DOM implementation.
pom | name | Axiom DOM
pom | version | 1.2.7

#### Identifiers

- maven: org.apache.ws.commons.axiom:axiom-dom:1.2.7 Confidence:HIGHEST

### axiom-impl-1.2.7.jar

Description: The Axiom default implementation.

License:

    http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\axiom-impl-1.2.7.jar
MD5: B58763085089FE3D4D106386323CCD63
SHA1: 378B814D1A6129A3E8175D95CF60D48C60AE9D51

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.2.7
file | name | axiom-impl-1.2.7
jar | package name | apache
jar | package name | axiom
jar | package name | impl
jar | package name | om
Manifest | bundle-docurl | http://www.apache.org/
Manifest | Bundle-Name | Axiom API
Manifest | bundle-symbolicname | org.apache.ws.commons.axiom.axiom-impl
Manifest | Bundle-Vendor | Apache Software Foundation
Manifest | Bundle-Version | 1.2.7
nexus | artifactid | axiom-impl
nexus | groupid | org.apache.ws.commons.axiom
nexus | version | 1.2.7
pom | artifactid | axiom-impl
pom | description | The Axiom default implementation.
pom | name | Axiom Impl
pom | version | 1.2.7

#### Identifiers

- maven: org.apache.ws.commons.axiom:axiom-impl:1.2.7 Confidence:HIGHEST

### axis-1.4.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\axis-1.4.jar
MD5: 03DCFDD88502505CC5A805A128BFDD8D
SHA1: 94A9CE681A42D0352B3AD22659F67835E560D107

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.4
file | name | axis-1.4
jar | package | apache
jar | package | axis
nexus | artifactid | axis
nexus | groupid | org.apache.axis
nexus | version | 1.4

#### Identifiers

- cpe: cpe:/a:apache:axis:1.4 Confidence:HIGHEST
- maven: org.apache.axis:axis:1.4 Confidence:HIGHEST

#### Published Vulnerabilities

CVE-2012-5784

Severity: Medium
CVSS Score: 5.8
CWE: CWE-20 Improper Input Validation

Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

- BID - 56408
- MISC - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
- REDHAT - RHSA-2013:0269
- REDHAT - RHSA-2013:0683
- REDHAT - RHSA-2014:0037
- SECUNIA - 51219
- XF - apache-axis-ssl-spoofing(79829)

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:axis:1.4 and all previous versions
- ...
- cpe:/a:apache:activemq:-
- cpe:/a:apache:axis:-:alpha1
- cpe:/a:apache:axis:-:alpha2
- cpe:/a:apache:axis:-:alpha3
- cpe:/a:apache:axis:-:beta1
- cpe:/a:apache:axis:-:beta2
- cpe:/a:apache:axis:-:beta3
- cpe:/a:apache:axis:1.0
- cpe:/a:apache:axis:1.0:beta
- cpe:/a:apache:axis:1.0:rc1
- cpe:/a:apache:axis:1.0:rc2
- cpe:/a:apache:axis:1.1
- cpe:/a:apache:axis:1.1:beta
- cpe:/a:apache:axis:1.1:rc1
- cpe:/a:apache:axis:1.1:rc2
- cpe:/a:apache:axis:1.2
- cpe:/a:apache:axis:1.2:alpha
- cpe:/a:apache:axis:1.2:beta1
- cpe:/a:apache:axis:1.2:beta2
- cpe:/a:apache:axis:1.2:beta3
- cpe:/a:apache:axis:1.2:rc1
- cpe:/a:apache:axis:1.2:rc2
- cpe:/a:apache:axis:1.2:rc3
- cpe:/a:apache:axis:1.2.1
- cpe:/a:apache:axis:1.3
- cpe:/a:apache:axis:1.4 and all previous versions
- cpe:/a:paypal:mass_pay:-
- cpe:/a:paypal:payments_pro:-
- cpe:/a:paypal:transactional_information_soap:-

### axis2-kernel-1.4.1.jar

Description: Core Parts of Axis 2.0. This includes Axis 2.0 engine, Client API, Addressing support, etc.,

License:

    http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\axis2-kernel-1.4.1.jar
MD5: F5F5255626BE01918CECE10D14F937DF
SHA1: FD59331A4BBC734C290744316E627EA343329F49

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.4.1
file | name | axis2-kernel-1.4.1
jar | package name | addressing
jar | package name | apache
jar | package name | axis2
jar | package name | client
jar | package name | engine
jar | package name | http
Manifest | bundle-docurl | http://www.apache.org/
Manifest | Bundle-Name | Axis2 Kernel
Manifest | bundle-symbolicname | org.apache.axis2.kernel
Manifest | Bundle-Vendor | Apache Software Foundation
Manifest | Bundle-Version | 1.4
pom | artifactid | axis2-kernel
pom | description | Core Parts of Axis 2.0. This includes Axis 2.0 engine, Client API, Addressing support, etc.,
pom | name | Apache Axis2 - Kernel

#### Related Dependencies

- axis2-adb-1.4.1.jar
  - File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\axis2-adb-1.4.1.jar
  - SHA1: 800C809FDE5746D679E4083D64B3C6F4CB95F74B
  - MD5: E29969FDD0DFDC361A9E116A9AD49C43
  - maven: org.apache.axis2:axis2-adb:1.4.1
- axis2-spring-1.4.1.jar
  - File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\axis2-spring-1.4.1.jar
  - SHA1: C9D1A9A7BCB5665C4B3E5224BE95E353F8285912
  - MD5: 561AE3FC450359077DA8C54BDD081C1B
  - maven: org.apache.axis2:axis2-spring:1.4.1

#### Identifiers

- cpe: cpe:/a:apache:axis2:1.4.1 Confidence:HIGHEST

#### Published Vulnerabilities

CVE-2012-5785

Severity: Medium
CVSS Score: 5.8
CWE: CWE-20 Improper Input Validation

Apache Axis2/Java 1.6.2 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

- BID - 56408
- MISC - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
- SECUNIA - 51219
- XF - apache-axis2-ssl-spoofing(79830)

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:axis2:1.6.2 and all previous versions
- ...
- cpe:/a:apache:axis2:1.5.1
- cpe:/a:apache:axis2:1.5.2
- cpe:/a:apache:axis2:1.5.3
- cpe:/a:apache:axis2:1.5.4
- cpe:/a:apache:axis2:1.5.5
- cpe:/a:apache:axis2:1.5.6
- cpe:/a:apache:axis2:1.6
- cpe:/a:apache:axis2:1.6.1
- cpe:/a:apache:axis2:1.6.2 and all previous versions

CVE-2012-5351

Severity: Medium
CVSS Score: 6.4
CWE: CWE-287 Improper Authentication

Apache Axis2 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack," a different vulnerability than CVE-2012-4418.

- MISC - http://www.nds.rub.de/media/nds/veroeffentlichungen/2012/08/22/BreakingSAML_3.pdf
- XF - apache-axis2-saml-sec-bypass(79487)

Vulnerable Software & Versions:

- cpe:/a:apache:axis2:-

CVE-2012-4418

Severity: Medium
CVSS Score: 5.8
CWE: CWE-287 Improper Authentication

Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."

- BID - 55508
- CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=856755
- MISC - http://www.nds.rub.de/media/nds/veroeffentlichungen/2012/08/22/BreakingSAML_3.pdf
- MLIST - [oss-security] 20120912 CVE Request: Apache Axis2 XML Signature Wrapping Attack
- MLIST - [oss-security] 20120912 Re: CVE Request: Apache Axis2 XML Signature Wrapping Attack

Vulnerable Software & Versions:

- cpe:/a:apache:axis2:-

CVE-2010-2103

Severity: Medium
CVSS Score: 4.3
CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Cross-site scripting (XSS) vulnerability in axis2-admin/axis2-admin/engagingglobally in the administration console in Apache Axis2/Java 1.4.1, 1.5.1, and possibly other versions, as used in SAP Business Objects 12, 3com IMC, and possibly other products, allows remote attackers to inject arbitrary web script or HTML via the modules parameter. NOTE: some of these details are obtained from third party information.

- BID - 40327
- BUGTRAQ - 20100521 PR10-03: Authenticated Cross-Site Scripting (XSS) within the Apache Axis2 administration console
- CONFIRM - https://kb.juniper.net/KB27373
- EXPLOIT-DB - 12689
- MISC - http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf
- MISC - http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-03
- OSVDB - 64844
- SECUNIA - 39906
- VUPEN - ADV-2010-1215
- XF - axis2-modules-xss(58790)

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:axis2:1.4.1
- ...
- cpe:/a:apache:axis2:1.4.1
- cpe:/a:apache:axis2:1.5.1

CVE-2010-1632

Severity: High
CVSS Score: 7.5
CWE: CWE-20 Improper Input Validation

Apache Axis2 before 1.5.2, as used in IBM WebSphere Application Server (WAS) 7.0 through 7.0.0.12, IBM Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, IBM Feature Pack for Web 2.0 1.0.1.0, Apache Synapse, Apache ODE, Apache Tuscany, Apache Geronimo, and other products, does not properly reject DTDs in SOAP messages, which allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via a crafted DTD, as demonstrated by an entity declaration in a request to the Synapse SimpleStockQuoteService.

- CONFIRM - http://geronimo.apache.org/2010/07/21/apache-geronimo-v216-released.html
- CONFIRM - http://geronimo.apache.org/21x-security-report.html
- CONFIRM - http://geronimo.apache.org/22x-security-report.html
- CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg21433581
- CONFIRM - https://issues.apache.org/jira/browse/AXIS2-4450
- CONFIRM - https://issues.apache.org/jira/browse/GERONIMO-5383
- CONFIRM - https://svn.apache.org/repos/asf/axis/axis2/java/core/security/CVE-2010-1632.pdf
- MISC - http://markmail.org/message/e4yiij7lfexastvl
- SECUNIA - 40252
- SECUNIA - 40279
- SECUNIA - 41016
- SECUNIA - 41025
- VUPEN - ADV-2010-1528
- VUPEN - ADV-2010-1531

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:axis2:1.4.1
- ...
- cpe:/a:apache:axis2:1.3
- cpe:/a:apache:axis2:1.4
- cpe:/a:apache:axis2:1.4.1
- cpe:/a:apache:axis2:1.5
- cpe:/a:apache:axis2:1.5.1 and all previous versions

CVE-2010-0219

Severity: High
CVSS Score: 10.0
CWE: CWE-255 Credentials Management

Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service.

- BUGTRAQ - 20101014 R7-0037: SAP BusinessObjects Axis2 Default Admin Password
- CERT-VN - VU#989719
- CONFIRM - https://kb.juniper.net/KB27373
- EXPLOIT-DB - 15869
- MISC - http://retrogod.altervista.org/9sg_ca_d2d.html
- MISC - http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf
- MISC - http://www.rapid7.com/security-center/advisories/R7-0037.jsp
- MISC - https://service.sap.com/sap/support/notes/1432881
- OSVDB - 70233
- SECTRACK - 1024929
- SECUNIA - 41799
- SECUNIA - 42763
- VUPEN - ADV-2010-2673
- XF - businessobjects-dswsbobje-security-bypass(62523)

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:axis2:1.4.1
- ...
- cpe:/a:apache:axis2:1.3
- cpe:/a:apache:axis2:1.4
- cpe:/a:apache:axis2:1.4.1
- cpe:/a:apache:axis2:1.5
- cpe:/a:apache:axis2:1.5.1
- cpe:/a:apache:axis2:1.5.2
- cpe:/a:apache:axis2:1.6
- cpe:/a:sap:businessobjects:3.2::enterprise_xi

### backport-util-concurrent-3.1.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\backport-util-concurrent-3.1.jar
MD5: 748BB0CBF4780B2E3121DC9C12E10CD9
SHA1: 682F7AC17FED79E92F8E87D8455192B63376347B

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 3.1
file | name | backport-util-concurrent-3.1
jar | package | backport
jar | package | edu
jar | package | emory
jar | package | mathcs
nexus | artifactid | backport-util-concurrent
nexus | groupid | backport-util-concurrent
nexus | version | 3.1

#### Identifiers

- maven: backport-util-concurrent:backport-util-concurrent:3.1 Confidence:HIGHEST

### batik-util-1.7.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\batik-util-1.7.jar
MD5: 99F99684B6DF6200E529575DCCCE9970
SHA1: 5C4DD0DD9A86A2FBA2C6EA26FB62B32B21B2A61E

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.7
file | name | batik-util-1.7
jar | package | apache
jar | package | batik
jar | package | util
jar | package name | apache
jar | package name | batik
jar | package name | io
jar | package name | util
Manifest | build-id | 20080106-111717-EST
Manifest | Implementation-Title | Batik utility library
Manifest | Implementation-Vendor | The Apache Software Foundation (http://xmlgraphics.apache.org/batik/)
Manifest | Implementation-Version | 1.7+r608262
nexus | artifactid | batik-util
nexus | groupid | org.apache.xmlgraphics
nexus | version | 1.7

#### Identifiers

- maven: org.apache.xmlgraphics:batik-util:1.7 Confidence:HIGHEST

### bcprov-jdk14-140.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\bcprov-jdk14-140.jar
MD5: 794C26ABA4E5B65525894564B2F96BCB
SHA1: 57F4571D76FAEF80F06F63DC22DB1A1250B35394

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 14.140
file | name | bcprov-jdk14-140
jar | package | bouncycastle
jar | package name | bouncycastle
jar | package name | provider
Manifest | extension-name | org.bouncycastle.bcprovider
Manifest | Implementation-Vendor | BouncyCastle.org
Manifest | Implementation-Vendor-Id | org.bouncycastle
Manifest | Implementation-Version | 1.40.0
Manifest | specification-vendor | BouncyCastle.org
Manifest | specification-version | 1.1
nexus | artifactid | bcprov-jdk14
nexus | groupid | bouncycastle
nexus | version | 140

#### Identifiers

- maven: bouncycastle:bcprov-jdk14:140 Confidence:HIGHEST

### commons-cli-1.2.jar

Description: Commons CLI provides a simple API for presenting, processing and validating a command line interface.

License:

    http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\commons-cli-1.2.jar
MD5: BFDCAE1FF93F0C07D733F03BDCE28C9E
SHA1: 2BF96B7AA8B611C177D329452AF1DC933E14501C

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.2
file | name | commons-cli-1.2
jar | package name | apache
jar | package name | cli
jar | package name | commons
Manifest | bundle-docurl | http://commons.apache.org/cli/
Manifest | Bundle-Name | Commons CLI
Manifest | bundle-symbolicname | org.apache.commons.cli
Manifest | Bundle-Vendor | The Apache Software Foundation
Manifest | Bundle-Version | 1.2
Manifest | Implementation-Title | Commons CLI
Manifest | Implementation-Vendor | The Apache Software Foundation
Manifest | Implementation-Vendor-Id | org.apache
Manifest | Implementation-Version | 1.2
Manifest | specification-title | Commons CLI
Manifest | specification-vendor | The Apache Software Foundation
Manifest | specification-version | 1.2
nexus | artifactid | commons-cli
nexus | groupid | commons-cli
nexus | version | 1.2
pom | artifactid | commons-cli
pom | description | Commons CLI provides a simple API for presenting, processing and validating a command line interface.
pom | groupid | commons-cli
pom | name | Commons CLI
pom | version | 1.2

#### Identifiers

- maven: commons-cli:commons-cli:1.2 Confidence:HIGHEST

### commons-codec-1.2.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\commons-codec-1.2.jar
MD5: 2617B220009F952BB9542AF167D040CF
SHA1: 397F4731A9F9B6EB1907E224911C77EA3AA27A8B

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.2
file | name | commons-codec-1.2
jar | package | apache
jar | package | codec
jar | package | commons
jar | package name | apache
jar | package name | codec
jar | package name | commons
Manifest | extension-name | org.apache.commons.codec.*
Manifest | Implementation-Title | org.apache.commons.codec.*
Manifest | Implementation-Vendor | Apache Software Foundation
Manifest | Implementation-Vendor-Id |
Manifest | Implementation-Version | 1.2
Manifest | specification-title | Jakarta Commons Codec
Manifest | specification-vendor | Apache Software Foundation
Manifest | specification-version | 1.2
nexus | artifactid | commons-codec
nexus | groupid | commons-codec
nexus | version | 1.2

#### Identifiers

- maven: commons-codec:commons-codec:1.2 Confidence:HIGHEST

### commons-fileupload-1.2.1.jar

Description: The FileUpload component provides a simple yet flexible means of adding support for multipart file upload functionality to servlets and web applications.

License:

    http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\commons-fileupload-1.2.1.jar
MD5: 951B36984148FC4F4E901F06AB382273
SHA1: 384FAA82E193D4E4B0546059CA09572654BC3970

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.2.1
file | name | commons-fileupload-1.2.1
jar | package name | apache
jar | package name | commons
jar | package name | fileupload
jar | package name | servlet
Manifest | Bundle-Name | Apache Commons FileUpload Bundle
Manifest | bundle-symbolicname | org.apache.commons.fileupload
Manifest | Bundle-Vendor | The Apache Software Foundation
Manifest | Bundle-Version | 1.2.1
Manifest | Implementation-Title | Commons FileUpload
Manifest | Implementation-Vendor | The Apache Software Foundation
Manifest | Implementation-Vendor-Id | org.apache
Manifest | Implementation-Version | 1.2.1
Manifest | specification-title | Commons FileUpload
Manifest | specification-vendor | The Apache Software Foundation
Manifest | specification-version | 1.2.1
nexus | artifactid | commons-fileupload
nexus | groupid | commons-fileupload
nexus | version | 1.2.1
pom | artifactid | commons-fileupload
pom | description | The FileUpload component provides a simple yet flexible means of adding support for multipart file upload functionality to servlets and web applications.
pom | groupid | commons-fileupload
pom | name | Commons FileUpload
pom | version | 1.2.1

#### Identifiers

- maven: commons-fileupload:commons-fileupload:1.2.1 Confidence:HIGHEST
- cpe: cpe:/a:apache:commons_fileupload:1.2.1 Confidence:HIGHEST

#### Published Vulnerabilities

CVE-2014-0050

Severity: Medium
CVSS Score: 5.0
CWE: CWE-264 Permissions, Privileges, and Access Controls

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.

- CONFIRM - http://svn.apache.org/r1565143
- CONFIRM - http://tomcat.apache.org/security-7.html
- CONFIRM - http://tomcat.apache.org/security-8.html
- CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=1062337
- JVN - JVN#14876762
- JVNDB - JVNDB-2014-000017
- MISC - http://blog.spiderlabs.com/2014/02/cve-2014-0050-exploit-with-boundaries-loops-without-boundaries.html
- MLIST - [commons-dev] 20140206 [SECURITY] CVE-2014-0050 Apache Commons FileUpload and Apache Tomcat DoS
- REDHAT - RHSA-2014:0400
- SECUNIA - 57915

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:commons_fileupload:1.2.1
- ...
- cpe:/a:apache:commons_fileupload:1.0
- cpe:/a:apache:commons_fileupload:1.1
- cpe:/a:apache:commons_fileupload:1.1.1
- cpe:/a:apache:commons_fileupload:1.2
- cpe:/a:apache:commons_fileupload:1.2.1
- cpe:/a:apache:commons_fileupload:1.2.2
- cpe:/a:apache:commons_fileupload:1.3
- cpe:/a:apache:commons_fileupload:1.3.1 and all previous versions
- cpe:/a:apache:tomcat:7.0.0
- cpe:/a:apache:tomcat:7.0.0:beta
- cpe:/a:apache:tomcat:7.0.1
- cpe:/a:apache:tomcat:7.0.2
- cpe:/a:apache:tomcat:7.0.2:beta
- cpe:/a:apache:tomcat:7.0.3
- cpe:/a:apache:tomcat:7.0.4
- cpe:/a:apache:tomcat:7.0.4:beta
- cpe:/a:apache:tomcat:7.0.5
- cpe:/a:apache:tomcat:7.0.6
- cpe:/a:apache:tomcat:7.0.7
- cpe:/a:apache:tomcat:7.0.8
- cpe:/a:apache:tomcat:7.0.9
- cpe:/a:apache:tomcat:7.0.10
- cpe:/a:apache:tomcat:7.0.11
- cpe:/a:apache:tomcat:7.0.12
- cpe:/a:apache:tomcat:7.0.13
- cpe:/a:apache:tomcat:7.0.14
- cpe:/a:apache:tomcat:7.0.15
- cpe:/a:apache:tomcat:7.0.16
- cpe:/a:apache:tomcat:7.0.17
- cpe:/a:apache:tomcat:7.0.18
- cpe:/a:apache:tomcat:7.0.19
- cpe:/a:apache:tomcat:7.0.20
- cpe:/a:apache:tomcat:7.0.21
- cpe:/a:apache:tomcat:7.0.22
- cpe:/a:apache:tomcat:7.0.23
- cpe:/a:apache:tomcat:7.0.24
- cpe:/a:apache:tomcat:7.0.25
- cpe:/a:apache:tomcat:7.0.26
- cpe:/a:apache:tomcat:7.0.27
- cpe:/a:apache:tomcat:7.0.28
- cpe:/a:apache:tomcat:7.0.29
- cpe:/a:apache:tomcat:7.0.30
- cpe:/a:apache:tomcat:7.0.31
- cpe:/a:apache:tomcat:7.0.32
- cpe:/a:apache:tomcat:7.0.33
- cpe:/a:apache:tomcat:7.0.34
- cpe:/a:apache:tomcat:7.0.35
- cpe:/a:apache:tomcat:7.0.36
- cpe:/a:apache:tomcat:7.0.37
- cpe:/a:apache:tomcat:7.0.38
- cpe:/a:apache:tomcat:7.0.39
- cpe:/a:apache:tomcat:7.0.40
- cpe:/a:apache:tomcat:7.0.41
- cpe:/a:apache:tomcat:7.0.42
- cpe:/a:apache:tomcat:7.0.43
- cpe:/a:apache:tomcat:7.0.44
- cpe:/a:apache:tomcat:7.0.45
- cpe:/a:apache:tomcat:7.0.46
- cpe:/a:apache:tomcat:7.0.47
- cpe:/a:apache:tomcat:7.0.48
- cpe:/a:apache:tomcat:7.0.49
- cpe:/a:apache:tomcat:7.0.50
- cpe:/a:apache:tomcat:8.0.0:rc1
- cpe:/a:apache:tomcat:8.0.0:rc10
- cpe:/a:apache:tomcat:8.0.0:rc2
- cpe:/a:apache:tomcat:8.0.0:rc5
- cpe:/a:apache:tomcat:8.0.1

CVE-2013-0248

Severity: Low
CVSS Score: 3.3
CWE: CWE-264 Permissions, Privileges, and Access Controls

The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.

- BUGTRAQ - 20130306 [SECURITY] CVE-2013-0248 Apache Commons FileUpload - Insecure examples
- OSVDB - 90906

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:commons_fileupload:1.2.1
- ...
- cpe:/a:apache:commons_fileupload:1.0
- cpe:/a:apache:commons_fileupload:1.1
- cpe:/a:apache:commons_fileupload:1.1.1
- cpe:/a:apache:commons_fileupload:1.2
- cpe:/a:apache:commons_fileupload:1.2.1
- cpe:/a:apache:commons_fileupload:1.2.2

### commons-httpclient-3.1.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\commons-httpclient-3.1.jar
MD5: 8AD8C9229EF2D59AB9F59F7050E846A5
SHA1: 964CD74171F427720480EFDEC40A7C7F6E58426A

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 3.1
file | name | commons-httpclient-3.1
jar | package | apache
jar | package | commons
jar | package | httpclient
Manifest | maven-version | 1.1
nexus | artifactid | commons-httpclient
nexus | groupid | commons-httpclient
nexus | version | 3.1

#### Identifiers

- maven: commons-httpclient:commons-httpclient:3.1 Confidence:HIGHEST
- cpe: cpe:/a:apache:commons-httpclient:3.1 Confidence:LOW
- cpe: cpe:/a:apache:httpclient:3.1 Confidence:LOW

### commons-pool-1.5.3.jar

Description: Commons Object Pooling Library

License:

    http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\commons-pool-1.5.3.jar
MD5: 0C6FDBAAAC00387DF7D738379422912E
SHA1: 7AD440D63C6EEA5E79F1737E264810C76258D042

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.5.3
file | name | commons-pool-1.5.3
jar | package name | apache
jar | package name | commons
jar | package name | pool
Manifest | bundle-docurl | http://commons.apache.org/pool/
Manifest | Bundle-Name | Commons Pool
Manifest | bundle-symbolicname | org.apache.commons.pool
Manifest | Bundle-Vendor | The Apache Software Foundation
Manifest | Bundle-Version | 1.5.3
Manifest | Implementation-Title | Commons Pool
Manifest | Implementation-Vendor | The Apache Software Foundation
Manifest | Implementation-Vendor-Id | org.apache
Manifest | Implementation-Version | 1.5.3
Manifest | specification-title | Commons Pool
Manifest | specification-vendor | The Apache Software Foundation
Manifest | specification-version | 1.5.3
nexus | artifactid | commons-pool
nexus | groupid | commons-pool
nexus | version | 1.5.3
pom | artifactid | commons-pool
pom | description | Commons Object Pooling Library
pom | groupid | commons-pool
pom | name | Commons Pool
pom | version | 1.5.3

#### Identifiers

- maven: commons-pool:commons-pool:1.5.3 Confidence:HIGHEST

### commons-validator-1.4.0.jar

Description: Commons Validator provides the building blocks for both client side validation and server side data validation. It may be used standalone or with a framework like Struts.

License:

    http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\commons-validator-1.4.0.jar
MD5: 8F381C168688704A85C550CF343A5CA2
SHA1: 42FA1046955ADE59F5354A1876CFC523CEA33815

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.4.0
file | name | commons-validator-1.4.0
jar | package name | apache
jar | package name | commons
jar | package name | validator
Manifest | bundle-docurl | http://commons.apache.org/validator/
Manifest | Bundle-Name | Commons Validator
Manifest | bundle-symbolicname | org.apache.commons.validator
Manifest | Bundle-Vendor | The Apache Software Foundation
Manifest | Bundle-Version | 1.4.0
Manifest | implementation-build | tags/VALIDATOR_1_4_0_RC2@r1237247; 2012-01-29 12:53:39+0100
Manifest | Implementation-Title | Commons Validator
Manifest | Implementation-Vendor | The Apache Software Foundation
Manifest | Implementation-Vendor-Id | org.apache
Manifest | Implementation-Version | 1.4.0
Manifest | specification-title | Commons Validator
Manifest | specification-vendor | The Apache Software Foundation
Manifest | specification-version | 1.4.0
nexus | artifactid | commons-validator
nexus | groupid | commons-validator
nexus | version | 1.4.0
pom | artifactid | commons-validator
pom | description | Commons Validator provides the building blocks for both client side validation and server side data validation. It may be used standalone or with a framework ...
pom | groupid | commons-validator
pom | name | Commons Validator
pom | version | 1.4.0

#### Identifiers

- maven: commons-validator:commons-validator:1.4.0 Confidence:HIGHEST

### daytrader-ear-2.1.7.ear

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\daytrader-ear-2.1.7.ear
MD5: 9FA8C4E8072904589FC0D1A12E8EB291
SHA1: 61868609EB138C41C0298373C9F8C19713FEFA54

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 2.1.7
file | name | daytrader-ear-2.1.7

#### Identifiers

- None

### daytrader-ear-2.1.7.ear\dt-ejb.jar

Description: Daytrader EJBs

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\daytrader-ear-2.1.7.ear\dt-ejb.jar
MD5: 26E92DBACAD11C73F03EDE043B113653
SHA1: F2F7C05243EC8E5FB93EFB35F5908BBA88651BF3

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | dt-ejb
jar | package | apache
jar | package | daytrader
jar | package | geronimo
jar | package | samples
jar | package name | daytrader
nexus | artifactid | daytrader-ejb
nexus | groupid | org.apache.geronimo.daytrader
nexus | version | 2.1.7
pom | artifactid | daytrader-ejb
pom | description | Daytrader EJBs
pom | name | DayTrader :: Modules :: EJBs

#### Identifiers

- cpe: cpe:/a:apache:geronimo:2.1.7 Confidence:HIGH
- maven: org.apache.geronimo.daytrader:daytrader-ejb:2.1.7 Confidence:HIGHEST

#### Published Vulnerabilities

CVE-2011-5034

Severity: High
CVSS Score: 7.8
CWE: CWE-20 Improper Input Validation

Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. NOTE: this might overlap CVE-2011-4461.

- BUGTRAQ - 20111228 n.runs-SA-2011.004 - web programming languages and platforms - DoS through hash table
- CERT-VN - VU#903934
- MISC - http://www.nruns.com/_downloads/advisory28122011.pdf
- MISC - http://www.ocert.org/advisories/ocert-2011-003.html
- MISC - https://github.com/FireFart/HashCollision-DOS-POC/blob/master/HashtablePOC.py
- SECUNIA - 47412

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:geronimo:2.1.7
- ...
- cpe:/a:apache:geronimo:1.0
- cpe:/a:apache:geronimo:1.1
- cpe:/a:apache:geronimo:1.1.1
- cpe:/a:apache:geronimo:1.2
- cpe:/a:apache:geronimo:2.0.1
- cpe:/a:apache:geronimo:2.0.2
- cpe:/a:apache:geronimo:2.1
- cpe:/a:apache:geronimo:2.1.1
- cpe:/a:apache:geronimo:2.1.2
- cpe:/a:apache:geronimo:2.1.3
- cpe:/a:apache:geronimo:2.1.4
- cpe:/a:apache:geronimo:2.1.5
- cpe:/a:apache:geronimo:2.1.6
- cpe:/a:apache:geronimo:2.1.7
- cpe:/a:apache:geronimo:2.1.8
- cpe:/a:apache:geronimo:2.2
- cpe:/a:apache:geronimo:2.2.1 and all previous versions

CVE-2008-0732

Severity: Low
CVSS Score: 2.1
CWE: CWE-59 Improper Link Resolution Before File Access ('Link Following')

The init script for Apache Geronimo on SUSE Linux follows symlinks when performing a chown operation, which might allow local users to obtain access to unspecified files or directories.

- SECUNIA - 28838
- SUSE - SUSE-SR:2008:003

Vulnerable Software & Versions:

- cpe:/a:apache:geronimo

### daytrader-ear-2.1.7.ear\geronimo-jaxrpc_1.1_spec-2.0.0.jar

Description: Provides open-source implementations of Sun specifications.

License:

    http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\daytrader-ear-2.1.7.ear\geronimo-jaxrpc_1.1_spec-2.0.0.jar
MD5: 89B6273486A7C78353D919941F9F843C
SHA1: 4FAD4B521E38EF8D9A2434A2421A9A1DC7910285

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | geronimo-jaxrpc_1.1_spec-2.0.0
jar | package name | rpc
Manifest | bundle-docurl | http://www.apache.org
Manifest | Bundle-Name | geronimo-jaxrpc_1.1_spec
Manifest | bundle-symbolicname | org.apache.geronimo.specs.geronimo-jaxrpc_1.1_spec
Manifest | Bundle-Vendor | Apache Software Foundation
Manifest | Bundle-Version | 2.0.0
Manifest | Implementation-Title | Apache Geronimo
Manifest | Implementation-Version | 2.0.0
nexus | artifactid | geronimo-jaxrpc_1.1_spec
nexus | groupid | org.apache.geronimo.specs
nexus | version | 2.0.0
pom | artifactid | geronimo-jaxrpc_1.1_spec
pom | name | JAXRPC 1.1
pom | version | 2.0.0

#### Identifiers

- cpe: cpe:/a:apache:geronimo:2.0 Confidence:HIGHEST
- maven: org.apache.geronimo.specs:geronimo-jaxrpc_1.1_spec:2.0.0 Confidence:HIGHEST

#### Published Vulnerabilities

CVE-2011-5034

Severity: High
CVSS Score: 7.8
CWE: CWE-20 Improper Input Validation

Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. NOTE: this might overlap CVE-2011-4461.

- BUGTRAQ - 20111228 n.runs-SA-2011.004 - web programming languages and platforms - DoS through hash table
- CERT-VN - VU#903934
- MISC - http://www.nruns.com/_downloads/advisory28122011.pdf
- MISC - http://www.ocert.org/advisories/ocert-2011-003.html
- MISC - https://github.com/FireFart/HashCollision-DOS-POC/blob/master/HashtablePOC.py
- SECUNIA - 47412

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:geronimo:2.2.1 and all previous versions
- ...
- cpe:/a:apache:geronimo:1.0
- cpe:/a:apache:geronimo:1.1
- cpe:/a:apache:geronimo:1.1.1
- cpe:/a:apache:geronimo:1.2
- cpe:/a:apache:geronimo:2.0.1
- cpe:/a:apache:geronimo:2.0.2
- cpe:/a:apache:geronimo:2.1
- cpe:/a:apache:geronimo:2.1.1
- cpe:/a:apache:geronimo:2.1.2
- cpe:/a:apache:geronimo:2.1.3
- cpe:/a:apache:geronimo:2.1.4
- cpe:/a:apache:geronimo:2.1.5
- cpe:/a:apache:geronimo:2.1.6
- cpe:/a:apache:geronimo:2.1.7
- cpe:/a:apache:geronimo:2.1.8
- cpe:/a:apache:geronimo:2.2
- cpe:/a:apache:geronimo:2.2.1 and all previous versions

CVE-2008-0732

Severity: Low
CVSS Score: 2.1
CWE: CWE-59 Improper Link Resolution Before File Access ('Link Following')

The init script for Apache Geronimo on SUSE Linux follows symlinks when performing a chown operation, which might allow local users to obtain access to unspecified files or directories.

- SECUNIA - 28838
- SUSE - SUSE-SR:2008:003

Vulnerable Software & Versions:

- cpe:/a:apache:geronimo

CVE-2007-5797

Severity: High
CVSS Score: 7.5
CWE: CWE-287 Improper Authentication

SQLLoginModule in Apache Geronimo 2.0 through 2.1 does not throw an exception for a nonexistent username, which allows remote attackers to bypass authentication via a login attempt with any username not contained in the database.

- BID - 26287
- CONFIRM - http://www-1.ibm.com/support/docview.wss?uid=swg21286105
- CONFIRM - https://issues.apache.org/jira/browse/GERONIMO-3543
- OSVDB - 38662
- SECUNIA - 27478
- SECUNIA - 27482
- VUPEN - ADV-2007-3675
- VUPEN - ADV-2007-3676

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:geronimo:2.0
- ...
- cpe:/a:apache:geronimo:2.0
- cpe:/a:apache:geronimo:2.0.1
- cpe:/a:apache:geronimo:2.0.2
- cpe:/a:apache:geronimo:2.1

CVE-2007-4548

Severity: High
CVSS Score: 10.0
CWE: CWE-287 Improper Authentication

The login method in LoginModule implementations in Apache Geronimo 2.0 does not throw FailedLoginException for failed logins, which allows remote attackers to bypass authentication requirements, deploy arbitrary modules, and gain administrative access by sending a blank username and password with the command line deployer in the deployment module.

- CONFIRM - http://geronimo.apache.org/2007/08/13/apache-geronimo-v20-release-delayed-due-to-security-issue.html
- CONFIRM - https://issues.apache.org/jira/browse/GERONIMO-3404
- MISC - http://geronimo.apache.org/2007/08/21/apache-geronimo-201-released.html
- MISC - https://issues.apache.org/jira/browse/GERONIMO-1201
- MLIST - [dev] 20070813 Geronimo 2.0 Release suspended due to security issue found before release

Vulnerable Software & Versions:

- cpe:/a:apache:geronimo:2.0

### daytrader-ear-2.1.7.ear\streamer.jar

Description: Streamer Application for Day Trader

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\daytrader-ear-2.1.7.ear\streamer.jar
MD5: 5BC6DE1A34935D20331EF777463FD28B
SHA1: EC631C926AB667182840B3E5E32BD3D2F8A808AC

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | streamer
jar | package name | apache
jar | package name | daytrader
jar | package name | geronimo
Manifest | Implementation-Title | DayTrader :: Modules :: Quote Streamer
Manifest | Implementation-Vendor | Apache Software Foundation
Manifest | Implementation-Vendor-Id | org.apache.geronimo.daytrader
Manifest | Implementation-Version | 2.1.7
Manifest | specification-title | DayTrader :: Modules :: Quote Streamer
Manifest | specification-vendor | Apache Software Foundation
Manifest | specification-version | 2.1.7
nexus | artifactid | daytrader-streamer
nexus | groupid | org.apache.geronimo.daytrader
nexus | version | 2.1.7
pom | artifactid | daytrader-streamer
pom | description | Streamer Application for Day Trader
pom | name | DayTrader :: Modules :: Quote Streamer

#### Identifiers

- maven: org.apache.geronimo.daytrader:daytrader-streamer:2.1.7 Confidence:HIGHEST

### daytrader-ear-2.1.7.ear\web.war

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\daytrader-ear-2.1.7.ear\web.war
MD5: 857655BB1DDB4204F09D63E5CA8C56BC
SHA1: 7A7455F5D78BB4E1B8E66CD3E6C1F964D18705F9

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | web
jar | package | apache
jar | package | classes
jar | package | org
jar | package | web-inf

#### Identifiers

- None

### daytrader-ear-2.1.7.ear\wsappclient.jar

Description: Client demonstrating Web Services

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\daytrader-ear-2.1.7.ear\wsappclient.jar
MD5: C343646C162FDD19156400FE83F41CE2
SHA1: ECE01974BE048BA75E2B344C39EFB176915A1C16

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | wsappclient
jar | package name | apache
jar | package name | daytrader
jar | package name | geronimo
Manifest | Implementation-Title | DayTrader :: Modules :: WS Application Client
Manifest | Implementation-Vendor | Apache Software Foundation
Manifest | Implementation-Vendor-Id | org.apache.geronimo.daytrader
Manifest | Implementation-Version | 2.1.7
Manifest | specification-title | DayTrader :: Modules :: WS Application Client
Manifest | specification-vendor | Apache Software Foundation
Manifest | specification-version | 2.1.7
nexus | artifactid | daytrader-wsappclient
nexus | groupid | org.apache.geronimo.daytrader
nexus | version | 2.1.7
pom | artifactid | daytrader-wsappclient
pom | description | Client demonstrating Web Services
pom | name | DayTrader :: Modules :: WS Application Client

#### Identifiers

- maven: org.apache.geronimo.daytrader:daytrader-wsappclient:2.1.7 Confidence:HIGHEST

### dojo-war-1.3.0.war

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\dojo-war-1.3.0.war
MD5: CD00CB6BC15004638548148A21D799AA
SHA1: 36572B4E096421BECAB9346DA41BBC4EC1316A54

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.3.0
file | name | dojo-war-1.3.0
jar | package | classes
jar | package | dojotoolkit
jar | package | org
jar | package | web-inf
jar | package name | dojotoolkit
pom | artifactid | dojo-war
pom | groupid | dojotoolkit
pom | name | Dojo Toolkit :: WAR

#### Identifiers

- cpe: cpe:/a:dojo_toolkit:dojo_toolkit Confidence:HIGHEST
- cpe: cpe:/a:dojotoolkit:dojo:1.3 Confidence:HIGHEST

#### Published Vulnerabilities

CVE-2010-2276

Severity: High
CVSS Score: 10.0
CWE: CWE-16 Configuration

The default configuration of the build process in Dojo 0.4.x before 0.4.4, 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 has the copyTests=true and mini=false options, which makes it easier for remote attackers to have an unspecified impact via a request to a (1) test or (2) demo component.

- AIXAPAR - LO50994
- CONFIRM - http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory/
- CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg21431472
- SECUNIA - 38964
- SECUNIA - 40007
- VUPEN - ADV-2010-1281

Vulnerable Software & Versions: (show all)

- cpe:/a:dojotoolkit:dojo:1.3
- ...
- cpe:/a:dojotoolkit:dojo:0.4.0
- cpe:/a:dojotoolkit:dojo:0.4.1
- cpe:/a:dojotoolkit:dojo:0.4.2
- cpe:/a:dojotoolkit:dojo:0.4.3
- cpe:/a:dojotoolkit:dojo:1.0
- cpe:/a:dojotoolkit:dojo:1.0.1
- cpe:/a:dojotoolkit:dojo:1.0.2
- cpe:/a:dojotoolkit:dojo:1.1
- cpe:/a:dojotoolkit:dojo:1.1.1
- cpe:/a:dojotoolkit:dojo:1.2
- cpe:/a:dojotoolkit:dojo:1.2.1
- cpe:/a:dojotoolkit:dojo:1.2.2
- cpe:/a:dojotoolkit:dojo:1.2.3
- cpe:/a:dojotoolkit:dojo:1.3
- cpe:/a:dojotoolkit:dojo:1.3.1
- cpe:/a:dojotoolkit:dojo:1.3.2
- cpe:/a:dojotoolkit:dojo:1.4
- cpe:/a:dojotoolkit:dojo:1.4.1

CVE-2010-2275

Severity: Medium
CVSS Score: 4.3
CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Cross-site scripting (XSS) vulnerability in dijit/tests/_testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the theme parameter, as demonstrated by an attack against dijit/tests/form/test_Button.html.

- AIXAPAR - LO50896
- AIXAPAR - LO50994
- CONFIRM - http://bugs.dojotoolkit.org/ticket/10773
- CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg21431472
- MISC - http://www.gdssecurity.com/l/b/2010/03/12/multiple-dom-based-xss-in-dojo-toolkit-sdk/
- SECUNIA - 38964
- SECUNIA - 40007
- VUPEN - ADV-2010-1281

Vulnerable Software & Versions: (show all)

- cpe:/a:dojotoolkit:dojo:1.3
- ...
- cpe:/a:dojotoolkit:dojo:0.1.0
- cpe:/a:dojotoolkit:dojo:0.2.0
- cpe:/a:dojotoolkit:dojo:0.2.1
- cpe:/a:dojotoolkit:dojo:0.2.2
- cpe:/a:dojotoolkit:dojo:0.3.0
- cpe:/a:dojotoolkit:dojo:0.3.1
- cpe:/a:dojotoolkit:dojo:0.4.0
- cpe:/a:dojotoolkit:dojo:0.4.1
- cpe:/a:dojotoolkit:dojo:0.4.2
- cpe:/a:dojotoolkit:dojo:0.4.3
- cpe:/a:dojotoolkit:dojo:0.9.0
- cpe:/a:dojotoolkit:dojo:0.9.0:beta
- cpe:/a:dojotoolkit:dojo:1.0
- cpe:/a:dojotoolkit:dojo:1.0.1
- cpe:/a:dojotoolkit:dojo:1.0.2
- cpe:/a:dojotoolkit:dojo:1.1
- cpe:/a:dojotoolkit:dojo:1.1.1
- cpe:/a:dojotoolkit:dojo:1.2
- cpe:/a:dojotoolkit:dojo:1.2.1
- cpe:/a:dojotoolkit:dojo:1.2.2
- cpe:/a:dojotoolkit:dojo:1.2.3
- cpe:/a:dojotoolkit:dojo:1.3
- cpe:/a:dojotoolkit:dojo:1.3.1
- cpe:/a:dojotoolkit:dojo:1.3.2
- cpe:/a:dojotoolkit:dojo:1.4
- cpe:/a:dojotoolkit:dojo:1.4.1 and all previous versions

CVE-2010-2274

Severity: Medium
CVSS Score: 4.3

Multiple open redirect vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, possibly related to dojo/resources/iframe_history.html, dojox/av/FLAudio.js, dojox/av/FLVideo.js, dojox/av/resources/audio.swf, dojox/av/resources/video.swf, util/buildscripts/jslib/build.js, util/buildscripts/jslib/buildUtil.js, and util/doh/runner.html.

- AIXAPAR - LO50994
- CONFIRM - http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory/
- CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg21431472
- SECUNIA - 38964
- SECUNIA - 40007
- VUPEN - ADV-2010-1281

Vulnerable Software & Versions: (show all)

- cpe:/a:dojotoolkit:dojo:1.3
- ...
- cpe:/a:dojotoolkit:dojo:1.0
- cpe:/a:dojotoolkit:dojo:1.0.1
- cpe:/a:dojotoolkit:dojo:1.0.2
- cpe:/a:dojotoolkit:dojo:1.1
- cpe:/a:dojotoolkit:dojo:1.1.1
- cpe:/a:dojotoolkit:dojo:1.2
- cpe:/a:dojotoolkit:dojo:1.2.1
- cpe:/a:dojotoolkit:dojo:1.2.2
- cpe:/a:dojotoolkit:dojo:1.2.3
- cpe:/a:dojotoolkit:dojo:1.3
- cpe:/a:dojotoolkit:dojo:1.3.1
- cpe:/a:dojotoolkit:dojo:1.3.2
- cpe:/a:dojotoolkit:dojo:1.4
- cpe:/a:dojotoolkit:dojo:1.4.1

CVE-2010-2273

Severity: Medium
CVSS Score: 4.3
CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Multiple cross-site scripting (XSS) vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to dojo/resources/iframe_history.html, dojox/av/FLAudio.js, dojox/av/FLVideo.js, dojox/av/resources/audio.swf, dojox/av/resources/video.swf, util/buildscripts/jslib/build.js, and util/buildscripts/jslib/buildUtil.js, as demonstrated by the (1) dojoUrl and (2) testUrl parameters to util/doh/runner.html.

- AIXAPAR - LO50994
- CONFIRM - http://bugs.dojotoolkit.org/ticket/10773
- CONFIRM - http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory/
- CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg21431472
- MISC - http://www.gdssecurity.com/l/b/2010/03/12/multiple-dom-based-xss-in-dojo-toolkit-sdk/
- SECUNIA - 38964
- SECUNIA - 40007
- VUPEN - ADV-2010-1281

Vulnerable Software & Versions: (show all)

- cpe:/a:dojotoolkit:dojo:1.3
- ...
- cpe:/a:dojotoolkit:dojo:1.0
- cpe:/a:dojotoolkit:dojo:1.0.1
- cpe:/a:dojotoolkit:dojo:1.0.2
- cpe:/a:dojotoolkit:dojo:1.1
- cpe:/a:dojotoolkit:dojo:1.1.1
- cpe:/a:dojotoolkit:dojo:1.2
- cpe:/a:dojotoolkit:dojo:1.2.1
- cpe:/a:dojotoolkit:dojo:1.2.2
- cpe:/a:dojotoolkit:dojo:1.2.3
- cpe:/a:dojotoolkit:dojo:1.3
- cpe:/a:dojotoolkit:dojo:1.3.1
- cpe:/a:dojotoolkit:dojo:1.3.2
- cpe:/a:dojotoolkit:dojo:1.4
- cpe:/a:dojotoolkit:dojo:1.4.1

CVE-2007-2376

Severity: Medium
CVSS Score: 5.0

The Dojo framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript code, aka "JavaScript Hijacking."

- MISC - http://www.fortifysoftware.com/servlet/downloads/public/JavaScript_Hijacking.pdf
- OSVDB - 43323

Vulnerable Software & Versions:

- cpe:/a:dojo_toolkit:dojo_toolkit

### ehcache-core-2.2.0.jar

Description: This is the ehcache core module. Pair it with other modules for added functionality.

License:

    The Apache Software License, Version 2.0: src/assemble/LICENSE.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\ehcache-core-2.2.0.jar
MD5: 2C95E83B612691BA2A54E0C56CB9177F
SHA1: C3FBA1F00073A38D370990CE7D8B5D4F9B05A11A

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 2.2.0
file | name | ehcache-core-2.2.0
jar | package | ehcache
jar | package | net
jar | package | sf
jar | package name | cache
jar | package name | ehcache
nexus | artifactid | ehcache-core
nexus | groupid | net.sf.ehcache
nexus | version | 2.2.0
pom | artifactid | ehcache-core
pom | description | This is the ehcache core module. Pair it with other modules for added functionality.
pom | name | Ehcache Core
pom | version | 2.2.0

#### Identifiers

- maven: net.sf.ehcache:ehcache-core:2.2.0 Confidence:HIGHEST

### FileHelpers.2.0.0.0.nupkg

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\FileHelpers.2.0.0.0.nupkg
MD5: 0BF948B505852A2AF8A597B8A129EF9A
SHA1: 30FB37D6163CF16E3BA740343BECDD14D5457619

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 2.0.0.0
file | name | FileHelpers.2.0.0.0

#### Identifiers

- None

### FileHelpers.2.0.0.0.nupkg\FileHelpers.dll

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\FileHelpers.2.0.0.0.nupkg\lib\FileHelpers.dll
MD5: 4829FA768DE37C315A3A3B7BCA027B64
SHA1: A256F622A6209EC21A13D490443FFD6DBDA4F5B7

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | FileHelpers
grokassembly | product | FileHelpers
grokassembly | vendor | Marcos Meli
grokassembly | version | 2.0.0.0

#### Identifiers

- None

### FileHelpers.2.0.0.0.nupkg\FileHelpers.ExcelStorage.dll

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\FileHelpers.2.0.0.0.nupkg\lib\FileHelpers.ExcelStorage.dll
MD5: D22AECA6EE71A2E6F5B3D296280BA98A
SHA1: E416350E2EE0E0711E2716CF7EFCE54168ACCC52

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | FileHelpers.ExcelStorage
grokassembly | product | FileHelpers.ExcelStorage
grokassembly | vendor | Marcos Meli
grokassembly | version | 2.0.0.0

#### Identifiers

- None

### FileHelpers.2.0.0.0.nupkg\FileHelpers.nuspec

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\FileHelpers.2.0.0.0.nupkg\FileHelpers.nuspec
MD5: 9E2287F0174BCD79CF7E2427D73A1197
SHA1: D14A722B66388D84AC3B57C4DE56E702AA5FEA96

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | FileHelpers
nuspec | authors | Marcos Meli
nuspec | id | FileHelpers
nuspec | owners | Marcos Meli
nuspec | title | FileHelpers Lib http://www.filehelpers.com
nuspec | version | 2.0.0.0

#### Identifiers

- None

### FileHelpers.2.0.0.0.nupkg\Interop.Excel.dll

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\FileHelpers.2.0.0.0.nupkg\lib\Interop.Excel.dll
MD5: 728FF3AEAE71CBD8D303F442E3843C4C
SHA1: CDAA993485F737951FD91C71F41C929CD06DFFA3

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | Interop.Excel
grokassembly | product | Interop.Excel
grokassembly | vendor |
grokassembly | version | 1.3.0.0

#### Identifiers

- None

### FileHelpers.2.0.0.0.nupkg\Interop.Office.dll

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\FileHelpers.2.0.0.0.nupkg\lib\Interop.Office.dll
MD5: 7B55E3BF19775B7A6FA5BF3C271E2C0C
SHA1: EEFCFE4B0C90B6F4232D07D588A08BC04FD32E84

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | Interop.Office
grokassembly | product | Interop.Office
grokassembly | vendor |
grokassembly | version | 2.1.0.0

#### Identifiers

- None

### freemarker-2.3.12.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\freemarker-2.3.12.jar
MD5: 719554BBC3D8A98582A8A93328134FE2
SHA1: 3501B670AA7E3822DDF7693082F621B1CD8CE086

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 2.3.12
file | name | freemarker-2.3.12
jar | package | freemarker
jar | package name | freemarker
Manifest | extension-name | FreeMarker
Manifest | Implementation-Title | VSS Java FreeMarker
Manifest | Implementation-Vendor | Visigoth Software Society
Manifest | Implementation-Version | 2.3.12
Manifest | specification-title | FreeMarker
Manifest | specification-vendor | Visigoth Software Society
Manifest | specification-version | 2.3.12

#### Identifiers

- None

### gcm-server-1.0.2.jar

Description: POM created to enable maven dependency management for gcm-server

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\gcm-server-1.0.2.jar
MD5: 89CA4ABF365729306ED9AAF77DA69891
SHA1: FDE5261DF0B029DB4ABCB504E7FC882300285216

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.0.2
file | name | gcm-server-1.0.2
jar | package | android
jar | package | gcm
jar | package | google
jar | package | server
jar | package name | gcm
jar | package name | google
jar | package name | server
pom | artifactid | gcm-server
pom | description | POM created to enable maven dependency management for gcm-server
pom | groupid | ganyo
pom | name | Google GCM Library
pom | version | 1.0.2

#### Identifiers

- None

### geronimo-javamail_1.4_spec-1.2.jar

Description: Provides open-source implementations of Sun specifications.

License:

    http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\geronimo-javamail_1.4_spec-1.2.jar
MD5: F9F0465816F2DB5FA9F409FB1D9700C8
SHA1: 0F6B07582A3D6BA452B10527FB508809AFF8B353

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | geronimo-javamail_1.4_spec-1.2
jar | package name | apache
jar | package name | geronimo
jar | package name | mail
Manifest | bundle-docurl | http://www.apache.org
Manifest | Bundle-Name | geronimo-javamail_1.4_spec
Manifest | bundle-symbolicname | org.apache.geronimo.specs.geronimo-javamail_1.4_spec
Manifest | Bundle-Vendor | Apache Software Foundation
Manifest | Bundle-Version | 1.2
Manifest | Implementation-Title | Apache Geronimo
Manifest | Implementation-Version | 1.2
nexus | artifactid | geronimo-javamail_1.4_spec
nexus | groupid | org.apache.geronimo.specs
nexus | version | 1.2
pom | artifactid | geronimo-javamail_1.4_spec
pom | name | JavaMail 1.4
pom | version | 1.2

#### Identifiers

- cpe: cpe:/a:apache:geronimo:1.2 Confidence:HIGHEST
- maven: org.apache.geronimo.specs:geronimo-javamail_1.4_spec:1.2 Confidence:HIGHEST

#### Published Vulnerabilities

CVE-2011-5034

Severity: High
CVSS Score: 7.8
CWE: CWE-20 Improper Input Validation

Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. NOTE: this might overlap CVE-2011-4461.

- BUGTRAQ - 20111228 n.runs-SA-2011.004 - web programming languages and platforms - DoS through hash table
- CERT-VN - VU#903934
- MISC - http://www.nruns.com/_downloads/advisory28122011.pdf
- MISC - http://www.ocert.org/advisories/ocert-2011-003.html
- MISC - https://github.com/FireFart/HashCollision-DOS-POC/blob/master/HashtablePOC.py
- SECUNIA - 47412

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:geronimo:1.2
- ...
- cpe:/a:apache:geronimo:1.0
- cpe:/a:apache:geronimo:1.1
- cpe:/a:apache:geronimo:1.1.1
- cpe:/a:apache:geronimo:1.2
- cpe:/a:apache:geronimo:2.0.1
- cpe:/a:apache:geronimo:2.0.2
- cpe:/a:apache:geronimo:2.1
- cpe:/a:apache:geronimo:2.1.1
- cpe:/a:apache:geronimo:2.1.2
- cpe:/a:apache:geronimo:2.1.3
- cpe:/a:apache:geronimo:2.1.4
- cpe:/a:apache:geronimo:2.1.5
- cpe:/a:apache:geronimo:2.1.6
- cpe:/a:apache:geronimo:2.1.7
- cpe:/a:apache:geronimo:2.1.8
- cpe:/a:apache:geronimo:2.2
- cpe:/a:apache:geronimo:2.2.1 and all previous versions

CVE-2008-0732

Severity: Low
CVSS Score: 2.1
CWE: CWE-59 Improper Link Resolution Before File Access ('Link Following')

The init script for Apache Geronimo on SUSE Linux follows symlinks when performing a chown operation, which might allow local users to obtain access to unspecified files or directories.

- SECUNIA - 28838
- SUSE - SUSE-SR:2008:003

Vulnerable Software & Versions:

- cpe:/a:apache:geronimo

### geronimo-jms_1.1_spec-1.1.1.jar

Description: Provides open-source implementations of Sun specifications.

License:

    http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\geronimo-jms_1.1_spec-1.1.1.jar
MD5: D80CE71285696D36C1ADD1989B94F084
SHA1: C872B46C601D8DC03633288B81269F9E42762CEA

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | geronimo-jms_1.1_spec-1.1.1
jar | package name | jms
Manifest | bundle-docurl | http://www.apache.org
Manifest | Bundle-Name | geronimo-jms_1.1_spec
Manifest | bundle-symbolicname | org.apache.geronimo.specs.geronimo-jms_1.1_spec
Manifest | Bundle-Vendor | Apache Software Foundation
Manifest | Bundle-Version | 1.1.1
Manifest | Implementation-Title | Apache Geronimo
Manifest | Implementation-Version | 1.1.1
nexus | artifactid | geronimo-jms_1.1_spec
nexus | groupid | org.apache.geronimo.specs
nexus | version | 1.1.1
pom | artifactid | geronimo-jms_1.1_spec
pom | name | JMS 1.1
pom | version | 1.1.1

#### Related Dependencies

- geronimo-jta_1.1_spec-1.1.1.jar
  - File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\geronimo-jta_1.1_spec-1.1.1.jar
  - SHA1: AABAB3165B8EA936B9360ABBF448459C0D04A5A4
  - MD5: 4AA8D50456BCEC0BF6F032CEB182AD64
  - maven: org.apache.geronimo.specs:geronimo-jta_1.1_spec:1.1.1

#### Identifiers

- cpe: cpe:/a:apache:geronimo:1.1.1 Confidence:HIGHEST
- maven: org.apache.geronimo.specs:geronimo-jms_1.1_spec:1.1.1 Confidence:HIGHEST

#### Published Vulnerabilities

CVE-2011-5034

Severity: High
CVSS Score: 7.8
CWE: CWE-20 Improper Input Validation

Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. NOTE: this might overlap CVE-2011-4461.

- BUGTRAQ - 20111228 n.runs-SA-2011.004 - web programming languages and platforms - DoS through hash table
- CERT-VN - VU#903934
- MISC - http://www.nruns.com/_downloads/advisory28122011.pdf
- MISC - http://www.ocert.org/advisories/ocert-2011-003.html
- MISC - https://github.com/FireFart/HashCollision-DOS-POC/blob/master/HashtablePOC.py
- SECUNIA - 47412

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:geronimo:1.1.1
- ...
- cpe:/a:apache:geronimo:1.0
- cpe:/a:apache:geronimo:1.1
- cpe:/a:apache:geronimo:1.1.1
- cpe:/a:apache:geronimo:1.2
- cpe:/a:apache:geronimo:2.0.1
- cpe:/a:apache:geronimo:2.0.2
- cpe:/a:apache:geronimo:2.1
- cpe:/a:apache:geronimo:2.1.1
- cpe:/a:apache:geronimo:2.1.2
- cpe:/a:apache:geronimo:2.1.3
- cpe:/a:apache:geronimo:2.1.4
- cpe:/a:apache:geronimo:2.1.5
- cpe:/a:apache:geronimo:2.1.6
- cpe:/a:apache:geronimo:2.1.7
- cpe:/a:apache:geronimo:2.1.8
- cpe:/a:apache:geronimo:2.2
- cpe:/a:apache:geronimo:2.2.1 and all previous versions

CVE-2008-0732

Severity: Low
CVSS Score: 2.1
CWE: CWE-59 Improper Link Resolution Before File Access ('Link Following')

The init script for Apache Geronimo on SUSE Linux follows symlinks when performing a chown operation, which might allow local users to obtain access to unspecified files or directories.

- SECUNIA - 28838
- SUSE - SUSE-SR:2008:003

Vulnerable Software & Versions:

- cpe:/a:apache:geronimo

### geronimo-jpa_2.0_spec-1.1.jar

Description: Implementation of Sun JSR-317 JPA 2.0 Spec API

License:

    http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\geronimo-jpa_2.0_spec-1.1.jar
MD5: 007C972F6DCFEA68A6686B262C6F3D2F
SHA1: F4D90788691F5F5F201F39A53A23D392CDE660A3

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | geronimo-jpa_2.0_spec-1.1
jar | package name | apache
jar | package name | geronimo
jar | package name | jpa
jar | package name | persistence
jar | package name | specs
Manifest | bundle-docurl | http://geronimo.apache.org/maven/specs/geronimo-jpa_2.0_spec/1.1
Manifest | Bundle-Name | Apache Geronimo JSR-317 JPA 2.0 Spec API
Manifest | bundle-symbolicname | org.apache.geronimo.specs.geronimo-jpa_2.0_spec;singleton=true
Manifest | Bundle-Vendor | The Apache Software Foundation
Manifest | Bundle-Version | 1.1
Manifest | Implementation-Title | Apache Geronimo JSR-317 JPA 2.0 Spec API
Manifest | Implementation-Version | 1.1
Manifest | specification-title | JSR-317 Java Persistence API 2.0
Manifest | specification-vendor | Sun Microsystems, Inc.
Manifest | specification-version | 2.0
nexus | artifactid | geronimo-jpa_2.0_spec
nexus | groupid | org.apache.geronimo.specs
nexus | version | 1.1
pom | artifactid | geronimo-jpa_2.0_spec
pom | description | Implementation of Sun JSR-317 JPA 2.0 Spec API
pom | groupid | apache.geronimo.specs
pom | name | Apache Geronimo JSR-317 JPA 2.0 Spec API
pom | version | 1.1

#### Identifiers

- cpe: cpe:/a:apache:geronimo:1.1 Confidence:HIGHEST
- maven: org.apache.geronimo.specs:geronimo-jpa_2.0_spec:1.1 Confidence:HIGHEST

#### Published Vulnerabilities

CVE-2011-5034

Severity: High
CVSS Score: 7.8
CWE: CWE-20 Improper Input Validation

Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. NOTE: this might overlap CVE-2011-4461.

- BUGTRAQ - 20111228 n.runs-SA-2011.004 - web programming languages and platforms - DoS through hash table
- CERT-VN - VU#903934
- MISC - http://www.nruns.com/_downloads/advisory28122011.pdf
- MISC - http://www.ocert.org/advisories/ocert-2011-003.html
- MISC - https://github.com/FireFart/HashCollision-DOS-POC/blob/master/HashtablePOC.py
- SECUNIA - 47412

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:geronimo:1.1
- ...
- cpe:/a:apache:geronimo:1.0
- cpe:/a:apache:geronimo:1.1
- cpe:/a:apache:geronimo:1.1.1
- cpe:/a:apache:geronimo:1.2
- cpe:/a:apache:geronimo:2.0.1
- cpe:/a:apache:geronimo:2.0.2
- cpe:/a:apache:geronimo:2.1
- cpe:/a:apache:geronimo:2.1.1
- cpe:/a:apache:geronimo:2.1.2
- cpe:/a:apache:geronimo:2.1.3
- cpe:/a:apache:geronimo:2.1.4
- cpe:/a:apache:geronimo:2.1.5
- cpe:/a:apache:geronimo:2.1.6
- cpe:/a:apache:geronimo:2.1.7
- cpe:/a:apache:geronimo:2.1.8
- cpe:/a:apache:geronimo:2.2
- cpe:/a:apache:geronimo:2.2.1 and all previous versions

CVE-2008-0732

Severity: Low
CVSS Score: 2.1
CWE: CWE-59 Improper Link Resolution Before File Access ('Link Following')

The init script for Apache Geronimo on SUSE Linux follows symlinks when performing a chown operation, which might allow local users to obtain access to unspecified files or directories.

- SECUNIA - 28838
- SUSE - SUSE-SR:2008:003

Vulnerable Software & Versions:

- cpe:/a:apache:geronimo

### geronimo-stax-api_1.0_spec-1.0.1.jar

Description: Provides open-source implementations of Sun specifications.

License:

    http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\geronimo-stax-api_1.0_spec-1.0.1.jar
MD5: B7C2A715CD3D1C43DC4CCFAE426E8E2E
SHA1: 1C171093A8B43AA550C6050AC441ABE713EBB4F2

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | geronimo-stax-api_1.0_spec-1.0.1
jar | package name | stream
jar | package name | xml
Manifest | bundle-docurl | http://www.apache.org
Manifest | Bundle-Name | geronimo-stax-api_1.0_spec
Manifest | bundle-symbolicname | org.apache.geronimo.specs.geronimo-stax-api_1.0_spec
Manifest | Bundle-Vendor | Apache Software Foundation
Manifest | Bundle-Version | 1.0.1
Manifest | Implementation-Title | Apache Geronimo
Manifest | Implementation-Version | 1.0.1
nexus | artifactid | geronimo-stax-api_1.0_spec
nexus | groupid | org.apache.geronimo.specs
nexus | version | 1.0.1
pom | artifactid | geronimo-stax-api_1.0_spec
pom | name | Streaming API for XML (STAX API 1.0)
pom | version | 1.0.1

#### Related Dependencies

- geronimo-activation_1.1_spec-1.0.1.jar
  - File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\geronimo-activation_1.1_spec-1.0.1.jar
  - SHA1: 79C75E201AF44CF766E78A2515C3F88A19F69E1F
  - MD5: FD89B8782AF5FD2AC1CADB006477E828
  - maven: org.apache.geronimo.specs:geronimo-activation_1.1_spec:1.0.1

#### Identifiers

- cpe: cpe:/a:apache:geronimo Confidence:HIGHEST
- maven: org.apache.geronimo.specs:geronimo-stax-api_1.0_spec:1.0.1 Confidence:HIGHEST

#### Published Vulnerabilities

CVE-2011-5034

Severity: High
CVSS Score: 7.8
CWE: CWE-20 Improper Input Validation

Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. NOTE: this might overlap CVE-2011-4461.

- BUGTRAQ - 20111228 n.runs-SA-2011.004 - web programming languages and platforms - DoS through hash table
- CERT-VN - VU#903934
- MISC - http://www.nruns.com/_downloads/advisory28122011.pdf
- MISC - http://www.ocert.org/advisories/ocert-2011-003.html
- MISC - https://github.com/FireFart/HashCollision-DOS-POC/blob/master/HashtablePOC.py
- SECUNIA - 47412

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:geronimo:2.2.1 and all previous versions
- ...
- cpe:/a:apache:geronimo:1.0
- cpe:/a:apache:geronimo:1.1
- cpe:/a:apache:geronimo:1.1.1
- cpe:/a:apache:geronimo:1.2
- cpe:/a:apache:geronimo:2.0.1
- cpe:/a:apache:geronimo:2.0.2
- cpe:/a:apache:geronimo:2.1
- cpe:/a:apache:geronimo:2.1.1
- cpe:/a:apache:geronimo:2.1.2
- cpe:/a:apache:geronimo:2.1.3
- cpe:/a:apache:geronimo:2.1.4
- cpe:/a:apache:geronimo:2.1.5
- cpe:/a:apache:geronimo:2.1.6
- cpe:/a:apache:geronimo:2.1.7
- cpe:/a:apache:geronimo:2.1.8
- cpe:/a:apache:geronimo:2.2
- cpe:/a:apache:geronimo:2.2.1 and all previous versions

CVE-2008-0732

Severity: Low
CVSS Score: 2.1
CWE: CWE-59 Improper Link Resolution Before File Access ('Link Following')

The init script for Apache Geronimo on SUSE Linux follows symlinks when performing a chown operation, which might allow local users to obtain access to unspecified files or directories.

- SECUNIA - 28838
- SUSE - SUSE-SR:2008:003

Vulnerable Software & Versions:

- cpe:/a:apache:geronimo

### guice-3.0.jar

Description: Guice is a lightweight dependency injection framework for Java 5 and above

License:

    http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\guice-3.0.jar
MD5: CA1C7BA366884CFCD2CFB48D2395C400
SHA1: 9D84F15FE35E2C716A02979FB62F50A29F38AEFA

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 3.0
file | name | guice-3.0
jar | package | google
jar | package | inject
jar | package | internal
jar | package name | dependency
jar | package name | google
jar | package name | guice
jar | package name | inject
Manifest | bundle-copyright | 2006
Manifest | bundle-copyright | Copyright (C) 2006 Google Inc.
Manifest | bundle-docurl | http://code.google.com/p/google-guice/
Manifest | Bundle-Name | guice
Manifest | bundle-requiredexecutionenvironment | J2SE-1.5,JavaSE-1.6
Manifest | bundle-symbolicname | com.google.inject
Manifest | Bundle-Vendor | Google, Inc.
Manifest | Bundle-Version | 3.0.0
nexus | artifactid | guice
nexus | groupid | com.google.inject
nexus | version | 3.0

#### Identifiers

- maven: com.google.inject:guice:3.0 Confidence:HIGHEST

### hazelcast-2.5.jar

Description: Hazelcast In-Memory DataGrid

License:

    http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\hazelcast-2.5.jar
MD5: CECB9F89CF60F8947451F620E542CBC8
SHA1: 3614FA9E42E8CD4D124CA37A2EDB36D0E926959D

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 2.5
file | name | hazelcast-2.5
jar | package name | data
jar | package name | hazelcast
Manifest | bundle-docurl | http://www.hazelcast.com/
Manifest | Bundle-Name | hazelcast
Manifest | bundle-symbolicname | com.hazelcast
Manifest | Bundle-Vendor | Hazelcast, Inc.
Manifest | Bundle-Version | 2.5.0
Manifest | Implementation-Title | hazelcast
Manifest | Implementation-Vendor | Hazelcast, Inc.
Manifest | Implementation-Vendor-Id | com.hazelcast
Manifest | Implementation-Version | 2.5
Manifest | specification-title | hazelcast
Manifest | specification-version | 2.5
pom | artifactid | hazelcast
pom | name | hazelcast

#### Identifiers

- None

### hibernate3.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\hibernate3.jar
MD5: B22BBAFA38341DB968033F1ACBFA8DD9
SHA1: 826DA9FC452E7009116DFFC2D348BA705FE2AA82

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 3
file | name | hibernate3
jar | package | hibernate
jar | package name | hibernate
Manifest | Implementation-Title | Hibernate Distribution
Manifest | implementation-url | http://hibernate.org
Manifest | Implementation-Vendor | Hibernate.org
Manifest | Implementation-Vendor-Id | org.hibernate
Manifest | Implementation-Version | 3.6.6.Final
Manifest | specification-title | Hibernate Distribution
Manifest | specification-vendor | Hibernate.org
Manifest | specification-version | 3.6.6.Final

#### Identifiers

- None

### httpcore-4.0-beta1.jar

Description: HttpComponents Core (Java 1.3 compatible)

License:

    Apache License: ../LICENSE.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\httpcore-4.0-beta1.jar
MD5: 7515CFFF71E32CE55D5BA6B73251D93A
SHA1: C642A5F7C20539840957584B1AF2AD798CD1BA52

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 4.0.beta
file | name | httpcore-4.0-beta1
jar | package name | apache
jar | package name | http
Manifest | Implementation-Vendor-Id | org.apache
Manifest | Implementation-Version | 4.0-beta1
nexus | artifactid | httpcore
nexus | groupid | org.apache.httpcomponents
nexus | version | 4.0-beta1
pom | artifactid | httpcore
pom | description | HttpComponents Core (Java 1.3 compatible)
pom | name | HttpCore (base module)

#### Identifiers

- maven: org.apache.httpcomponents:httpcore:4.0-beta1 Confidence:HIGHEST

### httpcore-nio-4.0-beta1.jar

Description: HttpComponents Core (NIO extensions)

License:

    Apache License: ../LICENSE.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\httpcore-nio-4.0-beta1.jar
MD5: 926965BC84B5F5F138DF66DDD05BAED0
SHA1: A0D825BEAA0BC0B03FCF11315ABC4B7FD60FE2E8

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 4.0.beta
file | name | httpcore-nio-4.0-beta1
jar | package name | apache
jar | package name | http
jar | package name | nio
Manifest | Implementation-Vendor-Id | org.apache
Manifest | Implementation-Version | 4.0-beta1
nexus | artifactid | httpcore-nio
nexus | groupid | org.apache.httpcomponents
nexus | version | 4.0-beta1
pom | artifactid | httpcore-nio
pom | description | HttpComponents Core (NIO extensions)
pom | name | HttpCore (NIO extensions module)

#### Identifiers

- maven: org.apache.httpcomponents:httpcore-nio:4.0-beta1 Confidence:HIGHEST

### javax.inject-1.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\javax.inject-1.jar
MD5: 289075E48B909E9E74E6C915B3631D2E
SHA1: 6975DA39A7040257BD51D21A231B76C915872D38

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1
file | name | javax.inject-1
jar | package | inject
jar | package | javax
nexus | artifactid | javax.inject
nexus | groupid | javax.inject
nexus | version | 1

#### Identifiers

- maven: javax.inject:javax.inject:1 Confidence:HIGHEST

### jaxb-xercesImpl-1.5.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jaxb-xercesImpl-1.5.jar
MD5: 8CD074364C830FC8FF40A8A19C0A74C8
SHA1: 73A51FAADB407DCCDBD77234E0D5A0A648665692

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.5
file | name | jaxb-xercesImpl-1.5
jar | package | apache
jar | package | org
jar | package | sun
jar | package | xerces
jar | package name | apache
jar | package name | org
jar | package name | sun
jar | package name | xerces
jar | package name | xml
jar (hint) | package | oracle
jar (hint) | package name | oracle
Manifest | extension-name | com.sun.org.apache.xerces.internal
Manifest | Implementation-Title | Xerces 2 Parser Implementation (of JAXP RI 1.2.6 )
Manifest | implementation-url | http://xml.apache.org/xerces2-j
Manifest | Implementation-Vendor | Apache Software Foundation
Manifest | Implementation-Vendor-Id | org.apache
Manifest | Implementation-Version | Xerces-J_2_6_2
Manifest | specification-title | Java API for XML Processing
Manifest | specification-vendor | Sun Microsystems Inc.
Manifest | specification-version | 1.2

#### Identifiers

- None

### jaxen-1.1.1.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jaxen-1.1.1.jar
MD5: 261D1AA59865842ECC32B3848B0C6538
SHA1: 9F5D3C5974DBE5CF69C2C2EC7D8A4EB6E0FCE7F9

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.1.1
file | name | jaxen-1.1.1
jar | package | jaxen
jar | package name | jaxen
jar | package name | xpath
Manifest | extension-name | jaxen
Manifest | Implementation-Title | org.jaxen
Manifest | Implementation-Vendor | Codehaus
Manifest | Implementation-Version | 1.1.1
Manifest | specification-title | Universal Java XPath Engine
Manifest | specification-vendor | Codehaus
nexus | artifactid | jaxen
nexus | groupid | jaxen
nexus | version | 1.1.1

#### Identifiers

- maven: jaxen:jaxen:1.1.1 Confidence:HIGHEST

### jetty-6.1.0.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jetty-6.1.0.jar
MD5: 121A72B1DEA1A9ADF83079A44CA08E7B
SHA1: FB39EBC0CDCCEA6B54AD87D229A352A894EEBECC

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 6.1.0
file | name | jetty-6.1.0
jar | package name | jetty
jar | package name | mortbay
jar | package name | server
Manifest | implementation-version | 6.1.0
Manifest | url | http://jetty.mortbay.org
pom | artifactid | jetty
pom | groupid | mortbay.jetty
pom | name | Jetty Server

#### Related Dependencies

- jetty-util-6.1.0.jar
  - File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jetty-util-6.1.0.jar
  - SHA1: 965AAE938D48F094546C1918A0BBED0ADBE54595
  - MD5: A1F1F4D11D58AD4AF4B534B2265BD82F

#### Identifiers

- cpe: cpe:/a:jetty:jetty:6.1.0 Confidence:LOW
- cpe: cpe:/a:mortbay:jetty:6.1.0 Confidence:HIGHEST
- cpe: cpe:/a:mortbay_jetty:jetty:6.1 Confidence:HIGHEST

#### Published Vulnerabilities

CVE-2011-4461

Severity: Medium
CVSS Score: 5.0
CWE: CWE-310 Cryptographic Issues

Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.

- BUGTRAQ - 20111228 n.runs-SA-2011.004 - web programming languages and platforms - DoS through hash table
- CERT-VN - VU#903934
- MISC - http://www.nruns.com/_downloads/advisory28122011.pdf
- MISC - http://www.ocert.org/advisories/ocert-2011-003.html
- SECTRACK - 1026475
- SECUNIA - 47408
- SECUNIA - 48981
- UBUNTU - USN-1429-1
- XF - jetty-hash-dos(72017)

Vulnerable Software & Versions: (show all)

- cpe:/a:mortbay:jetty:6.1.0
- ...
- cpe:/a:morbtay:jetty:6.1.0
- cpe:/a:mortbay:jetty:1.0
- cpe:/a:mortbay:jetty:1.0.1
- cpe:/a:mortbay:jetty:1.1
- cpe:/a:mortbay:jetty:1.1.1
- cpe:/a:mortbay:jetty:1.2.0
- cpe:/a:mortbay:jetty:1.3.0
- cpe:/a:mortbay:jetty:1.3.1
- cpe:/a:mortbay:jetty:1.3.2
- cpe:/a:mortbay:jetty:1.3.3
- cpe:/a:mortbay:jetty:1.3.4
- cpe:/a:mortbay:jetty:1.3.5
- cpe:/a:mortbay:jetty:2.0:alpha1
- cpe:/a:mortbay:jetty:2.0:alpha2
- cpe:/a:mortbay:jetty:2.0:beta1
- cpe:/a:mortbay:jetty:2.0:beta2
- cpe:/a:mortbay:jetty:2.0.0
- cpe:/a:mortbay:jetty:2.0.1
- cpe:/a:mortbay:jetty:2.0.2
- cpe:/a:mortbay:jetty:2.0.3
- cpe:/a:mortbay:jetty:2.0.4
- cpe:/a:mortbay:jetty:2.0.5
- cpe:/a:mortbay:jetty:2.1.0
- cpe:/a:mortbay:jetty:2.1.1
- cpe:/a:mortbay:jetty:2.1.2
- cpe:/a:mortbay:jetty:2.1.3
- cpe:/a:mortbay:jetty:2.1.4
- cpe:/a:mortbay:jetty:2.1.5
- cpe:/a:mortbay:jetty:2.1.6
- cpe:/a:mortbay:jetty:2.1.7
- cpe:/a:mortbay:jetty:2.1.b0
- cpe:/a:mortbay:jetty:2.1.b1
- cpe:/a:mortbay:jetty:2.2:alpha0
- cpe:/a:mortbay:jetty:2.2:alpha1
- cpe:/a:mortbay:jetty:2.2:beta0
- cpe:/a:mortbay:jetty:2.2:beta1
- cpe:/a:mortbay:jetty:2.2:beta2
- cpe:/a:mortbay:jetty:2.2:beta3
- cpe:/a:mortbay:jetty:2.2:beta4
- cpe:/a:mortbay:jetty:2.2.0
- cpe:/a:mortbay:jetty:2.2.1
- cpe:/a:mortbay:jetty:2.2.2
- cpe:/a:mortbay:jetty:2.2.3
- cpe:/a:mortbay:jetty:2.2.4
- cpe:/a:mortbay:jetty:2.2.5
- cpe:/a:mortbay:jetty:2.2.6
- cpe:/a:mortbay:jetty:2.2.7
- cpe:/a:mortbay:jetty:2.2.8
- cpe:/a:mortbay:jetty:2.3.0
- cpe:/a:mortbay:jetty:2.3.0a
- cpe:/a:mortbay:jetty:2.3.1
- cpe:/a:mortbay:jetty:2.3.2
- cpe:/a:mortbay:jetty:2.3.3
- cpe:/a:mortbay:jetty:2.3.4
- cpe:/a:mortbay:jetty:2.3.5
- cpe:/a:mortbay:jetty:2.4.0
- cpe:/a:mortbay:jetty:2.4.1
- cpe:/a:mortbay:jetty:2.4.2
- cpe:/a:mortbay:jetty:2.4.3
- cpe:/a:mortbay:jetty:2.4.4
- cpe:/a:mortbay:jetty:2.4.5
- cpe:/a:mortbay:jetty:2.4.6
- cpe:/a:mortbay:jetty:2.4.7
- cpe:/a:mortbay:jetty:2.4.8
- cpe:/a:mortbay:jetty:2.4.9
- cpe:/a:mortbay:jetty:3.0
- cpe:/a:mortbay:jetty:3.0.0
- cpe:/a:mortbay:jetty:3.0.0:rc1
- cpe:/a:mortbay:jetty:3.0.0:rc2
- cpe:/a:mortbay:jetty:3.0.0:rc3
- cpe:/a:mortbay:jetty:3.0.0:rc4
- cpe:/a:mortbay:jetty:3.0.0:rc5
- cpe:/a:mortbay:jetty:3.0.0:rc6
- cpe:/a:mortbay:jetty:3.0.0:rc7
- cpe:/a:mortbay:jetty:3.0.0:rc8
- cpe:/a:mortbay:jetty:3.0.1
- cpe:/a:mortbay:jetty:3.0.2
- cpe:/a:mortbay:jetty:3.0.3
- cpe:/a:mortbay:jetty:3.0.4
- cpe:/a:mortbay:jetty:3.0.5
- cpe:/a:mortbay:jetty:3.0.6
- cpe:/a:mortbay:jetty:3.0.a0
- cpe:/a:mortbay:jetty:3.0.a1
- cpe:/a:mortbay:jetty:3.0.a2
- cpe:/a:mortbay:jetty:3.0.a3
- cpe:/a:mortbay:jetty:3.0.a4
- cpe:/a:mortbay:jetty:3.0.a5
- cpe:/a:mortbay:jetty:3.0.a6
- cpe:/a:mortbay:jetty:3.0.a7
- cpe:/a:mortbay:jetty:3.0.a8
- cpe:/a:mortbay:jetty:3.0.a9
- cpe:/a:mortbay:jetty:3.0.a90
- cpe:/a:mortbay:jetty:3.0.a91
- cpe:/a:mortbay:jetty:3.0.a92
- cpe:/a:mortbay:jetty:3.0.a93
- cpe:/a:mortbay:jetty:3.0.a94
- cpe:/a:mortbay:jetty:3.0.a95
- cpe:/a:mortbay:jetty:3.0.a96
- cpe:/a:mortbay:jetty:3.0.a97
- cpe:/a:mortbay:jetty:3.0.a98
- cpe:/a:mortbay:jetty:3.0.a99
- cpe:/a:mortbay:jetty:3.0.b01
- cpe:/a:mortbay:jetty:3.0.b02
- cpe:/a:mortbay:jetty:3.0.b03
- cpe:/a:mortbay:jetty:3.0.b04
- cpe:/a:mortbay:jetty:3.0.b05
- cpe:/a:mortbay:jetty:3.1:rc0
- cpe:/a:mortbay:jetty:3.1:rc1
- cpe:/a:mortbay:jetty:3.1:rc2
- cpe:/a:mortbay:jetty:3.1:rc3
- cpe:/a:mortbay:jetty:3.1:rc4
- cpe:/a:mortbay:jetty:3.1:rc5
- cpe:/a:mortbay:jetty:3.1:rc6
- cpe:/a:mortbay:jetty:3.1:rc7
- cpe:/a:mortbay:jetty:3.1:rc8
- cpe:/a:mortbay:jetty:3.1:rc9
- cpe:/a:mortbay:jetty:3.1.0
- cpe:/a:mortbay:jetty:3.1.1
- cpe:/a:mortbay:jetty:3.1.2
- cpe:/a:mortbay:jetty:3.1.3
- cpe:/a:mortbay:jetty:3.1.4
- cpe:/a:mortbay:jetty:3.1.5
- cpe:/a:mortbay:jetty:3.1.6
- cpe:/a:mortbay:jetty:3.1.7
- cpe:/a:mortbay:jetty:3.1.8
- cpe:/a:mortbay:jetty:3.1.9
- cpe:/a:mortbay:jetty:4.0:rc1
- cpe:/a:mortbay:jetty:4.0:rc2
- cpe:/a:mortbay:jetty:4.0:rc3
- cpe:/a:mortbay:jetty:4.0.0
- cpe:/a:mortbay:jetty:4.0.1
- cpe:/a:mortbay:jetty:4.0.1:rc0
- cpe:/a:mortbay:jetty:4.0.1:rc1
- cpe:/a:mortbay:jetty:4.0.1:rc2
- cpe:/a:mortbay:jetty:4.0.2
- cpe:/a:mortbay:jetty:4.0.3
- cpe:/a:mortbay:jetty:4.0.4
- cpe:/a:mortbay:jetty:4.0.5
- cpe:/a:mortbay:jetty:4.0.6
- cpe:/a:mortbay:jetty:4.0.b0
- cpe:/a:mortbay:jetty:4.0.b1
- cpe:/a:mortbay:jetty:4.0.b2
- cpe:/a:mortbay:jetty:4.0.d0
- cpe:/a:mortbay:jetty:4.0.d1
- cpe:/a:mortbay:jetty:4.0.d2
- cpe:/a:mortbay:jetty:4.0.d3
- cpe:/a:mortbay:jetty:4.0.d4
- cpe:/a:mortbay:jetty:4.1.0
- cpe:/a:mortbay:jetty:4.1.0:rc0
- cpe:/a:mortbay:jetty:4.1.0:rc1
- cpe:/a:mortbay:jetty:4.1.0:rc2
- cpe:/a:mortbay:jetty:4.1.0:rc3
- cpe:/a:mortbay:jetty:4.1.0:rc4
- cpe:/a:mortbay:jetty:4.1.0:rc5
- cpe:/a:mortbay:jetty:4.1.0:rc6
- cpe:/a:mortbay:jetty:4.1.1
- cpe:/a:mortbay:jetty:4.1.2
- cpe:/a:mortbay:jetty:4.1.3
- cpe:/a:mortbay:jetty:4.1.4
- cpe:/a:mortbay:jetty:4.1.b0
- cpe:/a:mortbay:jetty:4.1.b1
- cpe:/a:mortbay:jetty:4.1.d0
- cpe:/a:mortbay:jetty:4.1.d1
- cpe:/a:mortbay:jetty:4.1.d2
- cpe:/a:mortbay:jetty:4.2
- cpe:/a:mortbay:jetty:4.2.0
- cpe:/a:mortbay:jetty:4.2.0:beta0
- cpe:/a:mortbay:jetty:4.2.0:rc0
- cpe:/a:mortbay:jetty:4.2.0:rc1
- cpe:/a:mortbay:jetty:4.2.1
- cpe:/a:mortbay:jetty:4.2.2
- cpe:/a:mortbay:jetty:4.2.3
- cpe:/a:mortbay:jetty:4.2.4
- cpe:/a:mortbay:jetty:4.2.4:rc0
- cpe:/a:mortbay:jetty:4.2.5
- cpe:/a:mortbay:jetty:4.2.6
- cpe:/a:mortbay:jetty:4.2.7
- cpe:/a:mortbay:jetty:4.2.9
- cpe:/a:mortbay:jetty:4.2.9:rc1
- cpe:/a:mortbay:jetty:4.2.9:rc2
- cpe:/a:mortbay:jetty:4.2.10
- cpe:/a:mortbay:jetty:4.2.10:pre0
- cpe:/a:mortbay:jetty:4.2.10:pre1
- cpe:/a:mortbay:jetty:4.2.10:pre2
- cpe:/a:mortbay:jetty:4.2.11
- cpe:/a:mortbay:jetty:4.2.12
- cpe:/a:mortbay:jetty:4.2.14
- cpe:/a:mortbay:jetty:4.2.14:rc0
- cpe:/a:mortbay:jetty:4.2.14:rc1
- cpe:/a:mortbay:jetty:4.2.15
- cpe:/a:mortbay:jetty:4.2.15:rc0
- cpe:/a:mortbay:jetty:4.2.16
- cpe:/a:mortbay:jetty:4.2.17
- cpe:/a:mortbay:jetty:4.2.18
- cpe:/a:mortbay:jetty:4.2.19
- cpe:/a:mortbay:jetty:4.2.20
- cpe:/a:mortbay:jetty:4.2.20:rc0
- cpe:/a:mortbay:jetty:4.2.21
- cpe:/a:mortbay:jetty:4.2.22
- cpe:/a:mortbay:jetty:4.2.23
- cpe:/a:mortbay:jetty:4.2.23:rc0
- cpe:/a:mortbay:jetty:4.2.24
- cpe:/a:mortbay:jetty:4.2.24:rc0
- cpe:/a:mortbay:jetty:4.2.24:rc1
- cpe:/a:mortbay:jetty:4.2.25
- cpe:/a:mortbay:jetty:4.2.26
- cpe:/a:mortbay:jetty:4.2.27
- cpe:/a:mortbay:jetty:4.2.8_01
- cpe:/a:mortbay:jetty:5.0:alpha0
- cpe:/a:mortbay:jetty:5.0:alpha1
- cpe:/a:mortbay:jetty:5.0:alpha2
- cpe:/a:mortbay:jetty:5.0:alpha3
- cpe:/a:mortbay:jetty:5.0:beta0
- cpe:/a:mortbay:jetty:5.0:beta1
- cpe:/a:mortbay:jetty:5.0:beta2
- cpe:/a:mortbay:jetty:5.0:rc1
- cpe:/a:mortbay:jetty:5.0:rc2
- cpe:/a:mortbay:jetty:5.0:rc3
- cpe:/a:mortbay:jetty:5.0:rc4
- cpe:/a:mortbay:jetty:5.0.0
- cpe:/a:mortbay:jetty:5.0.0:rc0
- cpe:/a:mortbay:jetty:5.1
- cpe:/a:mortbay:jetty:5.1:rc0
- cpe:/a:mortbay:jetty:5.1:rc1
- cpe:/a:mortbay:jetty:5.1.0
- cpe:/a:mortbay:jetty:5.1.1
- cpe:/a:mortbay:jetty:5.1.1:rc0
- cpe:/a:mortbay:jetty:5.1.1:rc1
- cpe:/a:mortbay:jetty:5.1.2
- cpe:/a:mortbay:jetty:5.1.2:pre0
- cpe:/a:mortbay:jetty:5.1.3
- cpe:/a:mortbay:jetty:5.1.3:rc0
- cpe:/a:mortbay:jetty:5.1.3:rc1
- cpe:/a:mortbay:jetty:5.1.3:rc2
- cpe:/a:mortbay:jetty:5.1.3:rc3
- cpe:/a:mortbay:jetty:5.1.3:rc4
- cpe:/a:mortbay:jetty:5.1.4
- cpe:/a:mortbay:jetty:5.1.4:rc0
- cpe:/a:mortbay:jetty:5.1.5
- cpe:/a:mortbay:jetty:5.1.5:rc0
- cpe:/a:mortbay:jetty:5.1.5:rc1
- cpe:/a:mortbay:jetty:5.1.5:rc2
- cpe:/a:mortbay:jetty:5.1.6
- cpe:/a:mortbay:jetty:5.1.7
- cpe:/a:mortbay:jetty:5.1.7:rc0
- cpe:/a:mortbay:jetty:5.1.8
- cpe:/a:mortbay:jetty:5.1.9
- cpe:/a:mortbay:jetty:5.1.10
- cpe:/a:mortbay:jetty:5.1.11
- cpe:/a:mortbay:jetty:5.1.11:rc0
- cpe:/a:mortbay:jetty:5.1.12
- cpe:/a:mortbay:jetty:5.1.13
- cpe:/a:mortbay:jetty:5.1.14
- cpe:/a:mortbay:jetty:6.0.0
- cpe:/a:mortbay:jetty:6.0.0:alpha0
- cpe:/a:mortbay:jetty:6.0.0:alpha1
- cpe:/a:mortbay:jetty:6.0.0:alpha2
- cpe:/a:mortbay:jetty:6.0.0:alpha3
- cpe:/a:mortbay:jetty:6.0.0:beta0
- cpe:/a:mortbay:jetty:6.0.0:beta1
- cpe:/a:mortbay:jetty:6.0.0:beta10
- cpe:/a:mortbay:jetty:6.0.0:beta11
- cpe:/a:mortbay:jetty:6.0.0:beta12
- cpe:/a:mortbay:jetty:6.0.0:beta14
- cpe:/a:mortbay:jetty:6.0.0:beta15
- cpe:/a:mortbay:jetty:6.0.0:beta16
- cpe:/a:mortbay:jetty:6.0.0:beta17
- cpe:/a:mortbay:jetty:6.0.0:beta2
- cpe:/a:mortbay:jetty:6.0.0:beta3
- cpe:/a:mortbay:jetty:6.0.0:beta4
- cpe:/a:mortbay:jetty:6.0.0:beta5
- cpe:/a:mortbay:jetty:6.0.0:beta6
- cpe:/a:mortbay:jetty:6.0.0:beta7
- cpe:/a:mortbay:jetty:6.0.0:beta8
- cpe:/a:mortbay:jetty:6.0.0:beta9
- cpe:/a:mortbay:jetty:6.0.0:betax
- cpe:/a:mortbay:jetty:6.0.0:rc0
- cpe:/a:mortbay:jetty:6.0.0:rc1
- cpe:/a:mortbay:jetty:6.0.0:rc2
- cpe:/a:mortbay:jetty:6.0.0:rc3
- cpe:/a:mortbay:jetty:6.0.0:rc4
- cpe:/a:mortbay:jetty:6.0.1
- cpe:/a:mortbay:jetty:6.0.2
- cpe:/a:mortbay:jetty:6.1.0
- cpe:/a:mortbay:jetty:6.1.0:pre0
- cpe:/a:mortbay:jetty:6.1.0:pre1
- cpe:/a:mortbay:jetty:6.1.0:pre2
- cpe:/a:mortbay:jetty:6.1.0:pre3
- cpe:/a:mortbay:jetty:6.1.0:rc0
- cpe:/a:mortbay:jetty:6.1.0:rc1
- cpe:/a:mortbay:jetty:6.1.0:rc2
- cpe:/a:mortbay:jetty:6.1.0:rc3
- cpe:/a:mortbay:jetty:6.1.1
- cpe:/a:mortbay:jetty:6.1.1:rc0
- cpe:/a:mortbay:jetty:6.1.2
- cpe:/a:mortbay:jetty:6.1.2:pre0
- cpe:/a:mortbay:jetty:6.1.2:pre1
- cpe:/a:mortbay:jetty:6.1.2:rc0
- cpe:/a:mortbay:jetty:6.1.2:rc1
- cpe:/a:mortbay:jetty:6.1.2:rc2
- cpe:/a:mortbay:jetty:6.1.2:rc3
- cpe:/a:mortbay:jetty:6.1.2:rc4
- cpe:/a:mortbay:jetty:6.1.2:rc5
- cpe:/a:mortbay:jetty:6.1.3
- cpe:/a:mortbay:jetty:6.1.4
- cpe:/a:mortbay:jetty:6.1.4:rc0
- cpe:/a:mortbay:jetty:6.1.4:rc1
- cpe:/a:mortbay:jetty:6.1.5
- cpe:/a:mortbay:jetty:6.1.5:rc0
- cpe:/a:mortbay:jetty:6.1.6
- cpe:/a:mortbay:jetty:6.1.6:rc0
- cpe:/a:mortbay:jetty:6.1.6:rc1
- cpe:/a:mortbay:jetty:6.1.7
- cpe:/a:mortbay:jetty:6.1.8
- cpe:/a:mortbay:jetty:6.1.9
- cpe:/a:mortbay:jetty:6.1.10
- cpe:/a:mortbay:jetty:6.1.11
- cpe:/a:mortbay:jetty:6.1.12
- cpe:/a:mortbay:jetty:6.1.12:rc1
- cpe:/a:mortbay:jetty:6.1.12:rc2
- cpe:/a:mortbay:jetty:6.1.12:rc3
- cpe:/a:mortbay:jetty:6.1.12:rc4
- cpe:/a:mortbay:jetty:6.1.12:rc5
- cpe:/a:mortbay:jetty:6.1.14
- cpe:/a:mortbay:jetty:6.1.15
- cpe:/a:mortbay:jetty:6.1.15:pre0
- cpe:/a:mortbay:jetty:6.1.15:rc2
- cpe:/a:mortbay:jetty:6.1.15:rc3
- cpe:/a:mortbay:jetty:6.1.15:rc4
- cpe:/a:mortbay:jetty:6.1.15:rc5
- cpe:/a:mortbay:jetty:6.1.16
- cpe:/a:mortbay:jetty:6.1.19
- cpe:/a:mortbay:jetty:6.1.20
- cpe:/a:mortbay:jetty:6.1.21
- cpe:/a:mortbay:jetty:7.0.0
- cpe:/a:mortbay:jetty:7.0.0:m1
- cpe:/a:mortbay:jetty:7.0.0:m2
- cpe:/a:mortbay:jetty:7.0.0:pre0
- cpe:/a:mortbay:jetty:7.0.0:pre1
- cpe:/a:mortbay:jetty:7.0.0:pre3
- cpe:/a:mortbay:jetty:8.1.0:rc2 and all previous versions

CVE-2009-4612

Severity: Medium
CVSS Score: 4.3
CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Multiple cross-site scripting (XSS) vulnerabilities in the WebApp JSP Snoop page in Mort Bay Jetty 6.1.x through 6.1.21 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI under (1) jspsnoop/, (2) jspsnoop/ERROR/, and (3) jspsnoop/IOException/, and possibly the PATH_INFO to (4) snoop.jsp.

- MISC - http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt

Vulnerable Software & Versions: (show all)

- cpe:/a:mortbay:jetty:6.1.0
- ...
- cpe:/a:mortbay:jetty:6.1.0
- cpe:/a:mortbay:jetty:6.1.0:pre0
- cpe:/a:mortbay:jetty:6.1.0:pre1
- cpe:/a:mortbay:jetty:6.1.0:pre2
- cpe:/a:mortbay:jetty:6.1.0:pre3
- cpe:/a:mortbay:jetty:6.1.0:rc0
- cpe:/a:mortbay:jetty:6.1.0:rc1
- cpe:/a:mortbay:jetty:6.1.0:rc2
- cpe:/a:mortbay:jetty:6.1.0:rc3
- cpe:/a:mortbay:jetty:6.1.1
- cpe:/a:mortbay:jetty:6.1.1:rc0
- cpe:/a:mortbay:jetty:6.1.2
- cpe:/a:mortbay:jetty:6.1.2:pre0
- cpe:/a:mortbay:jetty:6.1.2:pre1
- cpe:/a:mortbay:jetty:6.1.2:rc0
- cpe:/a:mortbay:jetty:6.1.2:rc1
- cpe:/a:mortbay:jetty:6.1.2:rc2
- cpe:/a:mortbay:jetty:6.1.2:rc3
- cpe:/a:mortbay:jetty:6.1.2:rc4
- cpe:/a:mortbay:jetty:6.1.2:rc5
- cpe:/a:mortbay:jetty:6.1.3
- cpe:/a:mortbay:jetty:6.1.4
- cpe:/a:mortbay:jetty:6.1.4:rc0
- cpe:/a:mortbay:jetty:6.1.4:rc1
- cpe:/a:mortbay:jetty:6.1.5
- cpe:/a:mortbay:jetty:6.1.5:rc0
- cpe:/a:mortbay:jetty:6.1.6
- cpe:/a:mortbay:jetty:6.1.6:rc0
- cpe:/a:mortbay:jetty:6.1.6:rc1
- cpe:/a:mortbay:jetty:6.1.7
- cpe:/a:mortbay:jetty:6.1.8
- cpe:/a:mortbay:jetty:6.1.9
- cpe:/a:mortbay:jetty:6.1.10
- cpe:/a:mortbay:jetty:6.1.11
- cpe:/a:mortbay:jetty:6.1.12
- cpe:/a:mortbay:jetty:6.1.12:rc1
- cpe:/a:mortbay:jetty:6.1.12:rc2
- cpe:/a:mortbay:jetty:6.1.12:rc3
- cpe:/a:mortbay:jetty:6.1.12:rc4
- cpe:/a:mortbay:jetty:6.1.12:rc5
- cpe:/a:mortbay:jetty:6.1.14
- cpe:/a:mortbay:jetty:6.1.15
- cpe:/a:mortbay:jetty:6.1.15:pre0
- cpe:/a:mortbay:jetty:6.1.15:rc2
- cpe:/a:mortbay:jetty:6.1.15:rc3
- cpe:/a:mortbay:jetty:6.1.15:rc4
- cpe:/a:mortbay:jetty:6.1.15:rc5
- cpe:/a:mortbay:jetty:6.1.16
- cpe:/a:mortbay:jetty:6.1.19
- cpe:/a:mortbay:jetty:6.1.20
- cpe:/a:mortbay:jetty:6.1.21

CVE-2009-4611

Severity: High
CVSS Score: 7.5
CWE: CWE-20 Improper Input Validation

Mort Bay Jetty 6.x and 7.0.0 writes backtrace data without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator, related to (1) a string value in the Age parameter to the default URI for the Cookie Dump Servlet in test-jetty-webapp/src/main/java/com/acme/CookieDump.java under cookie/, (2) an alphabetic value in the A parameter to jsp/expr.jsp, or (3) an alphabetic value in the Content-Length HTTP header to an arbitrary application.

- BUGTRAQ - 20100110 Nginx, Varnish, Cherokee, thttpd, mini-httpd, WEBrick, Orion, AOLserver, Yaws and Boa log escape sequence injection
- MISC - http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt
- MISC - http://www.ush.it/team/ush/hack_httpd_escape/adv.txt

Vulnerable Software & Versions: (show all)

- cpe:/a:mortbay:jetty:6.1.0
- ...
- cpe:/a:mortbay:jetty:6.0.0
- cpe:/a:mortbay:jetty:6.0.0:alpha0
- cpe:/a:mortbay:jetty:6.0.0:alpha1
- cpe:/a:mortbay:jetty:6.0.0:alpha2
- cpe:/a:mortbay:jetty:6.0.0:alpha3
- cpe:/a:mortbay:jetty:6.0.0:beta0
- cpe:/a:mortbay:jetty:6.0.0:beta1
- cpe:/a:mortbay:jetty:6.0.0:beta10
- cpe:/a:mortbay:jetty:6.0.0:beta11
- cpe:/a:mortbay:jetty:6.0.0:beta12
- cpe:/a:mortbay:jetty:6.0.0:beta14
- cpe:/a:mortbay:jetty:6.0.0:beta15
- cpe:/a:mortbay:jetty:6.0.0:beta16
- cpe:/a:mortbay:jetty:6.0.0:beta17
- cpe:/a:mortbay:jetty:6.0.0:beta2
- cpe:/a:mortbay:jetty:6.0.0:beta3
- cpe:/a:mortbay:jetty:6.0.0:beta4
- cpe:/a:mortbay:jetty:6.0.0:beta5
- cpe:/a:mortbay:jetty:6.0.0:beta6
- cpe:/a:mortbay:jetty:6.0.0:beta7
- cpe:/a:mortbay:jetty:6.0.0:beta8
- cpe:/a:mortbay:jetty:6.0.0:beta9
- cpe:/a:mortbay:jetty:6.0.0:betax
- cpe:/a:mortbay:jetty:6.0.0:rc0
- cpe:/a:mortbay:jetty:6.0.0:rc1
- cpe:/a:mortbay:jetty:6.0.0:rc2
- cpe:/a:mortbay:jetty:6.0.0:rc3
- cpe:/a:mortbay:jetty:6.0.0:rc4
- cpe:/a:mortbay:jetty:6.0.1
- cpe:/a:mortbay:jetty:6.0.2
- cpe:/a:mortbay:jetty:6.1.0
- cpe:/a:mortbay:jetty:6.1.0:pre0
- cpe:/a:mortbay:jetty:6.1.0:pre1
- cpe:/a:mortbay:jetty:6.1.0:pre2
- cpe:/a:mortbay:jetty:6.1.0:pre3
- cpe:/a:mortbay:jetty:6.1.0:rc0
- cpe:/a:mortbay:jetty:6.1.0:rc1
- cpe:/a:mortbay:jetty:6.1.0:rc2
- cpe:/a:mortbay:jetty:6.1.0:rc3
- cpe:/a:mortbay:jetty:6.1.1
- cpe:/a:mortbay:jetty:6.1.1:rc0
- cpe:/a:mortbay:jetty:6.1.2
- cpe:/a:mortbay:jetty:6.1.2:pre0
- cpe:/a:mortbay:jetty:6.1.2:pre1
- cpe:/a:mortbay:jetty:6.1.2:rc0
- cpe:/a:mortbay:jetty:6.1.2:rc1
- cpe:/a:mortbay:jetty:6.1.2:rc2
- cpe:/a:mortbay:jetty:6.1.2:rc3
- cpe:/a:mortbay:jetty:6.1.2:rc4
- cpe:/a:mortbay:jetty:6.1.2:rc5
- cpe:/a:mortbay:jetty:6.1.3
- cpe:/a:mortbay:jetty:6.1.4
- cpe:/a:mortbay:jetty:6.1.4:rc0
- cpe:/a:mortbay:jetty:6.1.4:rc1
- cpe:/a:mortbay:jetty:6.1.5
- cpe:/a:mortbay:jetty:6.1.5:rc0
- cpe:/a:mortbay:jetty:6.1.6
- cpe:/a:mortbay:jetty:6.1.6:rc0
- cpe:/a:mortbay:jetty:6.1.6:rc1
- cpe:/a:mortbay:jetty:6.1.7
- cpe:/a:mortbay:jetty:6.1.8
- cpe:/a:mortbay:jetty:6.1.9
- cpe:/a:mortbay:jetty:6.1.10
- cpe:/a:mortbay:jetty:6.1.11
- cpe:/a:mortbay:jetty:6.1.12
- cpe:/a:mortbay:jetty:6.1.12:rc1
- cpe:/a:mortbay:jetty:6.1.12:rc2
- cpe:/a:mortbay:jetty:6.1.12:rc3
- cpe:/a:mortbay:jetty:6.1.12:rc4
- cpe:/a:mortbay:jetty:6.1.12:rc5
- cpe:/a:mortbay:jetty:6.1.14
- cpe:/a:mortbay:jetty:6.1.15
- cpe:/a:mortbay:jetty:6.1.15:pre0
- cpe:/a:mortbay:jetty:6.1.15:rc2
- cpe:/a:mortbay:jetty:6.1.15:rc3
- cpe:/a:mortbay:jetty:6.1.15:rc4
- cpe:/a:mortbay:jetty:6.1.15:rc5
- cpe:/a:mortbay:jetty:6.1.16
- cpe:/a:mortbay:jetty:6.1.19
- cpe:/a:mortbay:jetty:6.1.20
- cpe:/a:mortbay:jetty:7.0.0

CVE-2009-4610

Severity: Medium
CVSS Score: 4.3
CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to jsp/dump.jsp in the JSP Dump feature, or the (2) Name or (3) Value parameter to the default URI for the Session Dump Servlet under session/.

- MISC - http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt

Vulnerable Software & Versions: (show all)

- cpe:/a:mortbay:jetty:6.1.0
- ...
- cpe:/a:mortbay:jetty:6.0.0
- cpe:/a:mortbay:jetty:6.0.0:alpha0
- cpe:/a:mortbay:jetty:6.0.0:alpha1
- cpe:/a:mortbay:jetty:6.0.0:alpha2
- cpe:/a:mortbay:jetty:6.0.0:alpha3
- cpe:/a:mortbay:jetty:6.0.0:beta0
- cpe:/a:mortbay:jetty:6.0.0:beta1
- cpe:/a:mortbay:jetty:6.0.0:beta10
- cpe:/a:mortbay:jetty:6.0.0:beta11
- cpe:/a:mortbay:jetty:6.0.0:beta12
- cpe:/a:mortbay:jetty:6.0.0:beta14
- cpe:/a:mortbay:jetty:6.0.0:beta15
- cpe:/a:mortbay:jetty:6.0.0:beta16
- cpe:/a:mortbay:jetty:6.0.0:beta17
- cpe:/a:mortbay:jetty:6.0.0:beta2
- cpe:/a:mortbay:jetty:6.0.0:beta3
- cpe:/a:mortbay:jetty:6.0.0:beta4
- cpe:/a:mortbay:jetty:6.0.0:beta5
- cpe:/a:mortbay:jetty:6.0.0:beta6
- cpe:/a:mortbay:jetty:6.0.0:beta7
- cpe:/a:mortbay:jetty:6.0.0:beta8
- cpe:/a:mortbay:jetty:6.0.0:beta9
- cpe:/a:mortbay:jetty:6.0.0:betax
- cpe:/a:mortbay:jetty:6.0.0:rc0
- cpe:/a:mortbay:jetty:6.0.0:rc1
- cpe:/a:mortbay:jetty:6.0.0:rc2
- cpe:/a:mortbay:jetty:6.0.0:rc3
- cpe:/a:mortbay:jetty:6.0.0:rc4
- cpe:/a:mortbay:jetty:6.0.1
- cpe:/a:mortbay:jetty:6.0.2
- cpe:/a:mortbay:jetty:6.1.0
- cpe:/a:mortbay:jetty:6.1.0:pre0
- cpe:/a:mortbay:jetty:6.1.0:pre1
- cpe:/a:mortbay:jetty:6.1.0:pre2
- cpe:/a:mortbay:jetty:6.1.0:pre3
- cpe:/a:mortbay:jetty:6.1.0:rc0
- cpe:/a:mortbay:jetty:6.1.0:rc1
- cpe:/a:mortbay:jetty:6.1.0:rc2
- cpe:/a:mortbay:jetty:6.1.0:rc3
- cpe:/a:mortbay:jetty:6.1.1
- cpe:/a:mortbay:jetty:6.1.1:rc0
- cpe:/a:mortbay:jetty:6.1.2
- cpe:/a:mortbay:jetty:6.1.2:pre0
- cpe:/a:mortbay:jetty:6.1.2:pre1
- cpe:/a:mortbay:jetty:6.1.2:rc0
- cpe:/a:mortbay:jetty:6.1.2:rc1
- cpe:/a:mortbay:jetty:6.1.2:rc2
- cpe:/a:mortbay:jetty:6.1.2:rc3
- cpe:/a:mortbay:jetty:6.1.2:rc4
- cpe:/a:mortbay:jetty:6.1.2:rc5
- cpe:/a:mortbay:jetty:6.1.3
- cpe:/a:mortbay:jetty:6.1.4
- cpe:/a:mortbay:jetty:6.1.4:rc0
- cpe:/a:mortbay:jetty:6.1.4:rc1
- cpe:/a:mortbay:jetty:6.1.5
- cpe:/a:mortbay:jetty:6.1.5:rc0
- cpe:/a:mortbay:jetty:6.1.6
- cpe:/a:mortbay:jetty:6.1.6:rc0
- cpe:/a:mortbay:jetty:6.1.6:rc1
- cpe:/a:mortbay:jetty:6.1.7
- cpe:/a:mortbay:jetty:6.1.8
- cpe:/a:mortbay:jetty:6.1.9
- cpe:/a:mortbay:jetty:6.1.10
- cpe:/a:mortbay:jetty:6.1.11
- cpe:/a:mortbay:jetty:6.1.12
- cpe:/a:mortbay:jetty:6.1.12:rc1
- cpe:/a:mortbay:jetty:6.1.12:rc2
- cpe:/a:mortbay:jetty:6.1.12:rc3
- cpe:/a:mortbay:jetty:6.1.12:rc4
- cpe:/a:mortbay:jetty:6.1.12:rc5
- cpe:/a:mortbay:jetty:6.1.14
- cpe:/a:mortbay:jetty:6.1.15
- cpe:/a:mortbay:jetty:6.1.15:pre0
- cpe:/a:mortbay:jetty:6.1.15:rc2
- cpe:/a:mortbay:jetty:6.1.15:rc3
- cpe:/a:mortbay:jetty:6.1.15:rc4
- cpe:/a:mortbay:jetty:6.1.15:rc5
- cpe:/a:mortbay:jetty:6.1.16
- cpe:/a:mortbay:jetty:6.1.19
- cpe:/a:mortbay:jetty:6.1.20
- cpe:/a:mortbay:jetty:7.0.0

CVE-2009-4609

Severity: Medium
CVSS Score: 5.0
CWE: CWE-200 Information Exposure

The Dump Servlet in Mort Bay Jetty 6.x and 7.0.0 allows remote attackers to obtain sensitive information about internal variables and other data via a request to a URI ending in /dump/, as demonstrated by discovering the value of the getPathTranslated variable.

- MISC - http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt

Vulnerable Software & Versions: (show all)

- cpe:/a:mortbay:jetty:6.1.0
- ...
- cpe:/a:mortbay:jetty:6.0.0
- cpe:/a:mortbay:jetty:6.0.0:alpha0
- cpe:/a:mortbay:jetty:6.0.0:alpha1
- cpe:/a:mortbay:jetty:6.0.0:alpha2
- cpe:/a:mortbay:jetty:6.0.0:alpha3
- cpe:/a:mortbay:jetty:6.0.0:beta0
- cpe:/a:mortbay:jetty:6.0.0:beta1
- cpe:/a:mortbay:jetty:6.0.0:beta10
- cpe:/a:mortbay:jetty:6.0.0:beta11
- cpe:/a:mortbay:jetty:6.0.0:beta12
- cpe:/a:mortbay:jetty:6.0.0:beta14
- cpe:/a:mortbay:jetty:6.0.0:beta15
- cpe:/a:mortbay:jetty:6.0.0:beta16
- cpe:/a:mortbay:jetty:6.0.0:beta17
- cpe:/a:mortbay:jetty:6.0.0:beta2
- cpe:/a:mortbay:jetty:6.0.0:beta3
- cpe:/a:mortbay:jetty:6.0.0:beta4
- cpe:/a:mortbay:jetty:6.0.0:beta5
- cpe:/a:mortbay:jetty:6.0.0:beta6
- cpe:/a:mortbay:jetty:6.0.0:beta7
- cpe:/a:mortbay:jetty:6.0.0:beta8
- cpe:/a:mortbay:jetty:6.0.0:beta9
- cpe:/a:mortbay:jetty:6.0.0:betax
- cpe:/a:mortbay:jetty:6.0.0:rc0
- cpe:/a:mortbay:jetty:6.0.0:rc1
- cpe:/a:mortbay:jetty:6.0.0:rc2
- cpe:/a:mortbay:jetty:6.0.0:rc3
- cpe:/a:mortbay:jetty:6.0.0:rc4
- cpe:/a:mortbay:jetty:6.0.1
- cpe:/a:mortbay:jetty:6.0.2
- cpe:/a:mortbay:jetty:6.1.0
- cpe:/a:mortbay:jetty:6.1.0:pre0
- cpe:/a:mortbay:jetty:6.1.0:pre1
- cpe:/a:mortbay:jetty:6.1.0:pre2
- cpe:/a:mortbay:jetty:6.1.0:pre3
- cpe:/a:mortbay:jetty:6.1.0:rc0
- cpe:/a:mortbay:jetty:6.1.0:rc1
- cpe:/a:mortbay:jetty:6.1.0:rc2
- cpe:/a:mortbay:jetty:6.1.0:rc3
- cpe:/a:mortbay:jetty:6.1.1
- cpe:/a:mortbay:jetty:6.1.1:rc0
- cpe:/a:mortbay:jetty:6.1.2
- cpe:/a:mortbay:jetty:6.1.2:pre0
- cpe:/a:mortbay:jetty:6.1.2:pre1
- cpe:/a:mortbay:jetty:6.1.2:rc0
- cpe:/a:mortbay:jetty:6.1.2:rc1
- cpe:/a:mortbay:jetty:6.1.2:rc2
- cpe:/a:mortbay:jetty:6.1.2:rc3
- cpe:/a:mortbay:jetty:6.1.2:rc4
- cpe:/a:mortbay:jetty:6.1.2:rc5
- cpe:/a:mortbay:jetty:6.1.3
- cpe:/a:mortbay:jetty:6.1.4
- cpe:/a:mortbay:jetty:6.1.4:rc0
- cpe:/a:mortbay:jetty:6.1.4:rc1
- cpe:/a:mortbay:jetty:6.1.5
- cpe:/a:mortbay:jetty:6.1.5:rc0
- cpe:/a:mortbay:jetty:6.1.6
- cpe:/a:mortbay:jetty:6.1.6:rc0
- cpe:/a:mortbay:jetty:6.1.6:rc1
- cpe:/a:mortbay:jetty:6.1.7
- cpe:/a:mortbay:jetty:6.1.8
- cpe:/a:mortbay:jetty:6.1.9
- cpe:/a:mortbay:jetty:6.1.10
- cpe:/a:mortbay:jetty:6.1.11
- cpe:/a:mortbay:jetty:6.1.12
- cpe:/a:mortbay:jetty:6.1.12:rc1
- cpe:/a:mortbay:jetty:6.1.12:rc2
- cpe:/a:mortbay:jetty:6.1.12:rc3
- cpe:/a:mortbay:jetty:6.1.12:rc4
- cpe:/a:mortbay:jetty:6.1.12:rc5
- cpe:/a:mortbay:jetty:6.1.14
- cpe:/a:mortbay:jetty:6.1.15
- cpe:/a:mortbay:jetty:6.1.15:pre0
- cpe:/a:mortbay:jetty:6.1.15:rc2
- cpe:/a:mortbay:jetty:6.1.15:rc3
- cpe:/a:mortbay:jetty:6.1.15:rc4
- cpe:/a:mortbay:jetty:6.1.15:rc5
- cpe:/a:mortbay:jetty:6.1.16
- cpe:/a:mortbay:jetty:6.1.19
- cpe:/a:mortbay:jetty:6.1.20
- cpe:/a:mortbay:jetty:7.0.0

CVE-2009-1524

Severity: Medium
CVSS Score: 4.3
CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Cross-site scripting (XSS) vulnerability in Mort Bay Jetty before 6.1.17 allows remote attackers to inject arbitrary web script or HTML via a directory listing request containing a ; (semicolon) character.

- BID - 34800
- CONFIRM - http://jira.codehaus.org/browse/JETTY-980
- CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=499867
- HP - HPSBMA02553
- HP - SSRT100184
- SECUNIA - 34975
- SECUNIA - 40553
- VUPEN - ADV-2010-1792

Vulnerable Software & Versions: (show all)

- cpe:/a:mortbay:jetty:6.1.0
- ...
- cpe:/a:mortbay:jetty:1.0
- cpe:/a:mortbay:jetty:1.0.1
- cpe:/a:mortbay:jetty:1.1
- cpe:/a:mortbay:jetty:1.1.1
- cpe:/a:mortbay:jetty:1.2.0
- cpe:/a:mortbay:jetty:1.3.0
- cpe:/a:mortbay:jetty:1.3.1
- cpe:/a:mortbay:jetty:1.3.2
- cpe:/a:mortbay:jetty:1.3.3
- cpe:/a:mortbay:jetty:1.3.4
- cpe:/a:mortbay:jetty:1.3.5
- cpe:/a:mortbay:jetty:2.0:alpha1
- cpe:/a:mortbay:jetty:2.0:alpha2
- cpe:/a:mortbay:jetty:2.0:beta1
- cpe:/a:mortbay:jetty:2.0:beta2
- cpe:/a:mortbay:jetty:2.0.0
- cpe:/a:mortbay:jetty:2.0.1
- cpe:/a:mortbay:jetty:2.0.2
- cpe:/a:mortbay:jetty:2.0.3
- cpe:/a:mortbay:jetty:2.0.4
- cpe:/a:mortbay:jetty:2.0.5
- cpe:/a:mortbay:jetty:2.1.0
- cpe:/a:mortbay:jetty:2.1.1
- cpe:/a:mortbay:jetty:2.1.2
- cpe:/a:mortbay:jetty:2.1.3
- cpe:/a:mortbay:jetty:2.1.4
- cpe:/a:mortbay:jetty:2.1.5
- cpe:/a:mortbay:jetty:2.1.6
- cpe:/a:mortbay:jetty:2.1.7
- cpe:/a:mortbay:jetty:2.1.b0
- cpe:/a:mortbay:jetty:2.1.b1
- cpe:/a:mortbay:jetty:2.2:alpha0
- cpe:/a:mortbay:jetty:2.2:alpha1
- cpe:/a:mortbay:jetty:2.2:beta0
- cpe:/a:mortbay:jetty:2.2:beta1
- cpe:/a:mortbay:jetty:2.2:beta2
- cpe:/a:mortbay:jetty:2.2:beta3
- cpe:/a:mortbay:jetty:2.2:beta4
- cpe:/a:mortbay:jetty:2.2.0
- cpe:/a:mortbay:jetty:2.2.1
- cpe:/a:mortbay:jetty:2.2.2
- cpe:/a:mortbay:jetty:2.2.3
- cpe:/a:mortbay:jetty:2.2.4
- cpe:/a:mortbay:jetty:2.2.5
- cpe:/a:mortbay:jetty:2.2.6
- cpe:/a:mortbay:jetty:2.2.7
- cpe:/a:mortbay:jetty:2.2.8
- cpe:/a:mortbay:jetty:2.3.0
- cpe:/a:mortbay:jetty:2.3.0a
- cpe:/a:mortbay:jetty:2.3.1
- cpe:/a:mortbay:jetty:2.3.2
- cpe:/a:mortbay:jetty:2.3.3
- cpe:/a:mortbay:jetty:2.3.4
- cpe:/a:mortbay:jetty:2.3.5
- cpe:/a:mortbay:jetty:2.4.0
- cpe:/a:mortbay:jetty:2.4.1
- cpe:/a:mortbay:jetty:2.4.2
- cpe:/a:mortbay:jetty:2.4.3
- cpe:/a:mortbay:jetty:2.4.4
- cpe:/a:mortbay:jetty:2.4.5
- cpe:/a:mortbay:jetty:2.4.6
- cpe:/a:mortbay:jetty:2.4.7
- cpe:/a:mortbay:jetty:2.4.8
- cpe:/a:mortbay:jetty:2.4.9
- cpe:/a:mortbay:jetty:3.0.0
- cpe:/a:mortbay:jetty:3.0.0:rc1
- cpe:/a:mortbay:jetty:3.0.0:rc2
- cpe:/a:mortbay:jetty:3.0.0:rc3
- cpe:/a:mortbay:jetty:3.0.0:rc4
- cpe:/a:mortbay:jetty:3.0.0:rc5
- cpe:/a:mortbay:jetty:3.0.0:rc6
- cpe:/a:mortbay:jetty:3.0.0:rc7
- cpe:/a:mortbay:jetty:3.0.0:rc8
- cpe:/a:mortbay:jetty:3.0.1
- cpe:/a:mortbay:jetty:3.0.2
- cpe:/a:mortbay:jetty:3.0.3
- cpe:/a:mortbay:jetty:3.0.4
- cpe:/a:mortbay:jetty:3.0.5
- cpe:/a:mortbay:jetty:3.0.6
- cpe:/a:mortbay:jetty:3.0.a0
- cpe:/a:mortbay:jetty:3.0.a1
- cpe:/a:mortbay:jetty:3.0.a2
- cpe:/a:mortbay:jetty:3.0.a3
- cpe:/a:mortbay:jetty:3.0.a4
- cpe:/a:mortbay:jetty:3.0.a5
- cpe:/a:mortbay:jetty:3.0.a6
- cpe:/a:mortbay:jetty:3.0.a7
- cpe:/a:mortbay:jetty:3.0.a8
- cpe:/a:mortbay:jetty:3.0.a9
- cpe:/a:mortbay:jetty:3.0.a90
- cpe:/a:mortbay:jetty:3.0.a91
- cpe:/a:mortbay:jetty:3.0.a92
- cpe:/a:mortbay:jetty:3.0.a93
- cpe:/a:mortbay:jetty:3.0.a94
- cpe:/a:mortbay:jetty:3.0.a95
- cpe:/a:mortbay:jetty:3.0.a96
- cpe:/a:mortbay:jetty:3.0.a97
- cpe:/a:mortbay:jetty:3.0.a98
- cpe:/a:mortbay:jetty:3.0.a99
- cpe:/a:mortbay:jetty:3.0.b01
- cpe:/a:mortbay:jetty:3.0.b02
- cpe:/a:mortbay:jetty:3.0.b03
- cpe:/a:mortbay:jetty:3.0.b04
- cpe:/a:mortbay:jetty:3.0.b05
- cpe:/a:mortbay:jetty:3.1:rc0
- cpe:/a:mortbay:jetty:3.1:rc1
- cpe:/a:mortbay:jetty:3.1:rc2
- cpe:/a:mortbay:jetty:3.1:rc3
- cpe:/a:mortbay:jetty:3.1:rc4
- cpe:/a:mortbay:jetty:3.1:rc5
- cpe:/a:mortbay:jetty:3.1:rc6
- cpe:/a:mortbay:jetty:3.1:rc7
- cpe:/a:mortbay:jetty:3.1:rc8
- cpe:/a:mortbay:jetty:3.1:rc9
- cpe:/a:mortbay:jetty:3.1.0
- cpe:/a:mortbay:jetty:3.1.1
- cpe:/a:mortbay:jetty:3.1.2
- cpe:/a:mortbay:jetty:3.1.3
- cpe:/a:mortbay:jetty:3.1.4
- cpe:/a:mortbay:jetty:3.1.5
- cpe:/a:mortbay:jetty:3.1.6
- cpe:/a:mortbay:jetty:3.1.7
- cpe:/a:mortbay:jetty:3.1.8
- cpe:/a:mortbay:jetty:3.1.9
- cpe:/a:mortbay:jetty:4.0:rc1
- cpe:/a:mortbay:jetty:4.0:rc2
- cpe:/a:mortbay:jetty:4.0:rc3
- cpe:/a:mortbay:jetty:4.0.0
- cpe:/a:mortbay:jetty:4.0.1
- cpe:/a:mortbay:jetty:4.0.1:rc0
- cpe:/a:mortbay:jetty:4.0.1:rc1
- cpe:/a:mortbay:jetty:4.0.1:rc2
- cpe:/a:mortbay:jetty:4.0.2
- cpe:/a:mortbay:jetty:4.0.3
- cpe:/a:mortbay:jetty:4.0.4
- cpe:/a:mortbay:jetty:4.0.5
- cpe:/a:mortbay:jetty:4.0.6
- cpe:/a:mortbay:jetty:4.0.b0
- cpe:/a:mortbay:jetty:4.0.b1
- cpe:/a:mortbay:jetty:4.0.b2
- cpe:/a:mortbay:jetty:4.0.d0
- cpe:/a:mortbay:jetty:4.0.d1
- cpe:/a:mortbay:jetty:4.0.d2
- cpe:/a:mortbay:jetty:4.0.d3
- cpe:/a:mortbay:jetty:4.0.d4
- cpe:/a:mortbay:jetty:4.1.0
- cpe:/a:mortbay:jetty:4.1.0:rc0
- cpe:/a:mortbay:jetty:4.1.0:rc1
- cpe:/a:mortbay:jetty:4.1.0:rc2
- cpe:/a:mortbay:jetty:4.1.0:rc3
- cpe:/a:mortbay:jetty:4.1.0:rc4
- cpe:/a:mortbay:jetty:4.1.0:rc5
- cpe:/a:mortbay:jetty:4.1.0:rc6
- cpe:/a:mortbay:jetty:4.1.1
- cpe:/a:mortbay:jetty:4.1.2
- cpe:/a:mortbay:jetty:4.1.3
- cpe:/a:mortbay:jetty:4.1.4
- cpe:/a:mortbay:jetty:4.1.b0
- cpe:/a:mortbay:jetty:4.1.b1
- cpe:/a:mortbay:jetty:4.1.d0
- cpe:/a:mortbay:jetty:4.1.d1
- cpe:/a:mortbay:jetty:4.1.d2
- cpe:/a:mortbay:jetty:4.2.0
- cpe:/a:mortbay:jetty:4.2.0:beta0
- cpe:/a:mortbay:jetty:4.2.0:rc0
- cpe:/a:mortbay:jetty:4.2.0:rc1
- cpe:/a:mortbay:jetty:4.2.1
- cpe:/a:mortbay:jetty:4.2.2
- cpe:/a:mortbay:jetty:4.2.3
- cpe:/a:mortbay:jetty:4.2.4
- cpe:/a:mortbay:jetty:4.2.4:rc0
- cpe:/a:mortbay:jetty:4.2.5
- cpe:/a:mortbay:jetty:4.2.6
- cpe:/a:mortbay:jetty:4.2.7
- cpe:/a:mortbay:jetty:4.2.8_01
- cpe:/a:mortbay:jetty:4.2.9
- cpe:/a:mortbay:jetty:4.2.9:rc1
- cpe:/a:mortbay:jetty:4.2.9:rc2
- cpe:/a:mortbay:jetty:4.2.10
- cpe:/a:mortbay:jetty:4.2.10:pre0
- cpe:/a:mortbay:jetty:4.2.10:pre1
- cpe:/a:mortbay:jetty:4.2.10:pre2
- cpe:/a:mortbay:jetty:4.2.12
- cpe:/a:mortbay:jetty:4.2.14
- cpe:/a:mortbay:jetty:4.2.14:rc0
- cpe:/a:mortbay:jetty:4.2.14:rc1
- cpe:/a:mortbay:jetty:4.2.15
- cpe:/a:mortbay:jetty:4.2.15:rc0
- cpe:/a:mortbay:jetty:4.2.16
- cpe:/a:mortbay:jetty:4.2.17
- cpe:/a:mortbay:jetty:4.2.18
- cpe:/a:mortbay:jetty:4.2.19
- cpe:/a:mortbay:jetty:4.2.20
- cpe:/a:mortbay:jetty:4.2.20:rc0
- cpe:/a:mortbay:jetty:4.2.21
- cpe:/a:mortbay:jetty:4.2.22
- cpe:/a:mortbay:jetty:4.2.23
- cpe:/a:mortbay:jetty:4.2.23:rc0
- cpe:/a:mortbay:jetty:4.2.24
- cpe:/a:mortbay:jetty:4.2.24:rc0
- cpe:/a:mortbay:jetty:4.2.24:rc1
- cpe:/a:mortbay:jetty:4.2.25
- cpe:/a:mortbay:jetty:4.2.26
- cpe:/a:mortbay:jetty:4.2.27
- cpe:/a:mortbay:jetty:5.0:alpha0
- cpe:/a:mortbay:jetty:5.0:alpha1
- cpe:/a:mortbay:jetty:5.0:alpha2
- cpe:/a:mortbay:jetty:5.0:alpha3
- cpe:/a:mortbay:jetty:5.0:beta0
- cpe:/a:mortbay:jetty:5.0:beta1
- cpe:/a:mortbay:jetty:5.0:beta2
- cpe:/a:mortbay:jetty:5.0:rc1
- cpe:/a:mortbay:jetty:5.0:rc2
- cpe:/a:mortbay:jetty:5.0:rc3
- cpe:/a:mortbay:jetty:5.0:rc4
- cpe:/a:mortbay:jetty:5.0.0
- cpe:/a:mortbay:jetty:5.0.0:rc0
- cpe:/a:mortbay:jetty:5.1:rc0
- cpe:/a:mortbay:jetty:5.1:rc1
- cpe:/a:mortbay:jetty:5.1.0
- cpe:/a:mortbay:jetty:5.1.1
- cpe:/a:mortbay:jetty:5.1.1:rc0
- cpe:/a:mortbay:jetty:5.1.1:rc1
- cpe:/a:mortbay:jetty:5.1.2
- cpe:/a:mortbay:jetty:5.1.2:pre0
- cpe:/a:mortbay:jetty:5.1.3
- cpe:/a:mortbay:jetty:5.1.3:rc0
- cpe:/a:mortbay:jetty:5.1.3:rc1
- cpe:/a:mortbay:jetty:5.1.3:rc2
- cpe:/a:mortbay:jetty:5.1.3:rc3
- cpe:/a:mortbay:jetty:5.1.3:rc4
- cpe:/a:mortbay:jetty:5.1.4
- cpe:/a:mortbay:jetty:5.1.4:rc0
- cpe:/a:mortbay:jetty:5.1.5
- cpe:/a:mortbay:jetty:5.1.5:rc0
- cpe:/a:mortbay:jetty:5.1.5:rc1
- cpe:/a:mortbay:jetty:5.1.5:rc2
- cpe:/a:mortbay:jetty:5.1.6
- cpe:/a:mortbay:jetty:5.1.7
- cpe:/a:mortbay:jetty:5.1.7:rc0
- cpe:/a:mortbay:jetty:5.1.8
- cpe:/a:mortbay:jetty:5.1.9
- cpe:/a:mortbay:jetty:5.1.10
- cpe:/a:mortbay:jetty:5.1.11
- cpe:/a:mortbay:jetty:5.1.11:rc0
- cpe:/a:mortbay:jetty:5.1.12
- cpe:/a:mortbay:jetty:5.1.13
- cpe:/a:mortbay:jetty:5.1.14
- cpe:/a:mortbay:jetty:6.0.0
- cpe:/a:mortbay:jetty:6.0.0:alpha0
- cpe:/a:mortbay:jetty:6.0.0:alpha1
- cpe:/a:mortbay:jetty:6.0.0:alpha2
- cpe:/a:mortbay:jetty:6.0.0:alpha3
- cpe:/a:mortbay:jetty:6.0.0:beta0
- cpe:/a:mortbay:jetty:6.0.0:beta1
- cpe:/a:mortbay:jetty:6.0.0:beta10
- cpe:/a:mortbay:jetty:6.0.0:beta11
- cpe:/a:mortbay:jetty:6.0.0:beta12
- cpe:/a:mortbay:jetty:6.0.0:beta14
- cpe:/a:mortbay:jetty:6.0.0:beta15
- cpe:/a:mortbay:jetty:6.0.0:beta16
- cpe:/a:mortbay:jetty:6.0.0:beta17
- cpe:/a:mortbay:jetty:6.0.0:beta2
- cpe:/a:mortbay:jetty:6.0.0:beta3
- cpe:/a:mortbay:jetty:6.0.0:beta4
- cpe:/a:mortbay:jetty:6.0.0:beta5
- cpe:/a:mortbay:jetty:6.0.0:beta6
- cpe:/a:mortbay:jetty:6.0.0:beta7
- cpe:/a:mortbay:jetty:6.0.0:beta8
- cpe:/a:mortbay:jetty:6.0.0:beta9
- cpe:/a:mortbay:jetty:6.0.0:betax
- cpe:/a:mortbay:jetty:6.0.0:rc0
- cpe:/a:mortbay:jetty:6.0.0:rc1
- cpe:/a:mortbay:jetty:6.0.0:rc2
- cpe:/a:mortbay:jetty:6.0.0:rc3
- cpe:/a:mortbay:jetty:6.0.0:rc4
- cpe:/a:mortbay:jetty:6.0.1
- cpe:/a:mortbay:jetty:6.0.2
- cpe:/a:mortbay:jetty:6.1.0
- cpe:/a:mortbay:jetty:6.1.0:pre0
- cpe:/a:mortbay:jetty:6.1.0:pre1
- cpe:/a:mortbay:jetty:6.1.0:pre2
- cpe:/a:mortbay:jetty:6.1.0:pre3
- cpe:/a:mortbay:jetty:6.1.0:rc0
- cpe:/a:mortbay:jetty:6.1.0:rc1
- cpe:/a:mortbay:jetty:6.1.0:rc2
- cpe:/a:mortbay:jetty:6.1.0:rc3
- cpe:/a:mortbay:jetty:6.1.1
- cpe:/a:mortbay:jetty:6.1.1:rc0
- cpe:/a:mortbay:jetty:6.1.2
- cpe:/a:mortbay:jetty:6.1.2:pre0
- cpe:/a:mortbay:jetty:6.1.2:pre1
- cpe:/a:mortbay:jetty:6.1.2:rc0
- cpe:/a:mortbay:jetty:6.1.2:rc1
- cpe:/a:mortbay:jetty:6.1.2:rc2
- cpe:/a:mortbay:jetty:6.1.2:rc3
- cpe:/a:mortbay:jetty:6.1.2:rc4
- cpe:/a:mortbay:jetty:6.1.2:rc5
- cpe:/a:mortbay:jetty:6.1.3
- cpe:/a:mortbay:jetty:6.1.4
- cpe:/a:mortbay:jetty:6.1.4:rc0
- cpe:/a:mortbay:jetty:6.1.4:rc1
- cpe:/a:mortbay:jetty:6.1.5
- cpe:/a:mortbay:jetty:6.1.5:rc0
- cpe:/a:mortbay:jetty:6.1.6
- cpe:/a:mortbay:jetty:6.1.6:rc0
- cpe:/a:mortbay:jetty:6.1.6:rc1
- cpe:/a:mortbay:jetty:6.1.7
- cpe:/a:mortbay:jetty:6.1.8
- cpe:/a:mortbay:jetty:6.1.9
- cpe:/a:mortbay:jetty:6.1.10
- cpe:/a:mortbay:jetty:6.1.11
- cpe:/a:mortbay:jetty:6.1.12
- cpe:/a:mortbay:jetty:6.1.12:rc1
- cpe:/a:mortbay:jetty:6.1.12:rc2
- cpe:/a:mortbay:jetty:6.1.12:rc3
- cpe:/a:mortbay:jetty:6.1.12:rc4
- cpe:/a:mortbay:jetty:6.1.12:rc5
- cpe:/a:mortbay:jetty:6.1.14
- cpe:/a:mortbay:jetty:6.1.15
- cpe:/a:mortbay:jetty:6.1.15:pre0
- cpe:/a:mortbay:jetty:6.1.15:rc2
- cpe:/a:mortbay:jetty:6.1.15:rc3
- cpe:/a:mortbay:jetty:6.1.15:rc4
- cpe:/a:mortbay:jetty:6.1.15:rc5
- cpe:/a:mortbay:jetty:6.1.16 and all previous versions

CVE-2009-1523

Severity: Medium
CVSS Score: 5.0
CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.

- BID - 34800
- BID - 35675
- CERT-VN - VU#402580
- CONFIRM - http://jira.codehaus.org/browse/JETTY-1004
- CONFIRM - http://www.kb.cert.org/vuls/id/CRDY-7RKQCY
- CONFIRM - http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html
- CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=499867
- FEDORA - FEDORA-2009-5500
- FEDORA - FEDORA-2009-5509
- FEDORA - FEDORA-2009-5513
- HP - HPSBMA02553
- HP - SSRT100184
- SECTRACK - 1022563
- SECUNIA - 34975
- SECUNIA - 35143
- SECUNIA - 35225
- SECUNIA - 35776
- SECUNIA - 40553
- VUPEN - ADV-2009-1900
- VUPEN - ADV-2010-1792

Vulnerable Software & Versions: (show all)

- cpe:/a:mortbay:jetty:6.1.0
- ...
- cpe:/a:mortbay:jetty:1.0
- cpe:/a:mortbay:jetty:1.0.1
- cpe:/a:mortbay:jetty:1.1
- cpe:/a:mortbay:jetty:1.1.1
- cpe:/a:mortbay:jetty:1.2.0
- cpe:/a:mortbay:jetty:1.3.0
- cpe:/a:mortbay:jetty:1.3.1
- cpe:/a:mortbay:jetty:1.3.2
- cpe:/a:mortbay:jetty:1.3.3
- cpe:/a:mortbay:jetty:1.3.4
- cpe:/a:mortbay:jetty:1.3.5
- cpe:/a:mortbay:jetty:2.0:alpha1
- cpe:/a:mortbay:jetty:2.0:alpha2
- cpe:/a:mortbay:jetty:2.0:beta1
- cpe:/a:mortbay:jetty:2.0:beta2
- cpe:/a:mortbay:jetty:2.0.0
- cpe:/a:mortbay:jetty:2.0.1
- cpe:/a:mortbay:jetty:2.0.2
- cpe:/a:mortbay:jetty:2.0.3
- cpe:/a:mortbay:jetty:2.0.4
- cpe:/a:mortbay:jetty:2.0.5
- cpe:/a:mortbay:jetty:2.1.0
- cpe:/a:mortbay:jetty:2.1.1
- cpe:/a:mortbay:jetty:2.1.2
- cpe:/a:mortbay:jetty:2.1.3
- cpe:/a:mortbay:jetty:2.1.4
- cpe:/a:mortbay:jetty:2.1.5
- cpe:/a:mortbay:jetty:2.1.6
- cpe:/a:mortbay:jetty:2.1.7
- cpe:/a:mortbay:jetty:2.1.b0
- cpe:/a:mortbay:jetty:2.1.b1
- cpe:/a:mortbay:jetty:2.2:alpha0
- cpe:/a:mortbay:jetty:2.2:alpha1
- cpe:/a:mortbay:jetty:2.2:beta0
- cpe:/a:mortbay:jetty:2.2:beta1
- cpe:/a:mortbay:jetty:2.2:beta2
- cpe:/a:mortbay:jetty:2.2:beta3
- cpe:/a:mortbay:jetty:2.2:beta4
- cpe:/a:mortbay:jetty:2.2.0
- cpe:/a:mortbay:jetty:2.2.1
- cpe:/a:mortbay:jetty:2.2.2
- cpe:/a:mortbay:jetty:2.2.3
- cpe:/a:mortbay:jetty:2.2.4
- cpe:/a:mortbay:jetty:2.2.5
- cpe:/a:mortbay:jetty:2.2.6
- cpe:/a:mortbay:jetty:2.2.7
- cpe:/a:mortbay:jetty:2.2.8
- cpe:/a:mortbay:jetty:2.3.0
- cpe:/a:mortbay:jetty:2.3.0a
- cpe:/a:mortbay:jetty:2.3.1
- cpe:/a:mortbay:jetty:2.3.2
- cpe:/a:mortbay:jetty:2.3.3
- cpe:/a:mortbay:jetty:2.3.4
- cpe:/a:mortbay:jetty:2.3.5
- cpe:/a:mortbay:jetty:2.4.0
- cpe:/a:mortbay:jetty:2.4.1
- cpe:/a:mortbay:jetty:2.4.2
- cpe:/a:mortbay:jetty:2.4.3
- cpe:/a:mortbay:jetty:2.4.4
- cpe:/a:mortbay:jetty:2.4.5
- cpe:/a:mortbay:jetty:2.4.6
- cpe:/a:mortbay:jetty:2.4.7
- cpe:/a:mortbay:jetty:2.4.8
- cpe:/a:mortbay:jetty:2.4.9
- cpe:/a:mortbay:jetty:3.0.0
- cpe:/a:mortbay:jetty:3.0.0:rc1
- cpe:/a:mortbay:jetty:3.0.0:rc2
- cpe:/a:mortbay:jetty:3.0.0:rc3
- cpe:/a:mortbay:jetty:3.0.0:rc4
- cpe:/a:mortbay:jetty:3.0.0:rc5
- cpe:/a:mortbay:jetty:3.0.0:rc6
- cpe:/a:mortbay:jetty:3.0.0:rc7
- cpe:/a:mortbay:jetty:3.0.0:rc8
- cpe:/a:mortbay:jetty:3.0.1
- cpe:/a:mortbay:jetty:3.0.2
- cpe:/a:mortbay:jetty:3.0.3
- cpe:/a:mortbay:jetty:3.0.4
- cpe:/a:mortbay:jetty:3.0.5
- cpe:/a:mortbay:jetty:3.0.6
- cpe:/a:mortbay:jetty:3.0.a0
- cpe:/a:mortbay:jetty:3.0.a1
- cpe:/a:mortbay:jetty:3.0.a2
- cpe:/a:mortbay:jetty:3.0.a3
- cpe:/a:mortbay:jetty:3.0.a4
- cpe:/a:mortbay:jetty:3.0.a5
- cpe:/a:mortbay:jetty:3.0.a6
- cpe:/a:mortbay:jetty:3.0.a7
- cpe:/a:mortbay:jetty:3.0.a8
- cpe:/a:mortbay:jetty:3.0.a9
- cpe:/a:mortbay:jetty:3.0.a90
- cpe:/a:mortbay:jetty:3.0.a91
- cpe:/a:mortbay:jetty:3.0.a92
- cpe:/a:mortbay:jetty:3.0.a93
- cpe:/a:mortbay:jetty:3.0.a94
- cpe:/a:mortbay:jetty:3.0.a95
- cpe:/a:mortbay:jetty:3.0.a96
- cpe:/a:mortbay:jetty:3.0.a97
- cpe:/a:mortbay:jetty:3.0.a98
- cpe:/a:mortbay:jetty:3.0.a99
- cpe:/a:mortbay:jetty:3.0.b01
- cpe:/a:mortbay:jetty:3.0.b02
- cpe:/a:mortbay:jetty:3.0.b03
- cpe:/a:mortbay:jetty:3.0.b04
- cpe:/a:mortbay:jetty:3.0.b05
- cpe:/a:mortbay:jetty:3.1:rc0
- cpe:/a:mortbay:jetty:3.1:rc1
- cpe:/a:mortbay:jetty:3.1:rc2
- cpe:/a:mortbay:jetty:3.1:rc3
- cpe:/a:mortbay:jetty:3.1:rc4
- cpe:/a:mortbay:jetty:3.1:rc5
- cpe:/a:mortbay:jetty:3.1:rc6
- cpe:/a:mortbay:jetty:3.1:rc7
- cpe:/a:mortbay:jetty:3.1:rc8
- cpe:/a:mortbay:jetty:3.1:rc9
- cpe:/a:mortbay:jetty:3.1.0
- cpe:/a:mortbay:jetty:3.1.1
- cpe:/a:mortbay:jetty:3.1.2
- cpe:/a:mortbay:jetty:3.1.3
- cpe:/a:mortbay:jetty:3.1.4
- cpe:/a:mortbay:jetty:3.1.5
- cpe:/a:mortbay:jetty:3.1.6
- cpe:/a:mortbay:jetty:3.1.7
- cpe:/a:mortbay:jetty:3.1.8
- cpe:/a:mortbay:jetty:3.1.9
- cpe:/a:mortbay:jetty:4.0:rc1
- cpe:/a:mortbay:jetty:4.0:rc2
- cpe:/a:mortbay:jetty:4.0:rc3
- cpe:/a:mortbay:jetty:4.0.0
- cpe:/a:mortbay:jetty:4.0.1
- cpe:/a:mortbay:jetty:4.0.1:rc0
- cpe:/a:mortbay:jetty:4.0.1:rc1
- cpe:/a:mortbay:jetty:4.0.1:rc2
- cpe:/a:mortbay:jetty:4.0.2
- cpe:/a:mortbay:jetty:4.0.3
- cpe:/a:mortbay:jetty:4.0.4
- cpe:/a:mortbay:jetty:4.0.5
- cpe:/a:mortbay:jetty:4.0.6
- cpe:/a:mortbay:jetty:4.0.b0
- cpe:/a:mortbay:jetty:4.0.b1
- cpe:/a:mortbay:jetty:4.0.b2
- cpe:/a:mortbay:jetty:4.0.d0
- cpe:/a:mortbay:jetty:4.0.d1
- cpe:/a:mortbay:jetty:4.0.d2
- cpe:/a:mortbay:jetty:4.0.d3
- cpe:/a:mortbay:jetty:4.0.d4
- cpe:/a:mortbay:jetty:4.1.0
- cpe:/a:mortbay:jetty:4.1.0:rc0
- cpe:/a:mortbay:jetty:4.1.0:rc1
- cpe:/a:mortbay:jetty:4.1.0:rc2
- cpe:/a:mortbay:jetty:4.1.0:rc3
- cpe:/a:mortbay:jetty:4.1.0:rc4
- cpe:/a:mortbay:jetty:4.1.0:rc5
- cpe:/a:mortbay:jetty:4.1.0:rc6
- cpe:/a:mortbay:jetty:4.1.1
- cpe:/a:mortbay:jetty:4.1.2
- cpe:/a:mortbay:jetty:4.1.3
- cpe:/a:mortbay:jetty:4.1.4
- cpe:/a:mortbay:jetty:4.1.b0
- cpe:/a:mortbay:jetty:4.1.b1
- cpe:/a:mortbay:jetty:4.1.d0
- cpe:/a:mortbay:jetty:4.1.d1
- cpe:/a:mortbay:jetty:4.1.d2
- cpe:/a:mortbay:jetty:4.2.0
- cpe:/a:mortbay:jetty:4.2.0:beta0
- cpe:/a:mortbay:jetty:4.2.0:rc0
- cpe:/a:mortbay:jetty:4.2.0:rc1
- cpe:/a:mortbay:jetty:4.2.1
- cpe:/a:mortbay:jetty:4.2.2
- cpe:/a:mortbay:jetty:4.2.3
- cpe:/a:mortbay:jetty:4.2.4
- cpe:/a:mortbay:jetty:4.2.4:rc0
- cpe:/a:mortbay:jetty:4.2.5
- cpe:/a:mortbay:jetty:4.2.6
- cpe:/a:mortbay:jetty:4.2.7
- cpe:/a:mortbay:jetty:4.2.8_01
- cpe:/a:mortbay:jetty:4.2.9
- cpe:/a:mortbay:jetty:4.2.9:rc1
- cpe:/a:mortbay:jetty:4.2.9:rc2
- cpe:/a:mortbay:jetty:4.2.10
- cpe:/a:mortbay:jetty:4.2.10:pre0
- cpe:/a:mortbay:jetty:4.2.10:pre1
- cpe:/a:mortbay:jetty:4.2.10:pre2
- cpe:/a:mortbay:jetty:4.2.12
- cpe:/a:mortbay:jetty:4.2.14
- cpe:/a:mortbay:jetty:4.2.14:rc0
- cpe:/a:mortbay:jetty:4.2.14:rc1
- cpe:/a:mortbay:jetty:4.2.15
- cpe:/a:mortbay:jetty:4.2.15:rc0
- cpe:/a:mortbay:jetty:4.2.16
- cpe:/a:mortbay:jetty:4.2.17
- cpe:/a:mortbay:jetty:4.2.18
- cpe:/a:mortbay:jetty:4.2.19
- cpe:/a:mortbay:jetty:4.2.20
- cpe:/a:mortbay:jetty:4.2.20:rc0
- cpe:/a:mortbay:jetty:4.2.21
- cpe:/a:mortbay:jetty:4.2.22
- cpe:/a:mortbay:jetty:4.2.23
- cpe:/a:mortbay:jetty:4.2.23:rc0
- cpe:/a:mortbay:jetty:4.2.24
- cpe:/a:mortbay:jetty:4.2.24:rc0
- cpe:/a:mortbay:jetty:4.2.24:rc1
- cpe:/a:mortbay:jetty:4.2.25
- cpe:/a:mortbay:jetty:4.2.26
- cpe:/a:mortbay:jetty:4.2.27
- cpe:/a:mortbay:jetty:5.0:alpha0
- cpe:/a:mortbay:jetty:5.0:alpha1
- cpe:/a:mortbay:jetty:5.0:alpha2
- cpe:/a:mortbay:jetty:5.0:alpha3
- cpe:/a:mortbay:jetty:5.0:beta0
- cpe:/a:mortbay:jetty:5.0:beta1
- cpe:/a:mortbay:jetty:5.0:beta2
- cpe:/a:mortbay:jetty:5.0:rc1
- cpe:/a:mortbay:jetty:5.0:rc2
- cpe:/a:mortbay:jetty:5.0:rc3
- cpe:/a:mortbay:jetty:5.0:rc4
- cpe:/a:mortbay:jetty:5.0.0
- cpe:/a:mortbay:jetty:5.0.0:rc0
- cpe:/a:mortbay:jetty:5.1:rc0
- cpe:/a:mortbay:jetty:5.1:rc1
- cpe:/a:mortbay:jetty:5.1.0
- cpe:/a:mortbay:jetty:5.1.1
- cpe:/a:mortbay:jetty:5.1.1:rc0
- cpe:/a:mortbay:jetty:5.1.1:rc1
- cpe:/a:mortbay:jetty:5.1.2
- cpe:/a:mortbay:jetty:5.1.2:pre0
- cpe:/a:mortbay:jetty:5.1.3
- cpe:/a:mortbay:jetty:5.1.3:rc0
- cpe:/a:mortbay:jetty:5.1.3:rc1
- cpe:/a:mortbay:jetty:5.1.3:rc2
- cpe:/a:mortbay:jetty:5.1.3:rc3
- cpe:/a:mortbay:jetty:5.1.3:rc4
- cpe:/a:mortbay:jetty:5.1.4
- cpe:/a:mortbay:jetty:5.1.4:rc0
- cpe:/a:mortbay:jetty:5.1.5
- cpe:/a:mortbay:jetty:5.1.5:rc0
- cpe:/a:mortbay:jetty:5.1.5:rc1
- cpe:/a:mortbay:jetty:5.1.5:rc2
- cpe:/a:mortbay:jetty:5.1.6
- cpe:/a:mortbay:jetty:5.1.7
- cpe:/a:mortbay:jetty:5.1.7:rc0
- cpe:/a:mortbay:jetty:5.1.8
- cpe:/a:mortbay:jetty:5.1.9
- cpe:/a:mortbay:jetty:5.1.10
- cpe:/a:mortbay:jetty:5.1.11
- cpe:/a:mortbay:jetty:5.1.11:rc0
- cpe:/a:mortbay:jetty:5.1.12
- cpe:/a:mortbay:jetty:5.1.13
- cpe:/a:mortbay:jetty:5.1.14
- cpe:/a:mortbay:jetty:6.0.0
- cpe:/a:mortbay:jetty:6.0.0:alpha0
- cpe:/a:mortbay:jetty:6.0.0:alpha1
- cpe:/a:mortbay:jetty:6.0.0:alpha2
- cpe:/a:mortbay:jetty:6.0.0:alpha3
- cpe:/a:mortbay:jetty:6.0.0:beta0
- cpe:/a:mortbay:jetty:6.0.0:beta1
- cpe:/a:mortbay:jetty:6.0.0:beta10
- cpe:/a:mortbay:jetty:6.0.0:beta11
- cpe:/a:mortbay:jetty:6.0.0:beta12
- cpe:/a:mortbay:jetty:6.0.0:beta14
- cpe:/a:mortbay:jetty:6.0.0:beta15
- cpe:/a:mortbay:jetty:6.0.0:beta16
- cpe:/a:mortbay:jetty:6.0.0:beta17
- cpe:/a:mortbay:jetty:6.0.0:beta2
- cpe:/a:mortbay:jetty:6.0.0:beta3
- cpe:/a:mortbay:jetty:6.0.0:beta4
- cpe:/a:mortbay:jetty:6.0.0:beta5
- cpe:/a:mortbay:jetty:6.0.0:beta6
- cpe:/a:mortbay:jetty:6.0.0:beta7
- cpe:/a:mortbay:jetty:6.0.0:beta8
- cpe:/a:mortbay:jetty:6.0.0:beta9
- cpe:/a:mortbay:jetty:6.0.0:betax
- cpe:/a:mortbay:jetty:6.0.0:rc0
- cpe:/a:mortbay:jetty:6.0.0:rc1
- cpe:/a:mortbay:jetty:6.0.0:rc2
- cpe:/a:mortbay:jetty:6.0.0:rc3
- cpe:/a:mortbay:jetty:6.0.0:rc4
- cpe:/a:mortbay:jetty:6.0.1
- cpe:/a:mortbay:jetty:6.0.2
- cpe:/a:mortbay:jetty:6.1.0
- cpe:/a:mortbay:jetty:6.1.0:pre0
- cpe:/a:mortbay:jetty:6.1.0:pre1
- cpe:/a:mortbay:jetty:6.1.0:pre2
- cpe:/a:mortbay:jetty:6.1.0:pre3
- cpe:/a:mortbay:jetty:6.1.0:rc0
- cpe:/a:mortbay:jetty:6.1.0:rc1
- cpe:/a:mortbay:jetty:6.1.0:rc2
- cpe:/a:mortbay:jetty:6.1.0:rc3
- cpe:/a:mortbay:jetty:6.1.1
- cpe:/a:mortbay:jetty:6.1.1:rc0
- cpe:/a:mortbay:jetty:6.1.2
- cpe:/a:mortbay:jetty:6.1.2:pre0
- cpe:/a:mortbay:jetty:6.1.2:pre1
- cpe:/a:mortbay:jetty:6.1.2:rc0
- cpe:/a:mortbay:jetty:6.1.2:rc1
- cpe:/a:mortbay:jetty:6.1.2:rc2
- cpe:/a:mortbay:jetty:6.1.2:rc3
- cpe:/a:mortbay:jetty:6.1.2:rc4
- cpe:/a:mortbay:jetty:6.1.2:rc5
- cpe:/a:mortbay:jetty:6.1.3
- cpe:/a:mortbay:jetty:6.1.4
- cpe:/a:mortbay:jetty:6.1.4:rc0
- cpe:/a:mortbay:jetty:6.1.4:rc1
- cpe:/a:mortbay:jetty:6.1.5
- cpe:/a:mortbay:jetty:6.1.5:rc0
- cpe:/a:mortbay:jetty:6.1.6
- cpe:/a:mortbay:jetty:6.1.6:rc0
- cpe:/a:mortbay:jetty:6.1.6:rc1
- cpe:/a:mortbay:jetty:6.1.7
- cpe:/a:mortbay:jetty:6.1.8
- cpe:/a:mortbay:jetty:6.1.9
- cpe:/a:mortbay:jetty:6.1.10
- cpe:/a:mortbay:jetty:6.1.11
- cpe:/a:mortbay:jetty:6.1.12
- cpe:/a:mortbay:jetty:6.1.12:rc1
- cpe:/a:mortbay:jetty:6.1.12:rc2
- cpe:/a:mortbay:jetty:6.1.12:rc3
- cpe:/a:mortbay:jetty:6.1.12:rc4
- cpe:/a:mortbay:jetty:6.1.12:rc5
- cpe:/a:mortbay:jetty:6.1.14
- cpe:/a:mortbay:jetty:6.1.15
- cpe:/a:mortbay:jetty:6.1.15:pre0
- cpe:/a:mortbay:jetty:6.1.15:rc2
- cpe:/a:mortbay:jetty:6.1.15:rc3
- cpe:/a:mortbay:jetty:6.1.15:rc4
- cpe:/a:mortbay:jetty:6.1.15:rc5
- cpe:/a:mortbay:jetty:6.1.16 and all previous versions
- cpe:/a:mortbay:jetty:7.0.0
- cpe:/a:mortbay:jetty:7.0.0:m1 and all previous versions
- cpe:/a:mortbay:jetty:7.0.0:m2 and all previous versions
- cpe:/a:mortbay:jetty:7.0.0:pre0 and all previous versions
- cpe:/a:mortbay:jetty:7.0.0:pre1 and all previous versions
- cpe:/a:mortbay:jetty:7.0.0:pre3 and all previous versions

CVE-2007-5615

Severity: Medium
CVSS Score: 5.0
CWE: CWE-94 Improper Control of Generation of Code ('Code Injection')

CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

- BID - 26696
- CERT-VN - VU#212984
- CONFIRM - http://svn.codehaus.org/jetty/jetty/trunk/VERSION.txt
- FEDORA - FEDORA-2008-6141
- FEDORA - FEDORA-2008-6164
- OSVDB - 42495
- SECUNIA - 27925
- SECUNIA - 30941
- SECUNIA - 35143
- SUSE - SUSE-SR:2009:004

Vulnerable Software & Versions:

- cpe:/a:mortbay_jetty:jetty:6.1.6rc0 and all previous versions

CVE-2007-5614

Severity: High
CVSS Score: 7.5

Mortbay Jetty before 6.1.6rc1 does not properly handle "certain quote sequences" in HTML cookie parameters, which allows remote attackers to hijack browser sessions via unspecified vectors.

- BID - 26695
- CERT-VN - VU#438616
- CONFIRM - http://svn.codehaus.org/jetty/jetty/trunk/VERSION.txt
- FEDORA - FEDORA-2008-6141
- FEDORA - FEDORA-2008-6164
- OSVDB - 42496
- SECUNIA - 27925
- SECUNIA - 30941
- SECUNIA - 35143

Vulnerable Software & Versions: (show all)

- cpe:/a:mortbay_jetty:jetty:6.1
- ...
- cpe:/a:mortbay_jetty:jetty:1.0
- cpe:/a:mortbay_jetty:jetty:2.4
- cpe:/a:mortbay_jetty:jetty:3.0
- cpe:/a:mortbay_jetty:jetty:3.1
- cpe:/a:mortbay_jetty:jetty:4.0
- cpe:/a:mortbay_jetty:jetty:4.1
- cpe:/a:mortbay_jetty:jetty:4.2
- cpe:/a:mortbay_jetty:jetty:5
- cpe:/a:mortbay_jetty:jetty:5.1
- cpe:/a:mortbay_jetty:jetty:6
- cpe:/a:mortbay_jetty:jetty:6.1

CVE-2007-5613

Severity: Medium
CVSS Score: 4.3
CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Cross-site scripting (XSS) vulnerability in Dump Servlet in Mortbay Jetty before 6.1.6rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters and cookies.

- BID - 26697
- CERT-VN - VU#237888
- CONFIRM - http://jira.codehaus.org/browse/JETTY-452
- CONFIRM - http://svn.codehaus.org/jetty/jetty/trunk/VERSION.txt
- FEDORA - FEDORA-2008-6141
- FEDORA - FEDORA-2008-6164
- OSVDB - 42497
- SECUNIA - 27925
- SECUNIA - 30941
- SECUNIA - 35143
- SUSE - SUSE-SR:2009:004

Vulnerable Software & Versions: (show all)

- cpe:/a:mortbay_jetty:jetty:6.1
- ...
- cpe:/a:mortbay_jetty:jetty:1.0
- cpe:/a:mortbay_jetty:jetty:2.4
- cpe:/a:mortbay_jetty:jetty:3.0
- cpe:/a:mortbay_jetty:jetty:3.1
- cpe:/a:mortbay_jetty:jetty:4.0
- cpe:/a:mortbay_jetty:jetty:4.1
- cpe:/a:mortbay_jetty:jetty:4.2
- cpe:/a:mortbay_jetty:jetty:5
- cpe:/a:mortbay_jetty:jetty:5.1
- cpe:/a:mortbay_jetty:jetty:6
- cpe:/a:mortbay_jetty:jetty:6.1

### jruby-1.6.3.jar

Description: JRuby 1.6.3 OSGi bundle

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jruby-1.6.3.jar
MD5: E9218DFDE7EB6CF3DA6DB968A5397A1A
SHA1: 08499A7E4EC426F274ED81B47C35ECA8DB621E3E

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.6.3
file | name | jruby-1.6.3
jar | package | jruby
jar | package name | in
jar | package name | jruby
jar | package name | org
jar | package name | osgi
jar | package name | ruby
Manifest | Bundle-Name | JRuby 1.6.3
Manifest | bundle-symbolicname | org.jruby.jruby
Manifest | Bundle-Version | 1.6.3
Manifest | dstamp | 20110707
Manifest | originally-created-by | 1.5.0_19-b02-304 (Apple Inc.)
Manifest | today | 2011
Manifest | today | 7
Manifest | today | July 7 2011
Manifest | tstamp | 1429

#### Identifiers

- cpe: cpe:/a:jruby:jruby:1.6.3 Confidence:HIGHEST

#### Published Vulnerabilities

CVE-2012-5370

Severity: Medium
CVSS Score: 5.0
CWE: CWE-310 Cryptographic Issues

JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack against the MurmurHash2 algorithm, a different vulnerability than CVE-2011-4838.

- CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=880671
- MISC - http://2012.appsec-forum.ch/conferences/#c17
- MISC - http://asfws12.files.wordpress.com/2012/11/asfws2012-jean_philippe_aumasson-martin_bosslet-hash_flooding_dos_reloaded.pdf
- MISC - http://www.ocert.org/advisories/ocert-2012-001.html
- MISC - https://www.131002.net/data/talks/appsec12_slides.pdf

Vulnerable Software & Versions:

- cpe:/a:jruby:jruby:-

CVE-2011-4838

Severity: High
CVSS Score: 7.8
CWE: CWE-20 Improper Input Validation

JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

- BUGTRAQ - 20111228 n.runs-SA-2011.004 - web programming languages and platforms - DoS through hash table
- CERT-VN - VU#903934
- CONFIRM - http://jruby.org/2011/12/27/jruby-1-6-5-1.html
- GENTOO - GLSA-201207-06
- MISC - http://www.nruns.com/_downloads/advisory28122011.pdf
- MISC - http://www.ocert.org/advisories/ocert-2011-003.html
- REDHAT - RHSA-2012:1232
- SECUNIA - 47407
- SECUNIA - 50084
- XF - jruby-hash-dos(72019)

Vulnerable Software & Versions: (show all)

- cpe:/a:jruby:jruby:1.6.3
- ...
- cpe:/a:jruby:jruby:0.9.0
- cpe:/a:jruby:jruby:0.9.1
- cpe:/a:jruby:jruby:0.9.2
- cpe:/a:jruby:jruby:0.9.8
- cpe:/a:jruby:jruby:0.9.9
- cpe:/a:jruby:jruby:1.0
- cpe:/a:jruby:jruby:1.0.0:rc1
- cpe:/a:jruby:jruby:1.0.0:rc2
- cpe:/a:jruby:jruby:1.0.0:rc3
- cpe:/a:jruby:jruby:1.0.1
- cpe:/a:jruby:jruby:1.0.2
- cpe:/a:jruby:jruby:1.0.3
- cpe:/a:jruby:jruby:1.1
- cpe:/a:jruby:jruby:1.1:b1
- cpe:/a:jruby:jruby:1.1:rc1
- cpe:/a:jruby:jruby:1.1:rc2
- cpe:/a:jruby:jruby:1.1:rc3
- cpe:/a:jruby:jruby:1.1.1
- cpe:/a:jruby:jruby:1.1.2
- cpe:/a:jruby:jruby:1.1.3
- cpe:/a:jruby:jruby:1.1.4
- cpe:/a:jruby:jruby:1.1.5
- cpe:/a:jruby:jruby:1.1.6
- cpe:/a:jruby:jruby:1.1.6:rc1
- cpe:/a:jruby:jruby:1.2.0
- cpe:/a:jruby:jruby:1.2.0:rc1
- cpe:/a:jruby:jruby:1.2.0:rc2
- cpe:/a:jruby:jruby:1.3.0
- cpe:/a:jruby:jruby:1.3.0:rc1
- cpe:/a:jruby:jruby:1.3.0:rc2
- cpe:/a:jruby:jruby:1.3.1
- cpe:/a:jruby:jruby:1.4.0
- cpe:/a:jruby:jruby:1.4.0:rc1
- cpe:/a:jruby:jruby:1.4.0:rc2
- cpe:/a:jruby:jruby:1.4.0:rc3
- cpe:/a:jruby:jruby:1.4.1
- cpe:/a:jruby:jruby:1.5.0
- cpe:/a:jruby:jruby:1.5.0:rc1
- cpe:/a:jruby:jruby:1.5.0:rc2
- cpe:/a:jruby:jruby:1.5.0:rc3
- cpe:/a:jruby:jruby:1.5.1
- cpe:/a:jruby:jruby:1.5.2
- cpe:/a:jruby:jruby:1.5.3
- cpe:/a:jruby:jruby:1.5.4
- cpe:/a:jruby:jruby:1.5.5
- cpe:/a:jruby:jruby:1.5.6
- cpe:/a:jruby:jruby:1.6.0
- cpe:/a:jruby:jruby:1.6.0:rc1
- cpe:/a:jruby:jruby:1.6.0:rc2
- cpe:/a:jruby:jruby:1.6.0:rc3
- cpe:/a:jruby:jruby:1.6.1
- cpe:/a:jruby:jruby:1.6.2
- cpe:/a:jruby:jruby:1.6.3
- cpe:/a:jruby:jruby:1.6.4
- cpe:/a:jruby:jruby:1.6.5 and all previous versions

### jruby-1.6.3.jar\jffi-1.0.dll

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jruby-1.6.3.jar\jni\i386-Windows\jffi-1.0.dll
MD5: 570F7CE3EAE96B92EB4AAB891C076B50
SHA1: C35B34B1CF7A20C0478D34BCFBDE3D75905A8B19

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.0
file | name | jffi-1.0

#### Identifiers

- None

### jruby-1.6.3.jar\jffi-1.0.dll

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jruby-1.6.3.jar\jni\x86_64-Windows\jffi-1.0.dll
MD5: 63E4285E98616F329C88D741CA6F65E8
SHA1: 966259FEBD6C05D8287B7DD75BE57BFCD77FD400

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.0
file | name | jffi-1.0

#### Identifiers

- None

### jruby-1.6.3.jar\jline32.dll

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jruby-1.6.3.jar\jline\jline32.dll
MD5: B3D9A08FF70440BA3638A325512F2CD8
SHA1: 67A55D8F8CA4937D784D4334E554770ADC2A1079

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 32
file | name | jline32

#### Related Dependencies

- jython-standalone-2.7-b1.jar\jline32.dll
  - File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jython-standalone-2.7-b1.jar\jline\jline32.dll
  - SHA1: 67A55D8F8CA4937D784D4334E554770ADC2A1079
  - MD5: B3D9A08FF70440BA3638A325512F2CD8

#### Identifiers

- None

### jruby-1.6.3.jar\jline64.dll

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jruby-1.6.3.jar\jline\jline64.dll
MD5: D2F7B0DB1231AAC1846A857F5C0C4F2C
SHA1: E297E4E990CE820E64D41F3F27B9BE90283F3F96

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 64
file | name | jline64

#### Related Dependencies

- jython-standalone-2.7-b1.jar\jline64.dll
  - File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jython-standalone-2.7-b1.jar\jline\jline64.dll
  - SHA1: E297E4E990CE820E64D41F3F27B9BE90283F3F96
  - MD5: D2F7B0DB1231AAC1846A857F5C0C4F2C

#### Identifiers

- None

### jruby-complete-1.7.4.jar

Description: JRuby 1.7.4 OSGi bundle

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jruby-complete-1.7.4.jar
MD5: BE7116AD25E9535A09BBD1A49934AB30
SHA1: 74984D84846523BD7DA49064679ED1CCF199E1DB

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.7.4
file | name | jruby-complete-1.7.4
jar | package | jruby
jar | package name | in
jar | package name | jruby
jar | package name | org
jar | package name | osgi
jar | package name | ruby
Manifest | Bundle-Name | JRuby 1.7.4
Manifest | bundle-symbolicname | org.jruby.jruby
Manifest | Bundle-Version | 1.7.4
Manifest | dstamp | 20130516
Manifest | originally-created-by | 1.6.0_43-b01-447-11M4203 (Apple Inc.)
Manifest | today | 16
Manifest | today | 2013
Manifest | today | May 16 2013
Manifest | tstamp | 1340

#### Identifiers

- cpe: cpe:/a:jruby:jruby:1.7.4 Confidence:LOW

#### Published Vulnerabilities

CVE-2012-5370

Severity: Medium
CVSS Score: 5.0
CWE: CWE-310 Cryptographic Issues

JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack against the MurmurHash2 algorithm, a different vulnerability than CVE-2011-4838.

- CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=880671
- MISC - http://2012.appsec-forum.ch/conferences/#c17
- MISC - http://asfws12.files.wordpress.com/2012/11/asfws2012-jean_philippe_aumasson-martin_bosslet-hash_flooding_dos_reloaded.pdf
- MISC - http://www.ocert.org/advisories/ocert-2012-001.html
- MISC - https://www.131002.net/data/talks/appsec12_slides.pdf

Vulnerable Software & Versions:

- cpe:/a:jruby:jruby:-

### jruby-complete-1.7.4.jar\bcpkix-jdk15on-147.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jruby-complete-1.7.4.jar\META-INF\jruby.home\lib\ruby\shared\bcpkix-jdk15on-147.jar
MD5: A4316D3710840F4B7152B7AC1C904679
SHA1: CD204E6F26D2BBF65FF3A30DE8831D3A1344E851

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 15.147
file | name | bcpkix-jdk15on-147
jar | package | bouncycastle
jar | package name | bc
jar | package name | bouncycastle
Manifest | Bundle-Name | bcpkix
Manifest | bundle-requiredexecutionenvironment | J2SE-1.5, JavaSE-1.6, JavaSE-1.7
Manifest | bundle-symbolicname | bcpkix
Manifest | Bundle-Version | 1.47
Manifest | extension-name | org.bouncycastle.bcpkix
Manifest | Implementation-Vendor | BouncyCastle.org
Manifest | Implementation-Vendor-Id | org.bouncycastle
Manifest | Implementation-Version | 1.47.0
Manifest | originally-created-by | 1.5.0_08-b03 (Sun Microsystems Inc.)
Manifest | specification-vendor | BouncyCastle.org
Manifest | specification-version | 1.1
nexus | artifactid | bcpkix-jdk15on
nexus | groupid | org.bouncycastle
nexus | version | 1.47

#### Identifiers

- maven: org.bouncycastle:bcpkix-jdk15on:1.47 Confidence:HIGHEST

### jruby-complete-1.7.4.jar\bcprov-jdk15on-147.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jruby-complete-1.7.4.jar\META-INF\jruby.home\lib\ruby\shared\bcprov-jdk15on-147.jar
MD5: 7749DD7ECA4403FB968DDC484263736A
SHA1: B6F5D9926B0AFBDE9F4DBE3DB88C5247BE7794BB

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 15.147
file | name | bcprov-jdk15on-147
jar | package | bouncycastle
jar | package name | bc
jar | package name | bouncycastle
jar | package name | provider
Manifest | Bundle-Name | bcprov
Manifest | bundle-requiredexecutionenvironment | J2SE-1.5, JavaSE-1.6, JavaSE-1.7
Manifest | bundle-symbolicname | bcprov
Manifest | Bundle-Version | 1.47
Manifest | extension-name | org.bouncycastle.bcprovider
Manifest | Implementation-Vendor | BouncyCastle.org
Manifest | Implementation-Vendor-Id | org.bouncycastle
Manifest | Implementation-Version | 1.47.0
Manifest | originally-created-by | 1.5.0_08-b03 (Sun Microsystems Inc.)
Manifest | specification-vendor | BouncyCastle.org
Manifest | specification-version | 1.1
nexus | artifactid | bcprov-jdk15on
nexus | groupid | org.bouncycastle
nexus | version | 1.47

#### Identifiers

- maven: org.bouncycastle:bcprov-jdk15on:1.47 Confidence:HIGHEST

### jruby-complete-1.7.4.jar\generator.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jruby-complete-1.7.4.jar\META-INF\jruby.home\lib\ruby\1.9\json\ext\generator.jar
MD5: 071287692350840C3AF274E0E3DE1F6D
SHA1: DBF8269AAED5A870F6D4F52B210FA96F63C29D6C

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | generator
jar | package | ext
jar | package | json

#### Identifiers

- None

### jruby-complete-1.7.4.jar\jansi.dll

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jruby-complete-1.7.4.jar\META-INF\native\windows64\jansi.dll
MD5: F4F883EAF7F7413A085D9868511AF8A9
SHA1: 5DA042BE27F3B6F0A8E6CFF07AD678C6975726A4

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | jansi

#### Identifiers

- None

### jruby-complete-1.7.4.jar\jansi.dll

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jruby-complete-1.7.4.jar\META-INF\native\windows32\jansi.dll
MD5: 1F2E782F590FD99E3E8820565A5D5EFB
SHA1: DA125D2255050E13DB6A84325E40F5C20EAE81AF

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | jansi

#### Identifiers

- None

### jruby-complete-1.7.4.jar\jffi-1.2.dll

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jruby-complete-1.7.4.jar\jni\i386-Windows\jffi-1.2.dll
MD5: 841E60814ED6B2971A47B267AEF1C58A
SHA1: 07D30C6407FEFAD8DF4B6AFC4D85F83E547975CA

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.2
file | name | jffi-1.2

#### Related Dependencies

- jython-standalone-2.7-b1.jar\jffi-1.2.dll
  - File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jython-standalone-2.7-b1.jar\jni\i386-Windows\jffi-1.2.dll
  - SHA1: 07D30C6407FEFAD8DF4B6AFC4D85F83E547975CA
  - MD5: 841E60814ED6B2971A47B267AEF1C58A

#### Identifiers

- None

### jruby-complete-1.7.4.jar\jffi-1.2.dll

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jruby-complete-1.7.4.jar\jni\x86_64-Windows\jffi-1.2.dll
MD5: 5D80B61C1F9E31860C17B3A410948E7E
SHA1: 5CA292116336EE4CEED00D10E756AFEA580E62CF

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.2
file | name | jffi-1.2

#### Related Dependencies

- jython-standalone-2.7-b1.jar\jffi-1.2.dll
  - File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jython-standalone-2.7-b1.jar\jni\x86_64-Windows\jffi-1.2.dll
  - SHA1: 5CA292116336EE4CEED00D10E756AFEA580E62CF
  - MD5: 5D80B61C1F9E31860C17B3A410948E7E

#### Identifiers

- None

### jruby-complete-1.7.4.jar\jopenssl.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jruby-complete-1.7.4.jar\META-INF\jruby.home\lib\ruby\shared\jopenssl.jar
MD5: AC1F8FCFE232A0FEB2DA920D64400EC0
SHA1: A49DDF324632E55A3E70CC9951948D6B415A9A97

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | jopenssl
jar | package | ext
jar | package | jruby
jar | package | openssl

#### Identifiers

- cpe: cpe:/a:openssl:openssl:- Confidence:LOW

#### Published Vulnerabilities

CVE-2014-0076

Severity: Medium
CVSS Score: 4.3
CWE: CWE-310 Cryptographic Issues

The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to obtain ECDSA nonces via a FLUSH+RELOAD cache side-channel attack.

- CONFIRM - http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=2198be3483259de374f91e57d247d0fc667aef29
- CONFIRM - https://bugs.gentoo.org/show_bug.cgi?id=505278
- CONFIRM - https://bugzilla.novell.com/show_bug.cgi?id=869945
- MISC - http://eprint.iacr.org/2014/140

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:1.0.0l and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.1c
- cpe:/a:openssl:openssl:0.9.2b
- cpe:/a:openssl:openssl:0.9.3
- cpe:/a:openssl:openssl:0.9.3a
- cpe:/a:openssl:openssl:0.9.4
- cpe:/a:openssl:openssl:0.9.5
- cpe:/a:openssl:openssl:0.9.5:beta1
- cpe:/a:openssl:openssl:0.9.5:beta2
- cpe:/a:openssl:openssl:0.9.5a
- cpe:/a:openssl:openssl:0.9.5a:beta1
- cpe:/a:openssl:openssl:0.9.5a:beta2
- cpe:/a:openssl:openssl:0.9.6
- cpe:/a:openssl:openssl:0.9.6:beta1
- cpe:/a:openssl:openssl:0.9.6:beta2
- cpe:/a:openssl:openssl:0.9.6:beta3
- cpe:/a:openssl:openssl:0.9.6a
- cpe:/a:openssl:openssl:0.9.6a:beta1
- cpe:/a:openssl:openssl:0.9.6a:beta2
- cpe:/a:openssl:openssl:0.9.6a:beta3
- cpe:/a:openssl:openssl:0.9.6b
- cpe:/a:openssl:openssl:0.9.6c
- cpe:/a:openssl:openssl:0.9.6d
- cpe:/a:openssl:openssl:0.9.6e
- cpe:/a:openssl:openssl:0.9.6f
- cpe:/a:openssl:openssl:0.9.6g
- cpe:/a:openssl:openssl:0.9.6h
- cpe:/a:openssl:openssl:0.9.6i
- cpe:/a:openssl:openssl:0.9.6j
- cpe:/a:openssl:openssl:0.9.6k
- cpe:/a:openssl:openssl:0.9.6l
- cpe:/a:openssl:openssl:0.9.6m
- cpe:/a:openssl:openssl:0.9.7
- cpe:/a:openssl:openssl:0.9.7:beta1
- cpe:/a:openssl:openssl:0.9.7:beta2
- cpe:/a:openssl:openssl:0.9.7:beta3
- cpe:/a:openssl:openssl:0.9.7:beta4
- cpe:/a:openssl:openssl:0.9.7:beta5
- cpe:/a:openssl:openssl:0.9.7:beta6
- cpe:/a:openssl:openssl:0.9.7a
- cpe:/a:openssl:openssl:0.9.7b
- cpe:/a:openssl:openssl:0.9.7c
- cpe:/a:openssl:openssl:0.9.7d
- cpe:/a:openssl:openssl:0.9.7e
- cpe:/a:openssl:openssl:0.9.7f
- cpe:/a:openssl:openssl:0.9.7g
- cpe:/a:openssl:openssl:0.9.7h
- cpe:/a:openssl:openssl:0.9.7i
- cpe:/a:openssl:openssl:0.9.7j
- cpe:/a:openssl:openssl:0.9.7k
- cpe:/a:openssl:openssl:0.9.7l
- cpe:/a:openssl:openssl:0.9.7m
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h
- cpe:/a:openssl:openssl:0.9.8i
- cpe:/a:openssl:openssl:0.9.8j
- cpe:/a:openssl:openssl:0.9.8k
- cpe:/a:openssl:openssl:0.9.8l
- cpe:/a:openssl:openssl:0.9.8m
- cpe:/a:openssl:openssl:0.9.8m:beta1
- cpe:/a:openssl:openssl:0.9.8n
- cpe:/a:openssl:openssl:0.9.8o
- cpe:/a:openssl:openssl:0.9.8p
- cpe:/a:openssl:openssl:0.9.8q
- cpe:/a:openssl:openssl:0.9.8r
- cpe:/a:openssl:openssl:0.9.8s
- cpe:/a:openssl:openssl:0.9.8t
- cpe:/a:openssl:openssl:0.9.8u
- cpe:/a:openssl:openssl:0.9.8v
- cpe:/a:openssl:openssl:0.9.8w
- cpe:/a:openssl:openssl:0.9.8x
- cpe:/a:openssl:openssl:0.9.8y
- cpe:/a:openssl:openssl:1.0.0
- cpe:/a:openssl:openssl:1.0.0:beta1
- cpe:/a:openssl:openssl:1.0.0:beta2
- cpe:/a:openssl:openssl:1.0.0:beta3
- cpe:/a:openssl:openssl:1.0.0:beta4
- cpe:/a:openssl:openssl:1.0.0:beta5
- cpe:/a:openssl:openssl:1.0.0a
- cpe:/a:openssl:openssl:1.0.0b
- cpe:/a:openssl:openssl:1.0.0c
- cpe:/a:openssl:openssl:1.0.0d
- cpe:/a:openssl:openssl:1.0.0e
- cpe:/a:openssl:openssl:1.0.0f
- cpe:/a:openssl:openssl:1.0.0g
- cpe:/a:openssl:openssl:1.0.0h
- cpe:/a:openssl:openssl:1.0.0i
- cpe:/a:openssl:openssl:1.0.0j
- cpe:/a:openssl:openssl:1.0.0k
- cpe:/a:openssl:openssl:1.0.0l and all previous versions

CVE-2013-6449

Severity: Medium
CVSS Score: 4.3
CWE: CWE-310 Cryptographic Issues

The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version number from an incorrect data structure, which allows remote attackers to cause a denial of service (daemon crash) via crafted traffic from a TLS 1.2 client.

- BID - 64530
- CONFIRM - http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=ca989269a2876bae79393bd54c3e72d49975fc75
- CONFIRM - http://rt.openssl.org/Ticket/Display.html?id=3200&user=guest&pass=guest
- CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=1045363
- CONFIRM - https://issues.apache.org/jira/browse/TS-2355
- DEBIAN - DSA-2833
- FEDORA - FEDORA-2013-23768
- FEDORA - FEDORA-2013-23788
- FEDORA - FEDORA-2013-23794
- REDHAT - RHSA-2014:0015
- REDHAT - RHSA-2014:0041
- SECTRACK - 1029548
- SUSE - openSUSE-SU-2014:0012
- SUSE - openSUSE-SU-2014:0015
- SUSE - openSUSE-SU-2014:0018
- SUSE - openSUSE-SU-2014:0048
- UBUNTU - USN-2079-1

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:1.0.1e and all previous versions
- ...
- cpe:/a:openssl:openssl:1.0.0
- cpe:/a:openssl:openssl:1.0.0:beta1
- cpe:/a:openssl:openssl:1.0.0:beta2
- cpe:/a:openssl:openssl:1.0.0:beta3
- cpe:/a:openssl:openssl:1.0.0:beta4
- cpe:/a:openssl:openssl:1.0.0:beta5
- cpe:/a:openssl:openssl:1.0.0a
- cpe:/a:openssl:openssl:1.0.0b
- cpe:/a:openssl:openssl:1.0.0c
- cpe:/a:openssl:openssl:1.0.0d
- cpe:/a:openssl:openssl:1.0.0e
- cpe:/a:openssl:openssl:1.0.0f
- cpe:/a:openssl:openssl:1.0.0g
- cpe:/a:openssl:openssl:1.0.0h
- cpe:/a:openssl:openssl:1.0.0i
- cpe:/a:openssl:openssl:1.0.0j
- cpe:/a:openssl:openssl:1.0.1
- cpe:/a:openssl:openssl:1.0.1:beta1
- cpe:/a:openssl:openssl:1.0.1:beta2
- cpe:/a:openssl:openssl:1.0.1:beta3
- cpe:/a:openssl:openssl:1.0.1a
- cpe:/a:openssl:openssl:1.0.1b
- cpe:/a:openssl:openssl:1.0.1c
- cpe:/a:openssl:openssl:1.0.1d
- cpe:/a:openssl:openssl:1.0.1e and all previous versions

CVE-2013-0169

Severity: Low
CVSS Score: 2.6
CWE: CWE-310 Cryptographic Issues

The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.

- APPLE - APPLE-SA-2013-09-12-1
- CERT - TA13-051A
- CERT-VN - VU#737740
- CONFIRM - http://support.apple.com/kb/HT5880
- CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg21644047
- CONFIRM - http://www.matrixssl.org/news.html
- CONFIRM - http://www.openssl.org/news/secadv_20130204.txt
- CONFIRM - http://www.oracle.com/technetwork/topics/security/javacpufeb2013update-1905892.html
- CONFIRM - http://www.splunk.com/view/SP-CAAAHXG
- CONFIRM - https://polarssl.org/tech-updates/releases/polarssl-1.2.5-released
- CONFIRM - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0084
- DEBIAN - DSA-2621
- DEBIAN - DSA-2622
- FEDORA - FEDORA-2013-4403
- HP - HPSBMU02874
- HP - HPSBUX02856
- HP - HPSBUX02857
- HP - HPSBUX02909
- HP - SSRT101103
- HP - SSRT101104
- HP - SSRT101184
- HP - SSRT101289
- MANDRIVA - MDVSA-2013:095
- MISC - http://blog.fuseyism.com/index.php/2013/02/20/security-icedtea-2-1-6-2-2-6-2-3-7-for-openjdk-7-released/
- MISC - http://www.isg.rhul.ac.uk/tls/TLStiming.pdf
- MLIST - [oss-security] 20130205 Re: CVE request: TLS CBC padding timing flaw in various SSL / TLS implementations
- REDHAT - RHSA-2013:0587
- REDHAT - RHSA-2013:0782
- REDHAT - RHSA-2013:0783
- REDHAT - RHSA-2013:0833
- REDHAT - RHSA-2013:1455
- REDHAT - RHSA-2013:1456
- SECTRACK - 1029190
- SECUNIA - 53623
- SECUNIA - 55108
- SECUNIA - 55139
- SECUNIA - 55322
- SECUNIA - 55350
- SECUNIA - 55351
- SUSE - SUSE-SU-2013:0328
- SUSE - SUSE-SU-2013:0701
- SUSE - SUSE-SU-2014:0320
- SUSE - openSUSE-SU-2013:0375
- SUSE - openSUSE-SU-2013:0378
- UBUNTU - USN-1735-1

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl
- ...
- cpe:/a:openssl:openssl
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h
- cpe:/a:openssl:openssl:0.9.8i
- cpe:/a:openssl:openssl:0.9.8j
- cpe:/a:openssl:openssl:0.9.8k
- cpe:/a:openssl:openssl:0.9.8l
- cpe:/a:openssl:openssl:0.9.8m
- cpe:/a:openssl:openssl:0.9.8n
- cpe:/a:openssl:openssl:0.9.8o
- cpe:/a:openssl:openssl:0.9.8p
- cpe:/a:openssl:openssl:0.9.8q
- cpe:/a:openssl:openssl:0.9.8r
- cpe:/a:openssl:openssl:0.9.8s
- cpe:/a:openssl:openssl:0.9.8t
- cpe:/a:openssl:openssl:0.9.8u
- cpe:/a:openssl:openssl:0.9.8v
- cpe:/a:openssl:openssl:0.9.8w
- cpe:/a:openssl:openssl:0.9.8x
- cpe:/a:openssl:openssl:1.0.0
- cpe:/a:openssl:openssl:1.0.0a
- cpe:/a:openssl:openssl:1.0.0b
- cpe:/a:openssl:openssl:1.0.0c
- cpe:/a:openssl:openssl:1.0.0d
- cpe:/a:openssl:openssl:1.0.0e
- cpe:/a:openssl:openssl:1.0.0f
- cpe:/a:openssl:openssl:1.0.0g
- cpe:/a:openssl:openssl:1.0.0i
- cpe:/a:openssl:openssl:1.0.0j
- cpe:/a:openssl:openssl:1.0.1
- cpe:/a:openssl:openssl:1.0.1a
- cpe:/a:openssl:openssl:1.0.1b
- cpe:/a:openssl:openssl:1.0.1c
- cpe:/a:oracle:openjdk:-
- cpe:/a:oracle:openjdk:1.6.0
- cpe:/a:oracle:openjdk:1.7.0
- cpe:/a:oracle:openjdk:1.8.0
- cpe:/a:polarssl:polarssl:0.10.0
- cpe:/a:polarssl:polarssl:0.10.1
- cpe:/a:polarssl:polarssl:0.11.0
- cpe:/a:polarssl:polarssl:0.11.1
- cpe:/a:polarssl:polarssl:0.12.0
- cpe:/a:polarssl:polarssl:0.12.1
- cpe:/a:polarssl:polarssl:0.13.1
- cpe:/a:polarssl:polarssl:0.14.0
- cpe:/a:polarssl:polarssl:0.14.2
- cpe:/a:polarssl:polarssl:0.14.3
- cpe:/a:polarssl:polarssl:0.99:pre1
- cpe:/a:polarssl:polarssl:0.99:pre3
- cpe:/a:polarssl:polarssl:0.99:pre4
- cpe:/a:polarssl:polarssl:0.99:pre5
- cpe:/a:polarssl:polarssl:1.0.0
- cpe:/a:polarssl:polarssl:1.1.0
- cpe:/a:polarssl:polarssl:1.1.0:rc0
- cpe:/a:polarssl:polarssl:1.1.0:rc1
- cpe:/a:polarssl:polarssl:1.1.1
- cpe:/a:polarssl:polarssl:1.1.2
- cpe:/a:polarssl:polarssl:1.1.3
- cpe:/a:polarssl:polarssl:1.1.4

CVE-2012-2333

Severity: Medium
CVSS Score: 6.8
CWE: CWE-189 Numeric Errors

Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.

- APPLE - APPLE-SA-2013-06-04-1
- BID - 53476
- CERT-VN - VU#737740
- CONFIRM - http://cvs.openssl.org/chngview?cn=22538
- CONFIRM - http://cvs.openssl.org/chngview?cn=22547
- CONFIRM - http://support.apple.com/kb/HT5784
- CONFIRM - http://www.openssl.org/news/secadv_20120510.txt
- CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=820686
- DEBIAN - DSA-2475
- FEDORA - FEDORA-2012-18035
- FEDORA - FEDORA-2012-7939
- HP - HPSBUX02814
- HP - SSRT100930
- MISC - http://www.cert.fi/en/reports/2012/vulnerability641549.html
- REDHAT - RHSA-2012:1306
- REDHAT - RHSA-2012:1307
- REDHAT - RHSA-2012:1308
- SECTRACK - 1027057
- SECUNIA - 49116
- SECUNIA - 49208
- SECUNIA - 49324
- SECUNIA - 50768
- SECUNIA - 51312
- XF - openssl-tls-record-dos(75525)

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:0.9.8w and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.1c
- cpe:/a:openssl:openssl:0.9.2b
- cpe:/a:openssl:openssl:0.9.3
- cpe:/a:openssl:openssl:0.9.3a
- cpe:/a:openssl:openssl:0.9.4
- cpe:/a:openssl:openssl:0.9.5
- cpe:/a:openssl:openssl:0.9.5:beta1
- cpe:/a:openssl:openssl:0.9.5:beta2
- cpe:/a:openssl:openssl:0.9.5a
- cpe:/a:openssl:openssl:0.9.5a:beta1
- cpe:/a:openssl:openssl:0.9.5a:beta2
- cpe:/a:openssl:openssl:0.9.6
- cpe:/a:openssl:openssl:0.9.6:beta1
- cpe:/a:openssl:openssl:0.9.6:beta2
- cpe:/a:openssl:openssl:0.9.6:beta3
- cpe:/a:openssl:openssl:0.9.6a
- cpe:/a:openssl:openssl:0.9.6a:beta1
- cpe:/a:openssl:openssl:0.9.6a:beta2
- cpe:/a:openssl:openssl:0.9.6a:beta3
- cpe:/a:openssl:openssl:0.9.6b
- cpe:/a:openssl:openssl:0.9.6c
- cpe:/a:openssl:openssl:0.9.6d
- cpe:/a:openssl:openssl:0.9.6e
- cpe:/a:openssl:openssl:0.9.6f
- cpe:/a:openssl:openssl:0.9.6g
- cpe:/a:openssl:openssl:0.9.6h
- cpe:/a:openssl:openssl:0.9.6i
- cpe:/a:openssl:openssl:0.9.6j
- cpe:/a:openssl:openssl:0.9.6k
- cpe:/a:openssl:openssl:0.9.6l
- cpe:/a:openssl:openssl:0.9.6m
- cpe:/a:openssl:openssl:0.9.7
- cpe:/a:openssl:openssl:0.9.7:beta1
- cpe:/a:openssl:openssl:0.9.7:beta2
- cpe:/a:openssl:openssl:0.9.7:beta3
- cpe:/a:openssl:openssl:0.9.7:beta4
- cpe:/a:openssl:openssl:0.9.7:beta5
- cpe:/a:openssl:openssl:0.9.7:beta6
- cpe:/a:openssl:openssl:0.9.7a
- cpe:/a:openssl:openssl:0.9.7b
- cpe:/a:openssl:openssl:0.9.7c
- cpe:/a:openssl:openssl:0.9.7d
- cpe:/a:openssl:openssl:0.9.7e
- cpe:/a:openssl:openssl:0.9.7f
- cpe:/a:openssl:openssl:0.9.7g
- cpe:/a:openssl:openssl:0.9.7h
- cpe:/a:openssl:openssl:0.9.7i
- cpe:/a:openssl:openssl:0.9.7j
- cpe:/a:openssl:openssl:0.9.7k
- cpe:/a:openssl:openssl:0.9.7l
- cpe:/a:openssl:openssl:0.9.7m
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h
- cpe:/a:openssl:openssl:0.9.8i
- cpe:/a:openssl:openssl:0.9.8j
- cpe:/a:openssl:openssl:0.9.8k
- cpe:/a:openssl:openssl:0.9.8l
- cpe:/a:openssl:openssl:0.9.8m
- cpe:/a:openssl:openssl:0.9.8m:beta1
- cpe:/a:openssl:openssl:0.9.8n
- cpe:/a:openssl:openssl:0.9.8o
- cpe:/a:openssl:openssl:0.9.8p
- cpe:/a:openssl:openssl:0.9.8q
- cpe:/a:openssl:openssl:0.9.8r
- cpe:/a:openssl:openssl:0.9.8s
- cpe:/a:openssl:openssl:0.9.8t
- cpe:/a:openssl:openssl:0.9.8u
- cpe:/a:openssl:openssl:0.9.8v
- cpe:/a:openssl:openssl:0.9.8w and all previous versions
- cpe:/a:openssl:openssl:1.0.0
- cpe:/a:openssl:openssl:1.0.0:beta1
- cpe:/a:openssl:openssl:1.0.0:beta2
- cpe:/a:openssl:openssl:1.0.0:beta3
- cpe:/a:openssl:openssl:1.0.0:beta4
- cpe:/a:openssl:openssl:1.0.0:beta5
- cpe:/a:openssl:openssl:1.0.0a
- cpe:/a:openssl:openssl:1.0.0b
- cpe:/a:openssl:openssl:1.0.0c
- cpe:/a:openssl:openssl:1.0.0d
- cpe:/a:openssl:openssl:1.0.0e
- cpe:/a:openssl:openssl:1.0.0f
- cpe:/a:openssl:openssl:1.0.0g
- cpe:/a:openssl:openssl:1.0.0h
- cpe:/a:openssl:openssl:1.0.1
- cpe:/a:openssl:openssl:1.0.1:beta1
- cpe:/a:openssl:openssl:1.0.1:beta2
- cpe:/a:openssl:openssl:1.0.1:beta3
- cpe:/a:openssl:openssl:1.0.1a
- cpe:/a:openssl:openssl:1.0.1b
- cpe:/a:redhat:openssl:0.9.6-15
- cpe:/a:redhat:openssl:0.9.6b-3
- cpe:/a:redhat:openssl:0.9.7a-2

CVE-2012-2110

Severity: High
CVSS Score: 7.5
CWE: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key.

- APPLE - APPLE-SA-2013-06-04-1
- CONFIRM - http://cvs.openssl.org/chngview?cn=22431
- CONFIRM - http://cvs.openssl.org/chngview?cn=22434
- CONFIRM - http://cvs.openssl.org/chngview?cn=22439
- CONFIRM - http://support.apple.com/kb/HT5784
- CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564
- CONFIRM - http://www.collax.com/produkte/AllinOne-server-for-small-businesses#id2565578
- CONFIRM - http://www.openssl.org/news/secadv_20120419.txt
- CONFIRM - https://kb.juniper.net/KB27376
- DEBIAN - DSA-2454
- FEDORA - FEDORA-2012-18035
- FEDORA - FEDORA-2012-6395
- FULLDISC - 20120419 incorrect integer conversions in OpenSSL can result in memory corruption.
- HP - HPSBMU02900
- HP - HPSBOV02793
- HP - SSRT100891
- HP - SSRT101210
- REDHAT - RHSA-2012:0518
- REDHAT - RHSA-2012:0522
- REDHAT - RHSA-2012:1306
- REDHAT - RHSA-2012:1307
- REDHAT - RHSA-2012:1308
- SECTRACK - 1026957
- SECUNIA - 48895
- SECUNIA - 48899
- SECUNIA - 48942
- SECUNIA - 48999
- SECUNIA - 57353
- SUSE - SUSE-SU-2012:1149
- UBUNTU - USN-1424-1

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:0.9.8u and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.1c
- cpe:/a:openssl:openssl:0.9.2b
- cpe:/a:openssl:openssl:0.9.3
- cpe:/a:openssl:openssl:0.9.3a
- cpe:/a:openssl:openssl:0.9.4
- cpe:/a:openssl:openssl:0.9.5
- cpe:/a:openssl:openssl:0.9.5:beta1
- cpe:/a:openssl:openssl:0.9.5:beta2
- cpe:/a:openssl:openssl:0.9.5a
- cpe:/a:openssl:openssl:0.9.5a:beta1
- cpe:/a:openssl:openssl:0.9.5a:beta2
- cpe:/a:openssl:openssl:0.9.6
- cpe:/a:openssl:openssl:0.9.6:beta1
- cpe:/a:openssl:openssl:0.9.6:beta2
- cpe:/a:openssl:openssl:0.9.6:beta3
- cpe:/a:openssl:openssl:0.9.6a
- cpe:/a:openssl:openssl:0.9.6a:beta1
- cpe:/a:openssl:openssl:0.9.6a:beta2
- cpe:/a:openssl:openssl:0.9.6a:beta3
- cpe:/a:openssl:openssl:0.9.6b
- cpe:/a:openssl:openssl:0.9.6c
- cpe:/a:openssl:openssl:0.9.6d
- cpe:/a:openssl:openssl:0.9.6e
- cpe:/a:openssl:openssl:0.9.6f
- cpe:/a:openssl:openssl:0.9.6g
- cpe:/a:openssl:openssl:0.9.6h
- cpe:/a:openssl:openssl:0.9.6i
- cpe:/a:openssl:openssl:0.9.6j
- cpe:/a:openssl:openssl:0.9.6k
- cpe:/a:openssl:openssl:0.9.6l
- cpe:/a:openssl:openssl:0.9.6m
- cpe:/a:openssl:openssl:0.9.7
- cpe:/a:openssl:openssl:0.9.7:beta1
- cpe:/a:openssl:openssl:0.9.7:beta2
- cpe:/a:openssl:openssl:0.9.7:beta3
- cpe:/a:openssl:openssl:0.9.7:beta4
- cpe:/a:openssl:openssl:0.9.7:beta5
- cpe:/a:openssl:openssl:0.9.7:beta6
- cpe:/a:openssl:openssl:0.9.7a
- cpe:/a:openssl:openssl:0.9.7b
- cpe:/a:openssl:openssl:0.9.7c
- cpe:/a:openssl:openssl:0.9.7d
- cpe:/a:openssl:openssl:0.9.7e
- cpe:/a:openssl:openssl:0.9.7f
- cpe:/a:openssl:openssl:0.9.7g
- cpe:/a:openssl:openssl:0.9.7h
- cpe:/a:openssl:openssl:0.9.7i
- cpe:/a:openssl:openssl:0.9.7j
- cpe:/a:openssl:openssl:0.9.7k
- cpe:/a:openssl:openssl:0.9.7l
- cpe:/a:openssl:openssl:0.9.7m
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h
- cpe:/a:openssl:openssl:0.9.8i
- cpe:/a:openssl:openssl:0.9.8j
- cpe:/a:openssl:openssl:0.9.8k
- cpe:/a:openssl:openssl:0.9.8l
- cpe:/a:openssl:openssl:0.9.8m
- cpe:/a:openssl:openssl:0.9.8m:beta1
- cpe:/a:openssl:openssl:0.9.8n
- cpe:/a:openssl:openssl:0.9.8o
- cpe:/a:openssl:openssl:0.9.8p
- cpe:/a:openssl:openssl:0.9.8q
- cpe:/a:openssl:openssl:0.9.8r
- cpe:/a:openssl:openssl:0.9.8s
- cpe:/a:openssl:openssl:0.9.8t
- cpe:/a:openssl:openssl:0.9.8u and all previous versions
- cpe:/a:openssl:openssl:1.0.0
- cpe:/a:openssl:openssl:1.0.0:beta1
- cpe:/a:openssl:openssl:1.0.0:beta2
- cpe:/a:openssl:openssl:1.0.0:beta3
- cpe:/a:openssl:openssl:1.0.0:beta4
- cpe:/a:openssl:openssl:1.0.0:beta5
- cpe:/a:openssl:openssl:1.0.0a
- cpe:/a:openssl:openssl:1.0.0b
- cpe:/a:openssl:openssl:1.0.0c
- cpe:/a:openssl:openssl:1.0.0d
- cpe:/a:openssl:openssl:1.0.0e
- cpe:/a:openssl:openssl:1.0.0g
- cpe:/a:openssl:openssl:1.0.1:beta1
- cpe:/a:openssl:openssl:1.0.1:beta2
- cpe:/a:redhat:openssl:0.9.6-15
- cpe:/a:redhat:openssl:0.9.6b-3
- cpe:/a:redhat:openssl:0.9.7a-2

CVE-2012-1165

Severity: Medium
CVSS Score: 5.0
CWE: CWE-399 Resource Management Errors

The mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0.0h allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message, a different vulnerability than CVE-2006-7250.

- BID - 52764
- CONFIRM - http://cvs.openssl.org/chngview?cn=22252
- CONFIRM - https://downloads.avaya.com/css/P8/documents/100162507
- DEBIAN - DSA-2454
- FEDORA - FEDORA-2012-18035
- FEDORA - FEDORA-2012-4630
- FEDORA - FEDORA-2012-4665
- HP - HPSBMU02786
- HP - HPSBOV02793
- HP - SSRT100877
- HP - SSRT100891
- MLIST - [oss-security] 20120312 Re: CVE request: openssl: null pointer dereference issue
- MLIST - [oss-security] 20120312 Re: CVE request: openssl: null pointer dereference issue
- MLIST - [oss-security] 20120312 Re: CVE request: openssl: null pointer dereference issue
- MLIST - [oss-security] 20120312 Re: CVE request: openssl: null pointer dereference issue
- REDHAT - RHSA-2012:0488
- REDHAT - RHSA-2012:0531
- REDHAT - RHSA-2012:1306
- REDHAT - RHSA-2012:1307
- REDHAT - RHSA-2012:1308
- SECUNIA - 48895
- SECUNIA - 48899
- UBUNTU - USN-1424-1

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:0.9.8t and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.1c
- cpe:/a:openssl:openssl:0.9.2b
- cpe:/a:openssl:openssl:0.9.3
- cpe:/a:openssl:openssl:0.9.3a
- cpe:/a:openssl:openssl:0.9.4
- cpe:/a:openssl:openssl:0.9.5
- cpe:/a:openssl:openssl:0.9.5:beta1
- cpe:/a:openssl:openssl:0.9.5:beta2
- cpe:/a:openssl:openssl:0.9.5a
- cpe:/a:openssl:openssl:0.9.5a:beta1
- cpe:/a:openssl:openssl:0.9.5a:beta2
- cpe:/a:openssl:openssl:0.9.6
- cpe:/a:openssl:openssl:0.9.6:beta1
- cpe:/a:openssl:openssl:0.9.6:beta2
- cpe:/a:openssl:openssl:0.9.6:beta3
- cpe:/a:openssl:openssl:0.9.6a
- cpe:/a:openssl:openssl:0.9.6a:beta1
- cpe:/a:openssl:openssl:0.9.6a:beta2
- cpe:/a:openssl:openssl:0.9.6a:beta3
- cpe:/a:openssl:openssl:0.9.6b
- cpe:/a:openssl:openssl:0.9.6c
- cpe:/a:openssl:openssl:0.9.6d
- cpe:/a:openssl:openssl:0.9.6e
- cpe:/a:openssl:openssl:0.9.6f
- cpe:/a:openssl:openssl:0.9.6g
- cpe:/a:openssl:openssl:0.9.6h
- cpe:/a:openssl:openssl:0.9.6i
- cpe:/a:openssl:openssl:0.9.6j
- cpe:/a:openssl:openssl:0.9.6k
- cpe:/a:openssl:openssl:0.9.6l
- cpe:/a:openssl:openssl:0.9.6m
- cpe:/a:openssl:openssl:0.9.7
- cpe:/a:openssl:openssl:0.9.7:beta1
- cpe:/a:openssl:openssl:0.9.7:beta2
- cpe:/a:openssl:openssl:0.9.7:beta3
- cpe:/a:openssl:openssl:0.9.7:beta4
- cpe:/a:openssl:openssl:0.9.7:beta5
- cpe:/a:openssl:openssl:0.9.7:beta6
- cpe:/a:openssl:openssl:0.9.7a
- cpe:/a:openssl:openssl:0.9.7b
- cpe:/a:openssl:openssl:0.9.7c
- cpe:/a:openssl:openssl:0.9.7d
- cpe:/a:openssl:openssl:0.9.7e
- cpe:/a:openssl:openssl:0.9.7f
- cpe:/a:openssl:openssl:0.9.7g
- cpe:/a:openssl:openssl:0.9.7h
- cpe:/a:openssl:openssl:0.9.7i
- cpe:/a:openssl:openssl:0.9.7j
- cpe:/a:openssl:openssl:0.9.7k
- cpe:/a:openssl:openssl:0.9.7l
- cpe:/a:openssl:openssl:0.9.7m
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h
- cpe:/a:openssl:openssl:0.9.8i
- cpe:/a:openssl:openssl:0.9.8j
- cpe:/a:openssl:openssl:0.9.8k
- cpe:/a:openssl:openssl:0.9.8l
- cpe:/a:openssl:openssl:0.9.8m
- cpe:/a:openssl:openssl:0.9.8m:beta1
- cpe:/a:openssl:openssl:0.9.8n
- cpe:/a:openssl:openssl:0.9.8o
- cpe:/a:openssl:openssl:0.9.8p
- cpe:/a:openssl:openssl:0.9.8q
- cpe:/a:openssl:openssl:0.9.8r
- cpe:/a:openssl:openssl:0.9.8s
- cpe:/a:openssl:openssl:0.9.8t and all previous versions
- cpe:/a:openssl:openssl:1.0.0
- cpe:/a:openssl:openssl:1.0.0:beta1
- cpe:/a:openssl:openssl:1.0.0:beta2
- cpe:/a:openssl:openssl:1.0.0:beta3
- cpe:/a:openssl:openssl:1.0.0:beta4
- cpe:/a:openssl:openssl:1.0.0:beta5
- cpe:/a:openssl:openssl:1.0.0a
- cpe:/a:openssl:openssl:1.0.0b
- cpe:/a:openssl:openssl:1.0.0c
- cpe:/a:openssl:openssl:1.0.0d
- cpe:/a:openssl:openssl:1.0.0e
- cpe:/a:openssl:openssl:1.0.0f
- cpe:/a:openssl:openssl:1.0.0g

CVE-2012-0884

Severity: Medium
CVSS Score: 5.0
CWE: CWE-310 Cryptographic Issues

The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt data via a Million Message Attack (MMA) adaptive chosen ciphertext attack.

- CERT-VN - VU#737740
- CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564
- CONFIRM - http://www.openssl.org/news/secadv_20120312.txt
- CONFIRM - https://downloads.avaya.com/css/P8/documents/100162507
- DEBIAN - DSA-2454
- FEDORA - FEDORA-2012-18035
- FEDORA - FEDORA-2012-4630
- FEDORA - FEDORA-2012-4665
- HP - HPSBOV02793
- HP - SSRT100891
- REDHAT - RHSA-2012:0488
- REDHAT - RHSA-2012:0531
- REDHAT - RHSA-2012:1306
- REDHAT - RHSA-2012:1307
- REDHAT - RHSA-2012:1308
- SECUNIA - 48895
- SECUNIA - 48916
- SECUNIA - 57353
- SUSE - openSUSE-SU-2012:0547

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:0.9.8t and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.0b
- cpe:/a:openssl:openssl:0.9.1b
- cpe:/a:openssl:openssl:0.9.1c
- cpe:/a:openssl:openssl:0.9.2b
- cpe:/a:openssl:openssl:0.9.3
- cpe:/a:openssl:openssl:0.9.3a
- cpe:/a:openssl:openssl:0.9.4
- cpe:/a:openssl:openssl:0.9.5
- cpe:/a:openssl:openssl:0.9.5a
- cpe:/a:openssl:openssl:0.9.6
- cpe:/a:openssl:openssl:0.9.6a
- cpe:/a:openssl:openssl:0.9.6b
- cpe:/a:openssl:openssl:0.9.6c
- cpe:/a:openssl:openssl:0.9.6d
- cpe:/a:openssl:openssl:0.9.6e
- cpe:/a:openssl:openssl:0.9.6f
- cpe:/a:openssl:openssl:0.9.6g
- cpe:/a:openssl:openssl:0.9.6h
- cpe:/a:openssl:openssl:0.9.6i
- cpe:/a:openssl:openssl:0.9.6j
- cpe:/a:openssl:openssl:0.9.6k
- cpe:/a:openssl:openssl:0.9.6l
- cpe:/a:openssl:openssl:0.9.6m
- cpe:/a:openssl:openssl:0.9.7
- cpe:/a:openssl:openssl:0.9.7a
- cpe:/a:openssl:openssl:0.9.7b
- cpe:/a:openssl:openssl:0.9.7c
- cpe:/a:openssl:openssl:0.9.7d
- cpe:/a:openssl:openssl:0.9.7e
- cpe:/a:openssl:openssl:0.9.7f
- cpe:/a:openssl:openssl:0.9.7g
- cpe:/a:openssl:openssl:0.9.7h
- cpe:/a:openssl:openssl:0.9.7i
- cpe:/a:openssl:openssl:0.9.7j
- cpe:/a:openssl:openssl:0.9.7k
- cpe:/a:openssl:openssl:0.9.7l
- cpe:/a:openssl:openssl:0.9.7m
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h
- cpe:/a:openssl:openssl:0.9.8i
- cpe:/a:openssl:openssl:0.9.8j
- cpe:/a:openssl:openssl:0.9.8k
- cpe:/a:openssl:openssl:0.9.8l
- cpe:/a:openssl:openssl:0.9.8m
- cpe:/a:openssl:openssl:0.9.8n
- cpe:/a:openssl:openssl:0.9.8o
- cpe:/a:openssl:openssl:0.9.8p
- cpe:/a:openssl:openssl:0.9.8q
- cpe:/a:openssl:openssl:0.9.8r
- cpe:/a:openssl:openssl:0.9.8s
- cpe:/a:openssl:openssl:0.9.8t and all previous versions
- cpe:/a:openssl:openssl:1.0.0
- cpe:/a:openssl:openssl:1.0.0a
- cpe:/a:openssl:openssl:1.0.0b
- cpe:/a:openssl:openssl:1.0.0c
- cpe:/a:openssl:openssl:1.0.0d
- cpe:/a:openssl:openssl:1.0.0e
- cpe:/a:openssl:openssl:1.0.0f
- cpe:/a:openssl:openssl:1.0.0g

CVE-2012-0027

Severity: Medium
CVSS Score: 5.0
CWE: CWE-399 Resource Management Errors

The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.

- CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564
- CONFIRM - http://www.openssl.org/news/secadv_20120104.txt
- HP - HPSBMU02786
- HP - SSRT100877
- MANDRIVA - MDVSA-2012:007
- OSVDB - 78191
- SECUNIA - 57353
- SUSE - openSUSE-SU-2012:0083

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:1.0.0e and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.1c
- cpe:/a:openssl:openssl:0.9.2b
- cpe:/a:openssl:openssl:0.9.3
- cpe:/a:openssl:openssl:0.9.3a
- cpe:/a:openssl:openssl:0.9.4
- cpe:/a:openssl:openssl:0.9.5
- cpe:/a:openssl:openssl:0.9.5a
- cpe:/a:openssl:openssl:0.9.6
- cpe:/a:openssl:openssl:0.9.6a
- cpe:/a:openssl:openssl:0.9.6b
- cpe:/a:openssl:openssl:0.9.6c
- cpe:/a:openssl:openssl:0.9.6d
- cpe:/a:openssl:openssl:0.9.6e
- cpe:/a:openssl:openssl:0.9.6f
- cpe:/a:openssl:openssl:0.9.6g
- cpe:/a:openssl:openssl:0.9.6h
- cpe:/a:openssl:openssl:0.9.6h:bogus
- cpe:/a:openssl:openssl:0.9.6i
- cpe:/a:openssl:openssl:0.9.6j
- cpe:/a:openssl:openssl:0.9.6k
- cpe:/a:openssl:openssl:0.9.6l
- cpe:/a:openssl:openssl:0.9.6m
- cpe:/a:openssl:openssl:0.9.7
- cpe:/a:openssl:openssl:0.9.7a
- cpe:/a:openssl:openssl:0.9.7b
- cpe:/a:openssl:openssl:0.9.7c
- cpe:/a:openssl:openssl:0.9.7d
- cpe:/a:openssl:openssl:0.9.7e
- cpe:/a:openssl:openssl:0.9.7f
- cpe:/a:openssl:openssl:0.9.7g
- cpe:/a:openssl:openssl:0.9.7h
- cpe:/a:openssl:openssl:0.9.7i
- cpe:/a:openssl:openssl:0.9.7j
- cpe:/a:openssl:openssl:0.9.7k
- cpe:/a:openssl:openssl:0.9.7l
- cpe:/a:openssl:openssl:0.9.7m
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h
- cpe:/a:openssl:openssl:0.9.8i
- cpe:/a:openssl:openssl:0.9.8j
- cpe:/a:openssl:openssl:0.9.8k
- cpe:/a:openssl:openssl:0.9.8l
- cpe:/a:openssl:openssl:0.9.8m
- cpe:/a:openssl:openssl:0.9.8n
- cpe:/a:openssl:openssl:0.9.8o
- cpe:/a:openssl:openssl:0.9.8p
- cpe:/a:openssl:openssl:0.9.8q
- cpe:/a:openssl:openssl:0.9.8r
- cpe:/a:openssl:openssl:0.9.8s
- cpe:/a:openssl:openssl:1.0.0
- cpe:/a:openssl:openssl:1.0.0:beta1
- cpe:/a:openssl:openssl:1.0.0:beta2
- cpe:/a:openssl:openssl:1.0.0:beta3
- cpe:/a:openssl:openssl:1.0.0:beta4
- cpe:/a:openssl:openssl:1.0.0:beta5
- cpe:/a:openssl:openssl:1.0.0a
- cpe:/a:openssl:openssl:1.0.0b
- cpe:/a:openssl:openssl:1.0.0c
- cpe:/a:openssl:openssl:1.0.0d
- cpe:/a:openssl:openssl:1.0.0e and all previous versions

CVE-2011-4619

Severity: Medium
CVSS Score: 5.0
CWE: CWE-399 Resource Management Errors

The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.

- APPLE - APPLE-SA-2013-06-04-1
- CERT-VN - VU#737740
- CONFIRM - http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc
- CONFIRM - http://support.apple.com/kb/HT5784
- CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564
- CONFIRM - http://www.openssl.org/news/secadv_20120104.txt
- DEBIAN - DSA-2390
- FEDORA - FEDORA-2012-18035
- HP - HPSBMU02786
- HP - HPSBOV02793
- HP - HPSBUX02734
- HP - SSRT100729
- HP - SSRT100877
- HP - SSRT100891
- MANDRIVA - MDVSA-2012:006
- MANDRIVA - MDVSA-2012:007
- REDHAT - RHSA-2012:1306
- REDHAT - RHSA-2012:1307
- REDHAT - RHSA-2012:1308
- SECUNIA - 48528
- SECUNIA - 57353
- SUSE - SUSE-SU-2012:0084
- SUSE - openSUSE-SU-2012:0083

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:0.9.8r and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.1c
- cpe:/a:openssl:openssl:0.9.2b
- cpe:/a:openssl:openssl:0.9.4
- cpe:/a:openssl:openssl:0.9.5
- cpe:/a:openssl:openssl:0.9.5a
- cpe:/a:openssl:openssl:0.9.6
- cpe:/a:openssl:openssl:0.9.6a
- cpe:/a:openssl:openssl:0.9.6b
- cpe:/a:openssl:openssl:0.9.6c
- cpe:/a:openssl:openssl:0.9.6d
- cpe:/a:openssl:openssl:0.9.6e
- cpe:/a:openssl:openssl:0.9.6f
- cpe:/a:openssl:openssl:0.9.6g
- cpe:/a:openssl:openssl:0.9.6h
- cpe:/a:openssl:openssl:0.9.6h:bogus
- cpe:/a:openssl:openssl:0.9.6i
- cpe:/a:openssl:openssl:0.9.6j
- cpe:/a:openssl:openssl:0.9.6k
- cpe:/a:openssl:openssl:0.9.6l
- cpe:/a:openssl:openssl:0.9.6m
- cpe:/a:openssl:openssl:0.9.7
- cpe:/a:openssl:openssl:0.9.7a
- cpe:/a:openssl:openssl:0.9.7b
- cpe:/a:openssl:openssl:0.9.7c
- cpe:/a:openssl:openssl:0.9.7d
- cpe:/a:openssl:openssl:0.9.7e
- cpe:/a:openssl:openssl:0.9.7f
- cpe:/a:openssl:openssl:0.9.7g
- cpe:/a:openssl:openssl:0.9.7h
- cpe:/a:openssl:openssl:0.9.7i
- cpe:/a:openssl:openssl:0.9.7j
- cpe:/a:openssl:openssl:0.9.7k
- cpe:/a:openssl:openssl:0.9.7l
- cpe:/a:openssl:openssl:0.9.7m
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h
- cpe:/a:openssl:openssl:0.9.8i
- cpe:/a:openssl:openssl:0.9.8j
- cpe:/a:openssl:openssl:0.9.8k
- cpe:/a:openssl:openssl:0.9.8l
- cpe:/a:openssl:openssl:0.9.8m
- cpe:/a:openssl:openssl:0.9.8n
- cpe:/a:openssl:openssl:0.9.8o
- cpe:/a:openssl:openssl:0.9.8p
- cpe:/a:openssl:openssl:0.9.8q
- cpe:/a:openssl:openssl:0.9.8r and all previous versions
- cpe:/a:openssl:openssl:1.0.0
- cpe:/a:openssl:openssl:1.0.0:beta1
- cpe:/a:openssl:openssl:1.0.0:beta2
- cpe:/a:openssl:openssl:1.0.0:beta3
- cpe:/a:openssl:openssl:1.0.0:beta4
- cpe:/a:openssl:openssl:1.0.0:beta5
- cpe:/a:openssl:openssl:1.0.0a
- cpe:/a:openssl:openssl:1.0.0b
- cpe:/a:openssl:openssl:1.0.0c
- cpe:/a:openssl:openssl:1.0.0d
- cpe:/a:openssl:openssl:1.0.0e and all previous versions

CVE-2011-4577

Severity: Medium
CVSS Score: 4.3
CWE: CWE-399 Resource Management Errors

OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.

- APPLE - APPLE-SA-2013-06-04-1
- CERT-VN - VU#737740
- CONFIRM - http://support.apple.com/kb/HT5784
- CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564
- CONFIRM - http://www.openssl.org/news/secadv_20120104.txt
- FEDORA - FEDORA-2012-18035
- HP - HPSBMU02786
- HP - HPSBOV02793
- HP - HPSBUX02734
- HP - SSRT100729
- HP - SSRT100877
- HP - SSRT100891
- SECUNIA - 57353
- SUSE - SUSE-SU-2012:0084
- SUSE - openSUSE-SU-2012:0083

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:0.9.8r and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.1c
- cpe:/a:openssl:openssl:0.9.2b
- cpe:/a:openssl:openssl:0.9.4
- cpe:/a:openssl:openssl:0.9.5
- cpe:/a:openssl:openssl:0.9.5a
- cpe:/a:openssl:openssl:0.9.6
- cpe:/a:openssl:openssl:0.9.6a
- cpe:/a:openssl:openssl:0.9.6b
- cpe:/a:openssl:openssl:0.9.6c
- cpe:/a:openssl:openssl:0.9.6d
- cpe:/a:openssl:openssl:0.9.6e
- cpe:/a:openssl:openssl:0.9.6f
- cpe:/a:openssl:openssl:0.9.6g
- cpe:/a:openssl:openssl:0.9.6h
- cpe:/a:openssl:openssl:0.9.6h:bogus
- cpe:/a:openssl:openssl:0.9.6i
- cpe:/a:openssl:openssl:0.9.6j
- cpe:/a:openssl:openssl:0.9.6k
- cpe:/a:openssl:openssl:0.9.6l
- cpe:/a:openssl:openssl:0.9.6m
- cpe:/a:openssl:openssl:0.9.7
- cpe:/a:openssl:openssl:0.9.7a
- cpe:/a:openssl:openssl:0.9.7b
- cpe:/a:openssl:openssl:0.9.7c
- cpe:/a:openssl:openssl:0.9.7d
- cpe:/a:openssl:openssl:0.9.7e
- cpe:/a:openssl:openssl:0.9.7f
- cpe:/a:openssl:openssl:0.9.7g
- cpe:/a:openssl:openssl:0.9.7h
- cpe:/a:openssl:openssl:0.9.7i
- cpe:/a:openssl:openssl:0.9.7j
- cpe:/a:openssl:openssl:0.9.7k
- cpe:/a:openssl:openssl:0.9.7l
- cpe:/a:openssl:openssl:0.9.7m
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h
- cpe:/a:openssl:openssl:0.9.8i
- cpe:/a:openssl:openssl:0.9.8j
- cpe:/a:openssl:openssl:0.9.8k
- cpe:/a:openssl:openssl:0.9.8l
- cpe:/a:openssl:openssl:0.9.8m
- cpe:/a:openssl:openssl:0.9.8n
- cpe:/a:openssl:openssl:0.9.8o
- cpe:/a:openssl:openssl:0.9.8p
- cpe:/a:openssl:openssl:0.9.8q
- cpe:/a:openssl:openssl:0.9.8r and all previous versions
- cpe:/a:openssl:openssl:1.0.0
- cpe:/a:openssl:openssl:1.0.0:beta1
- cpe:/a:openssl:openssl:1.0.0:beta2
- cpe:/a:openssl:openssl:1.0.0:beta3
- cpe:/a:openssl:openssl:1.0.0:beta4
- cpe:/a:openssl:openssl:1.0.0:beta5
- cpe:/a:openssl:openssl:1.0.0a
- cpe:/a:openssl:openssl:1.0.0b
- cpe:/a:openssl:openssl:1.0.0c
- cpe:/a:openssl:openssl:1.0.0d
- cpe:/a:openssl:openssl:1.0.0e and all previous versions

CVE-2011-4576

Severity: Medium
CVSS Score: 5.0
CWE: CWE-310 Cryptographic Issues

The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer.

- APPLE - APPLE-SA-2013-06-04-1
- CERT-VN - VU#737740
- CONFIRM - http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc
- CONFIRM - http://support.apple.com/kb/HT5784
- CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564
- CONFIRM - http://www.openssl.org/news/secadv_20120104.txt
- DEBIAN - DSA-2390
- FEDORA - FEDORA-2012-18035
- HP - HPSBMU02786
- HP - HPSBOV02793
- HP - HPSBUX02734
- HP - SSRT100729
- HP - SSRT100877
- HP - SSRT100891
- MANDRIVA - MDVSA-2012:006
- MANDRIVA - MDVSA-2012:007
- REDHAT - RHSA-2012:1306
- REDHAT - RHSA-2012:1307
- REDHAT - RHSA-2012:1308
- SECUNIA - 48528
- SECUNIA - 55069
- SECUNIA - 57353
- SUSE - SUSE-SU-2012:0084
- SUSE - openSUSE-SU-2012:0083

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:0.9.8r and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.1c
- cpe:/a:openssl:openssl:0.9.2b
- cpe:/a:openssl:openssl:0.9.4
- cpe:/a:openssl:openssl:0.9.5
- cpe:/a:openssl:openssl:0.9.5a
- cpe:/a:openssl:openssl:0.9.6
- cpe:/a:openssl:openssl:0.9.6a
- cpe:/a:openssl:openssl:0.9.6b
- cpe:/a:openssl:openssl:0.9.6c
- cpe:/a:openssl:openssl:0.9.6d
- cpe:/a:openssl:openssl:0.9.6e
- cpe:/a:openssl:openssl:0.9.6f
- cpe:/a:openssl:openssl:0.9.6g
- cpe:/a:openssl:openssl:0.9.6h
- cpe:/a:openssl:openssl:0.9.6h:bogus
- cpe:/a:openssl:openssl:0.9.6i
- cpe:/a:openssl:openssl:0.9.6j
- cpe:/a:openssl:openssl:0.9.6k
- cpe:/a:openssl:openssl:0.9.6l
- cpe:/a:openssl:openssl:0.9.6m
- cpe:/a:openssl:openssl:0.9.7
- cpe:/a:openssl:openssl:0.9.7a
- cpe:/a:openssl:openssl:0.9.7b
- cpe:/a:openssl:openssl:0.9.7c
- cpe:/a:openssl:openssl:0.9.7d
- cpe:/a:openssl:openssl:0.9.7e
- cpe:/a:openssl:openssl:0.9.7f
- cpe:/a:openssl:openssl:0.9.7g
- cpe:/a:openssl:openssl:0.9.7h
- cpe:/a:openssl:openssl:0.9.7i
- cpe:/a:openssl:openssl:0.9.7j
- cpe:/a:openssl:openssl:0.9.7k
- cpe:/a:openssl:openssl:0.9.7l
- cpe:/a:openssl:openssl:0.9.7m
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h
- cpe:/a:openssl:openssl:0.9.8i
- cpe:/a:openssl:openssl:0.9.8j
- cpe:/a:openssl:openssl:0.9.8k
- cpe:/a:openssl:openssl:0.9.8l
- cpe:/a:openssl:openssl:0.9.8m
- cpe:/a:openssl:openssl:0.9.8n
- cpe:/a:openssl:openssl:0.9.8o
- cpe:/a:openssl:openssl:0.9.8p
- cpe:/a:openssl:openssl:0.9.8q
- cpe:/a:openssl:openssl:0.9.8r and all previous versions
- cpe:/a:openssl:openssl:1.0.0
- cpe:/a:openssl:openssl:1.0.0:beta1
- cpe:/a:openssl:openssl:1.0.0:beta2
- cpe:/a:openssl:openssl:1.0.0:beta3
- cpe:/a:openssl:openssl:1.0.0:beta4
- cpe:/a:openssl:openssl:1.0.0:beta5
- cpe:/a:openssl:openssl:1.0.0a
- cpe:/a:openssl:openssl:1.0.0b
- cpe:/a:openssl:openssl:1.0.0c
- cpe:/a:openssl:openssl:1.0.0d
- cpe:/a:openssl:openssl:1.0.0e and all previous versions

CVE-2011-4354

Severity: Medium
CVSS Score: 5.8
CWE: CWE-310 Cryptographic Issues

crypto/bn/bn_nist.c in OpenSSL before 0.9.8h on 32-bit platforms, as used in stunnel and other products, in certain circumstances involving ECDH or ECDHE cipher suites, uses an incorrect modular reduction algorithm in its implementation of the P-256 and P-384 NIST elliptic curves, which allows remote attackers to obtain the private key of a TLS server via multiple handshake attempts.

- CONFIRM - http://cvs.openssl.org/filediff?f=openssl/crypto/bn/bn_nist.c&v1=1.14&v2=1.21
- CONFIRM - http://marc.info/?t=119271238800004
- CONFIRM - http://rt.openssl.org/Ticket/Display.html?id=1593&user=guest&pass=guest
- CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=757909
- DEBIAN - DSA-2390
- MISC - http://crypto.di.uminho.pt/CACE/CT-RSA2012-openssl-src.zip
- MISC - http://eprint.iacr.org/2011/633
- MLIST - [oss-security] 20111201 CVE-2011-4354 OpenSSL 0.9.8g (32-bit builds) bug leaks ECC private keys

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:0.9.8g::~~~~x86~ and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.1c::~~~~x86~
- cpe:/a:openssl:openssl:0.9.2b::~~~~x86~
- cpe:/a:openssl:openssl:0.9.3::~~~~x86~
- cpe:/a:openssl:openssl:0.9.3a::~~~~x86~
- cpe:/a:openssl:openssl:0.9.4::~~~~x86~
- cpe:/a:openssl:openssl:0.9.5::~~~~x86~
- cpe:/a:openssl:openssl:0.9.5:beta1:~~~~x86~
- cpe:/a:openssl:openssl:0.9.5:beta2:~~~~x86~
- cpe:/a:openssl:openssl:0.9.5a::~~~~x86~
- cpe:/a:openssl:openssl:0.9.5a:beta1:~~~~x86~
- cpe:/a:openssl:openssl:0.9.5a:beta2:~~~~x86~
- cpe:/a:openssl:openssl:0.9.6::~~~~x86~
- cpe:/a:openssl:openssl:0.9.6:beta1:~~~~x86~
- cpe:/a:openssl:openssl:0.9.6:beta2:~~~~x86~
- cpe:/a:openssl:openssl:0.9.6:beta3:~~~~x86~
- cpe:/a:openssl:openssl:0.9.6a::~~~~x86~
- cpe:/a:openssl:openssl:0.9.6a:beta1:~~~~x86~
- cpe:/a:openssl:openssl:0.9.6a:beta2:~~~~x86~
- cpe:/a:openssl:openssl:0.9.6a:beta3:~~~~x86~
- cpe:/a:openssl:openssl:0.9.6b::~~~~x86~
- cpe:/a:openssl:openssl:0.9.6c::~~~~x86~
- cpe:/a:openssl:openssl:0.9.6d::~~~~x86~
- cpe:/a:openssl:openssl:0.9.6e::~~~~x86~
- cpe:/a:openssl:openssl:0.9.6f::~~~~x86~
- cpe:/a:openssl:openssl:0.9.6g::~~~~x86~
- cpe:/a:openssl:openssl:0.9.6h::~~~~x86~
- cpe:/a:openssl:openssl:0.9.6i::~~~~x86~
- cpe:/a:openssl:openssl:0.9.6j::~~~~x86~
- cpe:/a:openssl:openssl:0.9.6k::~~~~x86~
- cpe:/a:openssl:openssl:0.9.6l::~~~~x86~
- cpe:/a:openssl:openssl:0.9.6m::~~~~x86~
- cpe:/a:openssl:openssl:0.9.7::~~~~x86~
- cpe:/a:openssl:openssl:0.9.7:beta1:~~~~x86~
- cpe:/a:openssl:openssl:0.9.7:beta2:~~~~x86~
- cpe:/a:openssl:openssl:0.9.7:beta3:~~~~x86~
- cpe:/a:openssl:openssl:0.9.7:beta4:~~~~x86~
- cpe:/a:openssl:openssl:0.9.7:beta5:~~~~x86~
- cpe:/a:openssl:openssl:0.9.7:beta6:~~~~x86~
- cpe:/a:openssl:openssl:0.9.7a::~~~~x86~
- cpe:/a:openssl:openssl:0.9.7b::~~~~x86~
- cpe:/a:openssl:openssl:0.9.7c::~~~~x86~
- cpe:/a:openssl:openssl:0.9.7d::~~~~x86~
- cpe:/a:openssl:openssl:0.9.7e::~~~~x86~
- cpe:/a:openssl:openssl:0.9.7f::~~~~x86~
- cpe:/a:openssl:openssl:0.9.7g::~~~~x86~
- cpe:/a:openssl:openssl:0.9.7h::~~~~x86~
- cpe:/a:openssl:openssl:0.9.7i::~~~~x86~
- cpe:/a:openssl:openssl:0.9.7j::~~~~x86~
- cpe:/a:openssl:openssl:0.9.7k::~~~~x86~
- cpe:/a:openssl:openssl:0.9.7l::~~~~x86~
- cpe:/a:openssl:openssl:0.9.7m::~~~~x86~
- cpe:/a:openssl:openssl:0.9.8::~~~~x86~
- cpe:/a:openssl:openssl:0.9.8a::~~~~x86~
- cpe:/a:openssl:openssl:0.9.8b::~~~~x86~
- cpe:/a:openssl:openssl:0.9.8c::~~~~x86~
- cpe:/a:openssl:openssl:0.9.8d::~~~~x86~
- cpe:/a:openssl:openssl:0.9.8e::~~~~x86~
- cpe:/a:openssl:openssl:0.9.8f::~~~~x86~
- cpe:/a:openssl:openssl:0.9.8g::~~~~x86~ and all previous versions

CVE-2011-4108

Severity: Medium
CVSS Score: 4.3
CWE: CWE-310 Cryptographic Issues

The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack.

- APPLE - APPLE-SA-2013-06-04-1
- CERT-VN - VU#737740
- CONFIRM - http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc
- CONFIRM - http://support.apple.com/kb/HT5784
- CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564
- CONFIRM - http://www.openssl.org/news/secadv_20120104.txt
- CONFIRM - https://securityadvisories.paloaltonetworks.com/Home/Detail/17
- DEBIAN - DSA-2390
- FEDORA - FEDORA-2012-18035
- HP - HPSBMU02786
- HP - HPSBOV02793
- HP - HPSBUX02734
- HP - SSRT100729
- HP - SSRT100877
- HP - SSRT100891
- MANDRIVA - MDVSA-2012:006
- MANDRIVA - MDVSA-2012:007
- MISC - http://www.isg.rhul.ac.uk/~kp/dtls.pdf
- REDHAT - RHSA-2012:1306
- REDHAT - RHSA-2012:1307
- REDHAT - RHSA-2012:1308
- SECUNIA - 48528
- SECUNIA - 57260
- SECUNIA - 57353
- SUSE - SUSE-SU-2012:0084
- SUSE - SUSE-SU-2014:0320
- SUSE - openSUSE-SU-2012:0083

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:0.9.8r and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.1c
- cpe:/a:openssl:openssl:0.9.2b
- cpe:/a:openssl:openssl:0.9.4
- cpe:/a:openssl:openssl:0.9.5
- cpe:/a:openssl:openssl:0.9.5a
- cpe:/a:openssl:openssl:0.9.6
- cpe:/a:openssl:openssl:0.9.6a
- cpe:/a:openssl:openssl:0.9.6b
- cpe:/a:openssl:openssl:0.9.6c
- cpe:/a:openssl:openssl:0.9.6d
- cpe:/a:openssl:openssl:0.9.6e
- cpe:/a:openssl:openssl:0.9.6f
- cpe:/a:openssl:openssl:0.9.6g
- cpe:/a:openssl:openssl:0.9.6h
- cpe:/a:openssl:openssl:0.9.6h:bogus
- cpe:/a:openssl:openssl:0.9.6i
- cpe:/a:openssl:openssl:0.9.6j
- cpe:/a:openssl:openssl:0.9.6k
- cpe:/a:openssl:openssl:0.9.6l
- cpe:/a:openssl:openssl:0.9.6m
- cpe:/a:openssl:openssl:0.9.7
- cpe:/a:openssl:openssl:0.9.7a
- cpe:/a:openssl:openssl:0.9.7b
- cpe:/a:openssl:openssl:0.9.7c
- cpe:/a:openssl:openssl:0.9.7d
- cpe:/a:openssl:openssl:0.9.7e
- cpe:/a:openssl:openssl:0.9.7f
- cpe:/a:openssl:openssl:0.9.7g
- cpe:/a:openssl:openssl:0.9.7h
- cpe:/a:openssl:openssl:0.9.7i
- cpe:/a:openssl:openssl:0.9.7j
- cpe:/a:openssl:openssl:0.9.7k
- cpe:/a:openssl:openssl:0.9.7l
- cpe:/a:openssl:openssl:0.9.7m
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h
- cpe:/a:openssl:openssl:0.9.8i
- cpe:/a:openssl:openssl:0.9.8j
- cpe:/a:openssl:openssl:0.9.8k
- cpe:/a:openssl:openssl:0.9.8l
- cpe:/a:openssl:openssl:0.9.8m
- cpe:/a:openssl:openssl:0.9.8n
- cpe:/a:openssl:openssl:0.9.8o
- cpe:/a:openssl:openssl:0.9.8p
- cpe:/a:openssl:openssl:0.9.8q
- cpe:/a:openssl:openssl:0.9.8r and all previous versions
- cpe:/a:openssl:openssl:1.0.0
- cpe:/a:openssl:openssl:1.0.0:beta1
- cpe:/a:openssl:openssl:1.0.0:beta2
- cpe:/a:openssl:openssl:1.0.0:beta3
- cpe:/a:openssl:openssl:1.0.0:beta4
- cpe:/a:openssl:openssl:1.0.0:beta5
- cpe:/a:openssl:openssl:1.0.0a
- cpe:/a:openssl:openssl:1.0.0b
- cpe:/a:openssl:openssl:1.0.0c
- cpe:/a:openssl:openssl:1.0.0d
- cpe:/a:openssl:openssl:1.0.0e and all previous versions

CVE-2011-1945

Severity: Low
CVSS Score: 2.6
CWE: CWE-310 Cryptographic Issues

The elliptic curve cryptography (ECC) subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic Curve Digital Signature Algorithm (ECDSA) is used for the ECDHE_ECDSA cipher suite, does not properly implement curves over binary fields, which makes it easier for context-dependent attackers to determine private keys via a timing attack and a lattice calculation.

- APPLE - APPLE-SA-2013-06-04-1
- CERT-VN - VU#536044
- CONFIRM - http://support.apple.com/kb/HT5784
- CONFIRM - http://www.kb.cert.org/vuls/id/MAPG-8FENZ3
- DEBIAN - DSA-2309
- MANDRIVA - MDVSA-2011:136
- MANDRIVA - MDVSA-2011:137
- MISC - http://eprint.iacr.org/2011/232.pdf
- SECUNIA - 44935
- SUSE - SUSE-SU-2011:0636
- SUSE - openSUSE-SU-2011:0634

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:1.0.0d and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.1c
- cpe:/a:openssl:openssl:0.9.2b
- cpe:/a:openssl:openssl:0.9.3
- cpe:/a:openssl:openssl:0.9.3a
- cpe:/a:openssl:openssl:0.9.4
- cpe:/a:openssl:openssl:0.9.5
- cpe:/a:openssl:openssl:0.9.5:beta1
- cpe:/a:openssl:openssl:0.9.5:beta2
- cpe:/a:openssl:openssl:0.9.5a
- cpe:/a:openssl:openssl:0.9.5a:beta1
- cpe:/a:openssl:openssl:0.9.5a:beta2
- cpe:/a:openssl:openssl:0.9.6
- cpe:/a:openssl:openssl:0.9.6:beta1
- cpe:/a:openssl:openssl:0.9.6:beta2
- cpe:/a:openssl:openssl:0.9.6:beta3
- cpe:/a:openssl:openssl:0.9.6a
- cpe:/a:openssl:openssl:0.9.6a:beta1
- cpe:/a:openssl:openssl:0.9.6a:beta2
- cpe:/a:openssl:openssl:0.9.6a:beta3
- cpe:/a:openssl:openssl:0.9.6b
- cpe:/a:openssl:openssl:0.9.6c
- cpe:/a:openssl:openssl:0.9.6d
- cpe:/a:openssl:openssl:0.9.6e
- cpe:/a:openssl:openssl:0.9.6f
- cpe:/a:openssl:openssl:0.9.6g
- cpe:/a:openssl:openssl:0.9.6h
- cpe:/a:openssl:openssl:0.9.6i
- cpe:/a:openssl:openssl:0.9.6j
- cpe:/a:openssl:openssl:0.9.6k
- cpe:/a:openssl:openssl:0.9.6l
- cpe:/a:openssl:openssl:0.9.6m
- cpe:/a:openssl:openssl:0.9.7
- cpe:/a:openssl:openssl:0.9.7:beta1
- cpe:/a:openssl:openssl:0.9.7:beta2
- cpe:/a:openssl:openssl:0.9.7:beta3
- cpe:/a:openssl:openssl:0.9.7:beta4
- cpe:/a:openssl:openssl:0.9.7:beta5
- cpe:/a:openssl:openssl:0.9.7:beta6
- cpe:/a:openssl:openssl:0.9.7a
- cpe:/a:openssl:openssl:0.9.7b
- cpe:/a:openssl:openssl:0.9.7c
- cpe:/a:openssl:openssl:0.9.7d
- cpe:/a:openssl:openssl:0.9.7e
- cpe:/a:openssl:openssl:0.9.7f
- cpe:/a:openssl:openssl:0.9.7g
- cpe:/a:openssl:openssl:0.9.7h
- cpe:/a:openssl:openssl:0.9.7i
- cpe:/a:openssl:openssl:0.9.7j
- cpe:/a:openssl:openssl:0.9.7k
- cpe:/a:openssl:openssl:0.9.7l
- cpe:/a:openssl:openssl:0.9.7m
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h
- cpe:/a:openssl:openssl:0.9.8i
- cpe:/a:openssl:openssl:0.9.8j
- cpe:/a:openssl:openssl:0.9.8k
- cpe:/a:openssl:openssl:0.9.8l
- cpe:/a:openssl:openssl:0.9.8m
- cpe:/a:openssl:openssl:0.9.8n
- cpe:/a:openssl:openssl:0.9.8o
- cpe:/a:openssl:openssl:0.9.8p
- cpe:/a:openssl:openssl:1.0.0
- cpe:/a:openssl:openssl:1.0.0:beta1
- cpe:/a:openssl:openssl:1.0.0:beta2
- cpe:/a:openssl:openssl:1.0.0:beta3
- cpe:/a:openssl:openssl:1.0.0:beta4
- cpe:/a:openssl:openssl:1.0.0:beta5
- cpe:/a:openssl:openssl:1.0.0a
- cpe:/a:openssl:openssl:1.0.0b
- cpe:/a:openssl:openssl:1.0.0c
- cpe:/a:openssl:openssl:1.0.0d and all previous versions

CVE-2011-1473

Severity: Medium
CVSS Score: 5.0
CWE: CWE-264 Permissions, Privileges, and Access Controls

** DISPUTED ** OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection, a different vulnerability than CVE-2011-5094. NOTE: it can also be argued that it is the responsibility of server deployments, not a security library, to prevent or limit renegotiation when it is inappropriate within a specific environment.

- BUGTRAQ - 20140214 ESA-2014-009: RSA BSAFE SSL-J Multiple Vulnerabilities
- MISC - http://orchilles.com/2011/03/ssl-renegotiation-dos.html
- MISC - http://vincent.bernat.im/en/blog/2011-ssl-dos-mitigation.html
- MISC - http://www.educatedguesswork.org/2011/10/ssltls_and_computational_dos.html
- MISC - https://bugzilla.redhat.com/show_bug.cgi?id=707065
- MLIST - [oss-security] 20110708 SSL renegotiation DoS CVE-2011-1473
- MLIST - [tls] 20110315 Re: SSL Renegotiation DOS
- MLIST - [tls] 20110315 Re: SSL Renegotiation DOS
- MLIST - [tls] 20110315 SSL Renegotiation DOS
- MLIST - [tls] 20110318 Re: SSL Renegotiation DOS
- MLIST - [tls] 20110318 Re: SSL Renegotiation DOS

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:0.9.8k and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.8k and all previous versions
- cpe:/a:openssl:openssl:0.9.8m
- cpe:/a:openssl:openssl:0.9.8m:beta1
- cpe:/a:openssl:openssl:0.9.8n
- cpe:/a:openssl:openssl:0.9.8o
- cpe:/a:openssl:openssl:0.9.8p
- cpe:/a:openssl:openssl:0.9.8r
- cpe:/a:openssl:openssl:0.9.8s
- cpe:/a:openssl:openssl:0.9.8t
- cpe:/a:openssl:openssl:0.9.8u
- cpe:/a:openssl:openssl:0.9.8v
- cpe:/a:openssl:openssl:0.9.8w
- cpe:/a:openssl:openssl:0.9.8x

CVE-2010-5298

Severity: Medium
CVSS Score: 4.0
CWE: CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data across sessions or cause a denial of service (use-after-free and parsing error) via an SSL connection in a multithreaded environment.

- BID - 66801
- CONFIRM - http://ftp.openbsd.org/pub/OpenBSD/patches/5.5/common/004_openssl.patch.sig
- CONFIRM - http://svnweb.freebsd.org/ports/head/security/openssl/files/patch-ssl-s3_pkt.c?revision=351191&view=markup
- MISC - http://www.tedunangst.com/flak/post/analysis-of-openssl-freelist-reuse
- MISC - https://rt.openssl.org/Ticket/Display.html?id=2167&user=guest&pass=guest
- MISC - https://rt.openssl.org/Ticket/Display.html?id=3265&user=guest&pass=guest
- MLIST - [oss-security] 20140412 Use-after-free race condition,in OpenSSL's read buffer
- OPENBSD - [5.5] 004: SECURITY FIX: April 12, 2014

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:1.0.1g and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.1c
- cpe:/a:openssl:openssl:0.9.2b
- cpe:/a:openssl:openssl:0.9.3
- cpe:/a:openssl:openssl:0.9.3a
- cpe:/a:openssl:openssl:0.9.4
- cpe:/a:openssl:openssl:0.9.5
- cpe:/a:openssl:openssl:0.9.5:beta1
- cpe:/a:openssl:openssl:0.9.5:beta2
- cpe:/a:openssl:openssl:0.9.5a
- cpe:/a:openssl:openssl:0.9.5a:beta1
- cpe:/a:openssl:openssl:0.9.5a:beta2
- cpe:/a:openssl:openssl:0.9.6
- cpe:/a:openssl:openssl:0.9.6:beta1
- cpe:/a:openssl:openssl:0.9.6:beta2
- cpe:/a:openssl:openssl:0.9.6:beta3
- cpe:/a:openssl:openssl:0.9.6a
- cpe:/a:openssl:openssl:0.9.6a:beta1
- cpe:/a:openssl:openssl:0.9.6a:beta2
- cpe:/a:openssl:openssl:0.9.6a:beta3
- cpe:/a:openssl:openssl:0.9.6b
- cpe:/a:openssl:openssl:0.9.6c
- cpe:/a:openssl:openssl:0.9.6d
- cpe:/a:openssl:openssl:0.9.6e
- cpe:/a:openssl:openssl:0.9.6f
- cpe:/a:openssl:openssl:0.9.6g
- cpe:/a:openssl:openssl:0.9.6h
- cpe:/a:openssl:openssl:0.9.6i
- cpe:/a:openssl:openssl:0.9.6j
- cpe:/a:openssl:openssl:0.9.6k
- cpe:/a:openssl:openssl:0.9.6l
- cpe:/a:openssl:openssl:0.9.6m
- cpe:/a:openssl:openssl:0.9.7
- cpe:/a:openssl:openssl:0.9.7:beta1
- cpe:/a:openssl:openssl:0.9.7:beta2
- cpe:/a:openssl:openssl:0.9.7:beta3
- cpe:/a:openssl:openssl:0.9.7:beta4
- cpe:/a:openssl:openssl:0.9.7:beta5
- cpe:/a:openssl:openssl:0.9.7:beta6
- cpe:/a:openssl:openssl:0.9.7a
- cpe:/a:openssl:openssl:0.9.7b
- cpe:/a:openssl:openssl:0.9.7c
- cpe:/a:openssl:openssl:0.9.7d
- cpe:/a:openssl:openssl:0.9.7e
- cpe:/a:openssl:openssl:0.9.7f
- cpe:/a:openssl:openssl:0.9.7g
- cpe:/a:openssl:openssl:0.9.7h
- cpe:/a:openssl:openssl:0.9.7i
- cpe:/a:openssl:openssl:0.9.7j
- cpe:/a:openssl:openssl:0.9.7k
- cpe:/a:openssl:openssl:0.9.7l
- cpe:/a:openssl:openssl:0.9.7m
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h
- cpe:/a:openssl:openssl:0.9.8i
- cpe:/a:openssl:openssl:0.9.8j
- cpe:/a:openssl:openssl:0.9.8k
- cpe:/a:openssl:openssl:0.9.8l
- cpe:/a:openssl:openssl:0.9.8m
- cpe:/a:openssl:openssl:0.9.8m:beta1
- cpe:/a:openssl:openssl:0.9.8n
- cpe:/a:openssl:openssl:0.9.8o
- cpe:/a:openssl:openssl:0.9.8p
- cpe:/a:openssl:openssl:0.9.8q
- cpe:/a:openssl:openssl:0.9.8r
- cpe:/a:openssl:openssl:0.9.8s
- cpe:/a:openssl:openssl:0.9.8t
- cpe:/a:openssl:openssl:0.9.8u
- cpe:/a:openssl:openssl:0.9.8v
- cpe:/a:openssl:openssl:0.9.8w
- cpe:/a:openssl:openssl:0.9.8x
- cpe:/a:openssl:openssl:0.9.8y
- cpe:/a:openssl:openssl:1.0.0
- cpe:/a:openssl:openssl:1.0.0:beta1
- cpe:/a:openssl:openssl:1.0.0:beta2
- cpe:/a:openssl:openssl:1.0.0:beta3
- cpe:/a:openssl:openssl:1.0.0:beta4
- cpe:/a:openssl:openssl:1.0.0:beta5
- cpe:/a:openssl:openssl:1.0.0a
- cpe:/a:openssl:openssl:1.0.0b
- cpe:/a:openssl:openssl:1.0.0c
- cpe:/a:openssl:openssl:1.0.0d
- cpe:/a:openssl:openssl:1.0.0e
- cpe:/a:openssl:openssl:1.0.0f
- cpe:/a:openssl:openssl:1.0.0g
- cpe:/a:openssl:openssl:1.0.0h
- cpe:/a:openssl:openssl:1.0.0i
- cpe:/a:openssl:openssl:1.0.0j
- cpe:/a:openssl:openssl:1.0.0k
- cpe:/a:openssl:openssl:1.0.0l
- cpe:/a:openssl:openssl:1.0.1
- cpe:/a:openssl:openssl:1.0.1:beta1
- cpe:/a:openssl:openssl:1.0.1:beta2
- cpe:/a:openssl:openssl:1.0.1:beta3
- cpe:/a:openssl:openssl:1.0.1a
- cpe:/a:openssl:openssl:1.0.1b
- cpe:/a:openssl:openssl:1.0.1c
- cpe:/a:openssl:openssl:1.0.1d
- cpe:/a:openssl:openssl:1.0.1e
- cpe:/a:openssl:openssl:1.0.1f
- cpe:/a:openssl:openssl:1.0.1g and all previous versions

CVE-2010-4252

Severity: High
CVSS Score: 7.5
CWE: CWE-287 Improper Authentication

OpenSSL before 1.0.0c, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol.

- BID - 45163
- CONFIRM - http://cvs.openssl.org/chngview?cn=20098
- CONFIRM - http://openssl.org/news/secadv_20101202.txt
- CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564
- CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=659297
- MISC - http://seb.dbzteam.org/crypto/jpake-session-key-retrieval.pdf
- MISC - https://github.com/seb-m/jpake
- SECTRACK - 1024823
- SECUNIA - 42469
- SECUNIA - 57353
- SLACKWARE - SSA:2010-340-01
- VUPEN - ADV-2010-3120
- VUPEN - ADV-2010-3122

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:1.0.0b and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.1c
- cpe:/a:openssl:openssl:0.9.2b
- cpe:/a:openssl:openssl:0.9.3
- cpe:/a:openssl:openssl:0.9.3a
- cpe:/a:openssl:openssl:0.9.4
- cpe:/a:openssl:openssl:0.9.5
- cpe:/a:openssl:openssl:0.9.5:beta1
- cpe:/a:openssl:openssl:0.9.5:beta2
- cpe:/a:openssl:openssl:0.9.5a
- cpe:/a:openssl:openssl:0.9.5a:beta1
- cpe:/a:openssl:openssl:0.9.5a:beta2
- cpe:/a:openssl:openssl:0.9.6
- cpe:/a:openssl:openssl:0.9.6:beta1
- cpe:/a:openssl:openssl:0.9.6:beta2
- cpe:/a:openssl:openssl:0.9.6:beta3
- cpe:/a:openssl:openssl:0.9.6a
- cpe:/a:openssl:openssl:0.9.6a:beta1
- cpe:/a:openssl:openssl:0.9.6a:beta2
- cpe:/a:openssl:openssl:0.9.6a:beta3
- cpe:/a:openssl:openssl:0.9.6b
- cpe:/a:openssl:openssl:0.9.6c
- cpe:/a:openssl:openssl:0.9.6d
- cpe:/a:openssl:openssl:0.9.6e
- cpe:/a:openssl:openssl:0.9.6f
- cpe:/a:openssl:openssl:0.9.6g
- cpe:/a:openssl:openssl:0.9.6h
- cpe:/a:openssl:openssl:0.9.6i
- cpe:/a:openssl:openssl:0.9.6j
- cpe:/a:openssl:openssl:0.9.6k
- cpe:/a:openssl:openssl:0.9.6l
- cpe:/a:openssl:openssl:0.9.6m
- cpe:/a:openssl:openssl:0.9.7
- cpe:/a:openssl:openssl:0.9.7:beta1
- cpe:/a:openssl:openssl:0.9.7:beta2
- cpe:/a:openssl:openssl:0.9.7:beta3
- cpe:/a:openssl:openssl:0.9.7:beta4
- cpe:/a:openssl:openssl:0.9.7:beta5
- cpe:/a:openssl:openssl:0.9.7:beta6
- cpe:/a:openssl:openssl:0.9.7a
- cpe:/a:openssl:openssl:0.9.7b
- cpe:/a:openssl:openssl:0.9.7c
- cpe:/a:openssl:openssl:0.9.7d
- cpe:/a:openssl:openssl:0.9.7e
- cpe:/a:openssl:openssl:0.9.7f
- cpe:/a:openssl:openssl:0.9.7g
- cpe:/a:openssl:openssl:0.9.7h
- cpe:/a:openssl:openssl:0.9.7i
- cpe:/a:openssl:openssl:0.9.7j
- cpe:/a:openssl:openssl:0.9.7k
- cpe:/a:openssl:openssl:0.9.7l
- cpe:/a:openssl:openssl:0.9.7m
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h
- cpe:/a:openssl:openssl:0.9.8i
- cpe:/a:openssl:openssl:0.9.8j
- cpe:/a:openssl:openssl:0.9.8k
- cpe:/a:openssl:openssl:0.9.8l
- cpe:/a:openssl:openssl:0.9.8m
- cpe:/a:openssl:openssl:0.9.8n
- cpe:/a:openssl:openssl:0.9.8o
- cpe:/a:openssl:openssl:0.9.8p
- cpe:/a:openssl:openssl:1.0.0
- cpe:/a:openssl:openssl:1.0.0:beta1
- cpe:/a:openssl:openssl:1.0.0:beta2
- cpe:/a:openssl:openssl:1.0.0:beta3
- cpe:/a:openssl:openssl:1.0.0:beta4
- cpe:/a:openssl:openssl:1.0.0:beta5
- cpe:/a:openssl:openssl:1.0.0a
- cpe:/a:openssl:openssl:1.0.0b and all previous versions

CVE-2010-4180

Severity: Medium
CVSS Score: 4.3

OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.

- APPLE - APPLE-SA-2011-06-23-1
- BID - 45164
- CERT-VN - VU#737740
- CONFIRM - http://cvs.openssl.org/chngview?cn=20131
- CONFIRM - http://openssl.org/news/secadv_20101202.txt
- CONFIRM - http://support.apple.com/kb/HT4723
- CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=659462
- CONFIRM - https://kb.bluecoat.com/index?page=content&id=SA53&actp=LIST
- DEBIAN - DSA-2141
- FEDORA - FEDORA-2010-18736
- FEDORA - FEDORA-2010-18765
- HP - HPSBHF02706
- HP - HPSBMA02658
- HP - HPSBMU02759
- HP - SSRT100413
- HP - SSRT100613
- HP - SSRT100817
- MANDRIVA - MDVSA-2010:248
- OSVDB - 69565
- REDHAT - RHSA-2010:0977
- REDHAT - RHSA-2010:0978
- REDHAT - RHSA-2010:0979
- REDHAT - RHSA-2011:0896
- SECTRACK - 1024822
- SECUNIA - 42469
- SECUNIA - 42473
- SECUNIA - 42493
- SECUNIA - 42571
- SECUNIA - 42620
- SECUNIA - 42811
- SECUNIA - 42877
- SECUNIA - 43169
- SECUNIA - 43170
- SECUNIA - 43171
- SECUNIA - 43172
- SECUNIA - 43173
- SECUNIA - 44269
- SLACKWARE - SSA:2010-340-01
- SUSE - SUSE-SR:2011:001
- SUSE - SUSE-SR:2011:009
- SUSE - SUSE-SU-2011:0847
- SUSE - openSUSE-SU-2011:0845
- UBUNTU - USN-1029-1
- VUPEN - ADV-2010-3120
- VUPEN - ADV-2010-3122
- VUPEN - ADV-2010-3134
- VUPEN - ADV-2010-3188
- VUPEN - ADV-2011-0032
- VUPEN - ADV-2011-0076
- VUPEN - ADV-2011-0268

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:0.9.8p and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.1c
- cpe:/a:openssl:openssl:0.9.2b
- cpe:/a:openssl:openssl:0.9.3
- cpe:/a:openssl:openssl:0.9.3a
- cpe:/a:openssl:openssl:0.9.4
- cpe:/a:openssl:openssl:0.9.5
- cpe:/a:openssl:openssl:0.9.5:beta1
- cpe:/a:openssl:openssl:0.9.5:beta2
- cpe:/a:openssl:openssl:0.9.5a
- cpe:/a:openssl:openssl:0.9.5a:beta1
- cpe:/a:openssl:openssl:0.9.5a:beta2
- cpe:/a:openssl:openssl:0.9.6
- cpe:/a:openssl:openssl:0.9.6:beta1
- cpe:/a:openssl:openssl:0.9.6:beta2
- cpe:/a:openssl:openssl:0.9.6:beta3
- cpe:/a:openssl:openssl:0.9.6a
- cpe:/a:openssl:openssl:0.9.6a:beta1
- cpe:/a:openssl:openssl:0.9.6a:beta2
- cpe:/a:openssl:openssl:0.9.6a:beta3
- cpe:/a:openssl:openssl:0.9.6b
- cpe:/a:openssl:openssl:0.9.6c
- cpe:/a:openssl:openssl:0.9.6d
- cpe:/a:openssl:openssl:0.9.6e
- cpe:/a:openssl:openssl:0.9.6f
- cpe:/a:openssl:openssl:0.9.6g
- cpe:/a:openssl:openssl:0.9.6h
- cpe:/a:openssl:openssl:0.9.6i
- cpe:/a:openssl:openssl:0.9.6j
- cpe:/a:openssl:openssl:0.9.6k
- cpe:/a:openssl:openssl:0.9.6l
- cpe:/a:openssl:openssl:0.9.6m
- cpe:/a:openssl:openssl:0.9.7
- cpe:/a:openssl:openssl:0.9.7:beta1
- cpe:/a:openssl:openssl:0.9.7:beta2
- cpe:/a:openssl:openssl:0.9.7:beta3
- cpe:/a:openssl:openssl:0.9.7:beta4
- cpe:/a:openssl:openssl:0.9.7:beta5
- cpe:/a:openssl:openssl:0.9.7:beta6
- cpe:/a:openssl:openssl:0.9.7a
- cpe:/a:openssl:openssl:0.9.7b
- cpe:/a:openssl:openssl:0.9.7c
- cpe:/a:openssl:openssl:0.9.7d
- cpe:/a:openssl:openssl:0.9.7e
- cpe:/a:openssl:openssl:0.9.7f
- cpe:/a:openssl:openssl:0.9.7g
- cpe:/a:openssl:openssl:0.9.7h
- cpe:/a:openssl:openssl:0.9.7i
- cpe:/a:openssl:openssl:0.9.7j
- cpe:/a:openssl:openssl:0.9.7k
- cpe:/a:openssl:openssl:0.9.7l
- cpe:/a:openssl:openssl:0.9.7m
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h
- cpe:/a:openssl:openssl:0.9.8i
- cpe:/a:openssl:openssl:0.9.8j
- cpe:/a:openssl:openssl:0.9.8k
- cpe:/a:openssl:openssl:0.9.8l
- cpe:/a:openssl:openssl:0.9.8m
- cpe:/a:openssl:openssl:0.9.8n
- cpe:/a:openssl:openssl:0.9.8o
- cpe:/a:openssl:openssl:0.9.8p and all previous versions
- cpe:/a:openssl:openssl:1.0.0
- cpe:/a:openssl:openssl:1.0.0:beta1
- cpe:/a:openssl:openssl:1.0.0:beta2
- cpe:/a:openssl:openssl:1.0.0:beta3
- cpe:/a:openssl:openssl:1.0.0:beta4
- cpe:/a:openssl:openssl:1.0.0:beta5
- cpe:/a:openssl:openssl:1.0.0a
- cpe:/a:openssl:openssl:1.0.0b

CVE-2010-0742

Severity: High
CVSS Score: 7.5
CWE: CWE-310 Cryptographic Issues

The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain OriginatorInfo, which allows context-dependent attackers to modify invalid memory locations or conduct double-free attacks, and possibly execute arbitrary code, via unspecified vectors.

- BID - 40502
- CONFIRM - http://cvs.openssl.org/chngview?cn=19693
- CONFIRM - http://cvs.openssl.org/filediff?f=openssl/crypto/cms/cms_asn1.c&v1=1.8&v2=1.8.6.1
- CONFIRM - http://rt.openssl.org/Ticket/Display.html?id=2211&user=guest&pass=guest
- CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564
- CONFIRM - http://www.openssl.org/news/secadv_20100601.txt
- CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=598738
- CONFIRM - https://kb.bluecoat.com/index?page=content&id=SA50
- HP - HPSBUX02610
- HP - SSRT100341
- MLIST - [syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.0.6a has been released
- MLIST - [syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.2.1a has been released
- SECUNIA - 40000
- SECUNIA - 40024
- SECUNIA - 42457
- SECUNIA - 42724
- SECUNIA - 42733
- SECUNIA - 57353
- VUPEN - ADV-2010-1313
- VUPEN - ADV-2010-3105

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:0.9.8n and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.1c
- cpe:/a:openssl:openssl:0.9.2b
- cpe:/a:openssl:openssl:0.9.3
- cpe:/a:openssl:openssl:0.9.3a
- cpe:/a:openssl:openssl:0.9.4
- cpe:/a:openssl:openssl:0.9.5
- cpe:/a:openssl:openssl:0.9.5:beta1
- cpe:/a:openssl:openssl:0.9.5:beta2
- cpe:/a:openssl:openssl:0.9.5a
- cpe:/a:openssl:openssl:0.9.5a:beta1
- cpe:/a:openssl:openssl:0.9.5a:beta2
- cpe:/a:openssl:openssl:0.9.6
- cpe:/a:openssl:openssl:0.9.6:beta1
- cpe:/a:openssl:openssl:0.9.6:beta2
- cpe:/a:openssl:openssl:0.9.6:beta3
- cpe:/a:openssl:openssl:0.9.6a
- cpe:/a:openssl:openssl:0.9.6a:beta1
- cpe:/a:openssl:openssl:0.9.6a:beta2
- cpe:/a:openssl:openssl:0.9.6a:beta3
- cpe:/a:openssl:openssl:0.9.6b
- cpe:/a:openssl:openssl:0.9.6c
- cpe:/a:openssl:openssl:0.9.6d
- cpe:/a:openssl:openssl:0.9.6e
- cpe:/a:openssl:openssl:0.9.6f
- cpe:/a:openssl:openssl:0.9.6g
- cpe:/a:openssl:openssl:0.9.6h
- cpe:/a:openssl:openssl:0.9.6i
- cpe:/a:openssl:openssl:0.9.6j
- cpe:/a:openssl:openssl:0.9.6k
- cpe:/a:openssl:openssl:0.9.6l
- cpe:/a:openssl:openssl:0.9.6m
- cpe:/a:openssl:openssl:0.9.7
- cpe:/a:openssl:openssl:0.9.7:beta1
- cpe:/a:openssl:openssl:0.9.7:beta2
- cpe:/a:openssl:openssl:0.9.7:beta3
- cpe:/a:openssl:openssl:0.9.7:beta4
- cpe:/a:openssl:openssl:0.9.7:beta5
- cpe:/a:openssl:openssl:0.9.7:beta6
- cpe:/a:openssl:openssl:0.9.7a
- cpe:/a:openssl:openssl:0.9.7b
- cpe:/a:openssl:openssl:0.9.7c
- cpe:/a:openssl:openssl:0.9.7d
- cpe:/a:openssl:openssl:0.9.7e
- cpe:/a:openssl:openssl:0.9.7f
- cpe:/a:openssl:openssl:0.9.7g
- cpe:/a:openssl:openssl:0.9.7h
- cpe:/a:openssl:openssl:0.9.7i
- cpe:/a:openssl:openssl:0.9.7j
- cpe:/a:openssl:openssl:0.9.7k
- cpe:/a:openssl:openssl:0.9.7l
- cpe:/a:openssl:openssl:0.9.7m
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h
- cpe:/a:openssl:openssl:0.9.8i
- cpe:/a:openssl:openssl:0.9.8j
- cpe:/a:openssl:openssl:0.9.8k
- cpe:/a:openssl:openssl:0.9.8l
- cpe:/a:openssl:openssl:0.9.8m
- cpe:/a:openssl:openssl:0.9.8n and all previous versions
- cpe:/a:openssl:openssl:1.0.0
- cpe:/a:openssl:openssl:1.0.0:beta1
- cpe:/a:openssl:openssl:1.0.0:beta2
- cpe:/a:openssl:openssl:1.0.0:beta3
- cpe:/a:openssl:openssl:1.0.0:beta4
- cpe:/a:openssl:openssl:1.0.0:beta5

CVE-2010-0433

Severity: Medium
CVSS Score: 4.3
CWE: CWE-20 Improper Input Validation

The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain return value, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via SSL cipher negotiation, as demonstrated by a chroot installation of Dovecot or stunnel without Kerberos configuration files inside the chroot.

- BUGTRAQ - 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
- CONFIRM - http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc
- CONFIRM - http://cvs.openssl.org/chngview?cn=19374
- CONFIRM - http://www.openssl.org/news/changelog.html
- CONFIRM - http://www.vmware.com/security/advisories/VMSA-2011-0003.html
- CONFIRM - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
- CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=567711
- CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=569774
- CONFIRM - https://kb.bluecoat.com/index?page=content&id=SA50
- FEDORA - FEDORA-2010-5357
- FEDORA - FEDORA-2010-5744
- MANDRIVA - MDVSA-2010:076
- MISC - http://groups.google.com/group/mailing.openssl.users/browse_thread/thread/c3e1ab0034ca4b4c/66aa896c3a78b2f7
- MLIST - [dovecot] 20100219 segfault - (imap|pop3)-login during nessus scan
- MLIST - [oss-security] 20100303 OpenSSL (with KRB5) remote crash - CVE-2010-0433
- MLIST - [syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.0.6a has been released
- MLIST - [syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.2.1a has been released
- SECUNIA - 39461
- SECUNIA - 39932
- SECUNIA - 42724
- SECUNIA - 42733
- SECUNIA - 43311
- VUPEN - ADV-2010-0839
- VUPEN - ADV-2010-0916
- VUPEN - ADV-2010-0933
- VUPEN - ADV-2010-1216

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:0.9.8m and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h
- cpe:/a:openssl:openssl:0.9.8i
- cpe:/a:openssl:openssl:0.9.8j
- cpe:/a:openssl:openssl:0.9.8k
- cpe:/a:openssl:openssl:0.9.8l
- cpe:/a:openssl:openssl:0.9.8m and all previous versions

CVE-2009-4355

Severity: Medium
CVSS Score: 5.0
CWE: CWE-399 Resource Management Errors

Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to cause a denial of service (memory consumption) via vectors that trigger incorrect calls to the CRYPTO_cleanup_all_ex_data function, as demonstrated by use of SSLv3 and PHP with the Apache HTTP Server, a related issue to CVE-2008-1678.

- CONFIRM - http://cvs.openssl.org/chngview?cn=19068
- CONFIRM - http://cvs.openssl.org/chngview?cn=19069
- CONFIRM - http://cvs.openssl.org/chngview?cn=19167
- CONFIRM - http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0004
- CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=546707
- CONFIRM - https://issues.rpath.com/browse/RPL-3157
- CONFIRM - https://kb.bluecoat.com/index?page=content&id=SA50
- DEBIAN - DSA-1970
- FEDORA - FEDORA-2010-5357
- FEDORA - FEDORA-2010-5744
- MANDRIVA - MDVSA-2010:022
- MLIST - [oss-security] 20100113 [PATCH] memory consumption (DoS) in openssl CVE-2009-4355
- REDHAT - RHSA-2010:0095
- SECUNIA - 38175
- SECUNIA - 38181
- SECUNIA - 38200
- SECUNIA - 38761
- SECUNIA - 39461
- SECUNIA - 42724
- SECUNIA - 42733
- SLACKWARE - SSA:2010-060-02
- SUSE - SUSE-SA:2010:008
- UBUNTU - USN-884-1
- VUPEN - ADV-2010-0124
- VUPEN - ADV-2010-0839
- VUPEN - ADV-2010-0916

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:0.9.8l and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.1c
- cpe:/a:openssl:openssl:0.9.2b
- cpe:/a:openssl:openssl:0.9.3
- cpe:/a:openssl:openssl:0.9.3a
- cpe:/a:openssl:openssl:0.9.4
- cpe:/a:openssl:openssl:0.9.5
- cpe:/a:openssl:openssl:0.9.5:beta1
- cpe:/a:openssl:openssl:0.9.5:beta2
- cpe:/a:openssl:openssl:0.9.5a
- cpe:/a:openssl:openssl:0.9.5a:beta1
- cpe:/a:openssl:openssl:0.9.5a:beta2
- cpe:/a:openssl:openssl:0.9.6
- cpe:/a:openssl:openssl:0.9.6:beta1
- cpe:/a:openssl:openssl:0.9.6:beta2
- cpe:/a:openssl:openssl:0.9.6:beta3
- cpe:/a:openssl:openssl:0.9.6a
- cpe:/a:openssl:openssl:0.9.6a:beta1
- cpe:/a:openssl:openssl:0.9.6a:beta2
- cpe:/a:openssl:openssl:0.9.6a:beta3
- cpe:/a:openssl:openssl:0.9.6b
- cpe:/a:openssl:openssl:0.9.6c
- cpe:/a:openssl:openssl:0.9.6d
- cpe:/a:openssl:openssl:0.9.6e
- cpe:/a:openssl:openssl:0.9.6f
- cpe:/a:openssl:openssl:0.9.6g
- cpe:/a:openssl:openssl:0.9.6h
- cpe:/a:openssl:openssl:0.9.6i
- cpe:/a:openssl:openssl:0.9.6j
- cpe:/a:openssl:openssl:0.9.6k
- cpe:/a:openssl:openssl:0.9.6l
- cpe:/a:openssl:openssl:0.9.6m
- cpe:/a:openssl:openssl:0.9.7
- cpe:/a:openssl:openssl:0.9.7:beta1
- cpe:/a:openssl:openssl:0.9.7:beta2
- cpe:/a:openssl:openssl:0.9.7:beta3
- cpe:/a:openssl:openssl:0.9.7:beta4
- cpe:/a:openssl:openssl:0.9.7:beta5
- cpe:/a:openssl:openssl:0.9.7:beta6
- cpe:/a:openssl:openssl:0.9.7a
- cpe:/a:openssl:openssl:0.9.7b
- cpe:/a:openssl:openssl:0.9.7c
- cpe:/a:openssl:openssl:0.9.7d
- cpe:/a:openssl:openssl:0.9.7e
- cpe:/a:openssl:openssl:0.9.7f
- cpe:/a:openssl:openssl:0.9.7g
- cpe:/a:openssl:openssl:0.9.7h
- cpe:/a:openssl:openssl:0.9.7i
- cpe:/a:openssl:openssl:0.9.7j
- cpe:/a:openssl:openssl:0.9.7k
- cpe:/a:openssl:openssl:0.9.7l
- cpe:/a:openssl:openssl:0.9.7m
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h
- cpe:/a:openssl:openssl:0.9.8i
- cpe:/a:openssl:openssl:0.9.8j
- cpe:/a:openssl:openssl:0.9.8k
- cpe:/a:openssl:openssl:0.9.8l and all previous versions
- cpe:/a:openssl:openssl:1.0.0:beta1
- cpe:/a:openssl:openssl:1.0.0:beta2
- cpe:/a:openssl:openssl:1.0.0:beta3
- cpe:/a:openssl:openssl:1.0.0:beta4
- cpe:/a:redhat:openssl:0.9.6-15
- cpe:/a:redhat:openssl:0.9.6b-3
- cpe:/a:redhat:openssl:0.9.7a-2

CVE-2009-3555

Severity: Medium
CVSS Score: 5.8
CWE: CWE-310 Cryptographic Issues

The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.

- AIXAPAR - IC67848
- AIXAPAR - IC68054
- AIXAPAR - IC68055
- AIXAPAR - PM00675
- AIXAPAR - PM12247
- APPLE - APPLE-SA-2010-01-19-1
- APPLE - APPLE-SA-2010-05-18-1
- APPLE - APPLE-SA-2010-05-18-2
- BID - 36935
- BUGTRAQ - 20091118 TLS / SSLv3 vulnerability explained (DRAFT)
- BUGTRAQ - 20091124 rPSA-2009-0155-1 httpd mod_ssl
- BUGTRAQ - 20091130 TLS / SSLv3 vulnerability explained (New ways to leverage the vulnerability)
- BUGTRAQ - 20101207 VMSA-2010-0019 VMware ESX third party updates for Service Console
- BUGTRAQ - 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
- BUGTRAQ - 20131121 ESA-2013-077: RSA Data Protection Manager Appliance Multiple Vulnerabilities
- CERT - TA10-222A
- CERT - TA10-287A
- CERT-VN - VU#120541
- CISCO - 20091109 Transport Layer Security Renegotiation Vulnerability
- CONFIRM - http://blogs.sun.com/security/entry/vulnerability_in_tls_protocol_during
- CONFIRM - http://kbase.redhat.com/faq/docs/DOC-20491
- CONFIRM - http://support.apple.com/kb/HT4004
- CONFIRM - http://support.apple.com/kb/HT4170
- CONFIRM - http://support.apple.com/kb/HT4171
- CONFIRM - http://support.avaya.com/css/P8/documents/100070150
- CONFIRM - http://support.avaya.com/css/P8/documents/100081611
- CONFIRM - http://support.avaya.com/css/P8/documents/100114315
- CONFIRM - http://support.avaya.com/css/P8/documents/100114327
- CONFIRM - http://support.citrix.com/article/CTX123359
- CONFIRM - http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES
- CONFIRM - http://support.zeus.com/zws/news/2010/01/13/zws_4_3r5_released
- CONFIRM - http://sysoev.ru/nginx/patch.cve-2009-3555.txt
- CONFIRM - http://tomcat.apache.org/native-doc/miscellaneous/changelog-1.1.x.html
- CONFIRM - http://wiki.rpath.com/Advisories:rPSA-2009-0155
- CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg21426108
- CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg21432298
- CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg24006386
- CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg24025312
- CONFIRM - http://www.arubanetworks.com/support/alerts/aid-020810.txt
- CONFIRM - http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html
- CONFIRM - http://www.ingate.com/Relnote.php?ver=481
- CONFIRM - http://www.mozilla.org/security/announce/2010/mfsa2010-22.html
- CONFIRM - http://www.openoffice.org/security/cves/CVE-2009-3555.html
- CONFIRM - http://www.opera.com/docs/changelogs/unix/1060/
- CONFIRM - http://www.opera.com/support/search/view/944/
- CONFIRM - http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html
- CONFIRM - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
- CONFIRM - http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html
- CONFIRM - http://www.proftpd.org/docs/RELEASE_NOTES-1.3.2c
- CONFIRM - http://www.vmware.com/security/advisories/VMSA-2010-0019.html
- CONFIRM - http://www.vmware.com/security/advisories/VMSA-2011-0003.html
- CONFIRM - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
- CONFIRM - https://bugzilla.mozilla.org/show_bug.cgi?id=545755
- CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=533125
- CONFIRM - https://kb.bluecoat.com/index?page=content&id=SA50
- DEBIAN - DSA-1934
- DEBIAN - DSA-2141
- FEDORA - FEDORA-2009-12229
- FEDORA - FEDORA-2009-12305
- FEDORA - FEDORA-2009-12604
- FEDORA - FEDORA-2009-12606
- FEDORA - FEDORA-2009-12750
- FEDORA - FEDORA-2009-12775
- FEDORA - FEDORA-2009-12782
- FEDORA - FEDORA-2009-12968
- FEDORA - FEDORA-2010-16240
- FEDORA - FEDORA-2010-16294
- FEDORA - FEDORA-2010-16312
- FEDORA - FEDORA-2010-5357
- FEDORA - FEDORA-2010-5942
- FEDORA - FEDORA-2010-6131
- FULLDISC - 20091111 Re: SSL/TLS MiTM PoC
- GENTOO - GLSA-200912-01
- GENTOO - GLSA-201203-22
- HP - HPSBGN02562
- HP - HPSBHF02706
- HP - HPSBMA02534
- HP - HPSBMA02547
- HP - HPSBMA02568
- HP - HPSBMU02759
- HP - HPSBOV02683
- HP - HPSBUX02482
- HP - SSRT090180
- HP - SSRT090208
- HP - SSRT090249
- HP - SSRT100179
- HP - SSRT100219
- HP - SSRT100613
- HP - SSRT100817
- MANDRIVA - MDVSA-2010:076
- MANDRIVA - MDVSA-2010:084
- MANDRIVA - MDVSA-2010:089
- MISC - http://blog.g-sec.lu/2009/11/tls-sslv3-renegotiation-vulnerability.html
- MISC - http://blogs.iss.net/archive/sslmitmiscsrf.html
- MISC - http://clicky.me/tlsvuln
- MISC - http://extendedsubset.com/?p=8
- MISC - http://extendedsubset.com/Renegotiating_TLS.pdf
- MISC - http://www.betanews.com/article/1257452450
- MISC - http://www.educatedguesswork.org/2009/11/understanding_the_tls_renegoti.html
- MISC - http://www.links.org/?p=780
- MISC - http://www.links.org/?p=786
- MISC - http://www.links.org/?p=789
- MISC - http://www.securegoose.org/2009/11/tls-renegotiation-vulnerability-cve.html
- MISC - http://www.tombom.co.uk/blog/?p=85
- MISC - http://xss.cx/examples/plesk-reports/plesk-parallels-controlpanel-psa.v.10.3.1_build1013110726.09%20os_redhat.el6-billing-system-plugin-javascript-injection-example-poc-report.html
- MISC - https://bugzilla.mozilla.org/show_bug.cgi?id=526689
- MISC - https://support.f5.com/kb/en-us/solutions/public/10000/700/sol10737.html
- MISC - https://svn.resiprocate.org/rep/ietf-drafts/ekr/draft-rescorla-tls-renegotiate.txt
- MLIST - [announce] 20091107 CVE-2009-3555 - apache/mod_ssl vulnerability and mitigation
- MLIST - [cryptography] 20091105 OpenSSL 0.9.8l released
- MLIST - [gnutls-devel] 20091105 Re: TLS renegotiation MITM
- MLIST - [oss-security] 20091105 CVE-2009-3555 for TLS renegotiation MITM attacks
- MLIST - [oss-security] 20091105 Re: CVE-2009-3555 for TLS renegotiation MITM attacks
- MLIST - [oss-security] 20091107 Re: CVE-2009-3555 for TLS renegotiation MITM attacks
- MLIST - [oss-security] 20091107 Re: [TLS] CVE-2009-3555 for TLS renegotiation MITM attacks
- MLIST - [oss-security] 20091120 CVEs for nginx
- MLIST - [oss-security] 20091123 Re: CVEs for nginx
- MLIST - [tls] 20091104 MITM attack on delayed TLS-client auth through renegotiation
- MLIST - [tls] 20091104 TLS renegotiation issue
- MS - MS10-049
- OPENBSD - [4.5] 010: SECURITY FIX: November 26, 2009
- OPENBSD - [4.6] 004: SECURITY FIX: November 26, 2009
- OSVDB - 60521
- OSVDB - 60972
- OSVDB - 62210
- OSVDB - 65202
- REDHAT - RHSA-2010:0119
- REDHAT - RHSA-2010:0130
- REDHAT - RHSA-2010:0155
- REDHAT - RHSA-2010:0165
- REDHAT - RHSA-2010:0167
- REDHAT - RHSA-2010:0337
- REDHAT - RHSA-2010:0338
- REDHAT - RHSA-2010:0339
- REDHAT - RHSA-2010:0768
- REDHAT - RHSA-2010:0770
- REDHAT - RHSA-2010:0786
- REDHAT - RHSA-2010:0807
- REDHAT - RHSA-2010:0865
- REDHAT - RHSA-2010:0986
- REDHAT - RHSA-2010:0987
- REDHAT - RHSA-2011:0880
- SECTRACK - 1023148
- SECTRACK - 1023163
- SECTRACK - 1023204
- SECTRACK - 1023205
- SECTRACK - 1023206
- SECTRACK - 1023207
- SECTRACK - 1023208
- SECTRACK - 1023209
- SECTRACK - 1023210
- SECTRACK - 1023211
- SECTRACK - 1023212
- SECTRACK - 1023213
- SECTRACK - 1023214
- SECTRACK - 1023215
- SECTRACK - 1023216
- SECTRACK - 1023217
- SECTRACK - 1023218
- SECTRACK - 1023219
- SECTRACK - 1023224
- SECTRACK - 1023243
- SECTRACK - 1023270
- SECTRACK - 1023271
- SECTRACK - 1023272
- SECTRACK - 1023273
- SECTRACK - 1023274
- SECTRACK - 1023275
- SECTRACK - 1023411
- SECTRACK - 1023426
- SECTRACK - 1023427
- SECTRACK - 1023428
- SECTRACK - 1024789
- SECUNIA - 37291
- SECUNIA - 37292
- SECUNIA - 37320
- SECUNIA - 37383
- SECUNIA - 37399
- SECUNIA - 37453
- SECUNIA - 37501
- SECUNIA - 37504
- SECUNIA - 37604
- SECUNIA - 37640
- SECUNIA - 37656
- SECUNIA - 37675
- SECUNIA - 37859
- SECUNIA - 38003
- SECUNIA - 38020
- SECUNIA - 38056
- SECUNIA - 38241
- SECUNIA - 38484
- SECUNIA - 38687
- SECUNIA - 38781
- SECUNIA - 39127
- SECUNIA - 39136
- SECUNIA - 39242
- SECUNIA - 39243
- SECUNIA - 39278
- SECUNIA - 39292
- SECUNIA - 39317
- SECUNIA - 39461
- SECUNIA - 39500
- SECUNIA - 39628
- SECUNIA - 39632
- SECUNIA - 39713
- SECUNIA - 39819
- SECUNIA - 40070
- SECUNIA - 40545
- SECUNIA - 40747
- SECUNIA - 40866
- SECUNIA - 41480
- SECUNIA - 41490
- SECUNIA - 41967
- SECUNIA - 41972
- SECUNIA - 42377
- SECUNIA - 42379
- SECUNIA - 42467
- SECUNIA - 42724
- SECUNIA - 42733
- SECUNIA - 42808
- SECUNIA - 42811
- SECUNIA - 42816
- SECUNIA - 43308
- SECUNIA - 44183
- SECUNIA - 44954
- SECUNIA - 48577
- SLACKWARE - SSA:2009-320-01
- SUNALERT - 1021653
- SUNALERT - 1021752
- SUNALERT - 273029
- SUNALERT - 273350
- SUNALERT - 274990
- SUSE - SUSE-SA:2009:057
- SUSE - SUSE-SA:2010:061
- SUSE - SUSE-SR:2010:008
- SUSE - SUSE-SR:2010:011
- SUSE - SUSE-SR:2010:012
- SUSE - SUSE-SR:2010:013
- SUSE - SUSE-SR:2010:019
- SUSE - SUSE-SR:2010:024
- SUSE - SUSE-SU-2011:0847
- SUSE - openSUSE-SU-2011:0845
- UBUNTU - USN-1010-1
- UBUNTU - USN-923-1
- UBUNTU - USN-927-1
- UBUNTU - USN-927-4
- UBUNTU - USN-927-5
- VUPEN - ADV-2009-3164
- VUPEN - ADV-2009-3165
- VUPEN - ADV-2009-3205
- VUPEN - ADV-2009-3220
- VUPEN - ADV-2009-3310
- VUPEN - ADV-2009-3313
- VUPEN - ADV-2009-3353
- VUPEN - ADV-2009-3354
- VUPEN - ADV-2009-3484
- VUPEN - ADV-2009-3521
- VUPEN - ADV-2009-3587
- VUPEN - ADV-2010-0086
- VUPEN - ADV-2010-0173
- VUPEN - ADV-2010-0748
- VUPEN - ADV-2010-0848
- VUPEN - ADV-2010-0916
- VUPEN - ADV-2010-0933
- VUPEN - ADV-2010-0982
- VUPEN - ADV-2010-0994
- VUPEN - ADV-2010-1054
- VUPEN - ADV-2010-1107
- VUPEN - ADV-2010-1191
- VUPEN - ADV-2010-1350
- VUPEN - ADV-2010-1639
- VUPEN - ADV-2010-1673
- VUPEN - ADV-2010-1793
- VUPEN - ADV-2010-2010
- VUPEN - ADV-2010-2745
- VUPEN - ADV-2010-3069
- VUPEN - ADV-2010-3086
- VUPEN - ADV-2010-3126
- VUPEN - ADV-2011-0032
- VUPEN - ADV-2011-0033
- VUPEN - ADV-2011-0086
- XF - tls-renegotiation-weak-security(54158)

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:0.9.8h and all previous versions
- ...
- cpe:/a:apache:http_server:0.8.11
- cpe:/a:apache:http_server:0.8.14
- cpe:/a:apache:http_server:1.0
- cpe:/a:apache:http_server:1.0.2
- cpe:/a:apache:http_server:1.0.3
- cpe:/a:apache:http_server:1.0.5
- cpe:/a:apache:http_server:1.1.1
- cpe:/a:apache:http_server:1.2
- cpe:/a:apache:http_server:1.2.4
- cpe:/a:apache:http_server:1.2.5
- cpe:/a:apache:http_server:1.2.6
- cpe:/a:apache:http_server:1.3
- cpe:/a:apache:http_server:1.3.0
- cpe:/a:apache:http_server:1.3.1.1
- cpe:/a:apache:http_server:1.3.2
- cpe:/a:apache:http_server:1.3.3
- cpe:/a:apache:http_server:1.3.4
- cpe:/a:apache:http_server:1.3.5
- cpe:/a:apache:http_server:1.3.6
- cpe:/a:apache:http_server:1.3.7
- cpe:/a:apache:http_server:1.3.7::dev
- cpe:/a:apache:http_server:1.3.8
- cpe:/a:apache:http_server:1.3.9
- cpe:/a:apache:http_server:1.3.11
- cpe:/a:apache:http_server:1.3.12
- cpe:/a:apache:http_server:1.3.13
- cpe:/a:apache:http_server:1.3.14
- cpe:/a:apache:http_server:1.3.15
- cpe:/a:apache:http_server:1.3.16
- cpe:/a:apache:http_server:1.3.17
- cpe:/a:apache:http_server:1.3.18
- cpe:/a:apache:http_server:1.3.19
- cpe:/a:apache:http_server:1.3.20
- cpe:/a:apache:http_server:1.3.22
- cpe:/a:apache:http_server:1.3.23
- cpe:/a:apache:http_server:1.3.24
- cpe:/a:apache:http_server:1.3.25
- cpe:/a:apache:http_server:1.3.26
- cpe:/a:apache:http_server:1.3.27
- cpe:/a:apache:http_server:1.3.28
- cpe:/a:apache:http_server:1.3.29
- cpe:/a:apache:http_server:1.3.30
- cpe:/a:apache:http_server:1.3.31
- cpe:/a:apache:http_server:1.3.32
- cpe:/a:apache:http_server:1.3.33
- cpe:/a:apache:http_server:1.3.34
- cpe:/a:apache:http_server:1.3.35
- cpe:/a:apache:http_server:1.3.36
- cpe:/a:apache:http_server:1.3.37
- cpe:/a:apache:http_server:1.3.38
- cpe:/a:apache:http_server:1.3.39
- cpe:/a:apache:http_server:1.3.65
- cpe:/a:apache:http_server:1.3.68
- cpe:/a:apache:http_server:1.4.0
- cpe:/a:apache:http_server:1.99
- cpe:/a:apache:http_server:2.0
- cpe:/a:apache:http_server:2.0.9
- cpe:/a:apache:http_server:2.0.28
- cpe:/a:apache:http_server:2.0.28:beta
- cpe:/a:apache:http_server:2.0.32
- cpe:/a:apache:http_server:2.0.32:beta
- cpe:/a:apache:http_server:2.0.34:beta
- cpe:/a:apache:http_server:2.0.35
- cpe:/a:apache:http_server:2.0.36
- cpe:/a:apache:http_server:2.0.37
- cpe:/a:apache:http_server:2.0.38
- cpe:/a:apache:http_server:2.0.39
- cpe:/a:apache:http_server:2.0.40
- cpe:/a:apache:http_server:2.0.41
- cpe:/a:apache:http_server:2.0.42
- cpe:/a:apache:http_server:2.0.43
- cpe:/a:apache:http_server:2.0.44
- cpe:/a:apache:http_server:2.0.45
- cpe:/a:apache:http_server:2.0.46
- cpe:/a:apache:http_server:2.0.46::win32
- cpe:/a:apache:http_server:2.0.47
- cpe:/a:apache:http_server:2.0.48
- cpe:/a:apache:http_server:2.0.49
- cpe:/a:apache:http_server:2.0.50
- cpe:/a:apache:http_server:2.0.51
- cpe:/a:apache:http_server:2.0.52
- cpe:/a:apache:http_server:2.0.53
- cpe:/a:apache:http_server:2.0.54
- cpe:/a:apache:http_server:2.0.55
- cpe:/a:apache:http_server:2.0.56
- cpe:/a:apache:http_server:2.0.57
- cpe:/a:apache:http_server:2.0.58
- cpe:/a:apache:http_server:2.0.58::win32
- cpe:/a:apache:http_server:2.0.59
- cpe:/a:apache:http_server:2.0.60
- cpe:/a:apache:http_server:2.0.61
- cpe:/a:apache:http_server:2.0.63
- cpe:/a:apache:http_server:2.1.1
- cpe:/a:apache:http_server:2.1.2
- cpe:/a:apache:http_server:2.1.3
- cpe:/a:apache:http_server:2.1.4
- cpe:/a:apache:http_server:2.1.5
- cpe:/a:apache:http_server:2.1.6
- cpe:/a:apache:http_server:2.1.7
- cpe:/a:apache:http_server:2.1.8
- cpe:/a:apache:http_server:2.1.9
- cpe:/a:apache:http_server:2.2
- cpe:/a:apache:http_server:2.2.0
- cpe:/a:apache:http_server:2.2.1
- cpe:/a:apache:http_server:2.2.2
- cpe:/a:apache:http_server:2.2.3
- cpe:/a:apache:http_server:2.2.4
- cpe:/a:apache:http_server:2.2.5
- cpe:/a:apache:http_server:2.2.6
- cpe:/a:apache:http_server:2.2.7
- cpe:/a:apache:http_server:2.2.8
- cpe:/a:apache:http_server:2.2.10
- cpe:/a:apache:http_server:2.2.11
- cpe:/a:apache:http_server:2.2.12
- cpe:/a:apache:http_server:2.2.13 and all previous versions
- cpe:/a:gnu:gnutls:1.0.16
- cpe:/a:gnu:gnutls:1.0.17
- cpe:/a:gnu:gnutls:1.0.18
- cpe:/a:gnu:gnutls:1.0.19
- cpe:/a:gnu:gnutls:1.0.20
- cpe:/a:gnu:gnutls:1.0.21
- cpe:/a:gnu:gnutls:1.0.22
- cpe:/a:gnu:gnutls:1.0.23
- cpe:/a:gnu:gnutls:1.0.24
- cpe:/a:gnu:gnutls:1.0.25
- cpe:/a:gnu:gnutls:1.1.13
- cpe:/a:gnu:gnutls:1.1.14
- cpe:/a:gnu:gnutls:1.1.15
- cpe:/a:gnu:gnutls:1.1.16
- cpe:/a:gnu:gnutls:1.1.17
- cpe:/a:gnu:gnutls:1.1.18
- cpe:/a:gnu:gnutls:1.1.19
- cpe:/a:gnu:gnutls:1.1.20
- cpe:/a:gnu:gnutls:1.1.21
- cpe:/a:gnu:gnutls:1.1.22
- cpe:/a:gnu:gnutls:1.1.23
- cpe:/a:gnu:gnutls:1.2.0
- cpe:/a:gnu:gnutls:1.2.1
- cpe:/a:gnu:gnutls:1.2.2
- cpe:/a:gnu:gnutls:1.2.3
- cpe:/a:gnu:gnutls:1.2.4
- cpe:/a:gnu:gnutls:1.2.5
- cpe:/a:gnu:gnutls:1.2.6
- cpe:/a:gnu:gnutls:1.2.7
- cpe:/a:gnu:gnutls:1.2.8
- cpe:/a:gnu:gnutls:1.2.8.1a1
- cpe:/a:gnu:gnutls:1.2.9
- cpe:/a:gnu:gnutls:1.2.10
- cpe:/a:gnu:gnutls:1.2.11
- cpe:/a:gnu:gnutls:1.3.0
- cpe:/a:gnu:gnutls:1.3.1
- cpe:/a:gnu:gnutls:1.3.2
- cpe:/a:gnu:gnutls:1.3.3
- cpe:/a:gnu:gnutls:1.3.4
- cpe:/a:gnu:gnutls:1.3.5
- cpe:/a:gnu:gnutls:1.4.0
- cpe:/a:gnu:gnutls:1.4.1
- cpe:/a:gnu:gnutls:1.4.2
- cpe:/a:gnu:gnutls:1.4.3
- cpe:/a:gnu:gnutls:1.4.4
- cpe:/a:gnu:gnutls:1.4.5
- cpe:/a:gnu:gnutls:1.5.0
- cpe:/a:gnu:gnutls:1.5.1
- cpe:/a:gnu:gnutls:1.5.2
- cpe:/a:gnu:gnutls:1.5.3
- cpe:/a:gnu:gnutls:1.5.4
- cpe:/a:gnu:gnutls:1.5.5
- cpe:/a:gnu:gnutls:1.6.0
- cpe:/a:gnu:gnutls:1.6.1
- cpe:/a:gnu:gnutls:1.6.2
- cpe:/a:gnu:gnutls:1.6.3
- cpe:/a:gnu:gnutls:1.7.0
- cpe:/a:gnu:gnutls:1.7.1
- cpe:/a:gnu:gnutls:1.7.2
- cpe:/a:gnu:gnutls:1.7.3
- cpe:/a:gnu:gnutls:1.7.4
- cpe:/a:gnu:gnutls:1.7.5
- cpe:/a:gnu:gnutls:1.7.6
- cpe:/a:gnu:gnutls:1.7.7
- cpe:/a:gnu:gnutls:1.7.8
- cpe:/a:gnu:gnutls:1.7.9
- cpe:/a:gnu:gnutls:1.7.10
- cpe:/a:gnu:gnutls:1.7.11
- cpe:/a:gnu:gnutls:1.7.12
- cpe:/a:gnu:gnutls:1.7.13
- cpe:/a:gnu:gnutls:1.7.14
- cpe:/a:gnu:gnutls:1.7.15
- cpe:/a:gnu:gnutls:1.7.16
- cpe:/a:gnu:gnutls:1.7.17
- cpe:/a:gnu:gnutls:1.7.18
- cpe:/a:gnu:gnutls:1.7.19
- cpe:/a:gnu:gnutls:2.0.0
- cpe:/a:gnu:gnutls:2.0.1
- cpe:/a:gnu:gnutls:2.0.2
- cpe:/a:gnu:gnutls:2.0.3
- cpe:/a:gnu:gnutls:2.0.4
- cpe:/a:gnu:gnutls:2.1.0
- cpe:/a:gnu:gnutls:2.1.1
- cpe:/a:gnu:gnutls:2.1.2
- cpe:/a:gnu:gnutls:2.1.3
- cpe:/a:gnu:gnutls:2.1.4
- cpe:/a:gnu:gnutls:2.1.5
- cpe:/a:gnu:gnutls:2.1.6
- cpe:/a:gnu:gnutls:2.1.7
- cpe:/a:gnu:gnutls:2.1.8
- cpe:/a:gnu:gnutls:2.2.0
- cpe:/a:gnu:gnutls:2.2.1
- cpe:/a:gnu:gnutls:2.2.2
- cpe:/a:gnu:gnutls:2.2.3
- cpe:/a:gnu:gnutls:2.2.4
- cpe:/a:gnu:gnutls:2.2.5
- cpe:/a:gnu:gnutls:2.3.0
- cpe:/a:gnu:gnutls:2.3.1
- cpe:/a:gnu:gnutls:2.3.2
- cpe:/a:gnu:gnutls:2.3.3
- cpe:/a:gnu:gnutls:2.3.4
- cpe:/a:gnu:gnutls:2.3.5
- cpe:/a:gnu:gnutls:2.3.6
- cpe:/a:gnu:gnutls:2.3.7
- cpe:/a:gnu:gnutls:2.3.8
- cpe:/a:gnu:gnutls:2.3.9
- cpe:/a:gnu:gnutls:2.3.10
- cpe:/a:gnu:gnutls:2.3.11
- cpe:/a:gnu:gnutls:2.4.0
- cpe:/a:gnu:gnutls:2.4.1
- cpe:/a:gnu:gnutls:2.4.2
- cpe:/a:gnu:gnutls:2.5.0
- cpe:/a:gnu:gnutls:2.6.0
- cpe:/a:gnu:gnutls:2.6.1
- cpe:/a:gnu:gnutls:2.6.2
- cpe:/a:gnu:gnutls:2.6.3
- cpe:/a:gnu:gnutls:2.6.4
- cpe:/a:gnu:gnutls:2.6.5
- cpe:/a:gnu:gnutls:2.6.6
- cpe:/a:gnu:gnutls:2.8.0
- cpe:/a:gnu:gnutls:2.8.1 and all previous versions
- cpe:/a:microsoft:iis:7.0
- cpe:/a:mozilla:nss:3.0
- cpe:/a:mozilla:nss:3.2
- cpe:/a:mozilla:nss:3.2.1
- cpe:/a:mozilla:nss:3.3
- cpe:/a:mozilla:nss:3.3.1
- cpe:/a:mozilla:nss:3.3.2
- cpe:/a:mozilla:nss:3.4
- cpe:/a:mozilla:nss:3.4.1
- cpe:/a:mozilla:nss:3.4.2
- cpe:/a:mozilla:nss:3.4.3
- cpe:/a:mozilla:nss:3.5
- cpe:/a:mozilla:nss:3.6
- cpe:/a:mozilla:nss:3.6.1
- cpe:/a:mozilla:nss:3.7
- cpe:/a:mozilla:nss:3.7.1
- cpe:/a:mozilla:nss:3.7.2
- cpe:/a:mozilla:nss:3.7.3
- cpe:/a:mozilla:nss:3.7.5
- cpe:/a:mozilla:nss:3.7.7
- cpe:/a:mozilla:nss:3.8
- cpe:/a:mozilla:nss:3.9
- cpe:/a:mozilla:nss:3.9.5
- cpe:/a:mozilla:nss:3.10
- cpe:/a:mozilla:nss:3.11.2
- cpe:/a:mozilla:nss:3.11.4
- cpe:/a:mozilla:nss:3.11.7
- cpe:/a:mozilla:nss:3.11.8
- cpe:/a:mozilla:nss:3.12
- cpe:/a:mozilla:nss:3.12.1
- cpe:/a:mozilla:nss:3.12.2 and all previous versions
- cpe:/a:openssl:openssl:0.9.1c
- cpe:/a:openssl:openssl:0.9.2b
- cpe:/a:openssl:openssl:0.9.3
- cpe:/a:openssl:openssl:0.9.3a
- cpe:/a:openssl:openssl:0.9.4
- cpe:/a:openssl:openssl:0.9.5
- cpe:/a:openssl:openssl:0.9.5:beta1
- cpe:/a:openssl:openssl:0.9.5:beta2
- cpe:/a:openssl:openssl:0.9.5a
- cpe:/a:openssl:openssl:0.9.5a:beta1
- cpe:/a:openssl:openssl:0.9.5a:beta2
- cpe:/a:openssl:openssl:0.9.6
- cpe:/a:openssl:openssl:0.9.6:beta1
- cpe:/a:openssl:openssl:0.9.6:beta2
- cpe:/a:openssl:openssl:0.9.6:beta3
- cpe:/a:openssl:openssl:0.9.6a
- cpe:/a:openssl:openssl:0.9.6a:beta1
- cpe:/a:openssl:openssl:0.9.6a:beta2
- cpe:/a:openssl:openssl:0.9.6a:beta3
- cpe:/a:openssl:openssl:0.9.6b
- cpe:/a:openssl:openssl:0.9.6c
- cpe:/a:openssl:openssl:0.9.6d
- cpe:/a:openssl:openssl:0.9.6e
- cpe:/a:openssl:openssl:0.9.6f
- cpe:/a:openssl:openssl:0.9.6g
- cpe:/a:openssl:openssl:0.9.6h
- cpe:/a:openssl:openssl:0.9.6i
- cpe:/a:openssl:openssl:0.9.6j
- cpe:/a:openssl:openssl:0.9.6k
- cpe:/a:openssl:openssl:0.9.6l
- cpe:/a:openssl:openssl:0.9.6m
- cpe:/a:openssl:openssl:0.9.7
- cpe:/a:openssl:openssl:0.9.7:beta1
- cpe:/a:openssl:openssl:0.9.7:beta2
- cpe:/a:openssl:openssl:0.9.7:beta3
- cpe:/a:openssl:openssl:0.9.7:beta4
- cpe:/a:openssl:openssl:0.9.7:beta5
- cpe:/a:openssl:openssl:0.9.7:beta6
- cpe:/a:openssl:openssl:0.9.7a
- cpe:/a:openssl:openssl:0.9.7b
- cpe:/a:openssl:openssl:0.9.7c
- cpe:/a:openssl:openssl:0.9.7d
- cpe:/a:openssl:openssl:0.9.7e
- cpe:/a:openssl:openssl:0.9.7f
- cpe:/a:openssl:openssl:0.9.7g
- cpe:/a:openssl:openssl:0.9.7h
- cpe:/a:openssl:openssl:0.9.7i
- cpe:/a:openssl:openssl:0.9.7j
- cpe:/a:openssl:openssl:0.9.7k
- cpe:/a:openssl:openssl:0.9.7l
- cpe:/a:openssl:openssl:0.9.7m
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h and all previous versions
- cpe:/a:openssl:openssl:1.0::openvms

CVE-2009-3245

Severity: High
CVSS Score: 10.0
CWE: CWE-20 Improper Input Validation

OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.

- APPLE - APPLE-SA-2011-06-23-1
- BID - 38562
- CONFIRM - http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc
- CONFIRM - http://support.apple.com/kb/HT4723
- CONFIRM - https://kb.bluecoat.com/index?page=content&id=SA50
- FEDORA - FEDORA-2010-5357
- FEDORA - FEDORA-2010-5744
- MANDRIVA - MDVSA-2010:076
- MLIST - [openssl-cvs] 20100223 OpenSSL: OpenSSL_0_9_8-stable: openssl/ CHANGES openssl/crypto/b...
- MLIST - [openssl-cvs] 20100223 OpenSSL: OpenSSL_1_0_0-stable: openssl/crypto/bn/ bn_div.c bn_gf...
- MLIST - [openssl-cvs] 20100223 OpenSSL: openssl/crypto/bn/ bn_div.c bn_gf2m.c openssl/crypto/ec...
- MLIST - [syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.0.6a has been released
- MLIST - [syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.2.1a has been released
- REDHAT - RHSA-2010:0977
- REDHAT - RHSA-2011:0896
- SECUNIA - 38761
- SECUNIA - 39461
- SECUNIA - 39932
- SECUNIA - 42724
- SECUNIA - 42733
- SLACKWARE - SSA:2010-060-02
- SUSE - SUSE-SR:2010:013
- UBUNTU - USN-1003-1
- VUPEN - ADV-2010-0839
- VUPEN - ADV-2010-0916
- VUPEN - ADV-2010-0933
- VUPEN - ADV-2010-1216

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:0.9.8l and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h
- cpe:/a:openssl:openssl:0.9.8i
- cpe:/a:openssl:openssl:0.9.8j
- cpe:/a:openssl:openssl:0.9.8k
- cpe:/a:openssl:openssl:0.9.8l and all previous versions

CVE-2009-1387

Severity: Medium
CVSS Score: 5.0
CWE: CWE-399 Resource Management Errors

The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a "fragment bug."

- CONFIRM - http://cvs.openssl.org/chngview?cn=17958
- CONFIRM - http://rt.openssl.org/Ticket/Display.html?id=1838&user=guest&pass=guest
- CONFIRM - http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net
- CONFIRM - http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html
- GENTOO - GLSA-200912-01
- HP - HPSBMA02492
- HP - SSRT100079
- MLIST - [oss-security] 20090602 Re: Two OpenSSL DTLS remote DoS
- MLIST - [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates
- NETBSD - NetBSD-SA2009-009
- REDHAT - RHSA-2009:1335
- SECUNIA - 35571
- SECUNIA - 35685
- SECUNIA - 35729
- SECUNIA - 36533
- SECUNIA - 37003
- SECUNIA - 38794
- SECUNIA - 38834
- SUSE - SUSE-SR:2009:012
- UBUNTU - USN-792-1
- VUPEN - ADV-2010-0528

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:1.0::openvms and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.1c
- cpe:/a:openssl:openssl:0.9.2b
- cpe:/a:openssl:openssl:0.9.3
- cpe:/a:openssl:openssl:0.9.3a
- cpe:/a:openssl:openssl:0.9.4
- cpe:/a:openssl:openssl:0.9.5
- cpe:/a:openssl:openssl:0.9.5:beta1
- cpe:/a:openssl:openssl:0.9.5a
- cpe:/a:openssl:openssl:0.9.5a:beta1
- cpe:/a:openssl:openssl:0.9.5a:beta2
- cpe:/a:openssl:openssl:0.9.6:beta1
- cpe:/a:openssl:openssl:0.9.6:beta2
- cpe:/a:openssl:openssl:0.9.6:beta3
- cpe:/a:openssl:openssl:0.9.6a
- cpe:/a:openssl:openssl:0.9.6a:beta1
- cpe:/a:openssl:openssl:0.9.6a:beta2
- cpe:/a:openssl:openssl:0.9.6a:beta3
- cpe:/a:openssl:openssl:0.9.6b
- cpe:/a:openssl:openssl:0.9.6c
- cpe:/a:openssl:openssl:0.9.6d
- cpe:/a:openssl:openssl:0.9.6e
- cpe:/a:openssl:openssl:0.9.6f
- cpe:/a:openssl:openssl:0.9.6g
- cpe:/a:openssl:openssl:0.9.6h
- cpe:/a:openssl:openssl:0.9.6i
- cpe:/a:openssl:openssl:0.9.6j
- cpe:/a:openssl:openssl:0.9.6k
- cpe:/a:openssl:openssl:0.9.6l
- cpe:/a:openssl:openssl:0.9.6m
- cpe:/a:openssl:openssl:0.9.7:beta1
- cpe:/a:openssl:openssl:0.9.7:beta2
- cpe:/a:openssl:openssl:0.9.7:beta3
- cpe:/a:openssl:openssl:0.9.7:beta4
- cpe:/a:openssl:openssl:0.9.7:beta5
- cpe:/a:openssl:openssl:0.9.7:beta6
- cpe:/a:openssl:openssl:0.9.7a
- cpe:/a:openssl:openssl:0.9.7b
- cpe:/a:openssl:openssl:0.9.7c
- cpe:/a:openssl:openssl:0.9.7d
- cpe:/a:openssl:openssl:0.9.7e
- cpe:/a:openssl:openssl:0.9.7f
- cpe:/a:openssl:openssl:0.9.7g
- cpe:/a:openssl:openssl:0.9.7h
- cpe:/a:openssl:openssl:0.9.7i
- cpe:/a:openssl:openssl:0.9.7j
- cpe:/a:openssl:openssl:0.9.7k
- cpe:/a:openssl:openssl:0.9.7l
- cpe:/a:openssl:openssl:0.9.7m
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h
- cpe:/a:openssl:openssl:0.9.8i
- cpe:/a:openssl:openssl:0.9.8j
- cpe:/a:openssl:openssl:0.9.8k
- cpe:/a:openssl:openssl:1.0::openvms and all previous versions
- cpe:/a:openssl_project:openssl:0.9.8c-1
- cpe:/a:openssl_project:openssl:0.9.8c-2
- cpe:/a:openssl_project:openssl:0.9.8c-3
- cpe:/a:openssl_project:openssl:0.9.8c-4
- cpe:/a:openssl_project:openssl:0.9.8c-5
- cpe:/a:openssl_project:openssl:0.9.8c-6
- cpe:/a:openssl_project:openssl:0.9.8c-7
- cpe:/a:openssl_project:openssl:0.9.8c-8
- cpe:/a:openssl_project:openssl:0.9.8c-9
- cpe:/a:openssl_project:openssl:0.9.8d-1
- cpe:/a:openssl_project:openssl:0.9.8d-2
- cpe:/a:openssl_project:openssl:0.9.8d-3
- cpe:/a:openssl_project:openssl:0.9.8d-4
- cpe:/a:openssl_project:openssl:0.9.8d-5
- cpe:/a:openssl_project:openssl:0.9.8d-6
- cpe:/a:openssl_project:openssl:0.9.8d-7
- cpe:/a:openssl_project:openssl:0.9.8d-8
- cpe:/a:openssl_project:openssl:0.9.8d-9
- cpe:/a:openssl_project:openssl:0.9.8e-1
- cpe:/a:openssl_project:openssl:0.9.8e-2
- cpe:/a:openssl_project:openssl:0.9.8e-3
- cpe:/a:openssl_project:openssl:0.9.8e-4
- cpe:/a:openssl_project:openssl:0.9.8e-5
- cpe:/a:openssl_project:openssl:0.9.8e-6
- cpe:/a:openssl_project:openssl:0.9.8e-7
- cpe:/a:openssl_project:openssl:0.9.8e-8
- cpe:/a:openssl_project:openssl:0.9.8e-9
- cpe:/a:openssl_project:openssl:0.9.8f
- cpe:/a:openssl_project:openssl:0.9.8f-1
- cpe:/a:openssl_project:openssl:0.9.8f-2
- cpe:/a:openssl_project:openssl:0.9.8f-3
- cpe:/a:openssl_project:openssl:0.9.8f-4
- cpe:/a:openssl_project:openssl:0.9.8f-5
- cpe:/a:openssl_project:openssl:0.9.8f-6
- cpe:/a:openssl_project:openssl:0.9.8f-7
- cpe:/a:openssl_project:openssl:0.9.8f-8
- cpe:/a:openssl_project:openssl:0.9.8f-9
- cpe:/a:openssl_project:openssl:0.9.8g and all previous versions
- cpe:/a:openssl_project:openssl:0.9.8g-1
- cpe:/a:openssl_project:openssl:0.9.8g-2
- cpe:/a:openssl_project:openssl:0.9.8g-3
- cpe:/a:openssl_project:openssl:0.9.8g-4
- cpe:/a:openssl_project:openssl:0.9.8g-5
- cpe:/a:openssl_project:openssl:0.9.8g-6
- cpe:/a:openssl_project:openssl:0.9.8g-7
- cpe:/a:openssl_project:openssl:0.9.8g-8
- cpe:/a:openssl_project:openssl:0.9.8g-9
- cpe:/a:redhat:openssl:0.9.6-15
- cpe:/a:redhat:openssl:0.9.6-15::i386
- cpe:/a:redhat:openssl:0.9.6b-3
- cpe:/a:redhat:openssl:0.9.6b-3::i386
- cpe:/a:redhat:openssl:0.9.7a-2
- cpe:/a:redhat:openssl:0.9.7a-2::i386
- cpe:/a:redhat:openssl:0.9.7a-2::i386_dev
- cpe:/a:redhat:openssl:0.9.7a-2::i386_perl

CVE-2009-1378

Severity: Medium
CVSS Score: 5.0
CWE: CWE-399 Resource Management Errors

Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much greater than current sequence numbers, aka "DTLS fragment handling memory leak."

- BID - 35001
- CONFIRM - http://cvs.openssl.org/chngview?cn=18188
- CONFIRM - http://rt.openssl.org/Ticket/Display.html?id=1931&user=guest&pass=guest
- CONFIRM - http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net
- CONFIRM - http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html
- CONFIRM - https://kb.bluecoat.com/index?page=content&id=SA50
- GENTOO - GLSA-200912-01
- HP - HPSBMA02492
- HP - SSRT100079
- MANDRIVA - MDVSA-2009:120
- MILW0RM - 8720
- MISC - https://launchpad.net/bugs/cve/2009-1378
- MLIST - [openssl-dev] 20090516 [openssl.org #1931] [PATCH] DTLS fragment handling memory leak
- MLIST - [openssl-dev] 20090518 Re: [openssl.org #1931] [PATCH] DTLS fragment handling memory leak
- MLIST - [oss-security] 20090518 Two OpenSSL DTLS remote DoS
- MLIST - [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates
- NETBSD - NetBSD-SA2009-009
- REDHAT - RHSA-2009:1335
- SECTRACK - 1022241
- SECUNIA - 35128
- SECUNIA - 35416
- SECUNIA - 35461
- SECUNIA - 35571
- SECUNIA - 35729
- SECUNIA - 36533
- SECUNIA - 37003
- SECUNIA - 38761
- SECUNIA - 38794
- SECUNIA - 38834
- SECUNIA - 42724
- SECUNIA - 42733
- SLACKWARE - SSA:2010-060-02
- SUSE - SUSE-SR:2009:011
- UBUNTU - USN-792-1
- VUPEN - ADV-2009-1377
- VUPEN - ADV-2010-0528

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:0.9.8k and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h
- cpe:/a:openssl:openssl:0.9.8i
- cpe:/a:openssl:openssl:0.9.8j
- cpe:/a:openssl:openssl:0.9.8k and all previous versions
- cpe:/a:openssl_project:openssl:0.9.8c-1
- cpe:/a:openssl_project:openssl:0.9.8c-2
- cpe:/a:openssl_project:openssl:0.9.8c-3
- cpe:/a:openssl_project:openssl:0.9.8c-4
- cpe:/a:openssl_project:openssl:0.9.8c-5
- cpe:/a:openssl_project:openssl:0.9.8c-6
- cpe:/a:openssl_project:openssl:0.9.8c-7
- cpe:/a:openssl_project:openssl:0.9.8c-8
- cpe:/a:openssl_project:openssl:0.9.8c-9
- cpe:/a:openssl_project:openssl:0.9.8d-1
- cpe:/a:openssl_project:openssl:0.9.8d-2
- cpe:/a:openssl_project:openssl:0.9.8d-3
- cpe:/a:openssl_project:openssl:0.9.8d-4
- cpe:/a:openssl_project:openssl:0.9.8d-5
- cpe:/a:openssl_project:openssl:0.9.8d-6
- cpe:/a:openssl_project:openssl:0.9.8d-7
- cpe:/a:openssl_project:openssl:0.9.8d-8
- cpe:/a:openssl_project:openssl:0.9.8d-9
- cpe:/a:openssl_project:openssl:0.9.8e-1
- cpe:/a:openssl_project:openssl:0.9.8e-2
- cpe:/a:openssl_project:openssl:0.9.8e-3
- cpe:/a:openssl_project:openssl:0.9.8e-4
- cpe:/a:openssl_project:openssl:0.9.8e-5
- cpe:/a:openssl_project:openssl:0.9.8e-6
- cpe:/a:openssl_project:openssl:0.9.8e-7
- cpe:/a:openssl_project:openssl:0.9.8e-8
- cpe:/a:openssl_project:openssl:0.9.8e-9
- cpe:/a:openssl_project:openssl:0.9.8f
- cpe:/a:openssl_project:openssl:0.9.8f-1
- cpe:/a:openssl_project:openssl:0.9.8f-2
- cpe:/a:openssl_project:openssl:0.9.8f-3
- cpe:/a:openssl_project:openssl:0.9.8f-4
- cpe:/a:openssl_project:openssl:0.9.8f-5
- cpe:/a:openssl_project:openssl:0.9.8f-6
- cpe:/a:openssl_project:openssl:0.9.8f-7
- cpe:/a:openssl_project:openssl:0.9.8f-8
- cpe:/a:openssl_project:openssl:0.9.8f-9
- cpe:/a:openssl_project:openssl:0.9.8g
- cpe:/a:openssl_project:openssl:0.9.8g-1
- cpe:/a:openssl_project:openssl:0.9.8g-2
- cpe:/a:openssl_project:openssl:0.9.8g-3
- cpe:/a:openssl_project:openssl:0.9.8g-4
- cpe:/a:openssl_project:openssl:0.9.8g-5
- cpe:/a:openssl_project:openssl:0.9.8g-6
- cpe:/a:openssl_project:openssl:0.9.8g-7
- cpe:/a:openssl_project:openssl:0.9.8g-8
- cpe:/a:openssl_project:openssl:0.9.8g-9

CVE-2009-1377

Severity: Medium
CVSS Score: 5.0
CWE: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of "future epoch" DTLS records that are buffered in a queue, aka "DTLS record buffer limitation bug."

- BID - 35001
- CONFIRM - http://cvs.openssl.org/chngview?cn=18187
- CONFIRM - http://rt.openssl.org/Ticket/Display.html?id=1930&user=guest&pass=guest
- CONFIRM - http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net
- CONFIRM - http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html
- CONFIRM - https://kb.bluecoat.com/index?page=content&id=SA50
- GENTOO - GLSA-200912-01
- HP - HPSBMA02492
- HP - SSRT100079
- MANDRIVA - MDVSA-2009:120
- MISC - https://launchpad.net/bugs/cve/2009-1377
- MLIST - [openssl-dev] 20090516 [openssl.org #1930] [PATCH] DTLS record buffer limitation bug
- MLIST - [oss-security] 20090518 Two OpenSSL DTLS remote DoS
- MLIST - [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates
- NETBSD - NetBSD-SA2009-009
- REDHAT - RHSA-2009:1335
- SECTRACK - 1022241
- SECUNIA - 35128
- SECUNIA - 35416
- SECUNIA - 35461
- SECUNIA - 35571
- SECUNIA - 35729
- SECUNIA - 36533
- SECUNIA - 37003
- SECUNIA - 38761
- SECUNIA - 38794
- SECUNIA - 38834
- SECUNIA - 42724
- SECUNIA - 42733
- SLACKWARE - SSA:2010-060-02
- SUSE - SUSE-SR:2009:011
- UBUNTU - USN-792-1
- VUPEN - ADV-2009-1377
- VUPEN - ADV-2010-0528

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:0.9.8k and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h
- cpe:/a:openssl:openssl:0.9.8i
- cpe:/a:openssl:openssl:0.9.8j
- cpe:/a:openssl:openssl:0.9.8k and all previous versions
- cpe:/a:openssl_project:openssl:0.9.8c-1
- cpe:/a:openssl_project:openssl:0.9.8c-2
- cpe:/a:openssl_project:openssl:0.9.8c-3
- cpe:/a:openssl_project:openssl:0.9.8c-4
- cpe:/a:openssl_project:openssl:0.9.8c-5
- cpe:/a:openssl_project:openssl:0.9.8c-6
- cpe:/a:openssl_project:openssl:0.9.8c-7
- cpe:/a:openssl_project:openssl:0.9.8c-8
- cpe:/a:openssl_project:openssl:0.9.8c-9
- cpe:/a:openssl_project:openssl:0.9.8d-1
- cpe:/a:openssl_project:openssl:0.9.8d-2
- cpe:/a:openssl_project:openssl:0.9.8d-3
- cpe:/a:openssl_project:openssl:0.9.8d-4
- cpe:/a:openssl_project:openssl:0.9.8d-5
- cpe:/a:openssl_project:openssl:0.9.8d-6
- cpe:/a:openssl_project:openssl:0.9.8d-7
- cpe:/a:openssl_project:openssl:0.9.8d-8
- cpe:/a:openssl_project:openssl:0.9.8d-9
- cpe:/a:openssl_project:openssl:0.9.8e-1
- cpe:/a:openssl_project:openssl:0.9.8e-2
- cpe:/a:openssl_project:openssl:0.9.8e-3
- cpe:/a:openssl_project:openssl:0.9.8e-4
- cpe:/a:openssl_project:openssl:0.9.8e-5
- cpe:/a:openssl_project:openssl:0.9.8e-6
- cpe:/a:openssl_project:openssl:0.9.8e-7
- cpe:/a:openssl_project:openssl:0.9.8e-8
- cpe:/a:openssl_project:openssl:0.9.8e-9
- cpe:/a:openssl_project:openssl:0.9.8f
- cpe:/a:openssl_project:openssl:0.9.8f-1
- cpe:/a:openssl_project:openssl:0.9.8f-2
- cpe:/a:openssl_project:openssl:0.9.8f-3
- cpe:/a:openssl_project:openssl:0.9.8f-4
- cpe:/a:openssl_project:openssl:0.9.8f-5
- cpe:/a:openssl_project:openssl:0.9.8f-6
- cpe:/a:openssl_project:openssl:0.9.8f-7
- cpe:/a:openssl_project:openssl:0.9.8f-8
- cpe:/a:openssl_project:openssl:0.9.8f-9
- cpe:/a:openssl_project:openssl:0.9.8g
- cpe:/a:openssl_project:openssl:0.9.8g-1
- cpe:/a:openssl_project:openssl:0.9.8g-2
- cpe:/a:openssl_project:openssl:0.9.8g-3
- cpe:/a:openssl_project:openssl:0.9.8g-4
- cpe:/a:openssl_project:openssl:0.9.8g-5
- cpe:/a:openssl_project:openssl:0.9.8g-6
- cpe:/a:openssl_project:openssl:0.9.8g-7
- cpe:/a:openssl_project:openssl:0.9.8g-8
- cpe:/a:openssl_project:openssl:0.9.8g-9

CVE-2009-0789

Severity: Medium
CVSS Score: 5.0
CWE: CWE-189 Numeric Errors

OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote attackers to cause a denial of service (invalid memory access and application crash) by placing this structure in the public key of a certificate, as demonstrated by an RSA public key.

- APPLE - APPLE-SA-2009-09-10-2
- BID - 34256
- CONFIRM - http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847
- CONFIRM - http://support.apple.com/kb/HT3865
- CONFIRM - http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html
- CONFIRM - http://www.openssl.org/news/secadv_20090325.txt
- CONFIRM - http://www.php.net/archive/2009.php#id2009-04-08-1
- CONFIRM - https://kb.bluecoat.com/index?page=content&id=SA50
- HP - HPSBUX02435
- HP - SSRT090059
- NETBSD - NetBSD-SA2009-008
- OSVDB - 52866
- SECTRACK - 1021906
- SECUNIA - 34411
- SECUNIA - 34460
- SECUNIA - 34666
- SECUNIA - 35065
- SECUNIA - 35380
- SECUNIA - 35729
- SECUNIA - 36701
- SECUNIA - 42724
- SECUNIA - 42733
- SUSE - SUSE-SR:2009:010
- SUSE - SUSE-SU-2011:0847
- SUSE - openSUSE-SU-2011:0845
- VUPEN - ADV-2009-0850
- VUPEN - ADV-2009-1020
- VUPEN - ADV-2009-1175
- VUPEN - ADV-2009-1548
- XF - openssl-asn1-structure-dos(49433)

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:0.9.8j and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.1c
- cpe:/a:openssl:openssl:0.9.2b
- cpe:/a:openssl:openssl:0.9.3
- cpe:/a:openssl:openssl:0.9.3a
- cpe:/a:openssl:openssl:0.9.4
- cpe:/a:openssl:openssl:0.9.5
- cpe:/a:openssl:openssl:0.9.5:beta1
- cpe:/a:openssl:openssl:0.9.5:beta2
- cpe:/a:openssl:openssl:0.9.5a
- cpe:/a:openssl:openssl:0.9.5a:beta1
- cpe:/a:openssl:openssl:0.9.5a:beta2
- cpe:/a:openssl:openssl:0.9.6
- cpe:/a:openssl:openssl:0.9.6:beta1
- cpe:/a:openssl:openssl:0.9.6:beta2
- cpe:/a:openssl:openssl:0.9.6:beta3
- cpe:/a:openssl:openssl:0.9.6a
- cpe:/a:openssl:openssl:0.9.6a:beta1
- cpe:/a:openssl:openssl:0.9.6a:beta2
- cpe:/a:openssl:openssl:0.9.6a:beta3
- cpe:/a:openssl:openssl:0.9.6b
- cpe:/a:openssl:openssl:0.9.6c
- cpe:/a:openssl:openssl:0.9.6d
- cpe:/a:openssl:openssl:0.9.6e
- cpe:/a:openssl:openssl:0.9.6f
- cpe:/a:openssl:openssl:0.9.6g
- cpe:/a:openssl:openssl:0.9.6h
- cpe:/a:openssl:openssl:0.9.6i
- cpe:/a:openssl:openssl:0.9.6j
- cpe:/a:openssl:openssl:0.9.6k
- cpe:/a:openssl:openssl:0.9.6l
- cpe:/a:openssl:openssl:0.9.6m
- cpe:/a:openssl:openssl:0.9.7
- cpe:/a:openssl:openssl:0.9.7:beta1
- cpe:/a:openssl:openssl:0.9.7:beta2
- cpe:/a:openssl:openssl:0.9.7:beta3
- cpe:/a:openssl:openssl:0.9.7:beta4
- cpe:/a:openssl:openssl:0.9.7:beta5
- cpe:/a:openssl:openssl:0.9.7:beta6
- cpe:/a:openssl:openssl:0.9.7a
- cpe:/a:openssl:openssl:0.9.7b
- cpe:/a:openssl:openssl:0.9.7c
- cpe:/a:openssl:openssl:0.9.7d
- cpe:/a:openssl:openssl:0.9.7e
- cpe:/a:openssl:openssl:0.9.7f
- cpe:/a:openssl:openssl:0.9.7g
- cpe:/a:openssl:openssl:0.9.7h
- cpe:/a:openssl:openssl:0.9.7i
- cpe:/a:openssl:openssl:0.9.7j
- cpe:/a:openssl:openssl:0.9.7k
- cpe:/a:openssl:openssl:0.9.7l
- cpe:/a:openssl:openssl:0.9.7m
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h
- cpe:/a:openssl:openssl:0.9.8i
- cpe:/a:openssl:openssl:0.9.8j and all previous versions

CVE-2009-0590

Severity: Medium
CVSS Score: 5.0
CWE: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.

- APPLE - APPLE-SA-2009-09-10-2
- BID - 34256
- BUGTRAQ - 20090403 rPSA-2009-0057-1 m2crypto openssl openssl-scripts
- BUGTRAQ - 20101207 VMSA-2010-0019 VMware ESX third party updates for Service Console
- CONFIRM - http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847
- CONFIRM - http://support.apple.com/kb/HT3865
- CONFIRM - http://support.avaya.com/elmodocs2/security/ASA-2009-172.htm
- CONFIRM - http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html
- CONFIRM - http://wiki.rpath.com/Advisories:rPSA-2009-0057
- CONFIRM - http://www.openssl.org/news/secadv_20090325.txt
- CONFIRM - http://www.php.net/archive/2009.php#id2009-04-08-1
- CONFIRM - http://www.vmware.com/security/advisories/VMSA-2010-0019.html
- CONFIRM - https://kb.bluecoat.com/index?page=content&id=SA50
- DEBIAN - DSA-1763
- FREEBSD - FreeBSD-SA-09:08
- HP - HPSBMA02447
- HP - HPSBUX02435
- HP - SSRT090059
- HP - SSRT090062
- MANDRIVA - MDVSA-2009:087
- MISC - http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0057
- MLIST - [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates
- MLIST - [syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.0.6a has been released
- MLIST - [syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.2.1a has been released
- NETBSD - NetBSD-SA2009-008
- OSVDB - 52864
- REDHAT - RHSA-2009:1335
- SECTRACK - 1021905
- SECUNIA - 34411
- SECUNIA - 34460
- SECUNIA - 34509
- SECUNIA - 34561
- SECUNIA - 34666
- SECUNIA - 34896
- SECUNIA - 34960
- SECUNIA - 35065
- SECUNIA - 35181
- SECUNIA - 35380
- SECUNIA - 35729
- SECUNIA - 36533
- SECUNIA - 36701
- SECUNIA - 38794
- SECUNIA - 38834
- SECUNIA - 42467
- SECUNIA - 42724
- SECUNIA - 42733
- SUNALERT - 258048
- SUSE - SUSE-SR:2009:010
- SUSE - SUSE-SU-2011:0847
- SUSE - openSUSE-SU-2011:0845
- UBUNTU - USN-750-1
- VUPEN - ADV-2009-0850
- VUPEN - ADV-2009-1020
- VUPEN - ADV-2009-1175
- VUPEN - ADV-2009-1220
- VUPEN - ADV-2009-1548
- VUPEN - ADV-2010-0528
- VUPEN - ADV-2010-3126
- XF - openssl-asn1-stringprintex-dos(49431)

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:::openvms
- ...
- cpe:/a:openssl:openssl:::openvms
- cpe:/a:openssl:openssl:0.9.1c
- cpe:/a:openssl:openssl:0.9.2b
- cpe:/a:openssl:openssl:0.9.3
- cpe:/a:openssl:openssl:0.9.3a
- cpe:/a:openssl:openssl:0.9.4
- cpe:/a:openssl:openssl:0.9.5
- cpe:/a:openssl:openssl:0.9.5:beta1
- cpe:/a:openssl:openssl:0.9.5:beta2
- cpe:/a:openssl:openssl:0.9.5a
- cpe:/a:openssl:openssl:0.9.5a:beta1
- cpe:/a:openssl:openssl:0.9.5a:beta2
- cpe:/a:openssl:openssl:0.9.6
- cpe:/a:openssl:openssl:0.9.6:beta1
- cpe:/a:openssl:openssl:0.9.6:beta2
- cpe:/a:openssl:openssl:0.9.6:beta3
- cpe:/a:openssl:openssl:0.9.6a
- cpe:/a:openssl:openssl:0.9.6a:beta1
- cpe:/a:openssl:openssl:0.9.6a:beta2
- cpe:/a:openssl:openssl:0.9.6a:beta3
- cpe:/a:openssl:openssl:0.9.6b
- cpe:/a:openssl:openssl:0.9.6c
- cpe:/a:openssl:openssl:0.9.6d
- cpe:/a:openssl:openssl:0.9.6e
- cpe:/a:openssl:openssl:0.9.6f
- cpe:/a:openssl:openssl:0.9.6g
- cpe:/a:openssl:openssl:0.9.6h
- cpe:/a:openssl:openssl:0.9.6i
- cpe:/a:openssl:openssl:0.9.6j
- cpe:/a:openssl:openssl:0.9.6k
- cpe:/a:openssl:openssl:0.9.6l
- cpe:/a:openssl:openssl:0.9.6m
- cpe:/a:openssl:openssl:0.9.7
- cpe:/a:openssl:openssl:0.9.7:beta1
- cpe:/a:openssl:openssl:0.9.7:beta2
- cpe:/a:openssl:openssl:0.9.7:beta3
- cpe:/a:openssl:openssl:0.9.7:beta4
- cpe:/a:openssl:openssl:0.9.7:beta5
- cpe:/a:openssl:openssl:0.9.7:beta6
- cpe:/a:openssl:openssl:0.9.7a
- cpe:/a:openssl:openssl:0.9.7b
- cpe:/a:openssl:openssl:0.9.7c
- cpe:/a:openssl:openssl:0.9.7d
- cpe:/a:openssl:openssl:0.9.7e
- cpe:/a:openssl:openssl:0.9.7f
- cpe:/a:openssl:openssl:0.9.7g
- cpe:/a:openssl:openssl:0.9.7h
- cpe:/a:openssl:openssl:0.9.7i
- cpe:/a:openssl:openssl:0.9.7j
- cpe:/a:openssl:openssl:0.9.7k
- cpe:/a:openssl:openssl:0.9.7l
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h

CVE-2008-7270

Severity: Medium
CVSS Score: 4.3
CWE: CWE-310 Cryptographic Issues

OpenSSL before 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the use of a disabled cipher via vectors involving sniffing network traffic to discover a session identifier, a different vulnerability than CVE-2010-4180.

- BID - 45254
- CONFIRM - http://cvs.openssl.org/chngview?cn=17489
- CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=659462
- HP - HPSBHF02706
- HP - HPSBMU02759
- HP - SSRT100613
- HP - SSRT100817
- REDHAT - RHSA-2010:0977
- REDHAT - RHSA-2010:0978
- REDHAT - RHSA-2011:0896
- SECUNIA - 42493
- UBUNTU - USN-1029-1

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:0.9.8i and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.1c
- cpe:/a:openssl:openssl:0.9.2b
- cpe:/a:openssl:openssl:0.9.3
- cpe:/a:openssl:openssl:0.9.3a
- cpe:/a:openssl:openssl:0.9.4
- cpe:/a:openssl:openssl:0.9.5
- cpe:/a:openssl:openssl:0.9.5:beta1
- cpe:/a:openssl:openssl:0.9.5:beta2
- cpe:/a:openssl:openssl:0.9.5a
- cpe:/a:openssl:openssl:0.9.5a:beta1
- cpe:/a:openssl:openssl:0.9.5a:beta2
- cpe:/a:openssl:openssl:0.9.6
- cpe:/a:openssl:openssl:0.9.6:beta1
- cpe:/a:openssl:openssl:0.9.6:beta2
- cpe:/a:openssl:openssl:0.9.6:beta3
- cpe:/a:openssl:openssl:0.9.6a
- cpe:/a:openssl:openssl:0.9.6a:beta1
- cpe:/a:openssl:openssl:0.9.6a:beta2
- cpe:/a:openssl:openssl:0.9.6a:beta3
- cpe:/a:openssl:openssl:0.9.6b
- cpe:/a:openssl:openssl:0.9.6c
- cpe:/a:openssl:openssl:0.9.6d
- cpe:/a:openssl:openssl:0.9.6e
- cpe:/a:openssl:openssl:0.9.6f
- cpe:/a:openssl:openssl:0.9.6g
- cpe:/a:openssl:openssl:0.9.6h
- cpe:/a:openssl:openssl:0.9.6i
- cpe:/a:openssl:openssl:0.9.6j
- cpe:/a:openssl:openssl:0.9.6k
- cpe:/a:openssl:openssl:0.9.6l
- cpe:/a:openssl:openssl:0.9.6m
- cpe:/a:openssl:openssl:0.9.7
- cpe:/a:openssl:openssl:0.9.7:beta1
- cpe:/a:openssl:openssl:0.9.7:beta2
- cpe:/a:openssl:openssl:0.9.7:beta3
- cpe:/a:openssl:openssl:0.9.7:beta4
- cpe:/a:openssl:openssl:0.9.7:beta5
- cpe:/a:openssl:openssl:0.9.7:beta6
- cpe:/a:openssl:openssl:0.9.7a
- cpe:/a:openssl:openssl:0.9.7b
- cpe:/a:openssl:openssl:0.9.7c
- cpe:/a:openssl:openssl:0.9.7d
- cpe:/a:openssl:openssl:0.9.7e
- cpe:/a:openssl:openssl:0.9.7f
- cpe:/a:openssl:openssl:0.9.7g
- cpe:/a:openssl:openssl:0.9.7h
- cpe:/a:openssl:openssl:0.9.7i
- cpe:/a:openssl:openssl:0.9.7j
- cpe:/a:openssl:openssl:0.9.7k
- cpe:/a:openssl:openssl:0.9.7l
- cpe:/a:openssl:openssl:0.9.7m
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h
- cpe:/a:openssl:openssl:0.9.8i and all previous versions

CVE-2008-5077

Severity: Medium
CVSS Score: 5.8
CWE: CWE-20 Improper Input Validation

OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys.

- APPLE - APPLE-SA-2009-05-12
- BID - 33150
- BUGTRAQ - 20090107 [oCERT-2008-016] Multiple OpenSSL signature verification API misuses
- BUGTRAQ - 20090401 VMSA-2009-0004 ESX Service Console updates for openssl, bind, and vim
- CERT - TA09-133A
- CONFIRM - http://support.apple.com/kb/HT3549
- CONFIRM - http://support.avaya.com/elmodocs2/security/ASA-2009-038.htm
- CONFIRM - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=837653
- CONFIRM - http://voodoo-circle.sourceforge.net/sa/sa-20090123-01.html
- CONFIRM - http://www.openssl.org/news/secadv_20090107.txt
- CONFIRM - http://www.vmware.com/security/advisories/VMSA-2009-0004.html
- GENTOO - GLSA-200902-02
- HP - HPSBMA02426
- HP - HPSBUX02418
- HP - SSRT090002
- HP - SSRT090053
- MISC - http://www.ocert.org/advisories/ocert-2008-016.html
- REDHAT - RHSA-2009:0004
- SECTRACK - 1021523
- SECUNIA - 33338
- SECUNIA - 33394
- SECUNIA - 33436
- SECUNIA - 33557
- SECUNIA - 33673
- SECUNIA - 33765
- SECUNIA - 34211
- SECUNIA - 35074
- SECUNIA - 35108
- SECUNIA - 39005
- SLACKWARE - SSA:2009-014-01
- SUNALERT - 250826
- SUSE - SUSE-SU-2011:0847
- SUSE - openSUSE-SU-2011:0845
- UBUNTU - USN-704-1
- VUPEN - ADV-2009-0040
- VUPEN - ADV-2009-0289
- VUPEN - ADV-2009-0362
- VUPEN - ADV-2009-0558
- VUPEN - ADV-2009-0904
- VUPEN - ADV-2009-0913
- VUPEN - ADV-2009-1297
- VUPEN - ADV-2009-1338

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:0.9.8h and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.1c
- cpe:/a:openssl:openssl:0.9.2b
- cpe:/a:openssl:openssl:0.9.3
- cpe:/a:openssl:openssl:0.9.3a
- cpe:/a:openssl:openssl:0.9.4
- cpe:/a:openssl:openssl:0.9.5
- cpe:/a:openssl:openssl:0.9.5:beta1
- cpe:/a:openssl:openssl:0.9.5:beta2
- cpe:/a:openssl:openssl:0.9.5a
- cpe:/a:openssl:openssl:0.9.5a:beta1
- cpe:/a:openssl:openssl:0.9.5a:beta2
- cpe:/a:openssl:openssl:0.9.6
- cpe:/a:openssl:openssl:0.9.6:beta1
- cpe:/a:openssl:openssl:0.9.6:beta2
- cpe:/a:openssl:openssl:0.9.6:beta3
- cpe:/a:openssl:openssl:0.9.6a
- cpe:/a:openssl:openssl:0.9.6a:beta1
- cpe:/a:openssl:openssl:0.9.6a:beta2
- cpe:/a:openssl:openssl:0.9.6a:beta3
- cpe:/a:openssl:openssl:0.9.6b
- cpe:/a:openssl:openssl:0.9.6c
- cpe:/a:openssl:openssl:0.9.6d
- cpe:/a:openssl:openssl:0.9.6e
- cpe:/a:openssl:openssl:0.9.6f
- cpe:/a:openssl:openssl:0.9.6g
- cpe:/a:openssl:openssl:0.9.6h
- cpe:/a:openssl:openssl:0.9.6i
- cpe:/a:openssl:openssl:0.9.6j
- cpe:/a:openssl:openssl:0.9.6k
- cpe:/a:openssl:openssl:0.9.6l
- cpe:/a:openssl:openssl:0.9.6m
- cpe:/a:openssl:openssl:0.9.7
- cpe:/a:openssl:openssl:0.9.7:beta1
- cpe:/a:openssl:openssl:0.9.7:beta2
- cpe:/a:openssl:openssl:0.9.7:beta3
- cpe:/a:openssl:openssl:0.9.7:beta4
- cpe:/a:openssl:openssl:0.9.7:beta5
- cpe:/a:openssl:openssl:0.9.7:beta6
- cpe:/a:openssl:openssl:0.9.7a
- cpe:/a:openssl:openssl:0.9.7b
- cpe:/a:openssl:openssl:0.9.7c
- cpe:/a:openssl:openssl:0.9.7d
- cpe:/a:openssl:openssl:0.9.7e
- cpe:/a:openssl:openssl:0.9.7f
- cpe:/a:openssl:openssl:0.9.7g
- cpe:/a:openssl:openssl:0.9.7h
- cpe:/a:openssl:openssl:0.9.7i
- cpe:/a:openssl:openssl:0.9.7j
- cpe:/a:openssl:openssl:0.9.7k
- cpe:/a:openssl:openssl:0.9.7l
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h and all previous versions

CVE-2007-5536

Severity: Medium
CVSS Score: 4.9

Unspecified vulnerability in OpenSSL before A.00.09.07l on HP-UX B.11.11, B.11.23, and B.11.31 allows local users to cause a denial of service via unspecified vectors.

- BID - 26093
- HP - HPSBUX02277
- HP - SSRT071453
- OSVDB - 37894
- SECUNIA - 27265
- VUPEN - ADV-2007-3526
- XF - hpux-openssl-dos(37231)

Vulnerable Software & Versions:

- cpe:/a:openssl:openssl

CVE-2007-3108

Severity: Low
CVSS Score: 1.2

The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys.

- BID - 25163
- BUGTRAQ - 20070813 FLEA-2007-0043-1 openssl
- BUGTRAQ - 20080108 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages
- BUGTRAQ - 20080123 UPDATED VMSA-2008-0001.1 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages
- CERT-VN - VU#724968
- CONFIRM - http://cvs.openssl.org/chngview?cn=16275
- CONFIRM - http://openssl.org/news/patch-CVE-2007-3108.txt
- CONFIRM - http://support.attachmate.com/techdocs/2374.html
- CONFIRM - http://support.avaya.com/elmodocs2/security/ASA-2007-485.htm
- CONFIRM - http://www.bluecoat.com/support/securityadvisories/advisory_openssl_rsa_key_reconstruction_vulnerability
- CONFIRM - http://www.kb.cert.org/vuls/id/RGII-74KLP3
- CONFIRM - http://www.vmware.com/security/advisories/VMSA-2008-0001.html
- CONFIRM - http://www.vmware.com/security/advisories/VMSA-2008-0013.html
- CONFIRM - https://issues.rpath.com/browse/RPL-1613
- CONFIRM - https://issues.rpath.com/browse/RPL-1633
- DEBIAN - DSA-1571
- GENTOO - GLSA-200710-06
- GENTOO - GLSA-200805-07
- MANDRIVA - MDKSA-2007:193
- MLIST - [Security-announce] 20080107 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages
- REDHAT - RHSA-2007:0813
- REDHAT - RHSA-2007:0964
- REDHAT - RHSA-2007:1003
- SECUNIA - 26411
- SECUNIA - 26893
- SECUNIA - 27021
- SECUNIA - 27078
- SECUNIA - 27097
- SECUNIA - 27205
- SECUNIA - 27330
- SECUNIA - 27770
- SECUNIA - 27870
- SECUNIA - 28368
- SECUNIA - 30161
- SECUNIA - 30220
- SECUNIA - 31467
- SECUNIA - 31489
- SECUNIA - 31531
- UBUNTU - USN-522-1
- VUPEN - ADV-2007-2759
- VUPEN - ADV-2007-4010
- VUPEN - ADV-2008-0064
- VUPEN - ADV-2008-2361
- VUPEN - ADV-2008-2362
- VUPEN - ADV-2008-2396

Vulnerable Software & Versions:

- cpe:/a:openssl:openssl:0.9.8e and all previous versions

CVE-2006-7250

Severity: Medium
CVSS Score: 5.0

The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message.

- CONFIRM - http://cvs.openssl.org/chngview?cn=22144
- CONFIRM - https://bugzilla.novell.com/show_bug.cgi?id=748738
- CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=798100
- MLIST - [openssl-dev] 20060829 Crash inside SMIME_read_PKCS7 if input is not MIME
- MLIST - [openssl-dev] 20120210 [openssl.org #2711] Fix possible NULL dereference on bad MIME headers
- MLIST - [oss-security] 20120227 CVE request: openssl: null pointer dereference issue
- MLIST - [oss-security] 20120228 Re: CVE request: openssl: null pointer dereference issue
- REDHAT - RHSA-2009:1335
- SECUNIA - 36533
- SECUNIA - 48516
- SECUNIA - 48899
- UBUNTU - USN-1424-1

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:0.9.8t and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.1c
- cpe:/a:openssl:openssl:0.9.2b
- cpe:/a:openssl:openssl:0.9.3
- cpe:/a:openssl:openssl:0.9.3a
- cpe:/a:openssl:openssl:0.9.4
- cpe:/a:openssl:openssl:0.9.5
- cpe:/a:openssl:openssl:0.9.5:beta1
- cpe:/a:openssl:openssl:0.9.5:beta2
- cpe:/a:openssl:openssl:0.9.5a
- cpe:/a:openssl:openssl:0.9.5a:beta1
- cpe:/a:openssl:openssl:0.9.5a:beta2
- cpe:/a:openssl:openssl:0.9.6
- cpe:/a:openssl:openssl:0.9.6:beta1
- cpe:/a:openssl:openssl:0.9.6:beta2
- cpe:/a:openssl:openssl:0.9.6:beta3
- cpe:/a:openssl:openssl:0.9.6a
- cpe:/a:openssl:openssl:0.9.6a:beta1
- cpe:/a:openssl:openssl:0.9.6a:beta2
- cpe:/a:openssl:openssl:0.9.6a:beta3
- cpe:/a:openssl:openssl:0.9.6b
- cpe:/a:openssl:openssl:0.9.6c
- cpe:/a:openssl:openssl:0.9.6d
- cpe:/a:openssl:openssl:0.9.6e
- cpe:/a:openssl:openssl:0.9.6f
- cpe:/a:openssl:openssl:0.9.6g
- cpe:/a:openssl:openssl:0.9.6h
- cpe:/a:openssl:openssl:0.9.6i
- cpe:/a:openssl:openssl:0.9.6j
- cpe:/a:openssl:openssl:0.9.6k
- cpe:/a:openssl:openssl:0.9.6l
- cpe:/a:openssl:openssl:0.9.6m
- cpe:/a:openssl:openssl:0.9.7
- cpe:/a:openssl:openssl:0.9.7:beta1
- cpe:/a:openssl:openssl:0.9.7:beta2
- cpe:/a:openssl:openssl:0.9.7:beta3
- cpe:/a:openssl:openssl:0.9.7:beta4
- cpe:/a:openssl:openssl:0.9.7:beta5
- cpe:/a:openssl:openssl:0.9.7:beta6
- cpe:/a:openssl:openssl:0.9.7a
- cpe:/a:openssl:openssl:0.9.7b
- cpe:/a:openssl:openssl:0.9.7c
- cpe:/a:openssl:openssl:0.9.7d
- cpe:/a:openssl:openssl:0.9.7e
- cpe:/a:openssl:openssl:0.9.7f
- cpe:/a:openssl:openssl:0.9.7g
- cpe:/a:openssl:openssl:0.9.7h
- cpe:/a:openssl:openssl:0.9.7i
- cpe:/a:openssl:openssl:0.9.7j
- cpe:/a:openssl:openssl:0.9.7k
- cpe:/a:openssl:openssl:0.9.7l
- cpe:/a:openssl:openssl:0.9.7m
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c
- cpe:/a:openssl:openssl:0.9.8d
- cpe:/a:openssl:openssl:0.9.8e
- cpe:/a:openssl:openssl:0.9.8f
- cpe:/a:openssl:openssl:0.9.8g
- cpe:/a:openssl:openssl:0.9.8h
- cpe:/a:openssl:openssl:0.9.8i
- cpe:/a:openssl:openssl:0.9.8j
- cpe:/a:openssl:openssl:0.9.8k
- cpe:/a:openssl:openssl:0.9.8l
- cpe:/a:openssl:openssl:0.9.8m
- cpe:/a:openssl:openssl:0.9.8m:beta1
- cpe:/a:openssl:openssl:0.9.8n
- cpe:/a:openssl:openssl:0.9.8o
- cpe:/a:openssl:openssl:0.9.8p
- cpe:/a:openssl:openssl:0.9.8q
- cpe:/a:openssl:openssl:0.9.8r
- cpe:/a:openssl:openssl:0.9.8s
- cpe:/a:openssl:openssl:0.9.8t and all previous versions

CVE-2006-4343

Severity: Medium
CVSS Score: 4.3

The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference.

- APPLE - APPLE-SA-2006-11-28
- BID - 20246
- BID - 22083
- BID - 28276
- BUGTRAQ - 20060928 rPSA-2006-0175-1 openssl openssl-scripts
- BUGTRAQ - 20060929 rPSA-2006-0175-2 openssl openssl-scripts
- BUGTRAQ - 20070110 VMware ESX server security updates
- BUGTRAQ - 20080318 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues
- CERT - TA06-333A
- CERT-VN - VU#386964
- CISCO - 20061108 Multiple Vulnerabilities in OpenSSL Library
- CISCO - 20061108 Multiple Vulnerabilities in OpenSSL library
- CONFIRM - http://docs.info.apple.com/article.html?artnum=304829
- CONFIRM - http://issues.rpath.com/browse/RPL-613
- CONFIRM - http://kolab.org/security/kolab-vendor-notice-11.txt
- CONFIRM - http://openvpn.net/changelog.html
- CONFIRM - http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227
- CONFIRM - http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm
- CONFIRM - http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm
- CONFIRM - http://www.ingate.com/relnote-452.php
- CONFIRM - http://www.openssl.org/news/secadv_20060928.txt
- CONFIRM - http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html
- CONFIRM - http://www.serv-u.com/releasenotes/
- CONFIRM - http://www.vmware.com/security/advisories/VMSA-2008-0005.html
- CONFIRM - http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html
- CONFIRM - http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html
- CONFIRM - http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html
- CONFIRM - http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html
- CONFIRM - http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html
- CONFIRM - http://www.vmware.com/support/player/doc/releasenotes_player.html
- CONFIRM - http://www.vmware.com/support/player2/doc/releasenotes_player2.html
- CONFIRM - http://www.vmware.com/support/server/doc/releasenotes_server.html
- CONFIRM - http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html
- CONFIRM - http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html
- CONFIRM - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html
- CONFIRM - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html
- CONFIRM - http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf
- DEBIAN - DSA-1185
- DEBIAN - DSA-1195
- FREEBSD - FreeBSD-SA-06:23.openssl
- FULLDISC - 20060928 [SECURITY] OpenSSL 0.9.8d and 0.9.7l released
- GENTOO - GLSA-200610-11
- GENTOO - GLSA-200612-11
- HP - HPSBMA02250
- HP - HPSBOV02683
- HP - HPSBTU02207
- HP - HPSBUX02174
- HP - HPSBUX02186
- HP - SSRT061213
- HP - SSRT061239
- HP - SSRT061275
- HP - SSRT071299
- HP - SSRT071304
- HP - SSRT090208
- MANDRIVA - MDKSA-2006:172
- MANDRIVA - MDKSA-2006:177
- MANDRIVA - MDKSA-2006:178
- MILW0RM - 4773
- MLIST - [security-announce] 20080317 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues
- NETBSD - NetBSD-SA2008-007
- OPENBSD - [3.9] 20061007 013: SECURITY FIX: October 7, 2006
- OPENPKG - OpenPKG-SA-2006.021
- OSVDB - 29263
- REDHAT - RHSA-2006:0695
- REDHAT - RHSA-2008:0629
- SECTRACK - 1016943
- SECTRACK - 1017522
- SECUNIA - 22094
- SECUNIA - 22116
- SECUNIA - 22130
- SECUNIA - 22165
- SECUNIA - 22166
- SECUNIA - 22172
- SECUNIA - 22186
- SECUNIA - 22193
- SECUNIA - 22207
- SECUNIA - 22212
- SECUNIA - 22216
- SECUNIA - 22220
- SECUNIA - 22240
- SECUNIA - 22259
- SECUNIA - 22260
- SECUNIA - 22284
- SECUNIA - 22298
- SECUNIA - 22330
- SECUNIA - 22385
- SECUNIA - 22460
- SECUNIA - 22487
- SECUNIA - 22500
- SECUNIA - 22544
- SECUNIA - 22626
- SECUNIA - 22758
- SECUNIA - 22772
- SECUNIA - 22791
- SECUNIA - 22799
- SECUNIA - 23038
- SECUNIA - 23155
- SECUNIA - 23280
- SECUNIA - 23309
- SECUNIA - 23340
- SECUNIA - 23680
- SECUNIA - 23794
- SECUNIA - 23915
- SECUNIA - 24950
- SECUNIA - 25420
- SECUNIA - 25889
- SECUNIA - 26329
- SECUNIA - 30124
- SECUNIA - 31492
- SGI - 20061001-01-P
- SLACKWARE - SSA:2006-272-01
- SUNALERT - 102668
- SUNALERT - 102711
- SUNALERT - 201531
- SUSE - SUSE-SA:2006:058
- SUSE - SUSE-SR:2006:024
- UBUNTU - USN-353-1
- VUPEN - ADV-2006-3820
- VUPEN - ADV-2006-3860
- VUPEN - ADV-2006-3869
- VUPEN - ADV-2006-3902
- VUPEN - ADV-2006-3936
- VUPEN - ADV-2006-4036
- VUPEN - ADV-2006-4264
- VUPEN - ADV-2006-4401
- VUPEN - ADV-2006-4417
- VUPEN - ADV-2006-4443
- VUPEN - ADV-2006-4750
- VUPEN - ADV-2007-0343
- VUPEN - ADV-2007-1401
- VUPEN - ADV-2007-1973
- VUPEN - ADV-2007-2783
- VUPEN - ADV-2008-0905
- XF - openssl-sslv2-client-dos(29240)

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:0.9.8c and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.7
- cpe:/a:openssl:openssl:0.9.7a
- cpe:/a:openssl:openssl:0.9.7b
- cpe:/a:openssl:openssl:0.9.7c
- cpe:/a:openssl:openssl:0.9.7d
- cpe:/a:openssl:openssl:0.9.7e
- cpe:/a:openssl:openssl:0.9.7f
- cpe:/a:openssl:openssl:0.9.7g
- cpe:/a:openssl:openssl:0.9.7h
- cpe:/a:openssl:openssl:0.9.7i
- cpe:/a:openssl:openssl:0.9.7j
- cpe:/a:openssl:openssl:0.9.7k and all previous versions
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b
- cpe:/a:openssl:openssl:0.9.8c and all previous versions

CVE-2006-4339

Severity: Medium
CVSS Score: 4.3
CWE: CWE-310 Cryptographic Issues

OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents OpenSSL from correctly verifying X.509 and other certificates that use PKCS #1.

- APPLE - APPLE-SA-2006-11-28
- APPLE - APPLE-SA-2007-12-14
- BEA - BEA07-169.00
- BID - 19849
- BID - 22083
- BID - 28276
- BUGTRAQ - 20060905 rPSA-2006-0163-1 openssl openssl-scripts
- BUGTRAQ - 20060912 ERRATA: [ GLSA 200609-05 ] OpenSSL, AMD64 x86 emulation base libraries: RSA signature forgery
- BUGTRAQ - 20070110 VMware ESX server security updates
- BUGTRAQ - 20080318 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues
- CERT - TA06-333A
- CERT-VN - VU#845620
- CISCO - 20061108 Multiple Vulnerabilities in OpenSSL Library
- CISCO - 20061108 Multiple Vulnerabilities in OpenSSL library
- CONFIRM - http://docs.info.apple.com/article.html?artnum=304829
- CONFIRM - http://openvpn.net/changelog.html
- CONFIRM - http://support.attachmate.com/techdocs/2127.html
- CONFIRM - http://support.attachmate.com/techdocs/2128.html
- CONFIRM - http://support.attachmate.com/techdocs/2137.html
- CONFIRM - http://support.avaya.com/elmodocs2/security/ASA-2006-188.htm
- CONFIRM - http://www.arkoon.fr/upload/alertes/40AK-2006-04-FR-1.1_SSL360_OPENSSL_RSA.pdf
- CONFIRM - http://www.bluecoat.com/support/knowledge/openSSL_RSA_Signature_forgery.html
- CONFIRM - http://www.openoffice.org/security/cves/CVE-2006-4339.html
- CONFIRM - http://www.openssl.org/news/secadv_20060905.txt
- CONFIRM - http://www.opera.com/support/search/supsearch.dml?index=845
- CONFIRM - http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html
- CONFIRM - http://www.serv-u.com/releasenotes/
- CONFIRM - http://www.sybase.com/detail?id=1047991
- CONFIRM - http://www.vmware.com/security/advisories/VMSA-2008-0005.html
- CONFIRM - http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html
- CONFIRM - http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html
- CONFIRM - http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html
- CONFIRM - http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html
- CONFIRM - http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html
- CONFIRM - http://www.vmware.com/support/player/doc/releasenotes_player.html
- CONFIRM - http://www.vmware.com/support/player2/doc/releasenotes_player2.html
- CONFIRM - http://www.vmware.com/support/server/doc/releasenotes_server.html
- CONFIRM - http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html
- CONFIRM - http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html
- CONFIRM - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html
- CONFIRM - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html
- CONFIRM - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117
- CONFIRM - https://issues.rpath.com/browse/RPL-1633
- CONFIRM - https://issues.rpath.com/browse/RPL-616
- CONFIRM - https://secure-support.novell.com/KanisaPlatform/Publishing/41/3143224_f.SAL_Public.html
- DEBIAN - DSA-1173
- DEBIAN - DSA-1174
- FREEBSD - FreeBSD-SA-06:19
- GENTOO - GLSA-200609-05
- GENTOO - GLSA-200609-18
- GENTOO - GLSA-200610-06
- HP - HPSBMA02250
- HP - HPSBOV02683
- HP - HPSBTU02207
- HP - HPSBUX02153
- HP - HPSBUX02165
- HP - HPSBUX02186
- HP - HPSBUX02219
- HP - SSRT061181
- HP - SSRT061213
- HP - SSRT061239
- HP - SSRT061266
- HP - SSRT061273
- HP - SSRT061275
- HP - SSRT071299
- HP - SSRT071304
- HP - SSRT090208
- JVN - JVN#51615542
- JVNDB - JVNDB-2012-000079
- MANDRIVA - MDKSA-2006:161
- MANDRIVA - MDKSA-2006:177
- MANDRIVA - MDKSA-2006:178
- MANDRIVA - MDKSA-2006:207
- MISC - http://docs.info.apple.com/article.html?artnum=307177
- MISC - http://www.matasano.com/log/469/many-rsa-signatures-may-be-forgeable-in-openssl-and-elsewhere/
- MLIST - [bind-announce] 20061103 Internet Systems Consortium Security Advisory. [revised]
- MLIST - [ietf-openpgp] 20060827 Bleichenbacher's RSA signature forgery based on implementation error
- MLIST - [security-announce] 20080317 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues
- OPENBSD - [3.9] 20060908 011: SECURITY FIX: September 8, 2006
- OPENPKG - OpenPKG-SA-2006.018
- OPENPKG - OpenPKG-SA-2006.029
- OSVDB - 28549
- REDHAT - RHSA-2006:0661
- REDHAT - RHSA-2007:0062
- REDHAT - RHSA-2007:0072
- REDHAT - RHSA-2007:0073
- REDHAT - RHSA-2008:0629
- SECTRACK - 1016791
- SECTRACK - 1017522
- SECUNIA - 21709
- SECUNIA - 21767
- SECUNIA - 21776
- SECUNIA - 21778
- SECUNIA - 21785
- SECUNIA - 21791
- SECUNIA - 21812
- SECUNIA - 21823
- SECUNIA - 21846
- SECUNIA - 21852
- SECUNIA - 21870
- SECUNIA - 21873
- SECUNIA - 21906
- SECUNIA - 21927
- SECUNIA - 21930
- SECUNIA - 21982
- SECUNIA - 22036
- SECUNIA - 22044
- SECUNIA - 22066
- SECUNIA - 22161
- SECUNIA - 22226
- SECUNIA - 22232
- SECUNIA - 22259
- SECUNIA - 22260
- SECUNIA - 22284
- SECUNIA - 22325
- SECUNIA - 22446
- SECUNIA - 22509
- SECUNIA - 22513
- SECUNIA - 22523
- SECUNIA - 22545
- SECUNIA - 22585
- SECUNIA - 22671
- SECUNIA - 22689
- SECUNIA - 22711
- SECUNIA - 22733
- SECUNIA - 22758
- SECUNIA - 22799
- SECUNIA - 22932
- SECUNIA - 22934
- SECUNIA - 22936
- SECUNIA - 22937
- SECUNIA - 22938
- SECUNIA - 22939
- SECUNIA - 22940
- SECUNIA - 22948
- SECUNIA - 22949
- SECUNIA - 23155
- SECUNIA - 23455
- SECUNIA - 23680
- SECUNIA - 23794
- SECUNIA - 23841
- SECUNIA - 23915
- SECUNIA - 24099
- SECUNIA - 24930
- SECUNIA - 24950
- SECUNIA - 25284
- SECUNIA - 25399
- SECUNIA - 25649
- SECUNIA - 26329
- SECUNIA - 26893
- SECUNIA - 28115
- SECUNIA - 31492
- SECUNIA - 38567
- SECUNIA - 38568
- SGI - 20060901-01-P
- SLACKWARE - SSA:2006-257-02
- SLACKWARE - SSA:2006-310-01
- SUNALERT - 1000148
- SUNALERT - 102648
- SUNALERT - 102656
- SUNALERT - 102657
- SUNALERT - 102686
- SUNALERT - 102696
- SUNALERT - 102722
- SUNALERT - 102744
- SUNALERT - 102759
- SUNALERT - 200708
- SUNALERT - 201247
- SUNALERT - 201534
- SUSE - SUSE-SA:2006:055
- SUSE - SUSE-SA:2006:061
- SUSE - SUSE-SA:2007:010
- SUSE - SUSE-SR:2006:026
- UBUNTU - USN-339-1
- VUPEN - ADV-2006-3453
- VUPEN - ADV-2006-3566
- VUPEN - ADV-2006-3730
- VUPEN - ADV-2006-3748
- VUPEN - ADV-2006-3793
- VUPEN - ADV-2006-3899
- VUPEN - ADV-2006-3936
- VUPEN - ADV-2006-4205
- VUPEN - ADV-2006-4206
- VUPEN - ADV-2006-4207
- VUPEN - ADV-2006-4216
- VUPEN - ADV-2006-4327
- VUPEN - ADV-2006-4329
- VUPEN - ADV-2006-4366
- VUPEN - ADV-2006-4417
- VUPEN - ADV-2006-4586
- VUPEN - ADV-2006-4744
- VUPEN - ADV-2006-4750
- VUPEN - ADV-2006-5146
- VUPEN - ADV-2007-0254
- VUPEN - ADV-2007-0343
- VUPEN - ADV-2007-1401
- VUPEN - ADV-2007-1815
- VUPEN - ADV-2007-1945
- VUPEN - ADV-2007-2163
- VUPEN - ADV-2007-2315
- VUPEN - ADV-2007-2783
- VUPEN - ADV-2007-4224
- VUPEN - ADV-2008-0905
- VUPEN - ADV-2010-0366
- XF - openssl-rsa-security-bypass(28755)

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl:0.9.7 and all previous versions
- ...
- cpe:/a:openssl:openssl:0.9.1c
- cpe:/a:openssl:openssl:0.9.2b
- cpe:/a:openssl:openssl:0.9.3
- cpe:/a:openssl:openssl:0.9.3a
- cpe:/a:openssl:openssl:0.9.4
- cpe:/a:openssl:openssl:0.9.5
- cpe:/a:openssl:openssl:0.9.5:beta1
- cpe:/a:openssl:openssl:0.9.5:beta2
- cpe:/a:openssl:openssl:0.9.5a
- cpe:/a:openssl:openssl:0.9.5a:beta1
- cpe:/a:openssl:openssl:0.9.5a:beta2
- cpe:/a:openssl:openssl:0.9.6
- cpe:/a:openssl:openssl:0.9.6:beta1
- cpe:/a:openssl:openssl:0.9.6:beta2
- cpe:/a:openssl:openssl:0.9.6:beta3
- cpe:/a:openssl:openssl:0.9.6a
- cpe:/a:openssl:openssl:0.9.6a:beta1
- cpe:/a:openssl:openssl:0.9.6a:beta2
- cpe:/a:openssl:openssl:0.9.6a:beta3
- cpe:/a:openssl:openssl:0.9.6b
- cpe:/a:openssl:openssl:0.9.6c
- cpe:/a:openssl:openssl:0.9.6d
- cpe:/a:openssl:openssl:0.9.6e
- cpe:/a:openssl:openssl:0.9.6f
- cpe:/a:openssl:openssl:0.9.6g
- cpe:/a:openssl:openssl:0.9.6h
- cpe:/a:openssl:openssl:0.9.6i
- cpe:/a:openssl:openssl:0.9.6j
- cpe:/a:openssl:openssl:0.9.6k
- cpe:/a:openssl:openssl:0.9.6l
- cpe:/a:openssl:openssl:0.9.6m
- cpe:/a:openssl:openssl:0.9.7 and all previous versions
- cpe:/a:openssl:openssl:0.9.7a
- cpe:/a:openssl:openssl:0.9.7b
- cpe:/a:openssl:openssl:0.9.7c
- cpe:/a:openssl:openssl:0.9.7d
- cpe:/a:openssl:openssl:0.9.7e
- cpe:/a:openssl:openssl:0.9.7f
- cpe:/a:openssl:openssl:0.9.7g
- cpe:/a:openssl:openssl:0.9.7h
- cpe:/a:openssl:openssl:0.9.7i
- cpe:/a:openssl:openssl:0.9.7j
- cpe:/a:openssl:openssl:0.9.8
- cpe:/a:openssl:openssl:0.9.8a
- cpe:/a:openssl:openssl:0.9.8b

CVE-1999-0428

Severity: High
CVSS Score: 7.5

OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls.

- OSVDB - 3936

Vulnerable Software & Versions: (show all)

- cpe:/a:openssl:openssl
- ...
- cpe:/a:openssl:openssl
- cpe:/a:ssleay:ssleay

### jruby-complete-1.7.4.jar\jrubyw.exe

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jruby-complete-1.7.4.jar\META-INF\jruby.home\bin\jrubyw.exe
MD5: 7FAC7402FA849BEBB8ED0823F84C2177
SHA1: B752812D5570AC91FDFD85C548348D1AE1F6E1D4

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | jrubyw

#### Identifiers

- None

### jruby-complete-1.7.4.jar\kryptcore.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jruby-complete-1.7.4.jar\META-INF\jruby.home\lib\ruby\shared\kryptcore.jar
MD5: D824332166EEE8CC7D51E37CE21007BE
SHA1: 9CB457A24ABCF6451FB23F2F70603E0CED3E5592

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | kryptcore
jar | package | asn1
jar | package | ext
jar | package | jruby
jar | package | krypt

#### Identifiers

- None

### jruby-complete-1.7.4.jar\kryptproviderjdk.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jruby-complete-1.7.4.jar\META-INF\jruby.home\lib\ruby\shared\kryptproviderjdk.jar
MD5: 282A7D8C57B3ECF27278C9489F4BE6D4
SHA1: 32B15C5BC9238035FC6E4F9CDEB1DA48E7268CCE

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | kryptproviderjdk
jar | package | ext
jar | package | jruby
jar | package | krypt
jar | package | provider

#### Identifiers

- None

### jruby-complete-1.7.4.jar\META-INF/maven/com.jcraft/jzlib/pom.xml

Description: JZlib is a re-implementation of zlib in pure Java

License:

    Revised BSD: http://www.jcraft.com/jzlib/LICENSE.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jruby-complete-1.7.4.jar\META-INF/maven/com.jcraft/jzlib/pom.xml
MD5: 9865CB6865EA83BBBD00D178A7FFF2F8
SHA1: A567561C8F92FFFECA9169F6075146BC5F8BE104

#### Evidence

Source | Name | Value
--- | --- | ---
pom | artifactid | jzlib
pom | description | JZlib is a re-implementation of zlib in pure Java
pom | groupid | jcraft
pom | name | JZlib
pom | organization name | JCraft,Inc.
pom | parent.artifactid | oss-parent
pom | parent.groupid | org.sonatype.oss
pom | parent.version | 6
pom | version | 1.1.2

#### Identifiers

- cpe: cpe:/a:jcraft:jzlib:1.1.2 Confidence:LOW

### jruby-complete-1.7.4.jar\parser.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jruby-complete-1.7.4.jar\META-INF\jruby.home\lib\ruby\1.9\json\ext\parser.jar
MD5: 60062E853BC5ED39D157B3754487AD78
SHA1: 9E20A79BADF407B5A3AA18B58FECCDFA5C0CC2AF

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | parser
jar | package | ext
jar | package | json

#### Identifiers

- None

### json-simple-1.1.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\json-simple-1.1.jar
MD5: EB342044FC56BE9BA49FBFC9789F1BB5
SHA1: 5E303A03D04E6788DDDFA3655272580AE0FC13BB

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.1
file | name | json-simple-1.1
jar | package | json
jar | package | simple
nexus | artifactid | json-simple
nexus | groupid | com.googlecode.json-simple
nexus | version | 1.1

#### Identifiers

- maven: com.googlecode.json-simple:json-simple:1.1 Confidence:HIGHEST

### jython-standalone-2.7-b1.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jython-standalone-2.7-b1.jar
MD5: F67E0B6221E4BCEACF23B9F587877251
SHA1: 0BABA955380AFD3EE4617E286DEB4DDD7264C51C

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 2.7.b1
file | name | jython-standalone-2.7-b1
jar | package | python

#### Identifiers

- None

### jython-standalone-2.7-b1.jar\wininst-6.0.exe

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jython-standalone-2.7-b1.jar\Lib\distutils\command\wininst-6.0.exe
MD5: 7B112B1FB864C90EC5B65EAB21CB40B8
SHA1: E7B73361F722FC7CBB93EF98A8D26E34F4D49767

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 6.0
file | name | wininst-6.0

#### Identifiers

- None

### jython-standalone-2.7-b1.jar\wininst-7.1.exe

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jython-standalone-2.7-b1.jar\Lib\distutils\command\wininst-7.1.exe
MD5: AE6CE17005C63B7E9BF15A2A21ABB315
SHA1: 9B6BDFB9D648FA422F54EC07B8C8EA70389C09EB

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 7.1
file | name | wininst-7.1

#### Identifiers

- None

### jython-standalone-2.7-b1.jar\wininst-8.0.exe

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jython-standalone-2.7-b1.jar\Lib\distutils\command\wininst-8.0.exe
MD5: ED0FDE686788CAEC4F2CB1EC9C31680C
SHA1: 81AE63B87EAA9FA5637835D2122C50953AE19D34

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 8.0
file | name | wininst-8.0

#### Identifiers

- None

### jython-standalone-2.7-b1.jar\wininst-9.0-amd64.exe

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jython-standalone-2.7-b1.jar\Lib\distutils\command\wininst-9.0-amd64.exe
MD5: 5F1707646575D375C50155832477A437
SHA1: 9BCBA378189C2F1CB00F82C0539E0E9B8FF0B6C1

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 9.0
file | name | wininst-9.0-amd64

#### Identifiers

- None

### jython-standalone-2.7-b1.jar\wininst-9.0.exe

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\jython-standalone-2.7-b1.jar\Lib\distutils\command\wininst-9.0.exe
MD5: 8AA98031128EF0C81D34207E3C60D003
SHA1: 182164292E382455F00349625DD5FD1E41DCC0C8

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 9.0
file | name | wininst-9.0

#### Identifiers

- None

### log4net.2.0.3.nuspec

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\log4net.2.0.3.nuspec
MD5: D95207BFD2539C046BA7271B695B08F7
SHA1: B82102A0767F56525926698FBBA4B7C47E96D4AB

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 2.0.3
file | name | log4net.2.0.3
nuspec | authors | Apache Software Foundation
nuspec | id | log4net
nuspec | owners | Apache Software Foundation
nuspec | title | log4net [1.2.13]
nuspec | version | 2.0.3

#### Identifiers

- cpe: cpe:/a:apache:log4net:2.0.3 Confidence:LOW

### log4net.dll

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\log4net.dll
MD5: E873F47FF9ED73A7ED7054AAF4E7601A
SHA1: 44D7EE86C72BE615DA883A24F0B54FD0725AD298

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 4
file | name | log4net
grokassembly | product | log4net
grokassembly | vendor | The Apache Software Foundation
grokassembly | version | 1.2.13.0

#### Identifiers

- cpe: cpe:/a:apache:log4net:1.2.13.0 Confidence:LOW

### mail-1.4.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\mail-1.4.jar
MD5: 2E64A3805D543BDB86E6E5EECA5529F8
SHA1: 1AA1579AE5ECD41920C4F355B0A9EF40B68315DD

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.4
file | name | mail-1.4
jar | package | javax
jar | package | mail
jar | package name | javax
jar | package name | mail
jar | package name | sun
jar (hint) | package name | oracle
Manifest | extension-name | javax.mail
Manifest | Implementation-Title | JavaMail(TM) API Reference Implementation
Manifest | Implementation-Vendor | Sun Microsystems, Inc.
Manifest | Implementation-Vendor-Id | com.sun
Manifest | Implementation-Version | 1.4
Manifest | specification-title | JavaMail(TM) API Design Specification
Manifest | specification-vendor | Sun Microsystems, Inc.
Manifest | specification-version | 1.4
nexus | artifactid | mail
nexus | groupid | javax.mail
nexus | version | 1.4

#### Identifiers

- cpe: cpe:/a:sun:javamail Confidence:HIGHEST
- maven: javax.mail:mail:1.4 Confidence:HIGHEST

#### Published Vulnerabilities

CVE-2007-6059

Severity: Medium
CVSS Score: 5.0
CWE: CWE-399 Resource Management Errors

** DISPUTED ** Javamail does not properly handle a series of invalid login attempts in which the same e-mail address is entered as username and password, and the domain portion of this address yields a Java UnknownHostException error, which allows remote attackers to cause a denial of service (connection pool exhaustion) via a large number of requests, resulting in a SQLNestedException. NOTE: Sun disputes this issue, stating "The report makes references to source code and files that do not exist in the mentioned products."

- BUGTRAQ - 20071116 Javamail login username and password same email problem
- OSVDB - 45299

Vulnerable Software & Versions:

- cpe:/a:sun:javamail

### maven-scm-api-1.8.1.jar

Description: The SCM API provides mechanisms to manage all SCM tools.

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\maven-scm-api-1.8.1.jar
MD5: C409FC1A6C9BAF928CC37B2FFB852C83
SHA1: D72BCDC54A873E8BFBC53FDE6200E53911C3D9FE

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.8.1
file | name | maven-scm-api-1.8.1
jar | package name | apache
jar | package name | maven
jar | package name | scm
Manifest | Implementation-Title | Maven SCM API
Manifest | Implementation-Vendor | The Apache Software Foundation
Manifest | Implementation-Vendor-Id | org.apache.maven.scm
Manifest | Implementation-Version | 1.8.1
Manifest | specification-title | Maven SCM API
Manifest | specification-vendor | The Apache Software Foundation
Manifest | specification-version | 1.8.1
pom | artifactid | maven-scm-api
pom | description | The SCM API provides mechanisms to manage all SCM tools.
pom | name | Maven SCM API

#### Identifiers

- None

### maven-scm-provider-cvs-commons-1.8.1.jar

Description: Common library for SCM CVS Provider.

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\maven-scm-provider-cvs-commons-1.8.1.jar
MD5: 7D35F493A22226B821B5D5363E85765C
SHA1: 97411239D474ECAFCC2AB89FACAF2593EB0DE49B

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.8.1
file | name | maven-scm-provider-cvs-commons-1.8.1
jar | package name | apache
jar | package name | maven
jar | package name | provider
jar | package name | scm
Manifest | Implementation-Title | Maven SCM CVS Provider - Common library
Manifest | Implementation-Vendor | The Apache Software Foundation
Manifest | Implementation-Vendor-Id | org.apache.maven.scm
Manifest | Implementation-Version | 1.8.1
Manifest | specification-title | Maven SCM CVS Provider - Common library
Manifest | specification-vendor | The Apache Software Foundation
Manifest | specification-version | 1.8.1
pom | artifactid | maven-scm-provider-cvs-commons
pom | description | Common library for SCM CVS Provider.
pom | name | Maven SCM CVS Provider - Common library

#### Identifiers

- None

### maven-scm-provider-cvsexe-1.8.1.jar

Description: Executable implementation for SCM CVS Provider.

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\maven-scm-provider-cvsexe-1.8.1.jar
MD5: 8900ABE1192B79B35AEDB0F683A8B412
SHA1: 5C7BF6D2C741885D2A6C17CB044FF8E2966F69CA

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.8.1
file | name | maven-scm-provider-cvsexe-1.8.1
jar | package name | apache
jar | package name | maven
jar | package name | provider
jar | package name | scm
Manifest | Implementation-Title | Maven SCM CVS Provider - CVS Executable Impl.
Manifest | Implementation-Vendor | The Apache Software Foundation
Manifest | Implementation-Vendor-Id | org.apache.maven.scm
Manifest | Implementation-Version | 1.8.1
Manifest | specification-title | Maven SCM CVS Provider - CVS Executable Impl.
Manifest | specification-vendor | The Apache Software Foundation
Manifest | specification-version | 1.8.1
pom | artifactid | maven-scm-provider-cvsexe
pom | description | Executable implementation for SCM CVS Provider.
pom | name | Maven SCM CVS Provider - CVS Executable Impl.

#### Identifiers

- None

### neethi-2.0.4.jar

Description: Apache Neethi provides general framework for the programmers to use WS Policy. It is compliant with latest WS Policy specification which was published in March 2006. This framework is specifically written to enable the Apache Web services stack to use WS Policy as a way of expressing it's requirements and capabilities.

License:

    The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\neethi-2.0.4.jar
MD5: 3F0948A3B1316DFC94F9ABCE02DA8901
SHA1: C5BBF05C56EF0D68EEC17A7EB1ED9241052FD763

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 2.0.4
file | name | neethi-2.0.4
jar | package name | all
jar | package name | apache
jar | package name | neethi
jar | package name | policy
jar | package name | service
Manifest | bundle-docurl | http://www.apache.org/
Manifest | Bundle-Name | Neethi
Manifest | bundle-symbolicname | org.apache.neethi
Manifest | Bundle-Vendor | Apache Software Foundation
Manifest | Bundle-Version | 2.0.4
nexus | artifactid | neethi
nexus | groupid | org.apache.neethi
nexus | version | 2.0.4
pom | artifactid | neethi
pom | description | Apache Neethi provides general framework for the programmers to use WS Policy. It is compliant with latest WS Policy specification which was published in March 2006. This framework is specifically written to enable the Apache Web services stack to use WS Policy as a way of expressing it's requirements and capabilities.
pom | groupid | apache.neethi
pom | name | Neethi
pom | organization name | Apache Software Foundation
pom | version | 2.0.4

#### Identifiers

- cpe: cpe:/a:apache:apache_test:2.0.4 Confidence:LOW
- maven: org.apache.neethi:neethi:2.0.4 Confidence:HIGHEST

### ognl-2.6.11.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\ognl-2.6.11.jar
MD5: 1173EC5F8B1F6FB1473F4546D4B83BBA
SHA1: 0C3F31F4A65461C44E6697BF29070E638BEF09D8

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 2.6.11
file | name | ognl-2.6.11
jar | package | ognl
jar | package name | ognl
nexus | artifactid | ognl
nexus | groupid | opensymphony
nexus | version | 2.6.11
pom | artifactid | ognl
pom | groupid | opensymphony
pom | name | OGNL - Object Graph Navigation Library
pom | organization name | OpenSymphony
pom | version | 2.6.11

#### Identifiers

- maven: opensymphony:ognl:2.6.11 Confidence:HIGHEST

### openjpa-2.0.1.jar

Description: Apache OpenJPA implementation of JSR-317 JPA 2.0

License:

    http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\openjpa-2.0.1.jar
MD5: D7BB08188165023EC883E32F4D636888
SHA1: 09B61112D8D8A100B06174074631C8A43E3E0A91

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 2.0.1
file | name | openjpa-2.0.1
jar | package | apache
jar | package | openjpa
jar | package name | apache
jar | package name | openjpa
jar | package name | persistence
Manifest | bundle-docurl | http://openjpa.apache.org/openjpa
Manifest | Bundle-Name | OpenJPA Aggregate Jar
Manifest | bundle-symbolicname | org.apache.openjpa
Manifest | Bundle-Vendor | Apache Software Foundation
Manifest | Bundle-Version | 2.0.1
Manifest | Implementation-Title | OpenJPA Aggregate Jar
Manifest | Implementation-Version | 2.0.1
Manifest | specification-title | JSR-317 Java Persistence
Manifest | specification-vendor | Sun Microsystems, Inc.
Manifest | specification-version | 2.0

#### Identifiers

- cpe: cpe:/a:apache:openjpa:2.0.1 Confidence:HIGHEST

#### Published Vulnerabilities

CVE-2013-1768

Severity: High
CVSS Score: 7.5
CWE: CWE-264 Permissions, Privileges, and Access Controls

The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by creating a serialized object and leveraging improperly secured server programs.

- AIXAPAR - PM86780
- AIXAPAR - PM86786
- AIXAPAR - PM86788
- AIXAPAR - PM86791
- CONFIRM - http://svn.apache.org/viewvc?view=revision&revision=1462076
- CONFIRM - http://svn.apache.org/viewvc?view=revision&revision=1462225
- CONFIRM - http://svn.apache.org/viewvc?view=revision&revision=1462268
- CONFIRM - http://svn.apache.org/viewvc?view=revision&revision=1462318
- CONFIRM - http://svn.apache.org/viewvc?view=revision&revision=1462328
- CONFIRM - http://svn.apache.org/viewvc?view=revision&revision=1462488
- CONFIRM - http://svn.apache.org/viewvc?view=revision&revision=1462512
- CONFIRM - http://svn.apache.org/viewvc?view=revision&revision=1462558
- CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg21644047
- FULLDISC - 20130612 [CVE-2013-1768] Apache OpenJPA security vulnerability
- MISC - http://www-01.ibm.com/support/docview.wss?uid=swg21635999
- REDHAT - RHSA-2013:1862
- XF - openjpa-cve20131768-command-execution(82268)

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:openjpa:2.0.1
- ...
- cpe:/a:apache:openjpa:1.0.0
- cpe:/a:apache:openjpa:1.0.1
- cpe:/a:apache:openjpa:1.0.2
- cpe:/a:apache:openjpa:1.0.3
- cpe:/a:apache:openjpa:1.0.4
- cpe:/a:apache:openjpa:1.1.0
- cpe:/a:apache:openjpa:1.2.0
- cpe:/a:apache:openjpa:1.2.1
- cpe:/a:apache:openjpa:1.2.2
- cpe:/a:apache:openjpa:2.0.0
- cpe:/a:apache:openjpa:2.0.1
- cpe:/a:apache:openjpa:2.1.0
- cpe:/a:apache:openjpa:2.1.1
- cpe:/a:apache:openjpa:2.2.0
- cpe:/a:apache:openjpa:2.2.1

### org.mortbay.jetty.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\org.mortbay.jetty.jar
MD5: 8ABFD9EF03680C5B9B418ABD918CE525
SHA1: 7B11E767B884D5B872310CE390219B59FFD64A1E

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | org.mortbay.jetty
jar | package | mortbay
jar | package name | http
jar | package name | jetty
jar | package name | mortbay
Manifest | implementation-url | http://jetty.mortbay.org
Manifest | Implementation-Vendor | Mort Bay Consulting, Pty. Ltd.
Manifest | Implementation-Version | 4.2.27
Manifest | package-title | org.mortbay.http
Manifest | specification-version | 4.2
nexus | artifactid | org.mortbay.jetty
nexus | groupid | jetty
nexus | version | 4.2.27

#### Identifiers

- cpe: cpe:/a:jetty:jetty:4.2.27 Confidence:LOW
- cpe: cpe:/a:mortbay:jetty:4.2.27 Confidence:HIGH
- cpe: cpe:/a:mortbay_jetty:jetty:4.2 Confidence:LOW
- maven: jetty:org.mortbay.jetty:4.2.27 Confidence:HIGHEST

#### Published Vulnerabilities

CVE-2011-4461

Severity: Medium
CVSS Score: 5.0
CWE: CWE-310 Cryptographic Issues

Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.

- BUGTRAQ - 20111228 n.runs-SA-2011.004 - web programming languages and platforms - DoS through hash table
- CERT-VN - VU#903934
- MISC - http://www.nruns.com/_downloads/advisory28122011.pdf
- MISC - http://www.ocert.org/advisories/ocert-2011-003.html
- SECTRACK - 1026475
- SECUNIA - 47408
- SECUNIA - 48981
- UBUNTU - USN-1429-1
- XF - jetty-hash-dos(72017)

Vulnerable Software & Versions: (show all)

- cpe:/a:mortbay:jetty:4.2.27
- ...
- cpe:/a:morbtay:jetty:6.1.0
- cpe:/a:mortbay:jetty:1.0
- cpe:/a:mortbay:jetty:1.0.1
- cpe:/a:mortbay:jetty:1.1
- cpe:/a:mortbay:jetty:1.1.1
- cpe:/a:mortbay:jetty:1.2.0
- cpe:/a:mortbay:jetty:1.3.0
- cpe:/a:mortbay:jetty:1.3.1
- cpe:/a:mortbay:jetty:1.3.2
- cpe:/a:mortbay:jetty:1.3.3
- cpe:/a:mortbay:jetty:1.3.4
- cpe:/a:mortbay:jetty:1.3.5
- cpe:/a:mortbay:jetty:2.0:alpha1
- cpe:/a:mortbay:jetty:2.0:alpha2
- cpe:/a:mortbay:jetty:2.0:beta1
- cpe:/a:mortbay:jetty:2.0:beta2
- cpe:/a:mortbay:jetty:2.0.0
- cpe:/a:mortbay:jetty:2.0.1
- cpe:/a:mortbay:jetty:2.0.2
- cpe:/a:mortbay:jetty:2.0.3
- cpe:/a:mortbay:jetty:2.0.4
- cpe:/a:mortbay:jetty:2.0.5
- cpe:/a:mortbay:jetty:2.1.0
- cpe:/a:mortbay:jetty:2.1.1
- cpe:/a:mortbay:jetty:2.1.2
- cpe:/a:mortbay:jetty:2.1.3
- cpe:/a:mortbay:jetty:2.1.4
- cpe:/a:mortbay:jetty:2.1.5
- cpe:/a:mortbay:jetty:2.1.6
- cpe:/a:mortbay:jetty:2.1.7
- cpe:/a:mortbay:jetty:2.1.b0
- cpe:/a:mortbay:jetty:2.1.b1
- cpe:/a:mortbay:jetty:2.2:alpha0
- cpe:/a:mortbay:jetty:2.2:alpha1
- cpe:/a:mortbay:jetty:2.2:beta0
- cpe:/a:mortbay:jetty:2.2:beta1
- cpe:/a:mortbay:jetty:2.2:beta2
- cpe:/a:mortbay:jetty:2.2:beta3
- cpe:/a:mortbay:jetty:2.2:beta4
- cpe:/a:mortbay:jetty:2.2.0
- cpe:/a:mortbay:jetty:2.2.1
- cpe:/a:mortbay:jetty:2.2.2
- cpe:/a:mortbay:jetty:2.2.3
- cpe:/a:mortbay:jetty:2.2.4
- cpe:/a:mortbay:jetty:2.2.5
- cpe:/a:mortbay:jetty:2.2.6
- cpe:/a:mortbay:jetty:2.2.7
- cpe:/a:mortbay:jetty:2.2.8
- cpe:/a:mortbay:jetty:2.3.0
- cpe:/a:mortbay:jetty:2.3.0a
- cpe:/a:mortbay:jetty:2.3.1
- cpe:/a:mortbay:jetty:2.3.2
- cpe:/a:mortbay:jetty:2.3.3
- cpe:/a:mortbay:jetty:2.3.4
- cpe:/a:mortbay:jetty:2.3.5
- cpe:/a:mortbay:jetty:2.4.0
- cpe:/a:mortbay:jetty:2.4.1
- cpe:/a:mortbay:jetty:2.4.2
- cpe:/a:mortbay:jetty:2.4.3
- cpe:/a:mortbay:jetty:2.4.4
- cpe:/a:mortbay:jetty:2.4.5
- cpe:/a:mortbay:jetty:2.4.6
- cpe:/a:mortbay:jetty:2.4.7
- cpe:/a:mortbay:jetty:2.4.8
- cpe:/a:mortbay:jetty:2.4.9
- cpe:/a:mortbay:jetty:3.0
- cpe:/a:mortbay:jetty:3.0.0
- cpe:/a:mortbay:jetty:3.0.0:rc1
- cpe:/a:mortbay:jetty:3.0.0:rc2
- cpe:/a:mortbay:jetty:3.0.0:rc3
- cpe:/a:mortbay:jetty:3.0.0:rc4
- cpe:/a:mortbay:jetty:3.0.0:rc5
- cpe:/a:mortbay:jetty:3.0.0:rc6
- cpe:/a:mortbay:jetty:3.0.0:rc7
- cpe:/a:mortbay:jetty:3.0.0:rc8
- cpe:/a:mortbay:jetty:3.0.1
- cpe:/a:mortbay:jetty:3.0.2
- cpe:/a:mortbay:jetty:3.0.3
- cpe:/a:mortbay:jetty:3.0.4
- cpe:/a:mortbay:jetty:3.0.5
- cpe:/a:mortbay:jetty:3.0.6
- cpe:/a:mortbay:jetty:3.0.a0
- cpe:/a:mortbay:jetty:3.0.a1
- cpe:/a:mortbay:jetty:3.0.a2
- cpe:/a:mortbay:jetty:3.0.a3
- cpe:/a:mortbay:jetty:3.0.a4
- cpe:/a:mortbay:jetty:3.0.a5
- cpe:/a:mortbay:jetty:3.0.a6
- cpe:/a:mortbay:jetty:3.0.a7
- cpe:/a:mortbay:jetty:3.0.a8
- cpe:/a:mortbay:jetty:3.0.a9
- cpe:/a:mortbay:jetty:3.0.a90
- cpe:/a:mortbay:jetty:3.0.a91
- cpe:/a:mortbay:jetty:3.0.a92
- cpe:/a:mortbay:jetty:3.0.a93
- cpe:/a:mortbay:jetty:3.0.a94
- cpe:/a:mortbay:jetty:3.0.a95
- cpe:/a:mortbay:jetty:3.0.a96
- cpe:/a:mortbay:jetty:3.0.a97
- cpe:/a:mortbay:jetty:3.0.a98
- cpe:/a:mortbay:jetty:3.0.a99
- cpe:/a:mortbay:jetty:3.0.b01
- cpe:/a:mortbay:jetty:3.0.b02
- cpe:/a:mortbay:jetty:3.0.b03
- cpe:/a:mortbay:jetty:3.0.b04
- cpe:/a:mortbay:jetty:3.0.b05
- cpe:/a:mortbay:jetty:3.1:rc0
- cpe:/a:mortbay:jetty:3.1:rc1
- cpe:/a:mortbay:jetty:3.1:rc2
- cpe:/a:mortbay:jetty:3.1:rc3
- cpe:/a:mortbay:jetty:3.1:rc4
- cpe:/a:mortbay:jetty:3.1:rc5
- cpe:/a:mortbay:jetty:3.1:rc6
- cpe:/a:mortbay:jetty:3.1:rc7
- cpe:/a:mortbay:jetty:3.1:rc8
- cpe:/a:mortbay:jetty:3.1:rc9
- cpe:/a:mortbay:jetty:3.1.0
- cpe:/a:mortbay:jetty:3.1.1
- cpe:/a:mortbay:jetty:3.1.2
- cpe:/a:mortbay:jetty:3.1.3
- cpe:/a:mortbay:jetty:3.1.4
- cpe:/a:mortbay:jetty:3.1.5
- cpe:/a:mortbay:jetty:3.1.6
- cpe:/a:mortbay:jetty:3.1.7
- cpe:/a:mortbay:jetty:3.1.8
- cpe:/a:mortbay:jetty:3.1.9
- cpe:/a:mortbay:jetty:4.0:rc1
- cpe:/a:mortbay:jetty:4.0:rc2
- cpe:/a:mortbay:jetty:4.0:rc3
- cpe:/a:mortbay:jetty:4.0.0
- cpe:/a:mortbay:jetty:4.0.1
- cpe:/a:mortbay:jetty:4.0.1:rc0
- cpe:/a:mortbay:jetty:4.0.1:rc1
- cpe:/a:mortbay:jetty:4.0.1:rc2
- cpe:/a:mortbay:jetty:4.0.2
- cpe:/a:mortbay:jetty:4.0.3
- cpe:/a:mortbay:jetty:4.0.4
- cpe:/a:mortbay:jetty:4.0.5
- cpe:/a:mortbay:jetty:4.0.6
- cpe:/a:mortbay:jetty:4.0.b0
- cpe:/a:mortbay:jetty:4.0.b1
- cpe:/a:mortbay:jetty:4.0.b2
- cpe:/a:mortbay:jetty:4.0.d0
- cpe:/a:mortbay:jetty:4.0.d1
- cpe:/a:mortbay:jetty:4.0.d2
- cpe:/a:mortbay:jetty:4.0.d3
- cpe:/a:mortbay:jetty:4.0.d4
- cpe:/a:mortbay:jetty:4.1.0
- cpe:/a:mortbay:jetty:4.1.0:rc0
- cpe:/a:mortbay:jetty:4.1.0:rc1
- cpe:/a:mortbay:jetty:4.1.0:rc2
- cpe:/a:mortbay:jetty:4.1.0:rc3
- cpe:/a:mortbay:jetty:4.1.0:rc4
- cpe:/a:mortbay:jetty:4.1.0:rc5
- cpe:/a:mortbay:jetty:4.1.0:rc6
- cpe:/a:mortbay:jetty:4.1.1
- cpe:/a:mortbay:jetty:4.1.2
- cpe:/a:mortbay:jetty:4.1.3
- cpe:/a:mortbay:jetty:4.1.4
- cpe:/a:mortbay:jetty:4.1.b0
- cpe:/a:mortbay:jetty:4.1.b1
- cpe:/a:mortbay:jetty:4.1.d0
- cpe:/a:mortbay:jetty:4.1.d1
- cpe:/a:mortbay:jetty:4.1.d2
- cpe:/a:mortbay:jetty:4.2
- cpe:/a:mortbay:jetty:4.2.0
- cpe:/a:mortbay:jetty:4.2.0:beta0
- cpe:/a:mortbay:jetty:4.2.0:rc0
- cpe:/a:mortbay:jetty:4.2.0:rc1
- cpe:/a:mortbay:jetty:4.2.1
- cpe:/a:mortbay:jetty:4.2.2
- cpe:/a:mortbay:jetty:4.2.3
- cpe:/a:mortbay:jetty:4.2.4
- cpe:/a:mortbay:jetty:4.2.4:rc0
- cpe:/a:mortbay:jetty:4.2.5
- cpe:/a:mortbay:jetty:4.2.6
- cpe:/a:mortbay:jetty:4.2.7
- cpe:/a:mortbay:jetty:4.2.9
- cpe:/a:mortbay:jetty:4.2.9:rc1
- cpe:/a:mortbay:jetty:4.2.9:rc2
- cpe:/a:mortbay:jetty:4.2.10
- cpe:/a:mortbay:jetty:4.2.10:pre0
- cpe:/a:mortbay:jetty:4.2.10:pre1
- cpe:/a:mortbay:jetty:4.2.10:pre2
- cpe:/a:mortbay:jetty:4.2.11
- cpe:/a:mortbay:jetty:4.2.12
- cpe:/a:mortbay:jetty:4.2.14
- cpe:/a:mortbay:jetty:4.2.14:rc0
- cpe:/a:mortbay:jetty:4.2.14:rc1
- cpe:/a:mortbay:jetty:4.2.15
- cpe:/a:mortbay:jetty:4.2.15:rc0
- cpe:/a:mortbay:jetty:4.2.16
- cpe:/a:mortbay:jetty:4.2.17
- cpe:/a:mortbay:jetty:4.2.18
- cpe:/a:mortbay:jetty:4.2.19
- cpe:/a:mortbay:jetty:4.2.20
- cpe:/a:mortbay:jetty:4.2.20:rc0
- cpe:/a:mortbay:jetty:4.2.21
- cpe:/a:mortbay:jetty:4.2.22
- cpe:/a:mortbay:jetty:4.2.23
- cpe:/a:mortbay:jetty:4.2.23:rc0
- cpe:/a:mortbay:jetty:4.2.24
- cpe:/a:mortbay:jetty:4.2.24:rc0
- cpe:/a:mortbay:jetty:4.2.24:rc1
- cpe:/a:mortbay:jetty:4.2.25
- cpe:/a:mortbay:jetty:4.2.26
- cpe:/a:mortbay:jetty:4.2.27
- cpe:/a:mortbay:jetty:4.2.8_01
- cpe:/a:mortbay:jetty:5.0:alpha0
- cpe:/a:mortbay:jetty:5.0:alpha1
- cpe:/a:mortbay:jetty:5.0:alpha2
- cpe:/a:mortbay:jetty:5.0:alpha3
- cpe:/a:mortbay:jetty:5.0:beta0
- cpe:/a:mortbay:jetty:5.0:beta1
- cpe:/a:mortbay:jetty:5.0:beta2
- cpe:/a:mortbay:jetty:5.0:rc1
- cpe:/a:mortbay:jetty:5.0:rc2
- cpe:/a:mortbay:jetty:5.0:rc3
- cpe:/a:mortbay:jetty:5.0:rc4
- cpe:/a:mortbay:jetty:5.0.0
- cpe:/a:mortbay:jetty:5.0.0:rc0
- cpe:/a:mortbay:jetty:5.1
- cpe:/a:mortbay:jetty:5.1:rc0
- cpe:/a:mortbay:jetty:5.1:rc1
- cpe:/a:mortbay:jetty:5.1.0
- cpe:/a:mortbay:jetty:5.1.1
- cpe:/a:mortbay:jetty:5.1.1:rc0
- cpe:/a:mortbay:jetty:5.1.1:rc1
- cpe:/a:mortbay:jetty:5.1.2
- cpe:/a:mortbay:jetty:5.1.2:pre0
- cpe:/a:mortbay:jetty:5.1.3
- cpe:/a:mortbay:jetty:5.1.3:rc0
- cpe:/a:mortbay:jetty:5.1.3:rc1
- cpe:/a:mortbay:jetty:5.1.3:rc2
- cpe:/a:mortbay:jetty:5.1.3:rc3
- cpe:/a:mortbay:jetty:5.1.3:rc4
- cpe:/a:mortbay:jetty:5.1.4
- cpe:/a:mortbay:jetty:5.1.4:rc0
- cpe:/a:mortbay:jetty:5.1.5
- cpe:/a:mortbay:jetty:5.1.5:rc0
- cpe:/a:mortbay:jetty:5.1.5:rc1
- cpe:/a:mortbay:jetty:5.1.5:rc2
- cpe:/a:mortbay:jetty:5.1.6
- cpe:/a:mortbay:jetty:5.1.7
- cpe:/a:mortbay:jetty:5.1.7:rc0
- cpe:/a:mortbay:jetty:5.1.8
- cpe:/a:mortbay:jetty:5.1.9
- cpe:/a:mortbay:jetty:5.1.10
- cpe:/a:mortbay:jetty:5.1.11
- cpe:/a:mortbay:jetty:5.1.11:rc0
- cpe:/a:mortbay:jetty:5.1.12
- cpe:/a:mortbay:jetty:5.1.13
- cpe:/a:mortbay:jetty:5.1.14
- cpe:/a:mortbay:jetty:6.0.0
- cpe:/a:mortbay:jetty:6.0.0:alpha0
- cpe:/a:mortbay:jetty:6.0.0:alpha1
- cpe:/a:mortbay:jetty:6.0.0:alpha2
- cpe:/a:mortbay:jetty:6.0.0:alpha3
- cpe:/a:mortbay:jetty:6.0.0:beta0
- cpe:/a:mortbay:jetty:6.0.0:beta1
- cpe:/a:mortbay:jetty:6.0.0:beta10
- cpe:/a:mortbay:jetty:6.0.0:beta11
- cpe:/a:mortbay:jetty:6.0.0:beta12
- cpe:/a:mortbay:jetty:6.0.0:beta14
- cpe:/a:mortbay:jetty:6.0.0:beta15
- cpe:/a:mortbay:jetty:6.0.0:beta16
- cpe:/a:mortbay:jetty:6.0.0:beta17
- cpe:/a:mortbay:jetty:6.0.0:beta2
- cpe:/a:mortbay:jetty:6.0.0:beta3
- cpe:/a:mortbay:jetty:6.0.0:beta4
- cpe:/a:mortbay:jetty:6.0.0:beta5
- cpe:/a:mortbay:jetty:6.0.0:beta6
- cpe:/a:mortbay:jetty:6.0.0:beta7
- cpe:/a:mortbay:jetty:6.0.0:beta8
- cpe:/a:mortbay:jetty:6.0.0:beta9
- cpe:/a:mortbay:jetty:6.0.0:betax
- cpe:/a:mortbay:jetty:6.0.0:rc0
- cpe:/a:mortbay:jetty:6.0.0:rc1
- cpe:/a:mortbay:jetty:6.0.0:rc2
- cpe:/a:mortbay:jetty:6.0.0:rc3
- cpe:/a:mortbay:jetty:6.0.0:rc4
- cpe:/a:mortbay:jetty:6.0.1
- cpe:/a:mortbay:jetty:6.0.2
- cpe:/a:mortbay:jetty:6.1.0
- cpe:/a:mortbay:jetty:6.1.0:pre0
- cpe:/a:mortbay:jetty:6.1.0:pre1
- cpe:/a:mortbay:jetty:6.1.0:pre2
- cpe:/a:mortbay:jetty:6.1.0:pre3
- cpe:/a:mortbay:jetty:6.1.0:rc0
- cpe:/a:mortbay:jetty:6.1.0:rc1
- cpe:/a:mortbay:jetty:6.1.0:rc2
- cpe:/a:mortbay:jetty:6.1.0:rc3
- cpe:/a:mortbay:jetty:6.1.1
- cpe:/a:mortbay:jetty:6.1.1:rc0
- cpe:/a:mortbay:jetty:6.1.2
- cpe:/a:mortbay:jetty:6.1.2:pre0
- cpe:/a:mortbay:jetty:6.1.2:pre1
- cpe:/a:mortbay:jetty:6.1.2:rc0
- cpe:/a:mortbay:jetty:6.1.2:rc1
- cpe:/a:mortbay:jetty:6.1.2:rc2
- cpe:/a:mortbay:jetty:6.1.2:rc3
- cpe:/a:mortbay:jetty:6.1.2:rc4
- cpe:/a:mortbay:jetty:6.1.2:rc5
- cpe:/a:mortbay:jetty:6.1.3
- cpe:/a:mortbay:jetty:6.1.4
- cpe:/a:mortbay:jetty:6.1.4:rc0
- cpe:/a:mortbay:jetty:6.1.4:rc1
- cpe:/a:mortbay:jetty:6.1.5
- cpe:/a:mortbay:jetty:6.1.5:rc0
- cpe:/a:mortbay:jetty:6.1.6
- cpe:/a:mortbay:jetty:6.1.6:rc0
- cpe:/a:mortbay:jetty:6.1.6:rc1
- cpe:/a:mortbay:jetty:6.1.7
- cpe:/a:mortbay:jetty:6.1.8
- cpe:/a:mortbay:jetty:6.1.9
- cpe:/a:mortbay:jetty:6.1.10
- cpe:/a:mortbay:jetty:6.1.11
- cpe:/a:mortbay:jetty:6.1.12
- cpe:/a:mortbay:jetty:6.1.12:rc1
- cpe:/a:mortbay:jetty:6.1.12:rc2
- cpe:/a:mortbay:jetty:6.1.12:rc3
- cpe:/a:mortbay:jetty:6.1.12:rc4
- cpe:/a:mortbay:jetty:6.1.12:rc5
- cpe:/a:mortbay:jetty:6.1.14
- cpe:/a:mortbay:jetty:6.1.15
- cpe:/a:mortbay:jetty:6.1.15:pre0
- cpe:/a:mortbay:jetty:6.1.15:rc2
- cpe:/a:mortbay:jetty:6.1.15:rc3
- cpe:/a:mortbay:jetty:6.1.15:rc4
- cpe:/a:mortbay:jetty:6.1.15:rc5
- cpe:/a:mortbay:jetty:6.1.16
- cpe:/a:mortbay:jetty:6.1.19
- cpe:/a:mortbay:jetty:6.1.20
- cpe:/a:mortbay:jetty:6.1.21
- cpe:/a:mortbay:jetty:7.0.0
- cpe:/a:mortbay:jetty:7.0.0:m1
- cpe:/a:mortbay:jetty:7.0.0:m2
- cpe:/a:mortbay:jetty:7.0.0:pre0
- cpe:/a:mortbay:jetty:7.0.0:pre1
- cpe:/a:mortbay:jetty:7.0.0:pre3
- cpe:/a:mortbay:jetty:8.1.0:rc2 and all previous versions

CVE-2009-1524

Severity: Medium
CVSS Score: 4.3
CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Cross-site scripting (XSS) vulnerability in Mort Bay Jetty before 6.1.17 allows remote attackers to inject arbitrary web script or HTML via a directory listing request containing a ; (semicolon) character.

- BID - 34800
- CONFIRM - http://jira.codehaus.org/browse/JETTY-980
- CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=499867
- HP - HPSBMA02553
- HP - SSRT100184
- SECUNIA - 34975
- SECUNIA - 40553
- VUPEN - ADV-2010-1792

Vulnerable Software & Versions: (show all)

- cpe:/a:mortbay:jetty:4.2.27
- ...
- cpe:/a:mortbay:jetty:1.0
- cpe:/a:mortbay:jetty:1.0.1
- cpe:/a:mortbay:jetty:1.1
- cpe:/a:mortbay:jetty:1.1.1
- cpe:/a:mortbay:jetty:1.2.0
- cpe:/a:mortbay:jetty:1.3.0
- cpe:/a:mortbay:jetty:1.3.1
- cpe:/a:mortbay:jetty:1.3.2
- cpe:/a:mortbay:jetty:1.3.3
- cpe:/a:mortbay:jetty:1.3.4
- cpe:/a:mortbay:jetty:1.3.5
- cpe:/a:mortbay:jetty:2.0:alpha1
- cpe:/a:mortbay:jetty:2.0:alpha2
- cpe:/a:mortbay:jetty:2.0:beta1
- cpe:/a:mortbay:jetty:2.0:beta2
- cpe:/a:mortbay:jetty:2.0.0
- cpe:/a:mortbay:jetty:2.0.1
- cpe:/a:mortbay:jetty:2.0.2
- cpe:/a:mortbay:jetty:2.0.3
- cpe:/a:mortbay:jetty:2.0.4
- cpe:/a:mortbay:jetty:2.0.5
- cpe:/a:mortbay:jetty:2.1.0
- cpe:/a:mortbay:jetty:2.1.1
- cpe:/a:mortbay:jetty:2.1.2
- cpe:/a:mortbay:jetty:2.1.3
- cpe:/a:mortbay:jetty:2.1.4
- cpe:/a:mortbay:jetty:2.1.5
- cpe:/a:mortbay:jetty:2.1.6
- cpe:/a:mortbay:jetty:2.1.7
- cpe:/a:mortbay:jetty:2.1.b0
- cpe:/a:mortbay:jetty:2.1.b1
- cpe:/a:mortbay:jetty:2.2:alpha0
- cpe:/a:mortbay:jetty:2.2:alpha1
- cpe:/a:mortbay:jetty:2.2:beta0
- cpe:/a:mortbay:jetty:2.2:beta1
- cpe:/a:mortbay:jetty:2.2:beta2
- cpe:/a:mortbay:jetty:2.2:beta3
- cpe:/a:mortbay:jetty:2.2:beta4
- cpe:/a:mortbay:jetty:2.2.0
- cpe:/a:mortbay:jetty:2.2.1
- cpe:/a:mortbay:jetty:2.2.2
- cpe:/a:mortbay:jetty:2.2.3
- cpe:/a:mortbay:jetty:2.2.4
- cpe:/a:mortbay:jetty:2.2.5
- cpe:/a:mortbay:jetty:2.2.6
- cpe:/a:mortbay:jetty:2.2.7
- cpe:/a:mortbay:jetty:2.2.8
- cpe:/a:mortbay:jetty:2.3.0
- cpe:/a:mortbay:jetty:2.3.0a
- cpe:/a:mortbay:jetty:2.3.1
- cpe:/a:mortbay:jetty:2.3.2
- cpe:/a:mortbay:jetty:2.3.3
- cpe:/a:mortbay:jetty:2.3.4
- cpe:/a:mortbay:jetty:2.3.5
- cpe:/a:mortbay:jetty:2.4.0
- cpe:/a:mortbay:jetty:2.4.1
- cpe:/a:mortbay:jetty:2.4.2
- cpe:/a:mortbay:jetty:2.4.3
- cpe:/a:mortbay:jetty:2.4.4
- cpe:/a:mortbay:jetty:2.4.5
- cpe:/a:mortbay:jetty:2.4.6
- cpe:/a:mortbay:jetty:2.4.7
- cpe:/a:mortbay:jetty:2.4.8
- cpe:/a:mortbay:jetty:2.4.9
- cpe:/a:mortbay:jetty:3.0.0
- cpe:/a:mortbay:jetty:3.0.0:rc1
- cpe:/a:mortbay:jetty:3.0.0:rc2
- cpe:/a:mortbay:jetty:3.0.0:rc3
- cpe:/a:mortbay:jetty:3.0.0:rc4
- cpe:/a:mortbay:jetty:3.0.0:rc5
- cpe:/a:mortbay:jetty:3.0.0:rc6
- cpe:/a:mortbay:jetty:3.0.0:rc7
- cpe:/a:mortbay:jetty:3.0.0:rc8
- cpe:/a:mortbay:jetty:3.0.1
- cpe:/a:mortbay:jetty:3.0.2
- cpe:/a:mortbay:jetty:3.0.3
- cpe:/a:mortbay:jetty:3.0.4
- cpe:/a:mortbay:jetty:3.0.5
- cpe:/a:mortbay:jetty:3.0.6
- cpe:/a:mortbay:jetty:3.0.a0
- cpe:/a:mortbay:jetty:3.0.a1
- cpe:/a:mortbay:jetty:3.0.a2
- cpe:/a:mortbay:jetty:3.0.a3
- cpe:/a:mortbay:jetty:3.0.a4
- cpe:/a:mortbay:jetty:3.0.a5
- cpe:/a:mortbay:jetty:3.0.a6
- cpe:/a:mortbay:jetty:3.0.a7
- cpe:/a:mortbay:jetty:3.0.a8
- cpe:/a:mortbay:jetty:3.0.a9
- cpe:/a:mortbay:jetty:3.0.a90
- cpe:/a:mortbay:jetty:3.0.a91
- cpe:/a:mortbay:jetty:3.0.a92
- cpe:/a:mortbay:jetty:3.0.a93
- cpe:/a:mortbay:jetty:3.0.a94
- cpe:/a:mortbay:jetty:3.0.a95
- cpe:/a:mortbay:jetty:3.0.a96
- cpe:/a:mortbay:jetty:3.0.a97
- cpe:/a:mortbay:jetty:3.0.a98
- cpe:/a:mortbay:jetty:3.0.a99
- cpe:/a:mortbay:jetty:3.0.b01
- cpe:/a:mortbay:jetty:3.0.b02
- cpe:/a:mortbay:jetty:3.0.b03
- cpe:/a:mortbay:jetty:3.0.b04
- cpe:/a:mortbay:jetty:3.0.b05
- cpe:/a:mortbay:jetty:3.1:rc0
- cpe:/a:mortbay:jetty:3.1:rc1
- cpe:/a:mortbay:jetty:3.1:rc2
- cpe:/a:mortbay:jetty:3.1:rc3
- cpe:/a:mortbay:jetty:3.1:rc4
- cpe:/a:mortbay:jetty:3.1:rc5
- cpe:/a:mortbay:jetty:3.1:rc6
- cpe:/a:mortbay:jetty:3.1:rc7
- cpe:/a:mortbay:jetty:3.1:rc8
- cpe:/a:mortbay:jetty:3.1:rc9
- cpe:/a:mortbay:jetty:3.1.0
- cpe:/a:mortbay:jetty:3.1.1
- cpe:/a:mortbay:jetty:3.1.2
- cpe:/a:mortbay:jetty:3.1.3
- cpe:/a:mortbay:jetty:3.1.4
- cpe:/a:mortbay:jetty:3.1.5
- cpe:/a:mortbay:jetty:3.1.6
- cpe:/a:mortbay:jetty:3.1.7
- cpe:/a:mortbay:jetty:3.1.8
- cpe:/a:mortbay:jetty:3.1.9
- cpe:/a:mortbay:jetty:4.0:rc1
- cpe:/a:mortbay:jetty:4.0:rc2
- cpe:/a:mortbay:jetty:4.0:rc3
- cpe:/a:mortbay:jetty:4.0.0
- cpe:/a:mortbay:jetty:4.0.1
- cpe:/a:mortbay:jetty:4.0.1:rc0
- cpe:/a:mortbay:jetty:4.0.1:rc1
- cpe:/a:mortbay:jetty:4.0.1:rc2
- cpe:/a:mortbay:jetty:4.0.2
- cpe:/a:mortbay:jetty:4.0.3
- cpe:/a:mortbay:jetty:4.0.4
- cpe:/a:mortbay:jetty:4.0.5
- cpe:/a:mortbay:jetty:4.0.6
- cpe:/a:mortbay:jetty:4.0.b0
- cpe:/a:mortbay:jetty:4.0.b1
- cpe:/a:mortbay:jetty:4.0.b2
- cpe:/a:mortbay:jetty:4.0.d0
- cpe:/a:mortbay:jetty:4.0.d1
- cpe:/a:mortbay:jetty:4.0.d2
- cpe:/a:mortbay:jetty:4.0.d3
- cpe:/a:mortbay:jetty:4.0.d4
- cpe:/a:mortbay:jetty:4.1.0
- cpe:/a:mortbay:jetty:4.1.0:rc0
- cpe:/a:mortbay:jetty:4.1.0:rc1
- cpe:/a:mortbay:jetty:4.1.0:rc2
- cpe:/a:mortbay:jetty:4.1.0:rc3
- cpe:/a:mortbay:jetty:4.1.0:rc4
- cpe:/a:mortbay:jetty:4.1.0:rc5
- cpe:/a:mortbay:jetty:4.1.0:rc6
- cpe:/a:mortbay:jetty:4.1.1
- cpe:/a:mortbay:jetty:4.1.2
- cpe:/a:mortbay:jetty:4.1.3
- cpe:/a:mortbay:jetty:4.1.4
- cpe:/a:mortbay:jetty:4.1.b0
- cpe:/a:mortbay:jetty:4.1.b1
- cpe:/a:mortbay:jetty:4.1.d0
- cpe:/a:mortbay:jetty:4.1.d1
- cpe:/a:mortbay:jetty:4.1.d2
- cpe:/a:mortbay:jetty:4.2.0
- cpe:/a:mortbay:jetty:4.2.0:beta0
- cpe:/a:mortbay:jetty:4.2.0:rc0
- cpe:/a:mortbay:jetty:4.2.0:rc1
- cpe:/a:mortbay:jetty:4.2.1
- cpe:/a:mortbay:jetty:4.2.2
- cpe:/a:mortbay:jetty:4.2.3
- cpe:/a:mortbay:jetty:4.2.4
- cpe:/a:mortbay:jetty:4.2.4:rc0
- cpe:/a:mortbay:jetty:4.2.5
- cpe:/a:mortbay:jetty:4.2.6
- cpe:/a:mortbay:jetty:4.2.7
- cpe:/a:mortbay:jetty:4.2.8_01
- cpe:/a:mortbay:jetty:4.2.9
- cpe:/a:mortbay:jetty:4.2.9:rc1
- cpe:/a:mortbay:jetty:4.2.9:rc2
- cpe:/a:mortbay:jetty:4.2.10
- cpe:/a:mortbay:jetty:4.2.10:pre0
- cpe:/a:mortbay:jetty:4.2.10:pre1
- cpe:/a:mortbay:jetty:4.2.10:pre2
- cpe:/a:mortbay:jetty:4.2.12
- cpe:/a:mortbay:jetty:4.2.14
- cpe:/a:mortbay:jetty:4.2.14:rc0
- cpe:/a:mortbay:jetty:4.2.14:rc1
- cpe:/a:mortbay:jetty:4.2.15
- cpe:/a:mortbay:jetty:4.2.15:rc0
- cpe:/a:mortbay:jetty:4.2.16
- cpe:/a:mortbay:jetty:4.2.17
- cpe:/a:mortbay:jetty:4.2.18
- cpe:/a:mortbay:jetty:4.2.19
- cpe:/a:mortbay:jetty:4.2.20
- cpe:/a:mortbay:jetty:4.2.20:rc0
- cpe:/a:mortbay:jetty:4.2.21
- cpe:/a:mortbay:jetty:4.2.22
- cpe:/a:mortbay:jetty:4.2.23
- cpe:/a:mortbay:jetty:4.2.23:rc0
- cpe:/a:mortbay:jetty:4.2.24
- cpe:/a:mortbay:jetty:4.2.24:rc0
- cpe:/a:mortbay:jetty:4.2.24:rc1
- cpe:/a:mortbay:jetty:4.2.25
- cpe:/a:mortbay:jetty:4.2.26
- cpe:/a:mortbay:jetty:4.2.27
- cpe:/a:mortbay:jetty:5.0:alpha0
- cpe:/a:mortbay:jetty:5.0:alpha1
- cpe:/a:mortbay:jetty:5.0:alpha2
- cpe:/a:mortbay:jetty:5.0:alpha3
- cpe:/a:mortbay:jetty:5.0:beta0
- cpe:/a:mortbay:jetty:5.0:beta1
- cpe:/a:mortbay:jetty:5.0:beta2
- cpe:/a:mortbay:jetty:5.0:rc1
- cpe:/a:mortbay:jetty:5.0:rc2
- cpe:/a:mortbay:jetty:5.0:rc3
- cpe:/a:mortbay:jetty:5.0:rc4
- cpe:/a:mortbay:jetty:5.0.0
- cpe:/a:mortbay:jetty:5.0.0:rc0
- cpe:/a:mortbay:jetty:5.1:rc0
- cpe:/a:mortbay:jetty:5.1:rc1
- cpe:/a:mortbay:jetty:5.1.0
- cpe:/a:mortbay:jetty:5.1.1
- cpe:/a:mortbay:jetty:5.1.1:rc0
- cpe:/a:mortbay:jetty:5.1.1:rc1
- cpe:/a:mortbay:jetty:5.1.2
- cpe:/a:mortbay:jetty:5.1.2:pre0
- cpe:/a:mortbay:jetty:5.1.3
- cpe:/a:mortbay:jetty:5.1.3:rc0
- cpe:/a:mortbay:jetty:5.1.3:rc1
- cpe:/a:mortbay:jetty:5.1.3:rc2
- cpe:/a:mortbay:jetty:5.1.3:rc3
- cpe:/a:mortbay:jetty:5.1.3:rc4
- cpe:/a:mortbay:jetty:5.1.4
- cpe:/a:mortbay:jetty:5.1.4:rc0
- cpe:/a:mortbay:jetty:5.1.5
- cpe:/a:mortbay:jetty:5.1.5:rc0
- cpe:/a:mortbay:jetty:5.1.5:rc1
- cpe:/a:mortbay:jetty:5.1.5:rc2
- cpe:/a:mortbay:jetty:5.1.6
- cpe:/a:mortbay:jetty:5.1.7
- cpe:/a:mortbay:jetty:5.1.7:rc0
- cpe:/a:mortbay:jetty:5.1.8
- cpe:/a:mortbay:jetty:5.1.9
- cpe:/a:mortbay:jetty:5.1.10
- cpe:/a:mortbay:jetty:5.1.11
- cpe:/a:mortbay:jetty:5.1.11:rc0
- cpe:/a:mortbay:jetty:5.1.12
- cpe:/a:mortbay:jetty:5.1.13
- cpe:/a:mortbay:jetty:5.1.14
- cpe:/a:mortbay:jetty:6.0.0
- cpe:/a:mortbay:jetty:6.0.0:alpha0
- cpe:/a:mortbay:jetty:6.0.0:alpha1
- cpe:/a:mortbay:jetty:6.0.0:alpha2
- cpe:/a:mortbay:jetty:6.0.0:alpha3
- cpe:/a:mortbay:jetty:6.0.0:beta0
- cpe:/a:mortbay:jetty:6.0.0:beta1
- cpe:/a:mortbay:jetty:6.0.0:beta10
- cpe:/a:mortbay:jetty:6.0.0:beta11
- cpe:/a:mortbay:jetty:6.0.0:beta12
- cpe:/a:mortbay:jetty:6.0.0:beta14
- cpe:/a:mortbay:jetty:6.0.0:beta15
- cpe:/a:mortbay:jetty:6.0.0:beta16
- cpe:/a:mortbay:jetty:6.0.0:beta17
- cpe:/a:mortbay:jetty:6.0.0:beta2
- cpe:/a:mortbay:jetty:6.0.0:beta3
- cpe:/a:mortbay:jetty:6.0.0:beta4
- cpe:/a:mortbay:jetty:6.0.0:beta5
- cpe:/a:mortbay:jetty:6.0.0:beta6
- cpe:/a:mortbay:jetty:6.0.0:beta7
- cpe:/a:mortbay:jetty:6.0.0:beta8
- cpe:/a:mortbay:jetty:6.0.0:beta9
- cpe:/a:mortbay:jetty:6.0.0:betax
- cpe:/a:mortbay:jetty:6.0.0:rc0
- cpe:/a:mortbay:jetty:6.0.0:rc1
- cpe:/a:mortbay:jetty:6.0.0:rc2
- cpe:/a:mortbay:jetty:6.0.0:rc3
- cpe:/a:mortbay:jetty:6.0.0:rc4
- cpe:/a:mortbay:jetty:6.0.1
- cpe:/a:mortbay:jetty:6.0.2
- cpe:/a:mortbay:jetty:6.1.0
- cpe:/a:mortbay:jetty:6.1.0:pre0
- cpe:/a:mortbay:jetty:6.1.0:pre1
- cpe:/a:mortbay:jetty:6.1.0:pre2
- cpe:/a:mortbay:jetty:6.1.0:pre3
- cpe:/a:mortbay:jetty:6.1.0:rc0
- cpe:/a:mortbay:jetty:6.1.0:rc1
- cpe:/a:mortbay:jetty:6.1.0:rc2
- cpe:/a:mortbay:jetty:6.1.0:rc3
- cpe:/a:mortbay:jetty:6.1.1
- cpe:/a:mortbay:jetty:6.1.1:rc0
- cpe:/a:mortbay:jetty:6.1.2
- cpe:/a:mortbay:jetty:6.1.2:pre0
- cpe:/a:mortbay:jetty:6.1.2:pre1
- cpe:/a:mortbay:jetty:6.1.2:rc0
- cpe:/a:mortbay:jetty:6.1.2:rc1
- cpe:/a:mortbay:jetty:6.1.2:rc2
- cpe:/a:mortbay:jetty:6.1.2:rc3
- cpe:/a:mortbay:jetty:6.1.2:rc4
- cpe:/a:mortbay:jetty:6.1.2:rc5
- cpe:/a:mortbay:jetty:6.1.3
- cpe:/a:mortbay:jetty:6.1.4
- cpe:/a:mortbay:jetty:6.1.4:rc0
- cpe:/a:mortbay:jetty:6.1.4:rc1
- cpe:/a:mortbay:jetty:6.1.5
- cpe:/a:mortbay:jetty:6.1.5:rc0
- cpe:/a:mortbay:jetty:6.1.6
- cpe:/a:mortbay:jetty:6.1.6:rc0
- cpe:/a:mortbay:jetty:6.1.6:rc1
- cpe:/a:mortbay:jetty:6.1.7
- cpe:/a:mortbay:jetty:6.1.8
- cpe:/a:mortbay:jetty:6.1.9
- cpe:/a:mortbay:jetty:6.1.10
- cpe:/a:mortbay:jetty:6.1.11
- cpe:/a:mortbay:jetty:6.1.12
- cpe:/a:mortbay:jetty:6.1.12:rc1
- cpe:/a:mortbay:jetty:6.1.12:rc2
- cpe:/a:mortbay:jetty:6.1.12:rc3
- cpe:/a:mortbay:jetty:6.1.12:rc4
- cpe:/a:mortbay:jetty:6.1.12:rc5
- cpe:/a:mortbay:jetty:6.1.14
- cpe:/a:mortbay:jetty:6.1.15
- cpe:/a:mortbay:jetty:6.1.15:pre0
- cpe:/a:mortbay:jetty:6.1.15:rc2
- cpe:/a:mortbay:jetty:6.1.15:rc3
- cpe:/a:mortbay:jetty:6.1.15:rc4
- cpe:/a:mortbay:jetty:6.1.15:rc5
- cpe:/a:mortbay:jetty:6.1.16 and all previous versions

CVE-2009-1523

Severity: Medium
CVSS Score: 5.0
CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.

- BID - 34800
- BID - 35675
- CERT-VN - VU#402580
- CONFIRM - http://jira.codehaus.org/browse/JETTY-1004
- CONFIRM - http://www.kb.cert.org/vuls/id/CRDY-7RKQCY
- CONFIRM - http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html
- CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=499867
- FEDORA - FEDORA-2009-5500
- FEDORA - FEDORA-2009-5509
- FEDORA - FEDORA-2009-5513
- HP - HPSBMA02553
- HP - SSRT100184
- SECTRACK - 1022563
- SECUNIA - 34975
- SECUNIA - 35143
- SECUNIA - 35225
- SECUNIA - 35776
- SECUNIA - 40553
- VUPEN - ADV-2009-1900
- VUPEN - ADV-2010-1792

Vulnerable Software & Versions: (show all)

- cpe:/a:mortbay:jetty:4.2.27
- ...
- cpe:/a:mortbay:jetty:1.0
- cpe:/a:mortbay:jetty:1.0.1
- cpe:/a:mortbay:jetty:1.1
- cpe:/a:mortbay:jetty:1.1.1
- cpe:/a:mortbay:jetty:1.2.0
- cpe:/a:mortbay:jetty:1.3.0
- cpe:/a:mortbay:jetty:1.3.1
- cpe:/a:mortbay:jetty:1.3.2
- cpe:/a:mortbay:jetty:1.3.3
- cpe:/a:mortbay:jetty:1.3.4
- cpe:/a:mortbay:jetty:1.3.5
- cpe:/a:mortbay:jetty:2.0:alpha1
- cpe:/a:mortbay:jetty:2.0:alpha2
- cpe:/a:mortbay:jetty:2.0:beta1
- cpe:/a:mortbay:jetty:2.0:beta2
- cpe:/a:mortbay:jetty:2.0.0
- cpe:/a:mortbay:jetty:2.0.1
- cpe:/a:mortbay:jetty:2.0.2
- cpe:/a:mortbay:jetty:2.0.3
- cpe:/a:mortbay:jetty:2.0.4
- cpe:/a:mortbay:jetty:2.0.5
- cpe:/a:mortbay:jetty:2.1.0
- cpe:/a:mortbay:jetty:2.1.1
- cpe:/a:mortbay:jetty:2.1.2
- cpe:/a:mortbay:jetty:2.1.3
- cpe:/a:mortbay:jetty:2.1.4
- cpe:/a:mortbay:jetty:2.1.5
- cpe:/a:mortbay:jetty:2.1.6
- cpe:/a:mortbay:jetty:2.1.7
- cpe:/a:mortbay:jetty:2.1.b0
- cpe:/a:mortbay:jetty:2.1.b1
- cpe:/a:mortbay:jetty:2.2:alpha0
- cpe:/a:mortbay:jetty:2.2:alpha1
- cpe:/a:mortbay:jetty:2.2:beta0
- cpe:/a:mortbay:jetty:2.2:beta1
- cpe:/a:mortbay:jetty:2.2:beta2
- cpe:/a:mortbay:jetty:2.2:beta3
- cpe:/a:mortbay:jetty:2.2:beta4
- cpe:/a:mortbay:jetty:2.2.0
- cpe:/a:mortbay:jetty:2.2.1
- cpe:/a:mortbay:jetty:2.2.2
- cpe:/a:mortbay:jetty:2.2.3
- cpe:/a:mortbay:jetty:2.2.4
- cpe:/a:mortbay:jetty:2.2.5
- cpe:/a:mortbay:jetty:2.2.6
- cpe:/a:mortbay:jetty:2.2.7
- cpe:/a:mortbay:jetty:2.2.8
- cpe:/a:mortbay:jetty:2.3.0
- cpe:/a:mortbay:jetty:2.3.0a
- cpe:/a:mortbay:jetty:2.3.1
- cpe:/a:mortbay:jetty:2.3.2
- cpe:/a:mortbay:jetty:2.3.3
- cpe:/a:mortbay:jetty:2.3.4
- cpe:/a:mortbay:jetty:2.3.5
- cpe:/a:mortbay:jetty:2.4.0
- cpe:/a:mortbay:jetty:2.4.1
- cpe:/a:mortbay:jetty:2.4.2
- cpe:/a:mortbay:jetty:2.4.3
- cpe:/a:mortbay:jetty:2.4.4
- cpe:/a:mortbay:jetty:2.4.5
- cpe:/a:mortbay:jetty:2.4.6
- cpe:/a:mortbay:jetty:2.4.7
- cpe:/a:mortbay:jetty:2.4.8
- cpe:/a:mortbay:jetty:2.4.9
- cpe:/a:mortbay:jetty:3.0.0
- cpe:/a:mortbay:jetty:3.0.0:rc1
- cpe:/a:mortbay:jetty:3.0.0:rc2
- cpe:/a:mortbay:jetty:3.0.0:rc3
- cpe:/a:mortbay:jetty:3.0.0:rc4
- cpe:/a:mortbay:jetty:3.0.0:rc5
- cpe:/a:mortbay:jetty:3.0.0:rc6
- cpe:/a:mortbay:jetty:3.0.0:rc7
- cpe:/a:mortbay:jetty:3.0.0:rc8
- cpe:/a:mortbay:jetty:3.0.1
- cpe:/a:mortbay:jetty:3.0.2
- cpe:/a:mortbay:jetty:3.0.3
- cpe:/a:mortbay:jetty:3.0.4
- cpe:/a:mortbay:jetty:3.0.5
- cpe:/a:mortbay:jetty:3.0.6
- cpe:/a:mortbay:jetty:3.0.a0
- cpe:/a:mortbay:jetty:3.0.a1
- cpe:/a:mortbay:jetty:3.0.a2
- cpe:/a:mortbay:jetty:3.0.a3
- cpe:/a:mortbay:jetty:3.0.a4
- cpe:/a:mortbay:jetty:3.0.a5
- cpe:/a:mortbay:jetty:3.0.a6
- cpe:/a:mortbay:jetty:3.0.a7
- cpe:/a:mortbay:jetty:3.0.a8
- cpe:/a:mortbay:jetty:3.0.a9
- cpe:/a:mortbay:jetty:3.0.a90
- cpe:/a:mortbay:jetty:3.0.a91
- cpe:/a:mortbay:jetty:3.0.a92
- cpe:/a:mortbay:jetty:3.0.a93
- cpe:/a:mortbay:jetty:3.0.a94
- cpe:/a:mortbay:jetty:3.0.a95
- cpe:/a:mortbay:jetty:3.0.a96
- cpe:/a:mortbay:jetty:3.0.a97
- cpe:/a:mortbay:jetty:3.0.a98
- cpe:/a:mortbay:jetty:3.0.a99
- cpe:/a:mortbay:jetty:3.0.b01
- cpe:/a:mortbay:jetty:3.0.b02
- cpe:/a:mortbay:jetty:3.0.b03
- cpe:/a:mortbay:jetty:3.0.b04
- cpe:/a:mortbay:jetty:3.0.b05
- cpe:/a:mortbay:jetty:3.1:rc0
- cpe:/a:mortbay:jetty:3.1:rc1
- cpe:/a:mortbay:jetty:3.1:rc2
- cpe:/a:mortbay:jetty:3.1:rc3
- cpe:/a:mortbay:jetty:3.1:rc4
- cpe:/a:mortbay:jetty:3.1:rc5
- cpe:/a:mortbay:jetty:3.1:rc6
- cpe:/a:mortbay:jetty:3.1:rc7
- cpe:/a:mortbay:jetty:3.1:rc8
- cpe:/a:mortbay:jetty:3.1:rc9
- cpe:/a:mortbay:jetty:3.1.0
- cpe:/a:mortbay:jetty:3.1.1
- cpe:/a:mortbay:jetty:3.1.2
- cpe:/a:mortbay:jetty:3.1.3
- cpe:/a:mortbay:jetty:3.1.4
- cpe:/a:mortbay:jetty:3.1.5
- cpe:/a:mortbay:jetty:3.1.6
- cpe:/a:mortbay:jetty:3.1.7
- cpe:/a:mortbay:jetty:3.1.8
- cpe:/a:mortbay:jetty:3.1.9
- cpe:/a:mortbay:jetty:4.0:rc1
- cpe:/a:mortbay:jetty:4.0:rc2
- cpe:/a:mortbay:jetty:4.0:rc3
- cpe:/a:mortbay:jetty:4.0.0
- cpe:/a:mortbay:jetty:4.0.1
- cpe:/a:mortbay:jetty:4.0.1:rc0
- cpe:/a:mortbay:jetty:4.0.1:rc1
- cpe:/a:mortbay:jetty:4.0.1:rc2
- cpe:/a:mortbay:jetty:4.0.2
- cpe:/a:mortbay:jetty:4.0.3
- cpe:/a:mortbay:jetty:4.0.4
- cpe:/a:mortbay:jetty:4.0.5
- cpe:/a:mortbay:jetty:4.0.6
- cpe:/a:mortbay:jetty:4.0.b0
- cpe:/a:mortbay:jetty:4.0.b1
- cpe:/a:mortbay:jetty:4.0.b2
- cpe:/a:mortbay:jetty:4.0.d0
- cpe:/a:mortbay:jetty:4.0.d1
- cpe:/a:mortbay:jetty:4.0.d2
- cpe:/a:mortbay:jetty:4.0.d3
- cpe:/a:mortbay:jetty:4.0.d4
- cpe:/a:mortbay:jetty:4.1.0
- cpe:/a:mortbay:jetty:4.1.0:rc0
- cpe:/a:mortbay:jetty:4.1.0:rc1
- cpe:/a:mortbay:jetty:4.1.0:rc2
- cpe:/a:mortbay:jetty:4.1.0:rc3
- cpe:/a:mortbay:jetty:4.1.0:rc4
- cpe:/a:mortbay:jetty:4.1.0:rc5
- cpe:/a:mortbay:jetty:4.1.0:rc6
- cpe:/a:mortbay:jetty:4.1.1
- cpe:/a:mortbay:jetty:4.1.2
- cpe:/a:mortbay:jetty:4.1.3
- cpe:/a:mortbay:jetty:4.1.4
- cpe:/a:mortbay:jetty:4.1.b0
- cpe:/a:mortbay:jetty:4.1.b1
- cpe:/a:mortbay:jetty:4.1.d0
- cpe:/a:mortbay:jetty:4.1.d1
- cpe:/a:mortbay:jetty:4.1.d2
- cpe:/a:mortbay:jetty:4.2.0
- cpe:/a:mortbay:jetty:4.2.0:beta0
- cpe:/a:mortbay:jetty:4.2.0:rc0
- cpe:/a:mortbay:jetty:4.2.0:rc1
- cpe:/a:mortbay:jetty:4.2.1
- cpe:/a:mortbay:jetty:4.2.2
- cpe:/a:mortbay:jetty:4.2.3
- cpe:/a:mortbay:jetty:4.2.4
- cpe:/a:mortbay:jetty:4.2.4:rc0
- cpe:/a:mortbay:jetty:4.2.5
- cpe:/a:mortbay:jetty:4.2.6
- cpe:/a:mortbay:jetty:4.2.7
- cpe:/a:mortbay:jetty:4.2.8_01
- cpe:/a:mortbay:jetty:4.2.9
- cpe:/a:mortbay:jetty:4.2.9:rc1
- cpe:/a:mortbay:jetty:4.2.9:rc2
- cpe:/a:mortbay:jetty:4.2.10
- cpe:/a:mortbay:jetty:4.2.10:pre0
- cpe:/a:mortbay:jetty:4.2.10:pre1
- cpe:/a:mortbay:jetty:4.2.10:pre2
- cpe:/a:mortbay:jetty:4.2.12
- cpe:/a:mortbay:jetty:4.2.14
- cpe:/a:mortbay:jetty:4.2.14:rc0
- cpe:/a:mortbay:jetty:4.2.14:rc1
- cpe:/a:mortbay:jetty:4.2.15
- cpe:/a:mortbay:jetty:4.2.15:rc0
- cpe:/a:mortbay:jetty:4.2.16
- cpe:/a:mortbay:jetty:4.2.17
- cpe:/a:mortbay:jetty:4.2.18
- cpe:/a:mortbay:jetty:4.2.19
- cpe:/a:mortbay:jetty:4.2.20
- cpe:/a:mortbay:jetty:4.2.20:rc0
- cpe:/a:mortbay:jetty:4.2.21
- cpe:/a:mortbay:jetty:4.2.22
- cpe:/a:mortbay:jetty:4.2.23
- cpe:/a:mortbay:jetty:4.2.23:rc0
- cpe:/a:mortbay:jetty:4.2.24
- cpe:/a:mortbay:jetty:4.2.24:rc0
- cpe:/a:mortbay:jetty:4.2.24:rc1
- cpe:/a:mortbay:jetty:4.2.25
- cpe:/a:mortbay:jetty:4.2.26
- cpe:/a:mortbay:jetty:4.2.27
- cpe:/a:mortbay:jetty:5.0:alpha0
- cpe:/a:mortbay:jetty:5.0:alpha1
- cpe:/a:mortbay:jetty:5.0:alpha2
- cpe:/a:mortbay:jetty:5.0:alpha3
- cpe:/a:mortbay:jetty:5.0:beta0
- cpe:/a:mortbay:jetty:5.0:beta1
- cpe:/a:mortbay:jetty:5.0:beta2
- cpe:/a:mortbay:jetty:5.0:rc1
- cpe:/a:mortbay:jetty:5.0:rc2
- cpe:/a:mortbay:jetty:5.0:rc3
- cpe:/a:mortbay:jetty:5.0:rc4
- cpe:/a:mortbay:jetty:5.0.0
- cpe:/a:mortbay:jetty:5.0.0:rc0
- cpe:/a:mortbay:jetty:5.1:rc0
- cpe:/a:mortbay:jetty:5.1:rc1
- cpe:/a:mortbay:jetty:5.1.0
- cpe:/a:mortbay:jetty:5.1.1
- cpe:/a:mortbay:jetty:5.1.1:rc0
- cpe:/a:mortbay:jetty:5.1.1:rc1
- cpe:/a:mortbay:jetty:5.1.2
- cpe:/a:mortbay:jetty:5.1.2:pre0
- cpe:/a:mortbay:jetty:5.1.3
- cpe:/a:mortbay:jetty:5.1.3:rc0
- cpe:/a:mortbay:jetty:5.1.3:rc1
- cpe:/a:mortbay:jetty:5.1.3:rc2
- cpe:/a:mortbay:jetty:5.1.3:rc3
- cpe:/a:mortbay:jetty:5.1.3:rc4
- cpe:/a:mortbay:jetty:5.1.4
- cpe:/a:mortbay:jetty:5.1.4:rc0
- cpe:/a:mortbay:jetty:5.1.5
- cpe:/a:mortbay:jetty:5.1.5:rc0
- cpe:/a:mortbay:jetty:5.1.5:rc1
- cpe:/a:mortbay:jetty:5.1.5:rc2
- cpe:/a:mortbay:jetty:5.1.6
- cpe:/a:mortbay:jetty:5.1.7
- cpe:/a:mortbay:jetty:5.1.7:rc0
- cpe:/a:mortbay:jetty:5.1.8
- cpe:/a:mortbay:jetty:5.1.9
- cpe:/a:mortbay:jetty:5.1.10
- cpe:/a:mortbay:jetty:5.1.11
- cpe:/a:mortbay:jetty:5.1.11:rc0
- cpe:/a:mortbay:jetty:5.1.12
- cpe:/a:mortbay:jetty:5.1.13
- cpe:/a:mortbay:jetty:5.1.14
- cpe:/a:mortbay:jetty:6.0.0
- cpe:/a:mortbay:jetty:6.0.0:alpha0
- cpe:/a:mortbay:jetty:6.0.0:alpha1
- cpe:/a:mortbay:jetty:6.0.0:alpha2
- cpe:/a:mortbay:jetty:6.0.0:alpha3
- cpe:/a:mortbay:jetty:6.0.0:beta0
- cpe:/a:mortbay:jetty:6.0.0:beta1
- cpe:/a:mortbay:jetty:6.0.0:beta10
- cpe:/a:mortbay:jetty:6.0.0:beta11
- cpe:/a:mortbay:jetty:6.0.0:beta12
- cpe:/a:mortbay:jetty:6.0.0:beta14
- cpe:/a:mortbay:jetty:6.0.0:beta15
- cpe:/a:mortbay:jetty:6.0.0:beta16
- cpe:/a:mortbay:jetty:6.0.0:beta17
- cpe:/a:mortbay:jetty:6.0.0:beta2
- cpe:/a:mortbay:jetty:6.0.0:beta3
- cpe:/a:mortbay:jetty:6.0.0:beta4
- cpe:/a:mortbay:jetty:6.0.0:beta5
- cpe:/a:mortbay:jetty:6.0.0:beta6
- cpe:/a:mortbay:jetty:6.0.0:beta7
- cpe:/a:mortbay:jetty:6.0.0:beta8
- cpe:/a:mortbay:jetty:6.0.0:beta9
- cpe:/a:mortbay:jetty:6.0.0:betax
- cpe:/a:mortbay:jetty:6.0.0:rc0
- cpe:/a:mortbay:jetty:6.0.0:rc1
- cpe:/a:mortbay:jetty:6.0.0:rc2
- cpe:/a:mortbay:jetty:6.0.0:rc3
- cpe:/a:mortbay:jetty:6.0.0:rc4
- cpe:/a:mortbay:jetty:6.0.1
- cpe:/a:mortbay:jetty:6.0.2
- cpe:/a:mortbay:jetty:6.1.0
- cpe:/a:mortbay:jetty:6.1.0:pre0
- cpe:/a:mortbay:jetty:6.1.0:pre1
- cpe:/a:mortbay:jetty:6.1.0:pre2
- cpe:/a:mortbay:jetty:6.1.0:pre3
- cpe:/a:mortbay:jetty:6.1.0:rc0
- cpe:/a:mortbay:jetty:6.1.0:rc1
- cpe:/a:mortbay:jetty:6.1.0:rc2
- cpe:/a:mortbay:jetty:6.1.0:rc3
- cpe:/a:mortbay:jetty:6.1.1
- cpe:/a:mortbay:jetty:6.1.1:rc0
- cpe:/a:mortbay:jetty:6.1.2
- cpe:/a:mortbay:jetty:6.1.2:pre0
- cpe:/a:mortbay:jetty:6.1.2:pre1
- cpe:/a:mortbay:jetty:6.1.2:rc0
- cpe:/a:mortbay:jetty:6.1.2:rc1
- cpe:/a:mortbay:jetty:6.1.2:rc2
- cpe:/a:mortbay:jetty:6.1.2:rc3
- cpe:/a:mortbay:jetty:6.1.2:rc4
- cpe:/a:mortbay:jetty:6.1.2:rc5
- cpe:/a:mortbay:jetty:6.1.3
- cpe:/a:mortbay:jetty:6.1.4
- cpe:/a:mortbay:jetty:6.1.4:rc0
- cpe:/a:mortbay:jetty:6.1.4:rc1
- cpe:/a:mortbay:jetty:6.1.5
- cpe:/a:mortbay:jetty:6.1.5:rc0
- cpe:/a:mortbay:jetty:6.1.6
- cpe:/a:mortbay:jetty:6.1.6:rc0
- cpe:/a:mortbay:jetty:6.1.6:rc1
- cpe:/a:mortbay:jetty:6.1.7
- cpe:/a:mortbay:jetty:6.1.8
- cpe:/a:mortbay:jetty:6.1.9
- cpe:/a:mortbay:jetty:6.1.10
- cpe:/a:mortbay:jetty:6.1.11
- cpe:/a:mortbay:jetty:6.1.12
- cpe:/a:mortbay:jetty:6.1.12:rc1
- cpe:/a:mortbay:jetty:6.1.12:rc2
- cpe:/a:mortbay:jetty:6.1.12:rc3
- cpe:/a:mortbay:jetty:6.1.12:rc4
- cpe:/a:mortbay:jetty:6.1.12:rc5
- cpe:/a:mortbay:jetty:6.1.14
- cpe:/a:mortbay:jetty:6.1.15
- cpe:/a:mortbay:jetty:6.1.15:pre0
- cpe:/a:mortbay:jetty:6.1.15:rc2
- cpe:/a:mortbay:jetty:6.1.15:rc3
- cpe:/a:mortbay:jetty:6.1.15:rc4
- cpe:/a:mortbay:jetty:6.1.15:rc5
- cpe:/a:mortbay:jetty:6.1.16 and all previous versions
- cpe:/a:mortbay:jetty:7.0.0
- cpe:/a:mortbay:jetty:7.0.0:m1 and all previous versions
- cpe:/a:mortbay:jetty:7.0.0:m2 and all previous versions
- cpe:/a:mortbay:jetty:7.0.0:pre0 and all previous versions
- cpe:/a:mortbay:jetty:7.0.0:pre1 and all previous versions
- cpe:/a:mortbay:jetty:7.0.0:pre3 and all previous versions

CVE-2007-5615

Severity: Medium
CVSS Score: 5.0
CWE: CWE-94 Improper Control of Generation of Code ('Code Injection')

CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

- BID - 26696
- CERT-VN - VU#212984
- CONFIRM - http://svn.codehaus.org/jetty/jetty/trunk/VERSION.txt
- FEDORA - FEDORA-2008-6141
- FEDORA - FEDORA-2008-6164
- OSVDB - 42495
- SECUNIA - 27925
- SECUNIA - 30941
- SECUNIA - 35143
- SUSE - SUSE-SR:2009:004

Vulnerable Software & Versions:

- cpe:/a:mortbay_jetty:jetty:6.1.6rc0 and all previous versions

CVE-2007-5614

Severity: High
CVSS Score: 7.5

Mortbay Jetty before 6.1.6rc1 does not properly handle "certain quote sequences" in HTML cookie parameters, which allows remote attackers to hijack browser sessions via unspecified vectors.

- BID - 26695
- CERT-VN - VU#438616
- CONFIRM - http://svn.codehaus.org/jetty/jetty/trunk/VERSION.txt
- FEDORA - FEDORA-2008-6141
- FEDORA - FEDORA-2008-6164
- OSVDB - 42496
- SECUNIA - 27925
- SECUNIA - 30941
- SECUNIA - 35143

Vulnerable Software & Versions: (show all)

- cpe:/a:mortbay_jetty:jetty:4.2
- ...
- cpe:/a:mortbay_jetty:jetty:1.0
- cpe:/a:mortbay_jetty:jetty:2.4
- cpe:/a:mortbay_jetty:jetty:3.0
- cpe:/a:mortbay_jetty:jetty:3.1
- cpe:/a:mortbay_jetty:jetty:4.0
- cpe:/a:mortbay_jetty:jetty:4.1
- cpe:/a:mortbay_jetty:jetty:4.2
- cpe:/a:mortbay_jetty:jetty:5
- cpe:/a:mortbay_jetty:jetty:5.1
- cpe:/a:mortbay_jetty:jetty:6
- cpe:/a:mortbay_jetty:jetty:6.1

CVE-2007-5613

Severity: Medium
CVSS Score: 4.3
CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Cross-site scripting (XSS) vulnerability in Dump Servlet in Mortbay Jetty before 6.1.6rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters and cookies.

- BID - 26697
- CERT-VN - VU#237888
- CONFIRM - http://jira.codehaus.org/browse/JETTY-452
- CONFIRM - http://svn.codehaus.org/jetty/jetty/trunk/VERSION.txt
- FEDORA - FEDORA-2008-6141
- FEDORA - FEDORA-2008-6164
- OSVDB - 42497
- SECUNIA - 27925
- SECUNIA - 30941
- SECUNIA - 35143
- SUSE - SUSE-SR:2009:004

Vulnerable Software & Versions: (show all)

- cpe:/a:mortbay_jetty:jetty:4.2
- ...
- cpe:/a:mortbay_jetty:jetty:1.0
- cpe:/a:mortbay_jetty:jetty:2.4
- cpe:/a:mortbay_jetty:jetty:3.0
- cpe:/a:mortbay_jetty:jetty:3.1
- cpe:/a:mortbay_jetty:jetty:4.0
- cpe:/a:mortbay_jetty:jetty:4.1
- cpe:/a:mortbay_jetty:jetty:4.2
- cpe:/a:mortbay_jetty:jetty:5
- cpe:/a:mortbay_jetty:jetty:5.1
- cpe:/a:mortbay_jetty:jetty:6
- cpe:/a:mortbay_jetty:jetty:6.1

CVE-2005-3747

Severity: Medium
CVSS Score: 5.0
CWE: CWE-200 Information Exposure

Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL-encoded backslash ("%5C") characters. NOTE: this might be the same issue as CVE-2006-2758.

- BID - 15515
- CONFIRM - http://sourceforge.net/project/shownotes.php?release_id=372086&group_id=7322
- HP - HPSBUX02172
- HP - SSRT061269
- SECUNIA - 17659
- SECUNIA - 22669
- VUPEN - ADV-2005-2515

Vulnerable Software & Versions: (show all)

- cpe:/a:mortbay:jetty:4.2.27
- ...
- cpe:/a:mortbay:jetty:1.0
- cpe:/a:mortbay:jetty:1.0.1
- cpe:/a:mortbay:jetty:1.1
- cpe:/a:mortbay:jetty:1.1.1
- cpe:/a:mortbay:jetty:1.2.0
- cpe:/a:mortbay:jetty:1.3.0
- cpe:/a:mortbay:jetty:1.3.1
- cpe:/a:mortbay:jetty:1.3.2
- cpe:/a:mortbay:jetty:1.3.3
- cpe:/a:mortbay:jetty:1.3.4
- cpe:/a:mortbay:jetty:1.3.5
- cpe:/a:mortbay:jetty:2.0:alpha1
- cpe:/a:mortbay:jetty:2.0:alpha2
- cpe:/a:mortbay:jetty:2.0:beta1
- cpe:/a:mortbay:jetty:2.0:beta2
- cpe:/a:mortbay:jetty:2.0.0
- cpe:/a:mortbay:jetty:2.0.1
- cpe:/a:mortbay:jetty:2.0.2
- cpe:/a:mortbay:jetty:2.0.3
- cpe:/a:mortbay:jetty:2.0.4
- cpe:/a:mortbay:jetty:2.0.5
- cpe:/a:mortbay:jetty:2.1.0
- cpe:/a:mortbay:jetty:2.1.1
- cpe:/a:mortbay:jetty:2.1.2
- cpe:/a:mortbay:jetty:2.1.3
- cpe:/a:mortbay:jetty:2.1.4
- cpe:/a:mortbay:jetty:2.1.5
- cpe:/a:mortbay:jetty:2.1.6
- cpe:/a:mortbay:jetty:2.1.7
- cpe:/a:mortbay:jetty:2.1.b0
- cpe:/a:mortbay:jetty:2.1.b1
- cpe:/a:mortbay:jetty:2.2:alpha0
- cpe:/a:mortbay:jetty:2.2:alpha1
- cpe:/a:mortbay:jetty:2.2:beta0
- cpe:/a:mortbay:jetty:2.2:beta1
- cpe:/a:mortbay:jetty:2.2:beta2
- cpe:/a:mortbay:jetty:2.2:beta3
- cpe:/a:mortbay:jetty:2.2:beta4
- cpe:/a:mortbay:jetty:2.2.0
- cpe:/a:mortbay:jetty:2.2.1
- cpe:/a:mortbay:jetty:2.2.2
- cpe:/a:mortbay:jetty:2.2.3
- cpe:/a:mortbay:jetty:2.2.4
- cpe:/a:mortbay:jetty:2.2.5
- cpe:/a:mortbay:jetty:2.2.6
- cpe:/a:mortbay:jetty:2.2.7
- cpe:/a:mortbay:jetty:2.2.8
- cpe:/a:mortbay:jetty:2.3.0
- cpe:/a:mortbay:jetty:2.3.0a
- cpe:/a:mortbay:jetty:2.3.1
- cpe:/a:mortbay:jetty:2.3.2
- cpe:/a:mortbay:jetty:2.3.3
- cpe:/a:mortbay:jetty:2.3.4
- cpe:/a:mortbay:jetty:2.3.5
- cpe:/a:mortbay:jetty:2.4.0
- cpe:/a:mortbay:jetty:2.4.1
- cpe:/a:mortbay:jetty:2.4.2
- cpe:/a:mortbay:jetty:2.4.3
- cpe:/a:mortbay:jetty:2.4.4
- cpe:/a:mortbay:jetty:2.4.5
- cpe:/a:mortbay:jetty:2.4.6
- cpe:/a:mortbay:jetty:2.4.7
- cpe:/a:mortbay:jetty:2.4.8
- cpe:/a:mortbay:jetty:2.4.9
- cpe:/a:mortbay:jetty:3.0
- cpe:/a:mortbay:jetty:3.0.0
- cpe:/a:mortbay:jetty:3.0.0:rc1
- cpe:/a:mortbay:jetty:3.0.0:rc2
- cpe:/a:mortbay:jetty:3.0.0:rc3
- cpe:/a:mortbay:jetty:3.0.0:rc4
- cpe:/a:mortbay:jetty:3.0.0:rc5
- cpe:/a:mortbay:jetty:3.0.0:rc6
- cpe:/a:mortbay:jetty:3.0.0:rc7
- cpe:/a:mortbay:jetty:3.0.0:rc8
- cpe:/a:mortbay:jetty:3.0.1
- cpe:/a:mortbay:jetty:3.0.2
- cpe:/a:mortbay:jetty:3.0.3
- cpe:/a:mortbay:jetty:3.0.4
- cpe:/a:mortbay:jetty:3.0.5
- cpe:/a:mortbay:jetty:3.0.6
- cpe:/a:mortbay:jetty:3.0.a0
- cpe:/a:mortbay:jetty:3.0.a1
- cpe:/a:mortbay:jetty:3.0.a2
- cpe:/a:mortbay:jetty:3.0.a3
- cpe:/a:mortbay:jetty:3.0.a4
- cpe:/a:mortbay:jetty:3.0.a5
- cpe:/a:mortbay:jetty:3.0.a6
- cpe:/a:mortbay:jetty:3.0.a7
- cpe:/a:mortbay:jetty:3.0.a8
- cpe:/a:mortbay:jetty:3.0.a9
- cpe:/a:mortbay:jetty:3.0.a90
- cpe:/a:mortbay:jetty:3.0.a91
- cpe:/a:mortbay:jetty:3.0.a92
- cpe:/a:mortbay:jetty:3.0.a93
- cpe:/a:mortbay:jetty:3.0.a94
- cpe:/a:mortbay:jetty:3.0.a95
- cpe:/a:mortbay:jetty:3.0.a96
- cpe:/a:mortbay:jetty:3.0.a97
- cpe:/a:mortbay:jetty:3.0.a98
- cpe:/a:mortbay:jetty:3.0.a99
- cpe:/a:mortbay:jetty:3.0.b01
- cpe:/a:mortbay:jetty:3.0.b02
- cpe:/a:mortbay:jetty:3.0.b03
- cpe:/a:mortbay:jetty:3.0.b04
- cpe:/a:mortbay:jetty:3.0.b05
- cpe:/a:mortbay:jetty:3.1:rc0
- cpe:/a:mortbay:jetty:3.1:rc1
- cpe:/a:mortbay:jetty:3.1:rc2
- cpe:/a:mortbay:jetty:3.1:rc3
- cpe:/a:mortbay:jetty:3.1:rc4
- cpe:/a:mortbay:jetty:3.1:rc5
- cpe:/a:mortbay:jetty:3.1:rc6
- cpe:/a:mortbay:jetty:3.1:rc7
- cpe:/a:mortbay:jetty:3.1:rc8
- cpe:/a:mortbay:jetty:3.1:rc9
- cpe:/a:mortbay:jetty:3.1.0
- cpe:/a:mortbay:jetty:3.1.1
- cpe:/a:mortbay:jetty:3.1.2
- cpe:/a:mortbay:jetty:3.1.3
- cpe:/a:mortbay:jetty:3.1.4
- cpe:/a:mortbay:jetty:3.1.5
- cpe:/a:mortbay:jetty:3.1.6
- cpe:/a:mortbay:jetty:3.1.7
- cpe:/a:mortbay:jetty:3.1.8
- cpe:/a:mortbay:jetty:3.1.9
- cpe:/a:mortbay:jetty:4.0:rc1
- cpe:/a:mortbay:jetty:4.0:rc2
- cpe:/a:mortbay:jetty:4.0:rc3
- cpe:/a:mortbay:jetty:4.0.0
- cpe:/a:mortbay:jetty:4.0.1
- cpe:/a:mortbay:jetty:4.0.1:rc0
- cpe:/a:mortbay:jetty:4.0.1:rc1
- cpe:/a:mortbay:jetty:4.0.1:rc2
- cpe:/a:mortbay:jetty:4.0.2
- cpe:/a:mortbay:jetty:4.0.3
- cpe:/a:mortbay:jetty:4.0.4
- cpe:/a:mortbay:jetty:4.0.5
- cpe:/a:mortbay:jetty:4.0.6
- cpe:/a:mortbay:jetty:4.0.b0
- cpe:/a:mortbay:jetty:4.0.b1
- cpe:/a:mortbay:jetty:4.0.b2
- cpe:/a:mortbay:jetty:4.0.d0
- cpe:/a:mortbay:jetty:4.0.d1
- cpe:/a:mortbay:jetty:4.0.d2
- cpe:/a:mortbay:jetty:4.0.d3
- cpe:/a:mortbay:jetty:4.0.d4
- cpe:/a:mortbay:jetty:4.1.0
- cpe:/a:mortbay:jetty:4.1.0:rc0
- cpe:/a:mortbay:jetty:4.1.0:rc1
- cpe:/a:mortbay:jetty:4.1.0:rc2
- cpe:/a:mortbay:jetty:4.1.0:rc3
- cpe:/a:mortbay:jetty:4.1.0:rc4
- cpe:/a:mortbay:jetty:4.1.0:rc5
- cpe:/a:mortbay:jetty:4.1.0:rc6
- cpe:/a:mortbay:jetty:4.1.1
- cpe:/a:mortbay:jetty:4.1.2
- cpe:/a:mortbay:jetty:4.1.3
- cpe:/a:mortbay:jetty:4.1.4
- cpe:/a:mortbay:jetty:4.1.b0
- cpe:/a:mortbay:jetty:4.1.b1
- cpe:/a:mortbay:jetty:4.1.d0
- cpe:/a:mortbay:jetty:4.1.d1
- cpe:/a:mortbay:jetty:4.1.d2
- cpe:/a:mortbay:jetty:4.2
- cpe:/a:mortbay:jetty:4.2.0
- cpe:/a:mortbay:jetty:4.2.0:beta0
- cpe:/a:mortbay:jetty:4.2.0:rc0
- cpe:/a:mortbay:jetty:4.2.0:rc1
- cpe:/a:mortbay:jetty:4.2.1
- cpe:/a:mortbay:jetty:4.2.2
- cpe:/a:mortbay:jetty:4.2.3
- cpe:/a:mortbay:jetty:4.2.4
- cpe:/a:mortbay:jetty:4.2.4:rc0
- cpe:/a:mortbay:jetty:4.2.5
- cpe:/a:mortbay:jetty:4.2.6
- cpe:/a:mortbay:jetty:4.2.7
- cpe:/a:mortbay:jetty:4.2.9
- cpe:/a:mortbay:jetty:4.2.9:rc1
- cpe:/a:mortbay:jetty:4.2.9:rc2
- cpe:/a:mortbay:jetty:4.2.10
- cpe:/a:mortbay:jetty:4.2.10:pre0
- cpe:/a:mortbay:jetty:4.2.10:pre1
- cpe:/a:mortbay:jetty:4.2.10:pre2
- cpe:/a:mortbay:jetty:4.2.11
- cpe:/a:mortbay:jetty:4.2.12
- cpe:/a:mortbay:jetty:4.2.14
- cpe:/a:mortbay:jetty:4.2.14:rc0
- cpe:/a:mortbay:jetty:4.2.14:rc1
- cpe:/a:mortbay:jetty:4.2.15
- cpe:/a:mortbay:jetty:4.2.15:rc0
- cpe:/a:mortbay:jetty:4.2.16
- cpe:/a:mortbay:jetty:4.2.17
- cpe:/a:mortbay:jetty:4.2.18
- cpe:/a:mortbay:jetty:4.2.19
- cpe:/a:mortbay:jetty:4.2.20
- cpe:/a:mortbay:jetty:4.2.20:rc0
- cpe:/a:mortbay:jetty:4.2.21
- cpe:/a:mortbay:jetty:4.2.22
- cpe:/a:mortbay:jetty:4.2.23
- cpe:/a:mortbay:jetty:4.2.23:rc0
- cpe:/a:mortbay:jetty:4.2.24
- cpe:/a:mortbay:jetty:4.2.24:rc0
- cpe:/a:mortbay:jetty:4.2.24:rc1
- cpe:/a:mortbay:jetty:4.2.25
- cpe:/a:mortbay:jetty:4.2.26
- cpe:/a:mortbay:jetty:4.2.27
- cpe:/a:mortbay:jetty:4.2.8_01
- cpe:/a:mortbay:jetty:5.0:alpha0
- cpe:/a:mortbay:jetty:5.0:alpha1
- cpe:/a:mortbay:jetty:5.0:alpha2
- cpe:/a:mortbay:jetty:5.0:alpha3
- cpe:/a:mortbay:jetty:5.0:beta0
- cpe:/a:mortbay:jetty:5.0:beta1
- cpe:/a:mortbay:jetty:5.0:beta2
- cpe:/a:mortbay:jetty:5.0:rc1
- cpe:/a:mortbay:jetty:5.0:rc2
- cpe:/a:mortbay:jetty:5.0:rc3
- cpe:/a:mortbay:jetty:5.0:rc4
- cpe:/a:mortbay:jetty:5.0.0
- cpe:/a:mortbay:jetty:5.0.0:rc0
- cpe:/a:mortbay:jetty:5.1
- cpe:/a:mortbay:jetty:5.1.0
- cpe:/a:mortbay:jetty:5.1.1
- cpe:/a:mortbay:jetty:5.1.1:rc0
- cpe:/a:mortbay:jetty:5.1.1:rc1
- cpe:/a:mortbay:jetty:5.1.2
- cpe:/a:mortbay:jetty:5.1.2:pre0
- cpe:/a:mortbay:jetty:5.1.3
- cpe:/a:mortbay:jetty:5.1.3:rc0
- cpe:/a:mortbay:jetty:5.1.3:rc1
- cpe:/a:mortbay:jetty:5.1.3:rc2
- cpe:/a:mortbay:jetty:5.1.3:rc3
- cpe:/a:mortbay:jetty:5.1.3:rc4
- cpe:/a:mortbay:jetty:5.1.4
- cpe:/a:mortbay:jetty:5.1.4:rc0
- cpe:/a:mortbay:jetty:5.1.5
- cpe:/a:mortbay:jetty:5.1.5:rc0 and all previous versions
- cpe:/a:mortbay:jetty:5.1.5:rc1 and all previous versions
- cpe:/a:mortbay:jetty:5.1.5:rc2 and all previous versions
- cpe:/a:mortbay:jetty:5.1.11:rc0

### org.mortbay.jmx.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\org.mortbay.jmx.jar
MD5: 82D35B88A6CAECB9AD5CC8A0CA2C6C81
SHA1: 938031AFDF33D3C5FEE6077312FB44BE25A9725C

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | org.mortbay.jmx
jar | package | jmx
jar | package | mortbay

#### Identifiers

- None

### plexus-utils-3.0.7.jar

Description: A collection of various utility classes to ease working with strings, files, command lines, XML and more.

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\plexus-utils-3.0.7.jar
MD5: C22B393490A46DA89D91DD6322446E40
SHA1: EB10E9CB2B2326FBF0CB68249B10A5C89E0642EF

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 3.0.7
file | name | plexus-utils-3.0.7
jar | package | codehaus
jar | package | plexus
jar | package | util
jar | package name | io
jar | package name | plexus
jar | package name | util
jar | package name | xml
nexus | artifactid | plexus-utils
nexus | groupid | org.codehaus.plexus
nexus | version | 3.0.7
pom | artifactid | plexus-utils
pom | description | A collection of various utility classes to ease working with strings, files, command lines, XML and more.
pom | name | Plexus Common Utilities
pom | version | 3.0.7

#### Identifiers

- maven: org.codehaus.plexus:plexus-utils:3.0.7 Confidence:HIGHEST

### regexp-1.3.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\regexp-1.3.jar
MD5: 6DCDC325850E40B843CAC2A25FB2121E
SHA1: 973DF2B78B67BCD3144C3DBBB88DA691065A3F8D

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.3
file | name | regexp-1.3
jar | package | apache
jar | package | regexp
nexus | artifactid | regexp
nexus | groupid | regexp
nexus | version | 1.3

#### Identifiers

- maven: regexp:regexp:1.3 Confidence:HIGHEST

### serp-1.13.1.jar

Description: Serp is an open source framework for manipulating Java bytecode.

License:

    BSD: LICENSE.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\serp-1.13.1.jar
MD5: F25CBD8E7D102A3F62CAC34D8F623DF5
SHA1: 737A7B53F80FA2A4265D647A9417BD9EA671A592

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.13.1
file | name | serp-1.13.1
jar | package | bytecode
jar | package | serp
jar | package name | bytecode
jar | package name | code
jar | package name | serp
nexus | artifactid | serp
nexus | groupid | net.sourceforge.serp
nexus | version | 1.13.1
pom | artifactid | serp
pom | description | Serp is an open source framework for manipulating Java bytecode.
pom | groupid | net.sourceforge.serp
pom | name | Serp
pom | version | 1.13.1

#### Identifiers

- maven: net.sourceforge.serp:serp:1.13.1 Confidence:HIGHEST

### servlet-api-2.5.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\servlet-api-2.5.jar
MD5: 69CA51AF4E9A67A1027A7F95B52C3E8F
SHA1: 5959582D97D8B61F4D154CA9E495AAFD16726E34

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 2.5
file | name | servlet-api-2.5
jar | package | javax
jar | package | servlet
jar | package name | servlet
Manifest | extension-name | servlet-api
Manifest | Implementation-Title |
Manifest | Implementation-Vendor | Sun Microsystems Inc
Manifest | Implementation-Version | 2.5
Manifest | specification-title | A component of the Glassfish Application Server
Manifest | specification-vendor | Sun Microsystems Inc
nexus | artifactid | servlet-api
nexus | groupid | javax.servlet
nexus | version | 2.5

#### Identifiers

- maven: javax.servlet:servlet-api:2.5 Confidence:HIGHEST

### slf4j-api-1.5.11.jar

Description: The slf4j API

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\slf4j-api-1.5.11.jar
MD5: 30CB7BEE9B52FCB5F5B03D2A006E26E8
SHA1: D6A855B608971025B4FBB0970F829391CC6F727A

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.5.11
file | name | slf4j-api-1.5.11
jar | package name | slf4j
Manifest | Bundle-Name | slf4j-api
Manifest | bundle-requiredexecutionenvironment | J2SE-1.3
Manifest | bundle-symbolicname | slf4j.api
Manifest | Bundle-Vendor | SLF4J.ORG
Manifest | Bundle-Version | 1.5.11
Manifest | Implementation-Title | slf4j-api
Manifest | Implementation-Version | 1.5.11
nexus | artifactid | slf4j-api
nexus | groupid | org.slf4j
nexus | version | 1.5.11
pom | artifactid | slf4j-api
pom | description | The slf4j API
pom | groupid | slf4j
pom | name | SLF4J API Module

#### Identifiers

- maven: org.slf4j:slf4j-api:1.5.11 Confidence:HIGHEST

### spring-core-2.5.5.jar

Description: Spring Framework

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\spring-core-2.5.5.jar
MD5: 05432EF3BF4EFA1394B127563CB1DD8C
SHA1: 1B3B0FAD8E30EBB9560A81989F5B5BFB28915109

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 2.5.5
file | name | spring-core-2.5.5
hint analyzer | product | springsource_spring_framework
hint analyzer | vendor | SpringSource
hint analyzer | vendor | vmware
jar | package | core
jar | package | springframework
jar | package name | core
jar | package name | springframework
Manifest | Bundle-Name | spring-core
Manifest | bundle-symbolicname | org.springframework.bundle.spring.core
Manifest | Bundle-Version | 2.5.5
Manifest | Implementation-Title | Spring Framework
Manifest | Implementation-Version | 2.5.5
Manifest | originally-created-by | 10.0-b22 (Sun Microsystems Inc.)
Manifest | spring-version | 2.5.5
nexus | artifactid | spring-core
nexus | groupid | org.springframework
nexus | version | 2.5.5

#### Related Dependencies

- spring-beans-2.5.5.jar
  - File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\spring-beans-2.5.5.jar
  - SHA1: 6DC365922794E122BD2FBE102BC42DE60FE8A744
  - MD5: 896AD6663DF2B475596CF859407BA7C0
  - maven: org.springframework:spring-beans:2.5.5
- spring-context-2.5.5.jar
  - File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\spring-context-2.5.5.jar
  - SHA1: E3676C2F4C662BAE8DCE52D38777F858B09C718C
  - MD5: D7EA8F5BBA02875E5A6FBC8D8F5D493A
  - maven: org.springframework:spring-context:2.5.5
- spring-context-support-2.5.5.jar
  - File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\spring-context-support-2.5.5.jar
  - SHA1: 61232B2857AD226468939A50E07206310B0A943C
  - MD5: 3414222F5157FD98ABBA64F674BC09EB
  - maven: org.springframework:spring-context-support:2.5.5
- spring-web-2.5.5.jar
  - File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\spring-web-2.5.5.jar
  - SHA1: F746FD72635F94DB9AE9E4DCDC95E4A81A15A5AC
  - MD5: DBA137B0654DFE69FDB53B15E938E065
  - maven: org.springframework:spring-web:2.5.5
- spring-webmvc-2.5.5.jar
  - File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\spring-webmvc-2.5.5.jar
  - SHA1: 2B327D1E48E3EAD4D85BE1C9A9C5E5B137D5CCDF
  - MD5: 4865BAE59F02A8D4BD1E46F84B5ACEC7
  - maven: org.springframework:spring-webmvc:2.5.5

#### Identifiers

- cpe: cpe:/a:springsource:spring_framework:2.5.5 Confidence:HIGHEST
- cpe: cpe:/a:vmware:springsource_spring_framework:2.5.5 Confidence:LOW
- maven: org.springframework:spring-core:2.5.5 Confidence:HIGHEST

#### Published Vulnerabilities

CVE-2014-1904

Severity: Medium
CVSS Score: 4.3
CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Cross-site scripting (XSS) vulnerability in web/servlet/tags/form/FormTag.java in Spring MVC in Spring Framework 3.0.0 before 3.2.8 and 4.0.0 before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the requested URI in a default action.

- BUGTRAQ - 20140311 CVE-2014-1904 XSS when using Spring MVC
- CONFIRM - http://docs.spring.io/spring/docs/3.2.8.RELEASE/changelog.txt
- CONFIRM - http://www.gopivotal.com/security/cve-2014-1904
- CONFIRM - https://github.com/spring-projects/spring-framework/commit/741b4b229ae032bd17175b46f98673ce0bd2d485
- CONFIRM - https://jira.springsource.org/browse/SPR-11426
- REDHAT - RHSA-2014:0400
- SECUNIA - 57915

Vulnerable Software & Versions: (show all)

- cpe:/a:springsource:spring_framework:3.2.7 and all previous versions
- ...
- cpe:/a:springsource:spring_framework:3.0.0
- cpe:/a:springsource:spring_framework:3.0.0:m1
- cpe:/a:springsource:spring_framework:3.0.0:m2
- cpe:/a:springsource:spring_framework:3.0.0:m3
- cpe:/a:springsource:spring_framework:3.0.0:m4
- cpe:/a:springsource:spring_framework:3.0.0:rc1
- cpe:/a:springsource:spring_framework:3.0.0:rc2
- cpe:/a:springsource:spring_framework:3.0.0:rc3
- cpe:/a:springsource:spring_framework:3.0.1
- cpe:/a:springsource:spring_framework:3.0.2
- cpe:/a:springsource:spring_framework:3.0.3
- cpe:/a:springsource:spring_framework:3.0.4
- cpe:/a:springsource:spring_framework:3.0.5
- cpe:/a:springsource:spring_framework:3.0.6
- cpe:/a:springsource:spring_framework:3.0.7
- cpe:/a:springsource:spring_framework:3.1.0
- cpe:/a:springsource:spring_framework:3.1.1
- cpe:/a:springsource:spring_framework:3.1.2
- cpe:/a:springsource:spring_framework:3.1.3
- cpe:/a:springsource:spring_framework:3.1.4
- cpe:/a:springsource:spring_framework:3.2.0
- cpe:/a:springsource:spring_framework:3.2.1
- cpe:/a:springsource:spring_framework:3.2.2
- cpe:/a:springsource:spring_framework:3.2.3
- cpe:/a:springsource:spring_framework:3.2.4
- cpe:/a:springsource:spring_framework:3.2.5
- cpe:/a:springsource:spring_framework:3.2.6
- cpe:/a:springsource:spring_framework:3.2.7 and all previous versions
- cpe:/a:springsource:spring_framework:4.0.0:m1
- cpe:/a:springsource:spring_framework:4.0.0:m2
- cpe:/a:springsource:spring_framework:4.0.0:rc1
- cpe:/a:springsource:spring_framework:4.0.1 and all previous versions

CVE-2014-0054

Severity: Medium
CVSS Score: 6.8
CWE: CWE-352

The Jaxb2RootElementHttpMessageConverter in Spring MVC in Spring Framework before 3.2.8 and 4.0.0 before 4.0.2 does not disable external entity resolution, which allows remote attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via crafted XML, aka an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4152, CVE-2013-7315, and CVE-2013-6429.

- CONFIRM - https://jira.spring.io/browse/SPR-11376
- REDHAT - RHSA-2014:0400
- SECUNIA - 57915

Vulnerable Software & Versions: (show all)

- cpe:/a:springsource:spring_framework:3.2.7 and all previous versions
- ...
- cpe:/a:springsource:spring_framework:3.0.0
- cpe:/a:springsource:spring_framework:3.0.0:m1
- cpe:/a:springsource:spring_framework:3.0.0:m2
- cpe:/a:springsource:spring_framework:3.0.0:m3
- cpe:/a:springsource:spring_framework:3.0.0:m4
- cpe:/a:springsource:spring_framework:3.0.0:rc1
- cpe:/a:springsource:spring_framework:3.0.0:rc2
- cpe:/a:springsource:spring_framework:3.0.0:rc3
- cpe:/a:springsource:spring_framework:3.0.0.m1
- cpe:/a:springsource:spring_framework:3.0.0.m2
- cpe:/a:springsource:spring_framework:3.0.1
- cpe:/a:springsource:spring_framework:3.0.2
- cpe:/a:springsource:spring_framework:3.0.3
- cpe:/a:springsource:spring_framework:3.0.4
- cpe:/a:springsource:spring_framework:3.0.5
- cpe:/a:springsource:spring_framework:3.0.6
- cpe:/a:springsource:spring_framework:3.0.7
- cpe:/a:springsource:spring_framework:3.1.0
- cpe:/a:springsource:spring_framework:3.1.1
- cpe:/a:springsource:spring_framework:3.1.2
- cpe:/a:springsource:spring_framework:3.1.3
- cpe:/a:springsource:spring_framework:3.1.4
- cpe:/a:springsource:spring_framework:3.2.0
- cpe:/a:springsource:spring_framework:3.2.1
- cpe:/a:springsource:spring_framework:3.2.2
- cpe:/a:springsource:spring_framework:3.2.3
- cpe:/a:springsource:spring_framework:3.2.4
- cpe:/a:springsource:spring_framework:3.2.5
- cpe:/a:springsource:spring_framework:3.2.6
- cpe:/a:springsource:spring_framework:3.2.7 and all previous versions
- cpe:/a:springsource:spring_framework:4.0.0:m1
- cpe:/a:springsource:spring_framework:4.0.0:m2
- cpe:/a:springsource:spring_framework:4.0.0:rc1
- cpe:/a:springsource:spring_framework:4.0.1

CVE-2013-7315

Severity: Medium
CVSS Score: 6.8
CWE: CWE-264 Permissions, Privileges, and Access Controls

The Spring MVC in Spring Framework before 3.2.4 and 4.0.0.M1 through 4.0.0.M2 does not disable external entity resolution for the StAX XMLInputFactory, which allows context-dependent attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via crafted XML with JAXB, aka an XML External Entity (XXE) issue, and a different vulnerability than CVE-2013-4152. NOTE: this issue was SPLIT from CVE-2013-4152 due to different affected versions.

- BUGTRAQ - 20130822 CVE-2013-4152 XML External Entity (XXE) injection in Spring Framework
- CONFIRM - http://www.gopivotal.com/security/cve-2013-4152
- CONFIRM - https://jira.springsource.org/browse/SPR-10806
- DEBIAN - DSA-2842
- FULLDISC - 20131102 XXE Injection in Spring Framework

Vulnerable Software & Versions: (show all)

- cpe:/a:springsource:spring_framework:3.2.3 and all previous versions
- ...
- cpe:/a:springsource:spring_framework:3.0.0
- cpe:/a:springsource:spring_framework:3.0.0:m1
- cpe:/a:springsource:spring_framework:3.0.0:m2
- cpe:/a:springsource:spring_framework:3.0.0:m3
- cpe:/a:springsource:spring_framework:3.0.0:m4
- cpe:/a:springsource:spring_framework:3.0.0:rc1
- cpe:/a:springsource:spring_framework:3.0.0:rc2
- cpe:/a:springsource:spring_framework:3.0.0:rc3
- cpe:/a:springsource:spring_framework:3.0.0.m1
- cpe:/a:springsource:spring_framework:3.0.0.m2
- cpe:/a:springsource:spring_framework:3.0.1
- cpe:/a:springsource:spring_framework:3.0.2
- cpe:/a:springsource:spring_framework:3.0.3
- cpe:/a:springsource:spring_framework:3.0.4
- cpe:/a:springsource:spring_framework:3.0.5
- cpe:/a:springsource:spring_framework:3.0.6
- cpe:/a:springsource:spring_framework:3.0.7
- cpe:/a:springsource:spring_framework:3.1.0
- cpe:/a:springsource:spring_framework:3.1.1
- cpe:/a:springsource:spring_framework:3.1.2
- cpe:/a:springsource:spring_framework:3.1.3
- cpe:/a:springsource:spring_framework:3.1.4
- cpe:/a:springsource:spring_framework:3.2.0
- cpe:/a:springsource:spring_framework:3.2.1
- cpe:/a:springsource:spring_framework:3.2.2
- cpe:/a:springsource:spring_framework:3.2.3 and all previous versions
- cpe:/a:springsource:spring_framework:4.0.0:m1
- cpe:/a:springsource:spring_framework:4.0.0:m2

CVE-2013-6429

Severity: Medium
CVSS Score: 6.8
CWE: CWE-264 Permissions, Privileges, and Access Controls

The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resolution, which allows remote attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via crafted XML, aka an XML External Entity (XXE) issue, and a different vulnerability than CVE-2013-4152 and CVE-2013-7315.

- BUGTRAQ - 20140114 CVE-2013-6429 Fix for XML External Entity (XXE) injection (CVE-2013-4152) in Spring Framework was incomplete
- CONFIRM - http://www.gopivotal.com/security/cve-2013-6429
- CONFIRM - https://jira.springsource.org/browse/SPR-11078?page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel
- REDHAT - RHSA-2014:0400
- SECUNIA - 57915

Vulnerable Software & Versions: (show all)

- cpe:/a:springsource:spring_framework:2.5.5
- ...
- cpe:/a:springsource:spring_framework:1.1.0
- cpe:/a:springsource:spring_framework:2.0
- cpe:/a:springsource:spring_framework:2.0:m1
- cpe:/a:springsource:spring_framework:2.0:m2
- cpe:/a:springsource:spring_framework:2.0:m3
- cpe:/a:springsource:spring_framework:2.0:m4
- cpe:/a:springsource:spring_framework:2.0:m5
- cpe:/a:springsource:spring_framework:2.0:rc1
- cpe:/a:springsource:spring_framework:2.0:rc2
- cpe:/a:springsource:spring_framework:2.0:rc3
- cpe:/a:springsource:spring_framework:2.0:rc4
- cpe:/a:springsource:spring_framework:2.0.1
- cpe:/a:springsource:spring_framework:2.0.2
- cpe:/a:springsource:spring_framework:2.0.3
- cpe:/a:springsource:spring_framework:2.0.4
- cpe:/a:springsource:spring_framework:2.0.5
- cpe:/a:springsource:spring_framework:2.1:m1
- cpe:/a:springsource:spring_framework:2.1:m2
- cpe:/a:springsource:spring_framework:2.1:m3
- cpe:/a:springsource:spring_framework:2.1:m4
- cpe:/a:springsource:spring_framework:2.5.0
- cpe:/a:springsource:spring_framework:2.5.0:rc1
- cpe:/a:springsource:spring_framework:2.5.0:rc2
- cpe:/a:springsource:spring_framework:2.5.1
- cpe:/a:springsource:spring_framework:2.5.2
- cpe:/a:springsource:spring_framework:2.5.3
- cpe:/a:springsource:spring_framework:2.5.4
- cpe:/a:springsource:spring_framework:2.5.5
- cpe:/a:springsource:spring_framework:2.5.6
- cpe:/a:springsource:spring_framework:2.5.7
- cpe:/a:springsource:spring_framework:2.5.7_sr01
- cpe:/a:springsource:spring_framework:3.0.0
- cpe:/a:springsource:spring_framework:3.0.0:m1
- cpe:/a:springsource:spring_framework:3.0.0:m2
- cpe:/a:springsource:spring_framework:3.0.0:m3
- cpe:/a:springsource:spring_framework:3.0.0:m4
- cpe:/a:springsource:spring_framework:3.0.0:rc1
- cpe:/a:springsource:spring_framework:3.0.0:rc2
- cpe:/a:springsource:spring_framework:3.0.0:rc3
- cpe:/a:springsource:spring_framework:3.0.0.m1
- cpe:/a:springsource:spring_framework:3.0.0.m2
- cpe:/a:springsource:spring_framework:3.0.1
- cpe:/a:springsource:spring_framework:3.0.2
- cpe:/a:springsource:spring_framework:3.0.3
- cpe:/a:springsource:spring_framework:3.0.4
- cpe:/a:springsource:spring_framework:3.0.5
- cpe:/a:springsource:spring_framework:3.0.6
- cpe:/a:springsource:spring_framework:3.0.7
- cpe:/a:springsource:spring_framework:3.1.0
- cpe:/a:springsource:spring_framework:3.1.1
- cpe:/a:springsource:spring_framework:3.1.2
- cpe:/a:springsource:spring_framework:3.1.3
- cpe:/a:springsource:spring_framework:3.1.4
- cpe:/a:springsource:spring_framework:3.2.0
- cpe:/a:springsource:spring_framework:3.2.1
- cpe:/a:springsource:spring_framework:3.2.2
- cpe:/a:springsource:spring_framework:3.2.3
- cpe:/a:springsource:spring_framework:3.2.4 and all previous versions
- cpe:/a:springsource:spring_framework:4.0.0:m1
- cpe:/a:springsource:spring_framework:4.0.0:m2
- cpe:/a:springsource:spring_framework:4.0.0:rc1

CVE-2013-4152

Severity: Medium
CVSS Score: 6.8
CWE: CWE-264 Permissions, Privileges, and Access Controls

The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable entity resolution, which allows context-dependent attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via an XML external entity declaration in conjunction with an entity reference in a (1) DOMSource, (2) StAXSource, (3) SAXSource, or (4) StreamSource, aka an XML External Entity (XXE) issue.

- BUGTRAQ - 20130822 CVE-2013-4152 XML External Entity (XXE) injection in Spring Framework
- CONFIRM - http://www.gopivotal.com/security/cve-2013-4152
- CONFIRM - https://github.com/spring-projects/spring-framework/pull/317/files
- CONFIRM - https://jira.springsource.org/browse/SPR-10806
- DEBIAN - DSA-2842
- FULLDISC - 20131102 XXE Injection in Spring Framework
- REDHAT - RHSA-2014:0212
- REDHAT - RHSA-2014:0245
- REDHAT - RHSA-2014:0254
- REDHAT - RHSA-2014:0400
- SECUNIA - 56247
- SECUNIA - 57915

Vulnerable Software & Versions: (show all)

- cpe:/a:springsource:spring_framework:3.2.3 and all previous versions
- ...
- cpe:/a:springsource:spring_framework:3.0.0
- cpe:/a:springsource:spring_framework:3.0.0:m1
- cpe:/a:springsource:spring_framework:3.0.0:m2
- cpe:/a:springsource:spring_framework:3.0.0:m3
- cpe:/a:springsource:spring_framework:3.0.0:m4
- cpe:/a:springsource:spring_framework:3.0.0:rc1
- cpe:/a:springsource:spring_framework:3.0.0:rc2
- cpe:/a:springsource:spring_framework:3.0.0:rc3
- cpe:/a:springsource:spring_framework:3.0.0.m1
- cpe:/a:springsource:spring_framework:3.0.0.m2
- cpe:/a:springsource:spring_framework:3.0.1
- cpe:/a:springsource:spring_framework:3.0.2
- cpe:/a:springsource:spring_framework:3.0.3
- cpe:/a:springsource:spring_framework:3.0.4
- cpe:/a:springsource:spring_framework:3.0.5
- cpe:/a:springsource:spring_framework:3.0.6
- cpe:/a:springsource:spring_framework:3.0.7
- cpe:/a:springsource:spring_framework:3.1.0
- cpe:/a:springsource:spring_framework:3.1.1
- cpe:/a:springsource:spring_framework:3.1.2
- cpe:/a:springsource:spring_framework:3.1.3
- cpe:/a:springsource:spring_framework:3.1.4
- cpe:/a:springsource:spring_framework:3.2.0
- cpe:/a:springsource:spring_framework:3.2.1
- cpe:/a:springsource:spring_framework:3.2.2
- cpe:/a:springsource:spring_framework:3.2.3 and all previous versions
- cpe:/a:springsource:spring_framework:4.0.0:m1

CVE-2011-2730

Severity: High
CVSS Score: 7.5
CWE: CWE-16 Configuration

VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before 3.0.6, when a container supports Expression Language (EL), evaluates EL expressions in tags twice, which allows remote attackers to obtain sensitive information via a (1) name attribute in a (a) spring:hasBindErrors tag; (2) path attribute in a (b) spring:bind or (c) spring:nestedpath tag; (3) arguments, (4) code, (5) text, (6) var, (7) scope, or (8) message attribute in a (d) spring:message or (e) spring:theme tag; or (9) var, (10) scope, or (11) value attribute in a (f) spring:transform tag, aka "Expression Language Injection."

- CONFIRM - http://support.springsource.com/security/cve-2011-2730
- DEBIAN - DSA-2504
- MISC - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=677814
- MISC - https://docs.google.com/document/d/1dc1xxO8UMFaGLOwgkykYdghGWm_2Gn0iCrxFsympqcE/edit
- REDHAT - RHSA-2013:0191
- REDHAT - RHSA-2013:0192
- REDHAT - RHSA-2013:0193
- REDHAT - RHSA-2013:0194
- REDHAT - RHSA-2013:0195
- REDHAT - RHSA-2013:0196
- REDHAT - RHSA-2013:0197
- REDHAT - RHSA-2013:0198
- REDHAT - RHSA-2013:0221
- SECTRACK - 1029151
- SECUNIA - 51984
- SECUNIA - 52054
- SECUNIA - 55155

Vulnerable Software & Versions: (show all)

- cpe:/a:springsource:spring_framework:2.5.5
- ...
- cpe:/a:springsource:spring_framework:2.5.0
- cpe:/a:springsource:spring_framework:2.5.0:rc1
- cpe:/a:springsource:spring_framework:2.5.0:rc2
- cpe:/a:springsource:spring_framework:2.5.1
- cpe:/a:springsource:spring_framework:2.5.2
- cpe:/a:springsource:spring_framework:2.5.3
- cpe:/a:springsource:spring_framework:2.5.4
- cpe:/a:springsource:spring_framework:2.5.5
- cpe:/a:springsource:spring_framework:2.5.6
- cpe:/a:springsource:spring_framework:2.5.7
- cpe:/a:springsource:spring_framework:2.5.7_sr01 and all previous versions
- cpe:/a:springsource:spring_framework:3.0.0
- cpe:/a:springsource:spring_framework:3.0.1
- cpe:/a:springsource:spring_framework:3.0.2
- cpe:/a:springsource:spring_framework:3.0.3
- cpe:/a:springsource:spring_framework:3.0.4
- cpe:/a:springsource:spring_framework:3.0.5 and all previous versions

CVE-2010-1622

Severity: Medium
CVSS Score: 5.1
CWE: CWE-94 Improper Control of Generation of Code ('Code Injection')

SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file.

- BID - 40954
- BUGTRAQ - 20100618 CVE-2010-1622: Spring Framework execution of arbitrary code
- CONFIRM - http://geronimo.apache.org/2010/07/21/apache-geronimo-v216-released.html
- CONFIRM - http://geronimo.apache.org/21x-security-report.html
- CONFIRM - http://geronimo.apache.org/22x-security-report.html
- CONFIRM - http://www.springsource.com/security/cve-2010-1622
- EXPLOIT-DB - 13918
- REDHAT - RHSA-2011:0175
- SECUNIA - 41016
- SECUNIA - 41025
- SECUNIA - 43087
- VUPEN - ADV-2011-0237

Vulnerable Software & Versions: (show all)

- cpe:/a:springsource:spring_framework:2.5.5
- ...
- cpe:/a:springsource:spring_framework:2.5.0
- cpe:/a:springsource:spring_framework:2.5.1
- cpe:/a:springsource:spring_framework:2.5.2
- cpe:/a:springsource:spring_framework:2.5.3
- cpe:/a:springsource:spring_framework:2.5.4
- cpe:/a:springsource:spring_framework:2.5.5
- cpe:/a:springsource:spring_framework:2.5.6
- cpe:/a:springsource:spring_framework:2.5.7
- cpe:/a:springsource:spring_framework:3.0.0
- cpe:/a:springsource:spring_framework:3.0.1
- cpe:/a:springsource:spring_framework:3.0.2

### spring-core-3.0.0.RELEASE.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\spring-core-3.0.0.RELEASE.jar
MD5: 2D52A505F093291E4A2C7E1A28F34557
SHA1: 4F268922155FF53FB7B28AECA24FB28D5A439D95

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 3.0.0
file | name | spring-core-3.0.0.RELEASE
hint analyzer | product | springsource_spring_framework
hint analyzer | vendor | SpringSource
hint analyzer | vendor | vmware
jar | package | core
jar | package | springframework
jar | package name | core
jar | package name | io
jar | package name | springframework
jar | package name | xml
Manifest | Bundle-Name | Spring Core
Manifest | bundle-symbolicname | org.springframework.core
Manifest | Bundle-Vendor | SpringSource
Manifest | Bundle-Version | 3.0.0.RELEASE
Manifest | ignored-existing-headers | Bnd-LastModified,Import-Package,Export-Package,Tool
Manifest | Implementation-Title | org.springframework.core
Manifest | Implementation-Version | 3.0.0.RELEASE
Manifest | import-template | javax.xml.*;version="0";resolution:=optional,org.apache.commons.logging.*;version="[1.1.1, 2.0.0)",org.springframework.asm.*;version="[3.0.0, 3.0.1)";resolution:=optional,org.apache.log4j.*;version="[1.2.15, 2.0.0)";resolution:=optional,org.aspectj.*;version="[1.5.4, 2.0.0)";resolution:=optional,org.jboss.virtual.*;version="[2.1.0.GA, 3.0.0)";resolution:=optional,org.xml.sax.*;version="0";resolution:=optional,org.w3c.dom.*;version="0";resolution:=optional
nexus | artifactid | spring-core
nexus | groupid | org.springframework
nexus | version | 3.0.0.RELEASE

#### Identifiers

- cpe: cpe:/a:springsource:spring_framework:3.0.0 Confidence:HIGHEST
- cpe: cpe:/a:vmware:springsource_spring_framework:3.0.0 Confidence:HIGHEST
- maven: org.springframework:spring-core:3.0.0.RELEASE Confidence:HIGHEST

#### Published Vulnerabilities

CVE-2014-1904

Severity: Medium
CVSS Score: 4.3
CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Cross-site scripting (XSS) vulnerability in web/servlet/tags/form/FormTag.java in Spring MVC in Spring Framework 3.0.0 before 3.2.8 and 4.0.0 before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the requested URI in a default action.

- BUGTRAQ - 20140311 CVE-2014-1904 XSS when using Spring MVC
- CONFIRM - http://docs.spring.io/spring/docs/3.2.8.RELEASE/changelog.txt
- CONFIRM - http://www.gopivotal.com/security/cve-2014-1904
- CONFIRM - https://github.com/spring-projects/spring-framework/commit/741b4b229ae032bd17175b46f98673ce0bd2d485
- CONFIRM - https://jira.springsource.org/browse/SPR-11426
- REDHAT - RHSA-2014:0400
- SECUNIA - 57915

Vulnerable Software & Versions: (show all)

- cpe:/a:springsource:spring_framework:3.0.0
- ...
- cpe:/a:springsource:spring_framework:3.0.0
- cpe:/a:springsource:spring_framework:3.0.0:m1
- cpe:/a:springsource:spring_framework:3.0.0:m2
- cpe:/a:springsource:spring_framework:3.0.0:m3
- cpe:/a:springsource:spring_framework:3.0.0:m4
- cpe:/a:springsource:spring_framework:3.0.0:rc1
- cpe:/a:springsource:spring_framework:3.0.0:rc2
- cpe:/a:springsource:spring_framework:3.0.0:rc3
- cpe:/a:springsource:spring_framework:3.0.1
- cpe:/a:springsource:spring_framework:3.0.2
- cpe:/a:springsource:spring_framework:3.0.3
- cpe:/a:springsource:spring_framework:3.0.4
- cpe:/a:springsource:spring_framework:3.0.5
- cpe:/a:springsource:spring_framework:3.0.6
- cpe:/a:springsource:spring_framework:3.0.7
- cpe:/a:springsource:spring_framework:3.1.0
- cpe:/a:springsource:spring_framework:3.1.1
- cpe:/a:springsource:spring_framework:3.1.2
- cpe:/a:springsource:spring_framework:3.1.3
- cpe:/a:springsource:spring_framework:3.1.4
- cpe:/a:springsource:spring_framework:3.2.0
- cpe:/a:springsource:spring_framework:3.2.1
- cpe:/a:springsource:spring_framework:3.2.2
- cpe:/a:springsource:spring_framework:3.2.3
- cpe:/a:springsource:spring_framework:3.2.4
- cpe:/a:springsource:spring_framework:3.2.5
- cpe:/a:springsource:spring_framework:3.2.6
- cpe:/a:springsource:spring_framework:3.2.7 and all previous versions
- cpe:/a:springsource:spring_framework:4.0.0:m1
- cpe:/a:springsource:spring_framework:4.0.0:m2
- cpe:/a:springsource:spring_framework:4.0.0:rc1
- cpe:/a:springsource:spring_framework:4.0.1 and all previous versions

CVE-2014-0054

Severity: Medium
CVSS Score: 6.8
CWE: CWE-352

The Jaxb2RootElementHttpMessageConverter in Spring MVC in Spring Framework before 3.2.8 and 4.0.0 before 4.0.2 does not disable external entity resolution, which allows remote attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via crafted XML, aka an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4152, CVE-2013-7315, and CVE-2013-6429.

- CONFIRM - https://jira.spring.io/browse/SPR-11376
- REDHAT - RHSA-2014:0400
- SECUNIA - 57915

Vulnerable Software & Versions: (show all)

- cpe:/a:springsource:spring_framework:3.0.0
- ...
- cpe:/a:springsource:spring_framework:3.0.0
- cpe:/a:springsource:spring_framework:3.0.0:m1
- cpe:/a:springsource:spring_framework:3.0.0:m2
- cpe:/a:springsource:spring_framework:3.0.0:m3
- cpe:/a:springsource:spring_framework:3.0.0:m4
- cpe:/a:springsource:spring_framework:3.0.0:rc1
- cpe:/a:springsource:spring_framework:3.0.0:rc2
- cpe:/a:springsource:spring_framework:3.0.0:rc3
- cpe:/a:springsource:spring_framework:3.0.0.m1
- cpe:/a:springsource:spring_framework:3.0.0.m2
- cpe:/a:springsource:spring_framework:3.0.1
- cpe:/a:springsource:spring_framework:3.0.2
- cpe:/a:springsource:spring_framework:3.0.3
- cpe:/a:springsource:spring_framework:3.0.4
- cpe:/a:springsource:spring_framework:3.0.5
- cpe:/a:springsource:spring_framework:3.0.6
- cpe:/a:springsource:spring_framework:3.0.7
- cpe:/a:springsource:spring_framework:3.1.0
- cpe:/a:springsource:spring_framework:3.1.1
- cpe:/a:springsource:spring_framework:3.1.2
- cpe:/a:springsource:spring_framework:3.1.3
- cpe:/a:springsource:spring_framework:3.1.4
- cpe:/a:springsource:spring_framework:3.2.0
- cpe:/a:springsource:spring_framework:3.2.1
- cpe:/a:springsource:spring_framework:3.2.2
- cpe:/a:springsource:spring_framework:3.2.3
- cpe:/a:springsource:spring_framework:3.2.4
- cpe:/a:springsource:spring_framework:3.2.5
- cpe:/a:springsource:spring_framework:3.2.6
- cpe:/a:springsource:spring_framework:3.2.7 and all previous versions
- cpe:/a:springsource:spring_framework:4.0.0:m1
- cpe:/a:springsource:spring_framework:4.0.0:m2
- cpe:/a:springsource:spring_framework:4.0.0:rc1
- cpe:/a:springsource:spring_framework:4.0.1

CVE-2013-7315

Severity: Medium
CVSS Score: 6.8
CWE: CWE-264 Permissions, Privileges, and Access Controls

The Spring MVC in Spring Framework before 3.2.4 and 4.0.0.M1 through 4.0.0.M2 does not disable external entity resolution for the StAX XMLInputFactory, which allows context-dependent attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via crafted XML with JAXB, aka an XML External Entity (XXE) issue, and a different vulnerability than CVE-2013-4152. NOTE: this issue was SPLIT from CVE-2013-4152 due to different affected versions.

- BUGTRAQ - 20130822 CVE-2013-4152 XML External Entity (XXE) injection in Spring Framework
- CONFIRM - http://www.gopivotal.com/security/cve-2013-4152
- CONFIRM - https://jira.springsource.org/browse/SPR-10806
- DEBIAN - DSA-2842
- FULLDISC - 20131102 XXE Injection in Spring Framework

Vulnerable Software & Versions: (show all)

- cpe:/a:springsource:spring_framework:3.0.0
- ...
- cpe:/a:springsource:spring_framework:3.0.0
- cpe:/a:springsource:spring_framework:3.0.0:m1
- cpe:/a:springsource:spring_framework:3.0.0:m2
- cpe:/a:springsource:spring_framework:3.0.0:m3
- cpe:/a:springsource:spring_framework:3.0.0:m4
- cpe:/a:springsource:spring_framework:3.0.0:rc1
- cpe:/a:springsource:spring_framework:3.0.0:rc2
- cpe:/a:springsource:spring_framework:3.0.0:rc3
- cpe:/a:springsource:spring_framework:3.0.0.m1
- cpe:/a:springsource:spring_framework:3.0.0.m2
- cpe:/a:springsource:spring_framework:3.0.1
- cpe:/a:springsource:spring_framework:3.0.2
- cpe:/a:springsource:spring_framework:3.0.3
- cpe:/a:springsource:spring_framework:3.0.4
- cpe:/a:springsource:spring_framework:3.0.5
- cpe:/a:springsource:spring_framework:3.0.6
- cpe:/a:springsource:spring_framework:3.0.7
- cpe:/a:springsource:spring_framework:3.1.0
- cpe:/a:springsource:spring_framework:3.1.1
- cpe:/a:springsource:spring_framework:3.1.2
- cpe:/a:springsource:spring_framework:3.1.3
- cpe:/a:springsource:spring_framework:3.1.4
- cpe:/a:springsource:spring_framework:3.2.0
- cpe:/a:springsource:spring_framework:3.2.1
- cpe:/a:springsource:spring_framework:3.2.2
- cpe:/a:springsource:spring_framework:3.2.3 and all previous versions
- cpe:/a:springsource:spring_framework:4.0.0:m1
- cpe:/a:springsource:spring_framework:4.0.0:m2

CVE-2013-6429

Severity: Medium
CVSS Score: 6.8
CWE: CWE-264 Permissions, Privileges, and Access Controls

The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resolution, which allows remote attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via crafted XML, aka an XML External Entity (XXE) issue, and a different vulnerability than CVE-2013-4152 and CVE-2013-7315.

- BUGTRAQ - 20140114 CVE-2013-6429 Fix for XML External Entity (XXE) injection (CVE-2013-4152) in Spring Framework was incomplete
- CONFIRM - http://www.gopivotal.com/security/cve-2013-6429
- CONFIRM - https://jira.springsource.org/browse/SPR-11078?page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel
- REDHAT - RHSA-2014:0400
- SECUNIA - 57915

Vulnerable Software & Versions: (show all)

- cpe:/a:springsource:spring_framework:3.0.0
- ...
- cpe:/a:springsource:spring_framework:1.1.0
- cpe:/a:springsource:spring_framework:2.0
- cpe:/a:springsource:spring_framework:2.0:m1
- cpe:/a:springsource:spring_framework:2.0:m2
- cpe:/a:springsource:spring_framework:2.0:m3
- cpe:/a:springsource:spring_framework:2.0:m4
- cpe:/a:springsource:spring_framework:2.0:m5
- cpe:/a:springsource:spring_framework:2.0:rc1
- cpe:/a:springsource:spring_framework:2.0:rc2
- cpe:/a:springsource:spring_framework:2.0:rc3
- cpe:/a:springsource:spring_framework:2.0:rc4
- cpe:/a:springsource:spring_framework:2.0.1
- cpe:/a:springsource:spring_framework:2.0.2
- cpe:/a:springsource:spring_framework:2.0.3
- cpe:/a:springsource:spring_framework:2.0.4
- cpe:/a:springsource:spring_framework:2.0.5
- cpe:/a:springsource:spring_framework:2.1:m1
- cpe:/a:springsource:spring_framework:2.1:m2
- cpe:/a:springsource:spring_framework:2.1:m3
- cpe:/a:springsource:spring_framework:2.1:m4
- cpe:/a:springsource:spring_framework:2.5.0
- cpe:/a:springsource:spring_framework:2.5.0:rc1
- cpe:/a:springsource:spring_framework:2.5.0:rc2
- cpe:/a:springsource:spring_framework:2.5.1
- cpe:/a:springsource:spring_framework:2.5.2
- cpe:/a:springsource:spring_framework:2.5.3
- cpe:/a:springsource:spring_framework:2.5.4
- cpe:/a:springsource:spring_framework:2.5.5
- cpe:/a:springsource:spring_framework:2.5.6
- cpe:/a:springsource:spring_framework:2.5.7
- cpe:/a:springsource:spring_framework:2.5.7_sr01
- cpe:/a:springsource:spring_framework:3.0.0
- cpe:/a:springsource:spring_framework:3.0.0:m1
- cpe:/a:springsource:spring_framework:3.0.0:m2
- cpe:/a:springsource:spring_framework:3.0.0:m3
- cpe:/a:springsource:spring_framework:3.0.0:m4
- cpe:/a:springsource:spring_framework:3.0.0:rc1
- cpe:/a:springsource:spring_framework:3.0.0:rc2
- cpe:/a:springsource:spring_framework:3.0.0:rc3
- cpe:/a:springsource:spring_framework:3.0.0.m1
- cpe:/a:springsource:spring_framework:3.0.0.m2
- cpe:/a:springsource:spring_framework:3.0.1
- cpe:/a:springsource:spring_framework:3.0.2
- cpe:/a:springsource:spring_framework:3.0.3
- cpe:/a:springsource:spring_framework:3.0.4
- cpe:/a:springsource:spring_framework:3.0.5
- cpe:/a:springsource:spring_framework:3.0.6
- cpe:/a:springsource:spring_framework:3.0.7
- cpe:/a:springsource:spring_framework:3.1.0
- cpe:/a:springsource:spring_framework:3.1.1
- cpe:/a:springsource:spring_framework:3.1.2
- cpe:/a:springsource:spring_framework:3.1.3
- cpe:/a:springsource:spring_framework:3.1.4
- cpe:/a:springsource:spring_framework:3.2.0
- cpe:/a:springsource:spring_framework:3.2.1
- cpe:/a:springsource:spring_framework:3.2.2
- cpe:/a:springsource:spring_framework:3.2.3
- cpe:/a:springsource:spring_framework:3.2.4 and all previous versions
- cpe:/a:springsource:spring_framework:4.0.0:m1
- cpe:/a:springsource:spring_framework:4.0.0:m2
- cpe:/a:springsource:spring_framework:4.0.0:rc1

CVE-2013-4152

Severity: Medium
CVSS Score: 6.8
CWE: CWE-264 Permissions, Privileges, and Access Controls

The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable entity resolution, which allows context-dependent attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via an XML external entity declaration in conjunction with an entity reference in a (1) DOMSource, (2) StAXSource, (3) SAXSource, or (4) StreamSource, aka an XML External Entity (XXE) issue.

- BUGTRAQ - 20130822 CVE-2013-4152 XML External Entity (XXE) injection in Spring Framework
- CONFIRM - http://www.gopivotal.com/security/cve-2013-4152
- CONFIRM - https://github.com/spring-projects/spring-framework/pull/317/files
- CONFIRM - https://jira.springsource.org/browse/SPR-10806
- DEBIAN - DSA-2842
- FULLDISC - 20131102 XXE Injection in Spring Framework
- REDHAT - RHSA-2014:0212
- REDHAT - RHSA-2014:0245
- REDHAT - RHSA-2014:0254
- REDHAT - RHSA-2014:0400
- SECUNIA - 56247
- SECUNIA - 57915

Vulnerable Software & Versions: (show all)

- cpe:/a:springsource:spring_framework:3.0.0
- ...
- cpe:/a:springsource:spring_framework:3.0.0
- cpe:/a:springsource:spring_framework:3.0.0:m1
- cpe:/a:springsource:spring_framework:3.0.0:m2
- cpe:/a:springsource:spring_framework:3.0.0:m3
- cpe:/a:springsource:spring_framework:3.0.0:m4
- cpe:/a:springsource:spring_framework:3.0.0:rc1
- cpe:/a:springsource:spring_framework:3.0.0:rc2
- cpe:/a:springsource:spring_framework:3.0.0:rc3
- cpe:/a:springsource:spring_framework:3.0.0.m1
- cpe:/a:springsource:spring_framework:3.0.0.m2
- cpe:/a:springsource:spring_framework:3.0.1
- cpe:/a:springsource:spring_framework:3.0.2
- cpe:/a:springsource:spring_framework:3.0.3
- cpe:/a:springsource:spring_framework:3.0.4
- cpe:/a:springsource:spring_framework:3.0.5
- cpe:/a:springsource:spring_framework:3.0.6
- cpe:/a:springsource:spring_framework:3.0.7
- cpe:/a:springsource:spring_framework:3.1.0
- cpe:/a:springsource:spring_framework:3.1.1
- cpe:/a:springsource:spring_framework:3.1.2
- cpe:/a:springsource:spring_framework:3.1.3
- cpe:/a:springsource:spring_framework:3.1.4
- cpe:/a:springsource:spring_framework:3.2.0
- cpe:/a:springsource:spring_framework:3.2.1
- cpe:/a:springsource:spring_framework:3.2.2
- cpe:/a:springsource:spring_framework:3.2.3 and all previous versions
- cpe:/a:springsource:spring_framework:4.0.0:m1

CVE-2011-2894

Severity: Medium
CVSS Score: 6.8
CWE: CWE-264 Permissions, Privileges, and Access Controls

Spring Framework 3.0.0 through 3.0.5, Spring Security 3.0.0 through 3.0.5 and 2.0.0 through 2.0.6, and possibly other versions deserialize objects from untrusted sources, which allows remote attackers to bypass intended security restrictions and execute untrusted code by (1) serializing a java.lang.Proxy instance and using InvocationHandler, or (2) accessing internal AOP interfaces, as demonstrated using deserialization of a DefaultListableBeanFactory instance to execute arbitrary commands via the java.lang.Runtime class.

- BID - 49536
- BUGTRAQ - 20110909 CVE-2011-2894: Spring Framework and Spring Security serialization-based remoting vulnerabilities
- CONFIRM - http://www.springsource.com/security/cve-2011-2894
- OSVDB - 75263
- REDHAT - RHSA-2011:1334
- SREASON - 8405
- XF - spring-framework-object-sec-bypass(69687)

Vulnerable Software & Versions: (show all)

- cpe:/a:vmware:springsource_spring_framework:3.0.0
- ...
- cpe:/a:vmware:springsource_spring_framework:3.0.0
- cpe:/a:vmware:springsource_spring_framework:3.0.0:m1
- cpe:/a:vmware:springsource_spring_framework:3.0.0:m2
- cpe:/a:vmware:springsource_spring_framework:3.0.0:m3
- cpe:/a:vmware:springsource_spring_framework:3.0.0:m4
- cpe:/a:vmware:springsource_spring_framework:3.0.0:rc1
- cpe:/a:vmware:springsource_spring_framework:3.0.0:rc2
- cpe:/a:vmware:springsource_spring_framework:3.0.0:rc3
- cpe:/a:vmware:springsource_spring_framework:3.0.1
- cpe:/a:vmware:springsource_spring_framework:3.0.2
- cpe:/a:vmware:springsource_spring_framework:3.0.3
- cpe:/a:vmware:springsource_spring_framework:3.0.4
- cpe:/a:vmware:springsource_spring_framework:3.0.5
- cpe:/a:vmware:springsource_spring_security:2.0.0
- cpe:/a:vmware:springsource_spring_security:2.0.1
- cpe:/a:vmware:springsource_spring_security:2.0.2
- cpe:/a:vmware:springsource_spring_security:2.0.3
- cpe:/a:vmware:springsource_spring_security:2.0.4
- cpe:/a:vmware:springsource_spring_security:2.0.5
- cpe:/a:vmware:springsource_spring_security:2.0.6
- cpe:/a:vmware:springsource_spring_security:3.0.0
- cpe:/a:vmware:springsource_spring_security:3.0.1
- cpe:/a:vmware:springsource_spring_security:3.0.2
- cpe:/a:vmware:springsource_spring_security:3.0.3
- cpe:/a:vmware:springsource_spring_security:3.0.4
- cpe:/a:vmware:springsource_spring_security:3.0.5

CVE-2011-2730

Severity: High
CVSS Score: 7.5
CWE: CWE-16 Configuration

VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before 3.0.6, when a container supports Expression Language (EL), evaluates EL expressions in tags twice, which allows remote attackers to obtain sensitive information via a (1) name attribute in a (a) spring:hasBindErrors tag; (2) path attribute in a (b) spring:bind or (c) spring:nestedpath tag; (3) arguments, (4) code, (5) text, (6) var, (7) scope, or (8) message attribute in a (d) spring:message or (e) spring:theme tag; or (9) var, (10) scope, or (11) value attribute in a (f) spring:transform tag, aka "Expression Language Injection."

- CONFIRM - http://support.springsource.com/security/cve-2011-2730
- DEBIAN - DSA-2504
- MISC - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=677814
- MISC - https://docs.google.com/document/d/1dc1xxO8UMFaGLOwgkykYdghGWm_2Gn0iCrxFsympqcE/edit
- REDHAT - RHSA-2013:0191
- REDHAT - RHSA-2013:0192
- REDHAT - RHSA-2013:0193
- REDHAT - RHSA-2013:0194
- REDHAT - RHSA-2013:0195
- REDHAT - RHSA-2013:0196
- REDHAT - RHSA-2013:0197
- REDHAT - RHSA-2013:0198
- REDHAT - RHSA-2013:0221
- SECTRACK - 1029151
- SECUNIA - 51984
- SECUNIA - 52054
- SECUNIA - 55155

Vulnerable Software & Versions: (show all)

- cpe:/a:springsource:spring_framework:3.0.0
- ...
- cpe:/a:springsource:spring_framework:2.5.0
- cpe:/a:springsource:spring_framework:2.5.0:rc1
- cpe:/a:springsource:spring_framework:2.5.0:rc2
- cpe:/a:springsource:spring_framework:2.5.1
- cpe:/a:springsource:spring_framework:2.5.2
- cpe:/a:springsource:spring_framework:2.5.3
- cpe:/a:springsource:spring_framework:2.5.4
- cpe:/a:springsource:spring_framework:2.5.5
- cpe:/a:springsource:spring_framework:2.5.6
- cpe:/a:springsource:spring_framework:2.5.7
- cpe:/a:springsource:spring_framework:2.5.7_sr01 and all previous versions
- cpe:/a:springsource:spring_framework:3.0.0
- cpe:/a:springsource:spring_framework:3.0.1
- cpe:/a:springsource:spring_framework:3.0.2
- cpe:/a:springsource:spring_framework:3.0.3
- cpe:/a:springsource:spring_framework:3.0.4
- cpe:/a:springsource:spring_framework:3.0.5 and all previous versions

CVE-2010-1622

Severity: Medium
CVSS Score: 5.1
CWE: CWE-94 Improper Control of Generation of Code ('Code Injection')

SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file.

- BID - 40954
- BUGTRAQ - 20100618 CVE-2010-1622: Spring Framework execution of arbitrary code
- CONFIRM - http://geronimo.apache.org/2010/07/21/apache-geronimo-v216-released.html
- CONFIRM - http://geronimo.apache.org/21x-security-report.html
- CONFIRM - http://geronimo.apache.org/22x-security-report.html
- CONFIRM - http://www.springsource.com/security/cve-2010-1622
- EXPLOIT-DB - 13918
- REDHAT - RHSA-2011:0175
- SECUNIA - 41016
- SECUNIA - 41025
- SECUNIA - 43087
- VUPEN - ADV-2011-0237

Vulnerable Software & Versions: (show all)

- cpe:/a:springsource:spring_framework:3.0.0
- ...
- cpe:/a:springsource:spring_framework:2.5.0
- cpe:/a:springsource:spring_framework:2.5.1
- cpe:/a:springsource:spring_framework:2.5.2
- cpe:/a:springsource:spring_framework:2.5.3
- cpe:/a:springsource:spring_framework:2.5.4
- cpe:/a:springsource:spring_framework:2.5.5
- cpe:/a:springsource:spring_framework:2.5.6
- cpe:/a:springsource:spring_framework:2.5.7
- cpe:/a:springsource:spring_framework:3.0.0
- cpe:/a:springsource:spring_framework:3.0.1
- cpe:/a:springsource:spring_framework:3.0.2

### stagedhttp-modified.tar\commons-httpclient-2.0.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\stagedhttp-modified.tar\WEB-INF\lib\commons-httpclient-2.0.jar
MD5: E0C0C1F887A8B1025A8BED9BFF6AB771
SHA1: 19F1CB5FFD50C37B7EE43B8BC7A185B421EA3E9C

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 2.0
file | name | commons-httpclient-2.0
jar | package | apache
jar | package | commons
jar | package | httpclient
jar | package name | apache
jar | package name | commons
jar | package name | httpclient
Manifest | extension-name | commons-httpclient
Manifest | Implementation-Vendor | Apache Software Foundation
Manifest | Implementation-Vendor-Id |
Manifest | Implementation-Version | 2.0
Manifest | specification-title | Jakarta Commons HttpClient
Manifest | specification-vendor | Apache Software Foundation
Manifest | specification-version |

#### Identifiers

- cpe: cpe:/a:apache:commons-httpclient:2.0 Confidence:LOW
- cpe: cpe:/a:apache:httpclient:2.0 Confidence:LOW

### stagedhttp-modified.tar\commons-logging.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\stagedhttp-modified.tar\WEB-INF\lib\commons-logging.jar
MD5: 5BC8BDD15B18018E84FD862993AACA42
SHA1: 760C711C71588BC273D3E56D196D720A7678CD93

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | commons-logging
jar | package | apache
jar | package | commons
jar | package | impl
jar | package | logging
jar | package name | apache
jar | package name | commons
jar | package name | log
jar | package name | logging
Manifest | extension-name | org.apache.commons.logging
Manifest | Implementation-Vendor | Apache Software Foundation
Manifest | Implementation-Version | 1.0.3
Manifest | specification-vendor | Apache Software Foundation
Manifest | specification-version | 1.0
nexus | artifactid | commons-logging
nexus | groupid | commons-logging
nexus | version | 1.0.3

#### Identifiers

- maven: commons-logging:commons-logging:1.0.3 Confidence:HIGHEST

### stagedhttp-modified.tar\dom4j.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\stagedhttp-modified.tar\WEB-INF\lib\dom4j.jar
MD5: 85E3E7DFD9D039DA0B8EA0A46129323F
SHA1: 8DECB7E2C04C9340375AAF7DD43A7A6A9B9A46B1

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 4
file | name | dom4j
jar | package name | dom
jar | package name | dom4j
Manifest | extension-name | org.dom4j
Manifest | Implementation-Title | dom4j
Manifest | Implementation-Vendor | MetaStuff Ltd.
Manifest | Implementation-Version | 1.3
Manifest | specification-title | dom4j
Manifest | specification-vendor | MetaStuff Ltd.
Manifest | specification-version | 1.3
nexus | artifactid | dom4j
nexus | groupid | dom4j
nexus | version | 1.4

#### Identifiers

- maven: dom4j:dom4j:1.4 Confidence:HIGHEST

### stagedhttp-modified.tar\jgroups-all.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\stagedhttp-modified.tar\WEB-INF\lib\jgroups-all.jar
MD5: 06B44A40F4215AF9A534ACE65C51A2CA
SHA1: 15201A98948972D4E890A1D9BD6B728B917EF21C

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | jgroups-all
jar | package | jgroups

#### Identifiers

- None

### stagedhttp-modified.tar\log4j.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\stagedhttp-modified.tar\WEB-INF\lib\log4j.jar
MD5: 91E6A0CD2788D69808C05FAE11D69679
SHA1: C28B336AA1547A885DDEF944AF6BFB7BFF25ABF0

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 4
file | name | log4j
jar | package | apache
jar | package | log4j

#### Identifiers

- None

### stagedhttp-modified.tar\mail.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\stagedhttp-modified.tar\WEB-INF\lib\mail.jar
MD5: 3AD3CDE613B7E9700FED08D979BCCCC7
SHA1: 6D16579C99EA9FD5CA5FD2DBE45A5144C2873681

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | mail
jar | package | mail
jar | package | sun
jar | package name | javax
jar | package name | mail
jar | package name | sun
jar (hint) | package | oracle
jar (hint) | package name | oracle
Manifest | extension-name | javax.mail
Manifest | Implementation-Vendor | Sun Microsystems, Inc.
Manifest | Implementation-Vendor-Id | com.sun
Manifest | Implementation-Version | 1.3.2
Manifest | sccs-id | @(#)javamail.mf 1.5 02/03/14
Manifest | specification-title | JavaMail(TM) API Design Specification
Manifest | specification-vendor | Sun Microsystems, Inc.
Manifest | specification-version | 1.3

#### Identifiers

- cpe: cpe:/a:sun:javamail:1.3.2 Confidence:HIGH

#### Published Vulnerabilities

CVE-2007-6059

Severity: Medium
CVSS Score: 5.0
CWE: CWE-399 Resource Management Errors

** DISPUTED ** Javamail does not properly handle a series of invalid login attempts in which the same e-mail address is entered as username and password, and the domain portion of this address yields a Java UnknownHostException error, which allows remote attackers to cause a denial of service (connection pool exhaustion) via a large number of requests, resulting in a SQLNestedException. NOTE: Sun disputes this issue, stating "The report makes references to source code and files that do not exist in the mentioned products."

- BUGTRAQ - 20071116 Javamail login username and password same email problem
- OSVDB - 45299

Vulnerable Software & Versions:

- cpe:/a:sun:javamail

CVE-2005-1754

Severity: Medium
CVSS Score: 5.0
CWE: CWE-200 Information Exposure

** DISPUTED ** JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to read arbitrary files via a full pathname in the argument to the Download parameter. NOTE: Sun and Apache dispute this issue. Sun states: "The report makes references to source code and files that do not exist in the mentioned products."

- BID - 13753
- BUGTRAQ - 20050524 Javamail Multiple Information Disclosure Vulnerabilities
- MISC - http://tomcat.apache.org/security-5.html

Vulnerable Software & Versions: (show all)

- cpe:/a:sun:javamail:1.3.2
- ...
- cpe:/a:apache_tomcat:apache_tomcat:5.0.16
- cpe:/a:sun:javamail:1.1.3
- cpe:/a:sun:javamail:1.2
- cpe:/a:sun:javamail:1.3
- cpe:/a:sun:javamail:1.3.2

CVE-2005-1105

Severity: Medium
CVSS Score: 5.0

Directory traversal vulnerability in the MimeBodyPart.getFileName method in JavaMail 1.3.2 allows remote attackers to write arbitrary files via a .. (dot dot) in the filename in the Content-Disposition header.

- BUGTRAQ - 20050412 JavaMail allows directory traversal in attachments

Vulnerable Software & Versions:

- cpe:/a:sun:javamail:1.3.2

### stagedhttp-modified.tar\serializer.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\stagedhttp-modified.tar\WEB-INF\lib\serializer.jar
MD5: 35AA6A56662458D9DC28A9B628F84847
SHA1: 85DDD38E4CDBC22FB6C518F3D35744336DA6FBFD

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | serializer
jar | package | apache
jar | package | serializer
jar | package | xml

#### Identifiers

- None

### stagedhttp-modified.tar\xalan.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\stagedhttp-modified.tar\WEB-INF\lib\xalan.jar
MD5: 126C0C876A6B9726CFDD43F052923660
SHA1: 10F170DA8DFBCDCC4098131BA773710F0BA7AEF1

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | xalan
jar | package | apache

#### Identifiers

- None

### stagedhttp-modified.tar\xmlsec-1.3.0.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\stagedhttp-modified.tar\WEB-INF\lib\xmlsec-1.3.0.jar
MD5: ED82E8662F1823E70BA8F468F57EB11B
SHA1: 59C4B71E0A5871F26DB91EAAB236E5B9BF41122E

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.3.0
file | name | xmlsec-1.3.0
jar | package | apache
jar | package | security
jar | package | xml
nexus | artifactid | xmlsec
nexus | groupid | xml-security
nexus | version | 1.3.0

#### Identifiers

- maven: xml-security:xmlsec:1.3.0 Confidence:HIGHEST

### stagedhttp-modified.tar\xss4j.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\stagedhttp-modified.tar\WEB-INF\lib\xss4j.jar
MD5: 3572AC321C3A854EC49D8594A17E3699
SHA1: D0F4126B39370C3FAD93163CA17FD3CAA3D29E97

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 4
file | name | xss4j
jar | package | ibm
jar | package | xml

#### Identifiers

- None

### struts.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\struts.jar
MD5: AA4AE098EC87FBCD6591402E5CBD781A
SHA1: F69E6119EB01F9AD064BD358ED0315618FB1CB5C

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | struts
jar | package | apache
jar | package | struts
jar | package name | apache
jar | package name | struts
Manifest | extension-name | Struts Framework
Manifest | Implementation-Title | Struts Framework
Manifest | Implementation-Vendor | The Apache Software Foundation
Manifest | Implementation-Vendor-Id | org.apache
Manifest | Implementation-Version | 1.2.7
Manifest | specification-title | Struts Framework
Manifest | specification-vendor | The Apache Software Foundation
Manifest | specification-version | 1.2.7
nexus | artifactid | struts
nexus | groupid | struts
nexus | version | 1.2.7

#### Related Dependencies

- file.tar.gz\file.tar\struts.jar
  - File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\file.tar.gz\file.tar\struts.jar
  - SHA1: F69E6119EB01F9AD064BD358ED0315618FB1CB5C
  - MD5: AA4AE098EC87FBCD6591402E5CBD781A
  - maven: struts:struts:1.2.7
- file.tar\struts.jar
  - File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\file.tar\struts.jar
  - SHA1: F69E6119EB01F9AD064BD358ED0315618FB1CB5C
  - MD5: AA4AE098EC87FBCD6591402E5CBD781A
  - maven: struts:struts:1.2.7
- file.tgz\file.tar\struts.jar
  - File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\file.tgz\file.tar\struts.jar
  - SHA1: F69E6119EB01F9AD064BD358ED0315618FB1CB5C
  - MD5: AA4AE098EC87FBCD6591402E5CBD781A
  - maven: struts:struts:1.2.7

#### Identifiers

- cpe: cpe:/a:apache:struts:1.2.7 Confidence:HIGH
- maven: struts:struts:1.2.7 Confidence:HIGHEST

#### Published Vulnerabilities

CVE-2014-0114

Severity: High
CVSS Score: 7.5
CWE: CWE-20 Improper Input Validation

The ActionForm object in Apache Struts 1.x through 1.3.10 allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via the class parameter, which is passed to the getClass method.

- CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=1091938

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:1.2.7
- ...
- cpe:/a:apache:struts:1.0
- cpe:/a:apache:struts:1.0.2
- cpe:/a:apache:struts:1.1
- cpe:/a:apache:struts:1.1:b1
- cpe:/a:apache:struts:1.1:b2
- cpe:/a:apache:struts:1.1:b3
- cpe:/a:apache:struts:1.1:rc1
- cpe:/a:apache:struts:1.1:rc2
- cpe:/a:apache:struts:1.2.2
- cpe:/a:apache:struts:1.2.4
- cpe:/a:apache:struts:1.2.6
- cpe:/a:apache:struts:1.2.7
- cpe:/a:apache:struts:1.2.8
- cpe:/a:apache:struts:1.2.9
- cpe:/a:apache:struts:1.3.5
- cpe:/a:apache:struts:1.3.8
- cpe:/a:apache:struts:1.3.10

CVE-2008-6504

Severity: Medium
CVSS Score: 5.0
CWE: CWE-20 Improper Input Validation

ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not properly restrict # (pound sign) references to context objects, which allows remote attackers to execute Object-Graph Navigation Language (OGNL) statements and modify server-side context objects, as demonstrated by use of a \u0023 representation for the # character.

- BID - 32101
- CONFIRM - http://fisheye6.atlassian.com/cru/CR-9/
- CONFIRM - http://issues.apache.org/struts/browse/WW-2692
- CONFIRM - http://jira.opensymphony.com/browse/XW-641
- CONFIRM - http://struts.apache.org/2.x/docs/s2-003.html
- OSVDB - 49732
- SECUNIA - 32495
- SECUNIA - 32497
- VUPEN - ADV-2008-3003
- VUPEN - ADV-2008-3004
- XF - xwork-parameterinterceptor-security-bypass(46328)

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts
- ...
- cpe:/a:apache:struts
- cpe:/a:opensymphony:xwork:2.0.0
- cpe:/a:opensymphony:xwork:2.0.1
- cpe:/a:opensymphony:xwork:2.0.2
- cpe:/a:opensymphony:xwork:2.0.3
- cpe:/a:opensymphony:xwork:2.0.4
- cpe:/a:opensymphony:xwork:2.0.5
- cpe:/a:opensymphony:xwork:2.1.0
- cpe:/a:opensymphony:xwork:2.1.1

CVE-2008-2025

Severity: Medium
CVSS Score: 4.3
CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Cross-site scripting (XSS) vulnerability in Apache Struts before 1.2.9-162.31.1 on SUSE Linux Enterprise (SLE) 11, before 1.2.9-108.2 on SUSE openSUSE 10.3, before 1.2.9-198.2 on SUSE openSUSE 11.0, and before 1.2.9-162.163.2 on SUSE openSUSE 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "insufficient quoting of parameters."

- CONFIRM - http://download.opensuse.org/update/10.3-test/repodata/patch-struts-5872.xml
- CONFIRM - http://support.novell.com/security/cve/CVE-2008-2025.html
- MISC - https://bugzilla.novell.com/show_bug.cgi?id=385273
- MISC - https://launchpad.net/bugs/cve/2008-2025
- OSVDB - 53380
- SECUNIA - 34567
- SECUNIA - 34642
- SUSE - SUSE-SR:2009:008

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:1.2.7
- ...
- cpe:/a:apache:struts:1.0.2
- cpe:/a:apache:struts:1.1
- cpe:/a:apache:struts:1.2.4
- cpe:/a:apache:struts:1.2.7
- cpe:/a:apache:struts:1.2.8

CVE-2006-1548

Severity: Medium
CVSS Score: 4.3

Cross-site scripting (XSS) vulnerability in (1) LookupDispatchAction and possibly (2) DispatchAction and (3) ActionDispatcher in Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to inject arbitrary web script or HTML via the parameter name, which is not filtered in the resulting error message.

- BID - 17342
- CONFIRM - http://issues.apache.org/bugzilla/show_bug.cgi?id=38749
- CONFIRM - http://struts.apache.org/struts-doc-1.2.9/userGuide/release-notes.html
- CONFIRM - https://issues.apache.org/struts/browse/STR-2781
- SECTRACK - 1015856
- SECUNIA - 19493
- SECUNIA - 20117
- SUSE - SUSE-SR:2006:010
- VUPEN - ADV-2006-1205
- XF - struts-lookupmap-xss(25614)

Vulnerable Software & Versions:

- cpe:/a:apache:struts:1.2.8 and all previous versions

CVE-2006-1547

Severity: High
CVSS Score: 7.8

ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a multipart/form-data encoded form with a parameter name that references the public getMultipartRequestHandler method, which provides further access to elements in the CommonsMultipartRequestHandler implementation and BeanUtils.

- BID - 17342
- CONFIRM - http://issues.apache.org/bugzilla/show_bug.cgi?id=38534
- CONFIRM - http://struts.apache.org/struts-doc-1.2.9/userGuide/release-notes.html
- SECTRACK - 1015856
- SECUNIA - 19493
- SECUNIA - 20117
- SUSE - SUSE-SR:2006:010
- VUPEN - ADV-2006-1205
- XF - struts-actionform-dos(25613)

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:1.2.7
- ...
- cpe:/a:apache:struts:1.2.7
- cpe:/a:apache:struts:1.2.8 and all previous versions

CVE-2006-1546

Severity: High
CVSS Score: 7.5

Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to bypass validation via a request with a 'org.apache.struts.taglib.html.Constants.CANCEL' parameter, which causes the action to be canceled but would not be detected from applications that do not use the isCancelled check.

- BID - 17342
- CONFIRM - http://issues.apache.org/bugzilla/show_bug.cgi?id=38374
- CONFIRM - http://struts.apache.org/struts-doc-1.2.9/userGuide/release-notes.html
- MLIST - [struts-devel] 20060122 Re: Validation Security Hole?
- MLIST - [struts-user] 20060121 Validation Security Hole?
- SECTRACK - 1015856
- SECUNIA - 19493
- SECUNIA - 20117
- SUSE - SUSE-SR:2006:010
- VUPEN - ADV-2006-1205
- XF - struts-iscancelled-security-bypass(25612)

Vulnerable Software & Versions:

- cpe:/a:apache:struts:1.2.8 and all previous versions

CVE-2005-3745

Severity: Medium
CVSS Score: 4.3

Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly quoted or filtered when the request handler generates an error message.

- BID - 15512
- BUGTRAQ - 20051121 Security Advisory: Struts Error Message Cross Site Scripting
- MISC - http://www.hacktics.com/AdvStrutsNov05.html
- OSVDB - 21021
- REDHAT - RHSA-2006:0157
- REDHAT - RHSA-2006:0161
- SECTRACK - 1015257
- SECUNIA - 17677
- SECUNIA - 18341
- SREASON - 197
- VUPEN - ADV-2005-2525

Vulnerable Software & Versions:

- cpe:/a:apache:struts:1.2.7

### struts2-core-2.1.2.jar

Description: Apache Struts 2

License:

    http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\struts2-core-2.1.2.jar
MD5: C30B57142E1CCBC1EFD5CD15F307358F
SHA1: 89CE9E36AA9A9E03F1450936D2F4F8DD0F961F8B

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 2.1.2
file | name | struts2-core-2.1.2
jar | package name | apache
jar | package name | struts2
Manifest | bundle-docurl | http://www.apache.org
Manifest | Bundle-Name | Struts 2 Core
Manifest | bundle-symbolicname | org.apache.struts.struts2-core
Manifest | Bundle-Vendor | Apache Software Foundation
Manifest | Bundle-Version | 2.1.2
nexus | artifactid | struts2-core
nexus | groupid | org.apache.struts
nexus | version | 2.1.2
pom | artifactid | struts2-core
pom | groupid | apache.struts
pom | name | Struts 2 Core

#### Identifiers

- cpe: cpe:/a:apache:struts:2.1.2 Confidence:HIGHEST
- maven: org.apache.struts:struts2-core:2.1.2 Confidence:HIGHEST

#### Published Vulnerabilities

CVE-2014-0116

Severity: Medium
CVSS Score: 5.8
CWE: CWE-264 Permissions, Privileges, and Access Controls

CookieInterceptor in Apache Struts 2.x before 2.3.16.3, when a wildcard cookiesName value is used, does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and modify session state via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0113.

- CONFIRM - http://struts.apache.org/release/2.3.x/docs/s2-022.html

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:2.1.2
- ...
- cpe:/a:apache:struts:2.0.0
- cpe:/a:apache:struts:2.0.1
- cpe:/a:apache:struts:2.0.2
- cpe:/a:apache:struts:2.0.3
- cpe:/a:apache:struts:2.0.4
- cpe:/a:apache:struts:2.0.5
- cpe:/a:apache:struts:2.0.6
- cpe:/a:apache:struts:2.0.7
- cpe:/a:apache:struts:2.0.8
- cpe:/a:apache:struts:2.0.9
- cpe:/a:apache:struts:2.0.10
- cpe:/a:apache:struts:2.0.11
- cpe:/a:apache:struts:2.0.11.1
- cpe:/a:apache:struts:2.0.11.2
- cpe:/a:apache:struts:2.0.12
- cpe:/a:apache:struts:2.0.13
- cpe:/a:apache:struts:2.0.14
- cpe:/a:apache:struts:2.1.0
- cpe:/a:apache:struts:2.1.1
- cpe:/a:apache:struts:2.1.2
- cpe:/a:apache:struts:2.1.3
- cpe:/a:apache:struts:2.1.4
- cpe:/a:apache:struts:2.1.5
- cpe:/a:apache:struts:2.1.6
- cpe:/a:apache:struts:2.1.8
- cpe:/a:apache:struts:2.1.8.1
- cpe:/a:apache:struts:2.2.1
- cpe:/a:apache:struts:2.2.1.1
- cpe:/a:apache:struts:2.2.3
- cpe:/a:apache:struts:2.2.3.1
- cpe:/a:apache:struts:2.3.1
- cpe:/a:apache:struts:2.3.1.1
- cpe:/a:apache:struts:2.3.1.2
- cpe:/a:apache:struts:2.3.3
- cpe:/a:apache:struts:2.3.4
- cpe:/a:apache:struts:2.3.4.1
- cpe:/a:apache:struts:2.3.7
- cpe:/a:apache:struts:2.3.8
- cpe:/a:apache:struts:2.3.12
- cpe:/a:apache:struts:2.3.14
- cpe:/a:apache:struts:2.3.14.1
- cpe:/a:apache:struts:2.3.14.2
- cpe:/a:apache:struts:2.3.14.3
- cpe:/a:apache:struts:2.3.15
- cpe:/a:apache:struts:2.3.15.1
- cpe:/a:apache:struts:2.3.15.2
- cpe:/a:apache:struts:2.3.15.3
- cpe:/a:apache:struts:2.3.16
- cpe:/a:apache:struts:2.3.16.1
- cpe:/a:apache:struts:2.3.16.2

CVE-2014-0113

Severity: High
CVSS Score: 7.5
CWE: CWE-264 Permissions, Privileges, and Access Controls

CookieInterceptor in Apache Struts before 2.3.16.2, when a wildcard cookiesName value is used, does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0094.

- BUGTRAQ - 20140426 [ANN] Struts 2.3.16.2 GA release available - security fix
- CONFIRM - https://cwiki.apache.org/confluence/display/WW/S2-021

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:2.1.2
- ...
- cpe:/a:apache:struts:2.0.0
- cpe:/a:apache:struts:2.0.1
- cpe:/a:apache:struts:2.0.2
- cpe:/a:apache:struts:2.0.3
- cpe:/a:apache:struts:2.0.4
- cpe:/a:apache:struts:2.0.5
- cpe:/a:apache:struts:2.0.6
- cpe:/a:apache:struts:2.0.7
- cpe:/a:apache:struts:2.0.8
- cpe:/a:apache:struts:2.0.9
- cpe:/a:apache:struts:2.0.10
- cpe:/a:apache:struts:2.0.11
- cpe:/a:apache:struts:2.0.11.1
- cpe:/a:apache:struts:2.0.11.2
- cpe:/a:apache:struts:2.0.12
- cpe:/a:apache:struts:2.0.13
- cpe:/a:apache:struts:2.0.14
- cpe:/a:apache:struts:2.1.0
- cpe:/a:apache:struts:2.1.1
- cpe:/a:apache:struts:2.1.2
- cpe:/a:apache:struts:2.1.3
- cpe:/a:apache:struts:2.1.4
- cpe:/a:apache:struts:2.1.5
- cpe:/a:apache:struts:2.1.6
- cpe:/a:apache:struts:2.1.8
- cpe:/a:apache:struts:2.1.8.1
- cpe:/a:apache:struts:2.2.1
- cpe:/a:apache:struts:2.2.1.1
- cpe:/a:apache:struts:2.2.3
- cpe:/a:apache:struts:2.2.3.1
- cpe:/a:apache:struts:2.3.1
- cpe:/a:apache:struts:2.3.1.1
- cpe:/a:apache:struts:2.3.1.2
- cpe:/a:apache:struts:2.3.3
- cpe:/a:apache:struts:2.3.4
- cpe:/a:apache:struts:2.3.4.1
- cpe:/a:apache:struts:2.3.7
- cpe:/a:apache:struts:2.3.8
- cpe:/a:apache:struts:2.3.12
- cpe:/a:apache:struts:2.3.14
- cpe:/a:apache:struts:2.3.14.1
- cpe:/a:apache:struts:2.3.14.2
- cpe:/a:apache:struts:2.3.14.3
- cpe:/a:apache:struts:2.3.15
- cpe:/a:apache:struts:2.3.15.1
- cpe:/a:apache:struts:2.3.15.2
- cpe:/a:apache:struts:2.3.15.3
- cpe:/a:apache:struts:2.3.16
- cpe:/a:apache:struts:2.3.16.1 and all previous versions

CVE-2014-0112

Severity: High
CVSS Score: 7.5
CWE: CWE-264 Permissions, Privileges, and Access Controls

ParametersInterceptor in Apache Struts before 2.3.16.2 does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0094.

- BUGTRAQ - 20140426 [ANN] Struts 2.3.16.2 GA release available - security fix
- CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=1091939
- CONFIRM - https://cwiki.apache.org/confluence/display/WW/S2-021
- JVN - JVN#19294237
- JVNDB - JVNDB-2014-000045

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:2.1.2
- ...
- cpe:/a:apache:struts:2.0.0
- cpe:/a:apache:struts:2.0.1
- cpe:/a:apache:struts:2.0.2
- cpe:/a:apache:struts:2.0.3
- cpe:/a:apache:struts:2.0.4
- cpe:/a:apache:struts:2.0.5
- cpe:/a:apache:struts:2.0.6
- cpe:/a:apache:struts:2.0.7
- cpe:/a:apache:struts:2.0.8
- cpe:/a:apache:struts:2.0.9
- cpe:/a:apache:struts:2.0.10
- cpe:/a:apache:struts:2.0.11
- cpe:/a:apache:struts:2.0.11.1
- cpe:/a:apache:struts:2.0.11.2
- cpe:/a:apache:struts:2.0.12
- cpe:/a:apache:struts:2.0.13
- cpe:/a:apache:struts:2.0.14
- cpe:/a:apache:struts:2.1.0
- cpe:/a:apache:struts:2.1.1
- cpe:/a:apache:struts:2.1.2
- cpe:/a:apache:struts:2.1.3
- cpe:/a:apache:struts:2.1.4
- cpe:/a:apache:struts:2.1.5
- cpe:/a:apache:struts:2.1.6
- cpe:/a:apache:struts:2.1.8
- cpe:/a:apache:struts:2.1.8.1
- cpe:/a:apache:struts:2.2.1
- cpe:/a:apache:struts:2.2.1.1
- cpe:/a:apache:struts:2.2.3
- cpe:/a:apache:struts:2.2.3.1
- cpe:/a:apache:struts:2.3.1
- cpe:/a:apache:struts:2.3.1.1
- cpe:/a:apache:struts:2.3.1.2
- cpe:/a:apache:struts:2.3.3
- cpe:/a:apache:struts:2.3.4
- cpe:/a:apache:struts:2.3.4.1
- cpe:/a:apache:struts:2.3.7
- cpe:/a:apache:struts:2.3.8
- cpe:/a:apache:struts:2.3.12
- cpe:/a:apache:struts:2.3.14
- cpe:/a:apache:struts:2.3.14.1
- cpe:/a:apache:struts:2.3.14.2
- cpe:/a:apache:struts:2.3.14.3
- cpe:/a:apache:struts:2.3.15
- cpe:/a:apache:struts:2.3.15.1
- cpe:/a:apache:struts:2.3.15.2
- cpe:/a:apache:struts:2.3.15.3
- cpe:/a:apache:struts:2.3.16
- cpe:/a:apache:struts:2.3.16.1 and all previous versions

CVE-2014-0094

Severity: Medium
CVSS Score: 5.0

The ParametersInterceptor in Apache Struts before 2.3.16.1 allows remote attackers to "manipulate" the ClassLoader via the class parameter, which is passed to the getClass method.

- BID - 65999
- BUGTRAQ - 20140306 [ANN] Struts 2.3.16.1 GA release available - security fix
- CONFIRM - http://struts.apache.org/release/2.3.x/docs/s2-020.html
- JVN - JVN#19294237
- JVNDB - JVNDB-2014-000045
- SECTRACK - 1029876
- SECUNIA - 56440

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:2.1.2
- ...
- cpe:/a:apache:struts:2.0.0
- cpe:/a:apache:struts:2.0.1
- cpe:/a:apache:struts:2.0.2
- cpe:/a:apache:struts:2.0.3
- cpe:/a:apache:struts:2.0.4
- cpe:/a:apache:struts:2.0.5
- cpe:/a:apache:struts:2.0.6
- cpe:/a:apache:struts:2.0.7
- cpe:/a:apache:struts:2.0.8
- cpe:/a:apache:struts:2.0.9
- cpe:/a:apache:struts:2.0.10
- cpe:/a:apache:struts:2.0.11
- cpe:/a:apache:struts:2.0.11.1
- cpe:/a:apache:struts:2.0.11.2
- cpe:/a:apache:struts:2.0.12
- cpe:/a:apache:struts:2.0.13
- cpe:/a:apache:struts:2.0.14
- cpe:/a:apache:struts:2.1.0
- cpe:/a:apache:struts:2.1.1
- cpe:/a:apache:struts:2.1.2
- cpe:/a:apache:struts:2.1.3
- cpe:/a:apache:struts:2.1.4
- cpe:/a:apache:struts:2.1.5
- cpe:/a:apache:struts:2.1.6
- cpe:/a:apache:struts:2.1.8
- cpe:/a:apache:struts:2.1.8.1
- cpe:/a:apache:struts:2.2.1
- cpe:/a:apache:struts:2.2.1.1
- cpe:/a:apache:struts:2.2.3
- cpe:/a:apache:struts:2.2.3.1
- cpe:/a:apache:struts:2.3.1
- cpe:/a:apache:struts:2.3.1.1
- cpe:/a:apache:struts:2.3.1.2
- cpe:/a:apache:struts:2.3.3
- cpe:/a:apache:struts:2.3.4
- cpe:/a:apache:struts:2.3.4.1
- cpe:/a:apache:struts:2.3.7
- cpe:/a:apache:struts:2.3.8
- cpe:/a:apache:struts:2.3.12
- cpe:/a:apache:struts:2.3.14
- cpe:/a:apache:struts:2.3.14.1
- cpe:/a:apache:struts:2.3.14.2
- cpe:/a:apache:struts:2.3.14.3
- cpe:/a:apache:struts:2.3.15
- cpe:/a:apache:struts:2.3.15.1
- cpe:/a:apache:struts:2.3.15.2
- cpe:/a:apache:struts:2.3.15.3
- cpe:/a:apache:struts:2.3.16 and all previous versions

CVE-2013-4316

Severity: High
CVSS Score: 10.0
CWE: CWE-16 Configuration

Apache Struts 2.0.0 through 2.3.15.1 enables Dynamic Method Invocation by default, which has unknown impact and attack vectors.

- BID - 64758
- BUGTRAQ - 20130921 [ANN] Struts 2.3.15.2 GA release available - security fix
- CONFIRM - http://struts.apache.org/release/2.3.x/docs/s2-019.html
- CONFIRM - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
- SECTRACK - 1029078

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:2.1.2
- ...
- cpe:/a:apache:struts:2.0.0
- cpe:/a:apache:struts:2.0.1
- cpe:/a:apache:struts:2.0.2
- cpe:/a:apache:struts:2.0.3
- cpe:/a:apache:struts:2.0.4
- cpe:/a:apache:struts:2.0.5
- cpe:/a:apache:struts:2.0.6
- cpe:/a:apache:struts:2.0.7
- cpe:/a:apache:struts:2.0.8
- cpe:/a:apache:struts:2.0.9
- cpe:/a:apache:struts:2.0.10
- cpe:/a:apache:struts:2.0.11
- cpe:/a:apache:struts:2.0.11.1
- cpe:/a:apache:struts:2.0.11.2
- cpe:/a:apache:struts:2.0.12
- cpe:/a:apache:struts:2.0.13
- cpe:/a:apache:struts:2.0.14
- cpe:/a:apache:struts:2.1.0
- cpe:/a:apache:struts:2.1.1
- cpe:/a:apache:struts:2.1.2
- cpe:/a:apache:struts:2.1.3
- cpe:/a:apache:struts:2.1.4
- cpe:/a:apache:struts:2.1.5
- cpe:/a:apache:struts:2.1.6
- cpe:/a:apache:struts:2.1.8
- cpe:/a:apache:struts:2.1.8.1
- cpe:/a:apache:struts:2.2.1
- cpe:/a:apache:struts:2.2.1.1
- cpe:/a:apache:struts:2.2.3
- cpe:/a:apache:struts:2.2.3.1
- cpe:/a:apache:struts:2.3.1
- cpe:/a:apache:struts:2.3.1.1
- cpe:/a:apache:struts:2.3.1.2
- cpe:/a:apache:struts:2.3.3
- cpe:/a:apache:struts:2.3.4
- cpe:/a:apache:struts:2.3.4.1
- cpe:/a:apache:struts:2.3.7
- cpe:/a:apache:struts:2.3.8
- cpe:/a:apache:struts:2.3.12
- cpe:/a:apache:struts:2.3.14
- cpe:/a:apache:struts:2.3.14.1
- cpe:/a:apache:struts:2.3.14.2
- cpe:/a:apache:struts:2.3.14.3
- cpe:/a:apache:struts:2.3.15
- cpe:/a:apache:struts:2.3.15.1

CVE-2013-4310

Severity: Medium
CVSS Score: 5.8
CWE: CWE-264 Permissions, Privileges, and Access Controls

Apache Struts 2.0.0 through 2.3.15.1 allows remote attackers to bypass access controls via a crafted action: prefix.

- BID - 64758
- BUGTRAQ - 20130921 [ANN] Struts 2.3.15.2 GA release available - security fix
- BUGTRAQ - 20131017 [ANN] Struts 2.3.15.3 GA release available - security fix
- CONFIRM - http://struts.apache.org/release/2.3.x/docs/s2-018.html
- CONFIRM - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
- SECTRACK - 1029077
- SECUNIA - 54919
- SECUNIA - 56483
- SECUNIA - 56492

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:2.1.2
- ...
- cpe:/a:apache:struts:2.0.0
- cpe:/a:apache:struts:2.0.1
- cpe:/a:apache:struts:2.0.2
- cpe:/a:apache:struts:2.0.3
- cpe:/a:apache:struts:2.0.4
- cpe:/a:apache:struts:2.0.5
- cpe:/a:apache:struts:2.0.6
- cpe:/a:apache:struts:2.0.7
- cpe:/a:apache:struts:2.0.8
- cpe:/a:apache:struts:2.0.9
- cpe:/a:apache:struts:2.0.10
- cpe:/a:apache:struts:2.0.11
- cpe:/a:apache:struts:2.0.11.1
- cpe:/a:apache:struts:2.0.11.2
- cpe:/a:apache:struts:2.0.12
- cpe:/a:apache:struts:2.0.13
- cpe:/a:apache:struts:2.0.14
- cpe:/a:apache:struts:2.1.0
- cpe:/a:apache:struts:2.1.1
- cpe:/a:apache:struts:2.1.2
- cpe:/a:apache:struts:2.1.3
- cpe:/a:apache:struts:2.1.4
- cpe:/a:apache:struts:2.1.5
- cpe:/a:apache:struts:2.1.6
- cpe:/a:apache:struts:2.1.8
- cpe:/a:apache:struts:2.1.8.1
- cpe:/a:apache:struts:2.2.1
- cpe:/a:apache:struts:2.2.1.1
- cpe:/a:apache:struts:2.2.3
- cpe:/a:apache:struts:2.2.3.1
- cpe:/a:apache:struts:2.3.1
- cpe:/a:apache:struts:2.3.1.1
- cpe:/a:apache:struts:2.3.1.2
- cpe:/a:apache:struts:2.3.3
- cpe:/a:apache:struts:2.3.4
- cpe:/a:apache:struts:2.3.4.1
- cpe:/a:apache:struts:2.3.7
- cpe:/a:apache:struts:2.3.8
- cpe:/a:apache:struts:2.3.12
- cpe:/a:apache:struts:2.3.14
- cpe:/a:apache:struts:2.3.14.1
- cpe:/a:apache:struts:2.3.14.2
- cpe:/a:apache:struts:2.3.14.3
- cpe:/a:apache:struts:2.3.15
- cpe:/a:apache:struts:2.3.15.1

CVE-2013-2251

Severity: High
CVSS Score: 9.3
CWE: CWE-20 Improper Input Validation

Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.

- BID - 64758
- CISCO - 20131023 Apache Struts 2 Command Execution Vulnerability in Multiple Cisco Products
- CONFIRM - http://archiva.apache.org/security.html
- CONFIRM - http://struts.apache.org/release/2.3.x/docs/s2-016.html
- CONFIRM - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
- FULLDISC - 20131013 Apache Software Foundation A Subsite Remote command execution
- MISC - http://cxsecurity.com/issue/WLB-2014010087
- MLIST - [oss-security] 20140114 Re: CVE Request: Apache Archiva Remote Command Execution 0day
- OSVDB - 98445
- SECTRACK - 1029184
- XF - apache-archiva-ognl-command-exec(90392)

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:2.1.2
- ...
- cpe:/a:apache:struts:2.0.0
- cpe:/a:apache:struts:2.0.1
- cpe:/a:apache:struts:2.0.2
- cpe:/a:apache:struts:2.0.3
- cpe:/a:apache:struts:2.0.4
- cpe:/a:apache:struts:2.0.5
- cpe:/a:apache:struts:2.0.6
- cpe:/a:apache:struts:2.0.7
- cpe:/a:apache:struts:2.0.8
- cpe:/a:apache:struts:2.0.9
- cpe:/a:apache:struts:2.0.10
- cpe:/a:apache:struts:2.0.11
- cpe:/a:apache:struts:2.0.11.1
- cpe:/a:apache:struts:2.0.11.2
- cpe:/a:apache:struts:2.0.12
- cpe:/a:apache:struts:2.0.13
- cpe:/a:apache:struts:2.0.14
- cpe:/a:apache:struts:2.1.0
- cpe:/a:apache:struts:2.1.1
- cpe:/a:apache:struts:2.1.2
- cpe:/a:apache:struts:2.1.3
- cpe:/a:apache:struts:2.1.4
- cpe:/a:apache:struts:2.1.5
- cpe:/a:apache:struts:2.1.6
- cpe:/a:apache:struts:2.1.8
- cpe:/a:apache:struts:2.1.8.1
- cpe:/a:apache:struts:2.2.1
- cpe:/a:apache:struts:2.2.1.1
- cpe:/a:apache:struts:2.2.3
- cpe:/a:apache:struts:2.2.3.1
- cpe:/a:apache:struts:2.3.1
- cpe:/a:apache:struts:2.3.1.1
- cpe:/a:apache:struts:2.3.1.2
- cpe:/a:apache:struts:2.3.3
- cpe:/a:apache:struts:2.3.4
- cpe:/a:apache:struts:2.3.4.1
- cpe:/a:apache:struts:2.3.7
- cpe:/a:apache:struts:2.3.8
- cpe:/a:apache:struts:2.3.12
- cpe:/a:apache:struts:2.3.14
- cpe:/a:apache:struts:2.3.14.1
- cpe:/a:apache:struts:2.3.14.2
- cpe:/a:apache:struts:2.3.14.3
- cpe:/a:apache:struts:2.3.15

CVE-2013-2248

Severity: Medium
CVSS Score: 5.8
CWE: CWE-20 Improper Input Validation

Multiple open redirect vulnerabilities in Apache Struts 2.0.0 through 2.3.15 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a parameter using the (1) redirect: or (2) redirectAction: prefix.

- BID - 64758
- CONFIRM - http://struts.apache.org/release/2.3.x/docs/s2-017.html
- CONFIRM - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
- CONFIRM - http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:2.1.2
- ...
- cpe:/a:apache:struts:2.0.0
- cpe:/a:apache:struts:2.0.1
- cpe:/a:apache:struts:2.0.2
- cpe:/a:apache:struts:2.0.3
- cpe:/a:apache:struts:2.0.4
- cpe:/a:apache:struts:2.0.5
- cpe:/a:apache:struts:2.0.6
- cpe:/a:apache:struts:2.0.7
- cpe:/a:apache:struts:2.0.8
- cpe:/a:apache:struts:2.0.9
- cpe:/a:apache:struts:2.0.10
- cpe:/a:apache:struts:2.0.11
- cpe:/a:apache:struts:2.0.11.1
- cpe:/a:apache:struts:2.0.11.2
- cpe:/a:apache:struts:2.0.12
- cpe:/a:apache:struts:2.0.13
- cpe:/a:apache:struts:2.0.14
- cpe:/a:apache:struts:2.1.0
- cpe:/a:apache:struts:2.1.1
- cpe:/a:apache:struts:2.1.2
- cpe:/a:apache:struts:2.1.3
- cpe:/a:apache:struts:2.1.4
- cpe:/a:apache:struts:2.1.5
- cpe:/a:apache:struts:2.1.6
- cpe:/a:apache:struts:2.1.8
- cpe:/a:apache:struts:2.1.8.1
- cpe:/a:apache:struts:2.2.1
- cpe:/a:apache:struts:2.2.1.1
- cpe:/a:apache:struts:2.2.3
- cpe:/a:apache:struts:2.2.3.1
- cpe:/a:apache:struts:2.3.1
- cpe:/a:apache:struts:2.3.1.1
- cpe:/a:apache:struts:2.3.1.2
- cpe:/a:apache:struts:2.3.3
- cpe:/a:apache:struts:2.3.4
- cpe:/a:apache:struts:2.3.4.1
- cpe:/a:apache:struts:2.3.7
- cpe:/a:apache:struts:2.3.8
- cpe:/a:apache:struts:2.3.12
- cpe:/a:apache:struts:2.3.14
- cpe:/a:apache:struts:2.3.14.1
- cpe:/a:apache:struts:2.3.14.2
- cpe:/a:apache:struts:2.3.14.3
- cpe:/a:apache:struts:2.3.15

CVE-2013-2135

Severity: High
CVSS Score: 9.3
CWE: CWE-94 Improper Control of Generation of Code ('Code Injection')

Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted value that contains both "${}" and "%{}" sequences, which causes the OGNL code to be evaluated twice.

- BID - 64758
- CONFIRM - http://struts.apache.org/development/2.x/docs/s2-015.html
- CONFIRM - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
- CONFIRM - http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
- MISC - https://cwiki.apache.org/confluence/display/WW/S2-015

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:2.1.2
- ...
- cpe:/a:apache:struts:2.0.0
- cpe:/a:apache:struts:2.0.1
- cpe:/a:apache:struts:2.0.2
- cpe:/a:apache:struts:2.0.3
- cpe:/a:apache:struts:2.0.4
- cpe:/a:apache:struts:2.0.5
- cpe:/a:apache:struts:2.0.6
- cpe:/a:apache:struts:2.0.7
- cpe:/a:apache:struts:2.0.8
- cpe:/a:apache:struts:2.0.9
- cpe:/a:apache:struts:2.0.10
- cpe:/a:apache:struts:2.0.11
- cpe:/a:apache:struts:2.0.11.1
- cpe:/a:apache:struts:2.0.11.2
- cpe:/a:apache:struts:2.0.12
- cpe:/a:apache:struts:2.0.13
- cpe:/a:apache:struts:2.0.14
- cpe:/a:apache:struts:2.1.0
- cpe:/a:apache:struts:2.1.1
- cpe:/a:apache:struts:2.1.2
- cpe:/a:apache:struts:2.1.3
- cpe:/a:apache:struts:2.1.4
- cpe:/a:apache:struts:2.1.5
- cpe:/a:apache:struts:2.1.6
- cpe:/a:apache:struts:2.1.8
- cpe:/a:apache:struts:2.1.8.1
- cpe:/a:apache:struts:2.2.1
- cpe:/a:apache:struts:2.2.1.1
- cpe:/a:apache:struts:2.2.3
- cpe:/a:apache:struts:2.2.3.1
- cpe:/a:apache:struts:2.3.1
- cpe:/a:apache:struts:2.3.1.1
- cpe:/a:apache:struts:2.3.1.2
- cpe:/a:apache:struts:2.3.3
- cpe:/a:apache:struts:2.3.4
- cpe:/a:apache:struts:2.3.4.1
- cpe:/a:apache:struts:2.3.7
- cpe:/a:apache:struts:2.3.8
- cpe:/a:apache:struts:2.3.12
- cpe:/a:apache:struts:2.3.14
- cpe:/a:apache:struts:2.3.14.1
- cpe:/a:apache:struts:2.3.14.2 and all previous versions

CVE-2013-2134

Severity: High
CVSS Score: 9.3
CWE: CWE-94 Improper Control of Generation of Code ('Code Injection')

Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted action name that is not properly handled during wildcard matching, a different vulnerability than CVE-2013-2135.

- BID - 64758
- CONFIRM - http://struts.apache.org/development/2.x/docs/s2-015.html
- CONFIRM - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
- CONFIRM - http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
- MISC - https://cwiki.apache.org/confluence/display/WW/S2-015

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:2.1.2
- ...
- cpe:/a:apache:struts:2.0.0
- cpe:/a:apache:struts:2.0.1
- cpe:/a:apache:struts:2.0.2
- cpe:/a:apache:struts:2.0.3
- cpe:/a:apache:struts:2.0.4
- cpe:/a:apache:struts:2.0.5
- cpe:/a:apache:struts:2.0.6
- cpe:/a:apache:struts:2.0.7
- cpe:/a:apache:struts:2.0.8
- cpe:/a:apache:struts:2.0.9
- cpe:/a:apache:struts:2.0.10
- cpe:/a:apache:struts:2.0.11
- cpe:/a:apache:struts:2.0.11.1
- cpe:/a:apache:struts:2.0.11.2
- cpe:/a:apache:struts:2.0.12
- cpe:/a:apache:struts:2.0.13
- cpe:/a:apache:struts:2.0.14
- cpe:/a:apache:struts:2.1.0
- cpe:/a:apache:struts:2.1.1
- cpe:/a:apache:struts:2.1.2
- cpe:/a:apache:struts:2.1.3
- cpe:/a:apache:struts:2.1.4
- cpe:/a:apache:struts:2.1.5
- cpe:/a:apache:struts:2.1.6
- cpe:/a:apache:struts:2.1.8
- cpe:/a:apache:struts:2.1.8.1
- cpe:/a:apache:struts:2.2.1
- cpe:/a:apache:struts:2.2.1.1
- cpe:/a:apache:struts:2.2.3
- cpe:/a:apache:struts:2.2.3.1
- cpe:/a:apache:struts:2.3.1
- cpe:/a:apache:struts:2.3.1.1
- cpe:/a:apache:struts:2.3.1.2
- cpe:/a:apache:struts:2.3.3
- cpe:/a:apache:struts:2.3.4
- cpe:/a:apache:struts:2.3.4.1
- cpe:/a:apache:struts:2.3.7
- cpe:/a:apache:struts:2.3.8
- cpe:/a:apache:struts:2.3.12
- cpe:/a:apache:struts:2.3.14
- cpe:/a:apache:struts:2.3.14.1
- cpe:/a:apache:struts:2.3.14.2 and all previous versions

CVE-2013-2115

Severity: High
CVSS Score: 9.3
CWE: CWE-94 Improper Control of Generation of Code ('Code Injection')

Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled when using the includeParams attribute in the (1) URL or (2) A tag. NOTE: this issue is due to an incomplete fix for CVE-2013-1966.

- BID - 60167
- CONFIRM - http://struts.apache.org/development/2.x/docs/s2-014.html
- MISC - https://bugzilla.redhat.com/show_bug.cgi?id=967656
- MISC - https://cwiki.apache.org/confluence/display/WW/S2-014

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:2.1.2
- ...
- cpe:/a:apache:struts:2.0.0
- cpe:/a:apache:struts:2.0.1
- cpe:/a:apache:struts:2.0.2
- cpe:/a:apache:struts:2.0.3
- cpe:/a:apache:struts:2.0.4
- cpe:/a:apache:struts:2.0.5
- cpe:/a:apache:struts:2.0.6
- cpe:/a:apache:struts:2.0.7
- cpe:/a:apache:struts:2.0.8
- cpe:/a:apache:struts:2.0.9
- cpe:/a:apache:struts:2.0.10
- cpe:/a:apache:struts:2.0.11
- cpe:/a:apache:struts:2.0.11.1
- cpe:/a:apache:struts:2.0.11.2
- cpe:/a:apache:struts:2.0.12
- cpe:/a:apache:struts:2.0.13
- cpe:/a:apache:struts:2.0.14
- cpe:/a:apache:struts:2.1.0
- cpe:/a:apache:struts:2.1.1
- cpe:/a:apache:struts:2.1.2
- cpe:/a:apache:struts:2.1.3
- cpe:/a:apache:struts:2.1.4
- cpe:/a:apache:struts:2.1.5
- cpe:/a:apache:struts:2.1.6
- cpe:/a:apache:struts:2.1.8
- cpe:/a:apache:struts:2.1.8.1
- cpe:/a:apache:struts:2.2.1
- cpe:/a:apache:struts:2.2.1.1
- cpe:/a:apache:struts:2.2.3
- cpe:/a:apache:struts:2.2.3.1
- cpe:/a:apache:struts:2.3.1
- cpe:/a:apache:struts:2.3.1.1
- cpe:/a:apache:struts:2.3.1.2
- cpe:/a:apache:struts:2.3.3
- cpe:/a:apache:struts:2.3.4
- cpe:/a:apache:struts:2.3.4.1
- cpe:/a:apache:struts:2.3.7
- cpe:/a:apache:struts:2.3.8
- cpe:/a:apache:struts:2.3.12
- cpe:/a:apache:struts:2.3.14
- cpe:/a:apache:struts:2.3.14.1 and all previous versions

CVE-2013-1966

Severity: High
CVSS Score: 9.3
CWE: CWE-94 Improper Control of Generation of Code ('Code Injection')

Apache Struts 2 before 2.3.14.1 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled when using the includeParams attribute in the (1) URL or (2) A tag.

- BID - 60166
- CONFIRM - http://struts.apache.org/development/2.x/docs/s2-013.html
- MISC - https://bugzilla.redhat.com/show_bug.cgi?id=967656
- MISC - https://cwiki.apache.org/confluence/display/WW/S2-013

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:2.1.2
- ...
- cpe:/a:apache:struts:2.0.0
- cpe:/a:apache:struts:2.0.1
- cpe:/a:apache:struts:2.0.2
- cpe:/a:apache:struts:2.0.3
- cpe:/a:apache:struts:2.0.4
- cpe:/a:apache:struts:2.0.5
- cpe:/a:apache:struts:2.0.6
- cpe:/a:apache:struts:2.0.7
- cpe:/a:apache:struts:2.0.8
- cpe:/a:apache:struts:2.0.9
- cpe:/a:apache:struts:2.0.10
- cpe:/a:apache:struts:2.0.11
- cpe:/a:apache:struts:2.0.11.1
- cpe:/a:apache:struts:2.0.11.2
- cpe:/a:apache:struts:2.0.12
- cpe:/a:apache:struts:2.0.13
- cpe:/a:apache:struts:2.0.14
- cpe:/a:apache:struts:2.1.0
- cpe:/a:apache:struts:2.1.1
- cpe:/a:apache:struts:2.1.2
- cpe:/a:apache:struts:2.1.3
- cpe:/a:apache:struts:2.1.4
- cpe:/a:apache:struts:2.1.5
- cpe:/a:apache:struts:2.1.6
- cpe:/a:apache:struts:2.1.8
- cpe:/a:apache:struts:2.1.8.1
- cpe:/a:apache:struts:2.2.1
- cpe:/a:apache:struts:2.2.1.1
- cpe:/a:apache:struts:2.2.3
- cpe:/a:apache:struts:2.2.3.1
- cpe:/a:apache:struts:2.3.1
- cpe:/a:apache:struts:2.3.1.1
- cpe:/a:apache:struts:2.3.1.2
- cpe:/a:apache:struts:2.3.3
- cpe:/a:apache:struts:2.3.4
- cpe:/a:apache:struts:2.3.4.1
- cpe:/a:apache:struts:2.3.7
- cpe:/a:apache:struts:2.3.8
- cpe:/a:apache:struts:2.3.12
- cpe:/a:apache:struts:2.3.14 and all previous versions

CVE-2013-1965

Severity: High
CVSS Score: 9.3
CWE: CWE-94 Improper Control of Generation of Code ('Code Injection')

Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.1, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled when invoking a redirect.

- BID - 60082
- CONFIRM - http://struts.apache.org/development/2.x/docs/s2-012.html
- MISC - https://bugzilla.redhat.com/show_bug.cgi?id=967655

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:2.1.2
- ...
- cpe:/a:apache:struts:2.0.0
- cpe:/a:apache:struts:2.0.1
- cpe:/a:apache:struts:2.0.2
- cpe:/a:apache:struts:2.0.3
- cpe:/a:apache:struts:2.0.4
- cpe:/a:apache:struts:2.0.5
- cpe:/a:apache:struts:2.0.6
- cpe:/a:apache:struts:2.0.7
- cpe:/a:apache:struts:2.0.8
- cpe:/a:apache:struts:2.0.9
- cpe:/a:apache:struts:2.0.10
- cpe:/a:apache:struts:2.0.11
- cpe:/a:apache:struts:2.0.11.1
- cpe:/a:apache:struts:2.0.11.2
- cpe:/a:apache:struts:2.0.12
- cpe:/a:apache:struts:2.0.13
- cpe:/a:apache:struts:2.0.14
- cpe:/a:apache:struts:2.1.0
- cpe:/a:apache:struts:2.1.1
- cpe:/a:apache:struts:2.1.2
- cpe:/a:apache:struts:2.1.3
- cpe:/a:apache:struts:2.1.4
- cpe:/a:apache:struts:2.1.5
- cpe:/a:apache:struts:2.1.6
- cpe:/a:apache:struts:2.1.8
- cpe:/a:apache:struts:2.1.8.1
- cpe:/a:apache:struts:2.2.1
- cpe:/a:apache:struts:2.2.1.1
- cpe:/a:apache:struts:2.2.3
- cpe:/a:apache:struts:2.2.3.1
- cpe:/a:apache:struts:2.3.1
- cpe:/a:apache:struts:2.3.1.1
- cpe:/a:apache:struts:2.3.1.2
- cpe:/a:apache:struts:2.3.3
- cpe:/a:apache:struts:2.3.4
- cpe:/a:apache:struts:2.3.4.1
- cpe:/a:apache:struts:2.3.7
- cpe:/a:apache:struts:2.3.8
- cpe:/a:apache:struts:2.3.12
- cpe:/a:apache:struts:2.3.14 and all previous versions
- cpe:/a:apache:struts2-showcase:2.0.0
- cpe:/a:apache:struts2-showcase:2.3.13

CVE-2012-4387

Severity: Medium
CVSS Score: 5.0
CWE: CWE-264 Permissions, Privileges, and Access Controls

Apache Struts 2.0.0 through 2.3.4 allows remote attackers to cause a denial of service (CPU consumption) via a long parameter name, which is processed as an OGNL expression.

- BID - 55346
- CONFIRM - http://struts.apache.org/2.x/docs/s2-011.html
- CONFIRM - https://issues.apache.org/jira/browse/WW-3860
- MLIST - [oss-security] 20120901 CVE request: Apache Struts S2-010 and S2-011
- MLIST - [oss-security] 20120901 Re: CVE request: Apache Struts S2-010 and S2-011
- SECUNIA - 50420
- XF - apache-struts-parameters-dos(78183)

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:2.1.2
- ...
- cpe:/a:apache:struts:2.0.0
- cpe:/a:apache:struts:2.0.1
- cpe:/a:apache:struts:2.0.2
- cpe:/a:apache:struts:2.0.3
- cpe:/a:apache:struts:2.0.4
- cpe:/a:apache:struts:2.0.5
- cpe:/a:apache:struts:2.0.6
- cpe:/a:apache:struts:2.0.7
- cpe:/a:apache:struts:2.0.8
- cpe:/a:apache:struts:2.0.9
- cpe:/a:apache:struts:2.0.10
- cpe:/a:apache:struts:2.0.11
- cpe:/a:apache:struts:2.0.11.1
- cpe:/a:apache:struts:2.0.11.2
- cpe:/a:apache:struts:2.0.12
- cpe:/a:apache:struts:2.0.13
- cpe:/a:apache:struts:2.0.14
- cpe:/a:apache:struts:2.1.0
- cpe:/a:apache:struts:2.1.1
- cpe:/a:apache:struts:2.1.2
- cpe:/a:apache:struts:2.1.3
- cpe:/a:apache:struts:2.1.4
- cpe:/a:apache:struts:2.1.5
- cpe:/a:apache:struts:2.1.6
- cpe:/a:apache:struts:2.1.8
- cpe:/a:apache:struts:2.1.8.1
- cpe:/a:apache:struts:2.2.1
- cpe:/a:apache:struts:2.2.1.1
- cpe:/a:apache:struts:2.2.3
- cpe:/a:apache:struts:2.2.3.1
- cpe:/a:apache:struts:2.3.1
- cpe:/a:apache:struts:2.3.1.1
- cpe:/a:apache:struts:2.3.1.2
- cpe:/a:apache:struts:2.3.3
- cpe:/a:apache:struts:2.3.4

CVE-2012-4386

Severity: Medium
CVSS Score: 6.8
CWE: CWE-352

The token check mechanism in Apache Struts 2.0.0 through 2.3.4 does not properly validate the token name configuration parameter, which allows remote attackers to perform cross-site request forgery (CSRF) attacks by setting the token name configuration parameter to a session attribute.

- BID - 55346
- CONFIRM - http://struts.apache.org/2.x/docs/s2-010.html
- CONFIRM - https://issues.apache.org/jira/browse/WW-3858
- MLIST - [oss-security] 20120901 CVE request: Apache Struts S2-010 and S2-011
- MLIST - [oss-security] 20120901 Re: CVE request: Apache Struts S2-010 and S2-011
- SECUNIA - 50420
- XF - apache-struts-csrf(78182)

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:2.1.2
- ...
- cpe:/a:apache:struts:2.0.0
- cpe:/a:apache:struts:2.0.1
- cpe:/a:apache:struts:2.0.2
- cpe:/a:apache:struts:2.0.3
- cpe:/a:apache:struts:2.0.4
- cpe:/a:apache:struts:2.0.5
- cpe:/a:apache:struts:2.0.6
- cpe:/a:apache:struts:2.0.7
- cpe:/a:apache:struts:2.0.8
- cpe:/a:apache:struts:2.0.9
- cpe:/a:apache:struts:2.0.10
- cpe:/a:apache:struts:2.0.11
- cpe:/a:apache:struts:2.0.11.1
- cpe:/a:apache:struts:2.0.11.2
- cpe:/a:apache:struts:2.0.12
- cpe:/a:apache:struts:2.0.13
- cpe:/a:apache:struts:2.0.14
- cpe:/a:apache:struts:2.1.0
- cpe:/a:apache:struts:2.1.1
- cpe:/a:apache:struts:2.1.2
- cpe:/a:apache:struts:2.1.3
- cpe:/a:apache:struts:2.1.4
- cpe:/a:apache:struts:2.1.5
- cpe:/a:apache:struts:2.1.6
- cpe:/a:apache:struts:2.1.8
- cpe:/a:apache:struts:2.1.8.1
- cpe:/a:apache:struts:2.2.1
- cpe:/a:apache:struts:2.2.1.1
- cpe:/a:apache:struts:2.2.3
- cpe:/a:apache:struts:2.2.3.1
- cpe:/a:apache:struts:2.3.1
- cpe:/a:apache:struts:2.3.1.1
- cpe:/a:apache:struts:2.3.1.2
- cpe:/a:apache:struts:2.3.3
- cpe:/a:apache:struts:2.3.4

CVE-2012-0838

Severity: High
CVSS Score: 10.0
CWE: CWE-20 Improper Input Validation

Apache Struts 2 before 2.2.3.1 evaluates a string as an OGNL expression during the handling of a conversion error, which allows remote attackers to modify run-time data values, and consequently execute arbitrary code, via invalid input to a field.

- CONFIRM - http://struts.apache.org/2.3.1.2/docs/s2-007.html
- CONFIRM - https://issues.apache.org/jira/browse/WW-3668
- JVN - JVN#79099262
- JVNDB - JVNDB-2012-000012

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:2.2.3 and all previous versions
- ...
- cpe:/a:apache:struts:2.0.6
- cpe:/a:apache:struts:2.0.8
- cpe:/a:apache:struts:2.0.9
- cpe:/a:apache:struts:2.0.11
- cpe:/a:apache:struts:2.0.11.1
- cpe:/a:apache:struts:2.0.11.2
- cpe:/a:apache:struts:2.0.12
- cpe:/a:apache:struts:2.0.14
- cpe:/a:apache:struts:2.1.6
- cpe:/a:apache:struts:2.1.8
- cpe:/a:apache:struts:2.1.8.1
- cpe:/a:apache:struts:2.2.1
- cpe:/a:apache:struts:2.2.1.1
- cpe:/a:apache:struts:2.2.3 and all previous versions

CVE-2012-0394

Severity: Medium
CVSS Score: 6.8
CWE: CWE-94 Improper Control of Generation of Code ('Code Injection')

** DISPUTED ** The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers to execute arbitrary commands via unspecified vectors. NOTE: the vendor characterizes this behavior as not "a security vulnerability itself."

- BUGTRAQ - 20120105 SEC Consult SA-20120104-0 :: Multiple critical vulnerabilities in Apache Struts2
- EXPLOIT-DB - 18329
- EXPLOIT-DB - 31434
- MISC - http://struts.apache.org/2.x/docs/s2-008.html
- MISC - http://struts.apache.org/2.x/docs/version-notes-2311.html
- MISC - https://www.sec-consult.com/files/20120104-0_Apache_Struts2_Multiple_Critical_Vulnerabilities.txt
- OSVDB - 78276

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:2.1.2
- ...
- cpe:/a:apache:struts:2.0.0
- cpe:/a:apache:struts:2.0.1
- cpe:/a:apache:struts:2.0.2
- cpe:/a:apache:struts:2.0.3
- cpe:/a:apache:struts:2.0.4
- cpe:/a:apache:struts:2.0.5
- cpe:/a:apache:struts:2.0.6
- cpe:/a:apache:struts:2.0.7
- cpe:/a:apache:struts:2.0.8
- cpe:/a:apache:struts:2.0.9
- cpe:/a:apache:struts:2.0.10
- cpe:/a:apache:struts:2.0.11
- cpe:/a:apache:struts:2.0.11.1
- cpe:/a:apache:struts:2.0.11.2
- cpe:/a:apache:struts:2.0.12
- cpe:/a:apache:struts:2.0.13
- cpe:/a:apache:struts:2.0.14
- cpe:/a:apache:struts:2.1.0
- cpe:/a:apache:struts:2.1.1
- cpe:/a:apache:struts:2.1.2
- cpe:/a:apache:struts:2.1.3
- cpe:/a:apache:struts:2.1.4
- cpe:/a:apache:struts:2.1.5
- cpe:/a:apache:struts:2.1.6
- cpe:/a:apache:struts:2.1.8
- cpe:/a:apache:struts:2.1.8.1
- cpe:/a:apache:struts:2.2.1
- cpe:/a:apache:struts:2.2.1.1
- cpe:/a:apache:struts:2.2.3 and all previous versions

CVE-2012-0393

Severity: Medium
CVSS Score: 6.4
CWE: CWE-264 Permissions, Privileges, and Access Controls

The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite arbitrary files via a crafted parameter that triggers the creation of a Java object.

- BUGTRAQ - 20120105 SEC Consult SA-20120104-0 :: Multiple critical vulnerabilities in Apache Struts2
- CONFIRM - http://struts.apache.org/2.x/docs/s2-008.html
- CONFIRM - http://struts.apache.org/2.x/docs/version-notes-2311.html
- EXPLOIT-DB - 18329
- MISC - https://www.sec-consult.com/files/20120104-0_Apache_Struts2_Multiple_Critical_Vulnerabilities.txt
- SECUNIA - 47393

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:2.1.2
- ...
- cpe:/a:apache:struts:2.0.0
- cpe:/a:apache:struts:2.0.1
- cpe:/a:apache:struts:2.0.2
- cpe:/a:apache:struts:2.0.3
- cpe:/a:apache:struts:2.0.4
- cpe:/a:apache:struts:2.0.5
- cpe:/a:apache:struts:2.0.6
- cpe:/a:apache:struts:2.0.7
- cpe:/a:apache:struts:2.0.8
- cpe:/a:apache:struts:2.0.9
- cpe:/a:apache:struts:2.0.10
- cpe:/a:apache:struts:2.0.11
- cpe:/a:apache:struts:2.0.11.1
- cpe:/a:apache:struts:2.0.11.2
- cpe:/a:apache:struts:2.0.12
- cpe:/a:apache:struts:2.0.13
- cpe:/a:apache:struts:2.0.14
- cpe:/a:apache:struts:2.1.0
- cpe:/a:apache:struts:2.1.1
- cpe:/a:apache:struts:2.1.2
- cpe:/a:apache:struts:2.1.3
- cpe:/a:apache:struts:2.1.4
- cpe:/a:apache:struts:2.1.5
- cpe:/a:apache:struts:2.1.6
- cpe:/a:apache:struts:2.1.8
- cpe:/a:apache:struts:2.1.8.1
- cpe:/a:apache:struts:2.2.1
- cpe:/a:apache:struts:2.2.1.1
- cpe:/a:apache:struts:2.2.3
- cpe:/a:apache:struts:2.3.1 and all previous versions

CVE-2012-0392

Severity: High
CVSS Score: 9.3
CWE: CWE-264 Permissions, Privileges, and Access Controls

The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header that triggers Java code execution through a static method.

- BUGTRAQ - 20120105 SEC Consult SA-20120104-0 :: Multiple critical vulnerabilities in Apache Struts2
- CONFIRM - http://struts.apache.org/2.x/docs/s2-008.html
- CONFIRM - http://struts.apache.org/2.x/docs/version-notes-2311.html
- EXPLOIT-DB - 18329
- MISC - https://www.sec-consult.com/files/20120104-0_Apache_Struts2_Multiple_Critical_Vulnerabilities.txt
- MLIST - [dailydave] 20120106 Apache Struts
- SECUNIA - 47393

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:2.1.2
- ...
- cpe:/a:apache:struts:2.0.0
- cpe:/a:apache:struts:2.0.1
- cpe:/a:apache:struts:2.0.2
- cpe:/a:apache:struts:2.0.3
- cpe:/a:apache:struts:2.0.4
- cpe:/a:apache:struts:2.0.5
- cpe:/a:apache:struts:2.0.6
- cpe:/a:apache:struts:2.0.7
- cpe:/a:apache:struts:2.0.8
- cpe:/a:apache:struts:2.0.9
- cpe:/a:apache:struts:2.0.10
- cpe:/a:apache:struts:2.0.11
- cpe:/a:apache:struts:2.0.11.1
- cpe:/a:apache:struts:2.0.11.2
- cpe:/a:apache:struts:2.0.12
- cpe:/a:apache:struts:2.0.13
- cpe:/a:apache:struts:2.0.14
- cpe:/a:apache:struts:2.1.0
- cpe:/a:apache:struts:2.1.1
- cpe:/a:apache:struts:2.1.2
- cpe:/a:apache:struts:2.1.3
- cpe:/a:apache:struts:2.1.4
- cpe:/a:apache:struts:2.1.5
- cpe:/a:apache:struts:2.1.6
- cpe:/a:apache:struts:2.1.8
- cpe:/a:apache:struts:2.1.8.1
- cpe:/a:apache:struts:2.2.1
- cpe:/a:apache:struts:2.2.1.1
- cpe:/a:apache:struts:2.2.3 and all previous versions

CVE-2012-0391

Severity: High
CVSS Score: 9.3
CWE: CWE-20 Improper Input Validation

The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of properties, which allows remote attackers to execute arbitrary Java code via a crafted parameter.

- BUGTRAQ - 20120105 SEC Consult SA-20120104-0 :: Multiple critical vulnerabilities in Apache Struts2
- CONFIRM - http://struts.apache.org/2.x/docs/s2-008.html
- CONFIRM - http://struts.apache.org/2.x/docs/version-notes-2311.html
- CONFIRM - https://issues.apache.org/jira/browse/WW-3668
- EXPLOIT-DB - 18329
- MISC - https://www.sec-consult.com/files/20120104-0_Apache_Struts2_Multiple_Critical_Vulnerabilities.txt
- SECUNIA - 47393

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:2.1.2
- ...
- cpe:/a:apache:struts:2.0.0
- cpe:/a:apache:struts:2.0.1
- cpe:/a:apache:struts:2.0.2
- cpe:/a:apache:struts:2.0.3
- cpe:/a:apache:struts:2.0.4
- cpe:/a:apache:struts:2.0.5
- cpe:/a:apache:struts:2.0.6
- cpe:/a:apache:struts:2.0.7
- cpe:/a:apache:struts:2.0.8
- cpe:/a:apache:struts:2.0.9
- cpe:/a:apache:struts:2.0.10
- cpe:/a:apache:struts:2.0.11
- cpe:/a:apache:struts:2.0.11.1
- cpe:/a:apache:struts:2.0.11.2
- cpe:/a:apache:struts:2.0.12
- cpe:/a:apache:struts:2.0.13
- cpe:/a:apache:struts:2.0.14
- cpe:/a:apache:struts:2.1.0
- cpe:/a:apache:struts:2.1.1
- cpe:/a:apache:struts:2.1.2
- cpe:/a:apache:struts:2.1.3
- cpe:/a:apache:struts:2.1.4
- cpe:/a:apache:struts:2.1.5
- cpe:/a:apache:struts:2.1.6
- cpe:/a:apache:struts:2.1.8
- cpe:/a:apache:struts:2.1.8.1
- cpe:/a:apache:struts:2.2.1
- cpe:/a:apache:struts:2.2.1.1
- cpe:/a:apache:struts:2.2.3 and all previous versions

CVE-2011-5057

Severity: Medium
CVSS Score: 5.0
CWE: CWE-264 Permissions, Privileges, and Access Controls

Apache Struts 2.3.1.1 and earlier provides interfaces that do not properly restrict access to collections such as the session and request collections, which might allow remote attackers to modify run-time data values via a crafted parameter to an application that implements an affected interface, as demonstrated by the SessionAware, RequestAware, ApplicationAware, ServletRequestAware, ServletResponseAware, and ParameterAware interfaces. NOTE: the vendor disputes the significance of this report because of an "easy work-around in existing apps by configuring the interceptor."

- CONFIRM - https://issues.apache.org/jira/browse/WW-2264
- CONFIRM - https://issues.apache.org/jira/browse/WW-3631
- MISC - http://codesecure.blogspot.com/2011/12/struts-2-session-tampering-via.html
- SECUNIA - 47109

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:2.1.2
- ...
- cpe:/a:apache:struts:2.0.0
- cpe:/a:apache:struts:2.0.1
- cpe:/a:apache:struts:2.0.2
- cpe:/a:apache:struts:2.0.3
- cpe:/a:apache:struts:2.0.4
- cpe:/a:apache:struts:2.0.5
- cpe:/a:apache:struts:2.0.6
- cpe:/a:apache:struts:2.0.7
- cpe:/a:apache:struts:2.0.8
- cpe:/a:apache:struts:2.0.9
- cpe:/a:apache:struts:2.0.10
- cpe:/a:apache:struts:2.0.11
- cpe:/a:apache:struts:2.0.11.1
- cpe:/a:apache:struts:2.0.11.2
- cpe:/a:apache:struts:2.0.12
- cpe:/a:apache:struts:2.0.13
- cpe:/a:apache:struts:2.0.14
- cpe:/a:apache:struts:2.1.0
- cpe:/a:apache:struts:2.1.1
- cpe:/a:apache:struts:2.1.2
- cpe:/a:apache:struts:2.1.3
- cpe:/a:apache:struts:2.1.4
- cpe:/a:apache:struts:2.1.5
- cpe:/a:apache:struts:2.1.6
- cpe:/a:apache:struts:2.1.8
- cpe:/a:apache:struts:2.1.8.1
- cpe:/a:apache:struts:2.2.1
- cpe:/a:apache:struts:2.2.1.1
- cpe:/a:apache:struts:2.2.3 and all previous versions

CVE-2011-2087

Severity: Medium
CVSS Score: 4.3
CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Multiple cross-site scripting (XSS) vulnerabilities in component handlers in the javatemplates (aka Java Templates) plugin in Apache Struts 2.x before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via an arbitrary parameter value to a .action URI, related to improper handling of value attributes in (1) FileHandler.java, (2) HiddenHandler.java, (3) PasswordHandler.java, (4) RadioHandler.java, (5) ResetHandler.java, (6) SelectHandler.java, (7) SubmitHandler.java, and (8) TextFieldHandler.java.

- CONFIRM - http://struts.apache.org/2.2.3/docs/version-notes-223.html
- CONFIRM - https://issues.apache.org/jira/browse/WW-3597
- CONFIRM - https://issues.apache.org/jira/browse/WW-3608
- VUPEN - ADV-2011-1198

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:2.1.2
- ...
- cpe:/a:apache:struts:2.0.0
- cpe:/a:apache:struts:2.0.1
- cpe:/a:apache:struts:2.0.2
- cpe:/a:apache:struts:2.0.3
- cpe:/a:apache:struts:2.0.4
- cpe:/a:apache:struts:2.0.5
- cpe:/a:apache:struts:2.0.6
- cpe:/a:apache:struts:2.0.7
- cpe:/a:apache:struts:2.0.8
- cpe:/a:apache:struts:2.0.9
- cpe:/a:apache:struts:2.0.10
- cpe:/a:apache:struts:2.0.11
- cpe:/a:apache:struts:2.0.11.1
- cpe:/a:apache:struts:2.0.11.2
- cpe:/a:apache:struts:2.0.12
- cpe:/a:apache:struts:2.0.13
- cpe:/a:apache:struts:2.0.14
- cpe:/a:apache:struts:2.1.0
- cpe:/a:apache:struts:2.1.1
- cpe:/a:apache:struts:2.1.2
- cpe:/a:apache:struts:2.1.3
- cpe:/a:apache:struts:2.1.4
- cpe:/a:apache:struts:2.1.5
- cpe:/a:apache:struts:2.1.6
- cpe:/a:apache:struts:2.1.8
- cpe:/a:apache:struts:2.1.8.1
- cpe:/a:apache:struts:2.2.1
- cpe:/a:apache:struts:2.2.1.1

CVE-2011-1772

Severity: Low
CVSS Score: 2.6
CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x before 2.2.3, and OpenSymphony XWork in OpenSymphony WebWork, allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) an action name, (2) the action attribute of an s:submit element, or (3) the method attribute of an s:submit element.

- BID - 47784
- CONFIRM - http://struts.apache.org/2.2.3/docs/version-notes-223.html
- CONFIRM - http://struts.apache.org/2.x/docs/s2-006.html
- CONFIRM - https://issues.apache.org/jira/browse/WW-3579
- JVN - JVN#25435092
- JVNDB - JVNDB-2011-000106
- MISC - http://secureappdev.blogspot.com/2011/05/Struts_2_XWork_WebWork_XSS_in_error_pages.html
- MISC - http://secureappdev.blogspot.com/2011/05/apache-struts-2-xwork-webwork-reflected.html
- MISC - http://www.ventuneac.net/security-advisories/MVSA-11-006
- VUPEN - ADV-2011-1198

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:2.1.2
- ...
- cpe:/a:apache:struts:2.0.0
- cpe:/a:apache:struts:2.0.1
- cpe:/a:apache:struts:2.0.2
- cpe:/a:apache:struts:2.0.3
- cpe:/a:apache:struts:2.0.4
- cpe:/a:apache:struts:2.0.5
- cpe:/a:apache:struts:2.0.6
- cpe:/a:apache:struts:2.0.7
- cpe:/a:apache:struts:2.0.8
- cpe:/a:apache:struts:2.0.9
- cpe:/a:apache:struts:2.0.10
- cpe:/a:apache:struts:2.0.11
- cpe:/a:apache:struts:2.0.11.1
- cpe:/a:apache:struts:2.0.11.2
- cpe:/a:apache:struts:2.0.12
- cpe:/a:apache:struts:2.0.13
- cpe:/a:apache:struts:2.0.14
- cpe:/a:apache:struts:2.1.0
- cpe:/a:apache:struts:2.1.1
- cpe:/a:apache:struts:2.1.2
- cpe:/a:apache:struts:2.1.3
- cpe:/a:apache:struts:2.1.4
- cpe:/a:apache:struts:2.1.5
- cpe:/a:apache:struts:2.1.6
- cpe:/a:apache:struts:2.1.8
- cpe:/a:apache:struts:2.1.8.1
- cpe:/a:apache:struts:2.2.1
- cpe:/a:apache:struts:2.2.1.1
- cpe:/a:opensymphony:webwork
- cpe:/a:opensymphony:xwork

CVE-2010-1870

Severity: Medium
CVSS Score: 5.0

The OGNL extensive expression evaluation capability in XWork in Struts 2.0.0 through 2.1.8.1, as used in Atlassian Fisheye, Crucible, and possibly other products, uses a permissive whitelist, which allows remote attackers to modify server-side context objects and bypass the "#" protection mechanism in ParameterInterceptors via the (1) #context, (2) #_memberAccess, (3) #root, (4) #this, (5) #_typeResolver, (6) #_classResolver, (7) #_traceEvaluations, (8) #_lastEvaluation, (9) #_keepLastEvaluation, and possibly other OGNL context variables, a different vulnerability than CVE-2008-6504.

- BID - 41592
- CONFIRM - http://confluence.atlassian.com/display/FISHEYE/FishEye+Security+Advisory+2010-06-16
- CONFIRM - http://struts.apache.org/2.2.1/docs/s2-005.html
- EXPLOIT-DB - 14360
- FULLDISC - 20100713 CVE-2010-1870: Struts2 remote commands execution
- MISC - http://blog.o0o.nu/2010/07/cve-2010-1870-struts2xwork-remote.html
- OSVDB - 66280
- SREASON - 8345

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts:2.1.2
- ...
- cpe:/a:apache:struts:2.0.0
- cpe:/a:apache:struts:2.0.1
- cpe:/a:apache:struts:2.0.2
- cpe:/a:apache:struts:2.0.3
- cpe:/a:apache:struts:2.0.4
- cpe:/a:apache:struts:2.0.5
- cpe:/a:apache:struts:2.0.6
- cpe:/a:apache:struts:2.0.7
- cpe:/a:apache:struts:2.0.8
- cpe:/a:apache:struts:2.0.9
- cpe:/a:apache:struts:2.0.10
- cpe:/a:apache:struts:2.0.11
- cpe:/a:apache:struts:2.0.11.1
- cpe:/a:apache:struts:2.0.11.2
- cpe:/a:apache:struts:2.0.12
- cpe:/a:apache:struts:2.0.13
- cpe:/a:apache:struts:2.0.14
- cpe:/a:apache:struts:2.1.0
- cpe:/a:apache:struts:2.1.1
- cpe:/a:apache:struts:2.1.2
- cpe:/a:apache:struts:2.1.3
- cpe:/a:apache:struts:2.1.4
- cpe:/a:apache:struts:2.1.5
- cpe:/a:apache:struts:2.1.6
- cpe:/a:apache:struts:2.1.8
- cpe:/a:apache:struts:2.1.8.1

CVE-2008-6504

Severity: Medium
CVSS Score: 5.0
CWE: CWE-20 Improper Input Validation

ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not properly restrict # (pound sign) references to context objects, which allows remote attackers to execute Object-Graph Navigation Language (OGNL) statements and modify server-side context objects, as demonstrated by use of a \u0023 representation for the # character.

- BID - 32101
- CONFIRM - http://fisheye6.atlassian.com/cru/CR-9/
- CONFIRM - http://issues.apache.org/struts/browse/WW-2692
- CONFIRM - http://jira.opensymphony.com/browse/XW-641
- CONFIRM - http://struts.apache.org/2.x/docs/s2-003.html
- OSVDB - 49732
- SECUNIA - 32495
- SECUNIA - 32497
- VUPEN - ADV-2008-3003
- VUPEN - ADV-2008-3004
- XF - xwork-parameterinterceptor-security-bypass(46328)

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:struts
- ...
- cpe:/a:apache:struts
- cpe:/a:opensymphony:xwork:2.0.0
- cpe:/a:opensymphony:xwork:2.0.1
- cpe:/a:opensymphony:xwork:2.0.2
- cpe:/a:opensymphony:xwork:2.0.3
- cpe:/a:opensymphony:xwork:2.0.4
- cpe:/a:opensymphony:xwork:2.0.5
- cpe:/a:opensymphony:xwork:2.1.0
- cpe:/a:opensymphony:xwork:2.1.1

### uber-1.0-SNAPSHOT.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\uber-1.0-SNAPSHOT.jar
MD5: 634D5CC32238FC3D023941D265189DDD
SHA1: E9A3159254A01777F536D556BCDB539C7617B0E5

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.0
file | name | uber-1.0-SNAPSHOT

#### Identifiers

- None

### uber-1.0-SNAPSHOT.jar\META-INF/maven/com.yammer.metrics/metrics-jetty/pom.xml

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\uber-1.0-SNAPSHOT.jar\META-INF/maven/com.yammer.metrics/metrics-jetty/pom.xml
MD5: 994485BF6DB4621A698290E213F0838E
SHA1: 3D4C7EE060F83CA829EE3EF22900E3AF49579F53

#### Evidence

Source | Name | Value
--- | --- | ---
pom | artifactid | metrics-jetty
pom | name | Metrics Jetty Support
pom | parent.artifactid | metrics-parent
pom | parent.groupid | com.yammer.metrics
pom | parent.version | 2.0.0-RC0

#### Identifiers

- cpe: cpe:/a:jetty:jetty:2.0.0.rc0 Confidence:LOW

### uber-1.0-SNAPSHOT.jar\META-INF/maven/org.eclipse.jetty/jetty-continuation/pom.xml

Description: Asynchronous API

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\uber-1.0-SNAPSHOT.jar\META-INF/maven/org.eclipse.jetty/jetty-continuation/pom.xml
MD5: 74919244C9CA106D221F23A832E1076D
SHA1: B59985A1BA1B93FBBD5D90B6FF5ED9F44CC91AC7

#### Evidence

Source | Name | Value
--- | --- | ---
pom | artifactid | jetty-continuation
pom | description | Asynchronous API
pom | name | Jetty :: Continuation
pom | parent.artifactid | jetty-project
pom | parent.groupid | org.eclipse.jetty
pom | parent.version | 7.6.0.RC4

#### Identifiers

- cpe: cpe:/a:jetty:jetty:7.6.0.rc4 Confidence:LOW

### uber-1.0-SNAPSHOT.jar\META-INF/maven/org.eclipse.jetty/jetty-http/pom.xml

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\uber-1.0-SNAPSHOT.jar\META-INF/maven/org.eclipse.jetty/jetty-http/pom.xml
MD5: F1B6DB43B8A499E66DDF58C8165714A5
SHA1: 885E6E766EC3452C085324A9759DE5AD8A1C8971

#### Evidence

Source | Name | Value
--- | --- | ---
pom | artifactid | jetty-http
pom | name | Jetty :: Http Utility
pom | parent.artifactid | jetty-project
pom | parent.groupid | org.eclipse.jetty
pom | parent.version | 7.6.0.RC4

#### Identifiers

- cpe: cpe:/a:jetty:jetty:7.6.0.rc4 Confidence:LOW

### uber-1.0-SNAPSHOT.jar\META-INF/maven/org.eclipse.jetty/jetty-io/pom.xml

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\uber-1.0-SNAPSHOT.jar\META-INF/maven/org.eclipse.jetty/jetty-io/pom.xml
MD5: 941C55F8AC0D6C14971D20BE7B60EC19
SHA1: F8F0907153F891113BDEE011063E540D7D57A496

#### Evidence

Source | Name | Value
--- | --- | ---
pom | artifactid | jetty-io
pom | name | Jetty :: IO Utility
pom | parent.artifactid | jetty-project
pom | parent.groupid | org.eclipse.jetty
pom | parent.version | 7.6.0.RC4

#### Identifiers

- cpe: cpe:/a:jetty:jetty:7.6.0.rc4 Confidence:LOW

### uber-1.0-SNAPSHOT.jar\META-INF/maven/org.eclipse.jetty/jetty-security/pom.xml

Description: Jetty security infrastructure

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\uber-1.0-SNAPSHOT.jar\META-INF/maven/org.eclipse.jetty/jetty-security/pom.xml
MD5: 266A3467A1D03BCE12E34FDA16DFA615
SHA1: 53B54057B58AE7D3C4C12B520B048889A2C28AD8

#### Evidence

Source | Name | Value
--- | --- | ---
pom | artifactid | jetty-security
pom | description | Jetty security infrastructure
pom | name | Jetty :: Security
pom | parent.artifactid | jetty-project
pom | parent.groupid | org.eclipse.jetty
pom | parent.version | 7.6.0.RC4

#### Identifiers

- cpe: cpe:/a:jetty:jetty:7.6.0.rc4 Confidence:LOW

### uber-1.0-SNAPSHOT.jar\META-INF/maven/org.eclipse.jetty/jetty-server/pom.xml

Description: The core jetty server artifact.

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\uber-1.0-SNAPSHOT.jar\META-INF/maven/org.eclipse.jetty/jetty-server/pom.xml
MD5: 55A7034666834BE8A62B8DB044AC8D70
SHA1: A9AE16CB473F1797940DD58ED3D5541C88B34396

#### Evidence

Source | Name | Value
--- | --- | ---
pom | artifactid | jetty-server
pom | description | The core jetty server artifact.
pom | name | Jetty :: Server Core
pom | parent.artifactid | jetty-project
pom | parent.groupid | org.eclipse.jetty
pom | parent.version | 7.6.0.RC4

#### Identifiers

- cpe: cpe:/a:jetty:jetty:7.6.0.rc4 Confidence:LOW

### uber-1.0-SNAPSHOT.jar\META-INF/maven/org.eclipse.jetty/jetty-servlet/pom.xml

Description: Jetty Servlet Container

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\uber-1.0-SNAPSHOT.jar\META-INF/maven/org.eclipse.jetty/jetty-servlet/pom.xml
MD5: E662A30EA722C442A57A83C478FD7D7E
SHA1: 4A2D357D991AFF1EE18E617B7C1076DBCFE89986

#### Evidence

Source | Name | Value
--- | --- | ---
pom | artifactid | jetty-servlet
pom | description | Jetty Servlet Container
pom | name | Jetty :: Servlet Handling
pom | parent.artifactid | jetty-project
pom | parent.groupid | org.eclipse.jetty
pom | parent.version | 7.6.0.RC4

#### Identifiers

- cpe: cpe:/a:jetty:jetty:7.6.0.rc4 Confidence:LOW

### uber-1.0-SNAPSHOT.jar\META-INF/maven/org.eclipse.jetty/jetty-util/pom.xml

Description: Utility classes for Jetty

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\uber-1.0-SNAPSHOT.jar\META-INF/maven/org.eclipse.jetty/jetty-util/pom.xml
MD5: C147343FA7F11C15A5F99DDF8A830B20
SHA1: 9A86A0C493D3834471B7A03E174A9F4D469CBD98

#### Evidence

Source | Name | Value
--- | --- | ---
pom | artifactid | jetty-util
pom | description | Utility classes for Jetty
pom | name | Jetty :: Utilities
pom | parent.artifactid | jetty-project
pom | parent.groupid | org.eclipse.jetty
pom | parent.version | 7.6.0.RC4

#### Identifiers

- cpe: cpe:/a:jetty:jetty:7.6.0.rc4 Confidence:LOW

### velocity-1.7.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\velocity-1.7.jar
MD5: 3692DD72F8367CB35FB6280DC2916725
SHA1: 2CEB567B8F3F21118ECDEC129FE1271DBC09AA7A

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.7
file | name | velocity-1.7
jar | package | apache
jar | package | runtime
jar | package | velocity
jar | package name | apache
jar | package name | io
jar | package name | template
jar | package name | velocity
Manifest | Bundle-Name | Apache Velocity
Manifest | bundle-symbolicname | org.apache.velocity
Manifest | Bundle-Vendor | Apache Software Foundation
Manifest | Bundle-Version | 1.7
Manifest | extension-name | velocity
Manifest | Implementation-Title | org.apache.velocity
Manifest | Implementation-Vendor | Apache Software Foundation
Manifest | Implementation-Vendor-Id | org.apache
Manifest | Implementation-Version | 1.7
Manifest | specification-title | Velocity is a Java-based template engine
Manifest | specification-vendor | Apache Software Foundation
nexus | artifactid | velocity
nexus | groupid | org.apache.velocity
nexus | version | 1.7

#### Identifiers

- maven: org.apache.velocity:velocity:1.7 Confidence:HIGHEST

### war-4.0.war

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\war-4.0.war
MD5: 54070E31AA8E6256EA8C850642A3C434
SHA1: EAEDE5596599912D70CB9B517CB87FFF336A8422

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 4.0
file | name | war-4.0
Manifest | hk2-import-bundles | org.glassfish.main.admingui.console-common,org.glassfish.hk2.hk2,org.glassfish.main.admingui.console-plugin-service, org.glassfish.main.deployment.deployment-client,org.glassfish.main.registration.registration-api,org.glassfish.main.registration.registration-impl, javax.servlet-api, javax.servlet.jsp-api, com.sun.el.javax.el, com.sun.jsftemplating, org.glassfish.main.admingui.dataprovider, com.sun.pkg.client
pom | artifactid | war
pom | groupid | glassfish.main.admingui
pom | name | Admin Console WAR

#### Identifiers

- None

### war-4.0.war\commons-fileupload-1.1.1.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\war-4.0.war\WEB-INF\extra\commons-fileupload-1.1.1.jar
MD5: ADB15D9A4DA4A30D77E88B32A45CBDDB
SHA1: D587A50727BA905AAD13DE9EA119081403BF6823

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.1.1
file | name | commons-fileupload-1.1.1
jar | package | apache
jar | package | commons
jar | package | fileupload
jar | package name | apache
jar | package name | commons
jar | package name | fileupload
Manifest | extension-name | commons-fileupload
Manifest | Implementation-Title | Commons FileUpload
Manifest | Implementation-Vendor | Apache Software Foundation
Manifest | Implementation-Vendor-Id | org.apache
Manifest | Implementation-Version | 1.1.1
Manifest | specification-title | Commons FileUpload
Manifest | specification-vendor | Apache Software Foundation
Manifest | specification-version | 1.1.1
nexus | artifactid | commons-fileupload
nexus | groupid | commons-fileupload
nexus | version | 1.1.1

#### Identifiers

- maven: commons-fileupload:commons-fileupload:1.1.1 Confidence:HIGHEST
- cpe: cpe:/a:apache:commons_fileupload:1.1.1 Confidence:HIGHEST

#### Published Vulnerabilities

CVE-2014-0050

Severity: Medium
CVSS Score: 5.0
CWE: CWE-264 Permissions, Privileges, and Access Controls

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.

- CONFIRM - http://svn.apache.org/r1565143
- CONFIRM - http://tomcat.apache.org/security-7.html
- CONFIRM - http://tomcat.apache.org/security-8.html
- CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=1062337
- JVN - JVN#14876762
- JVNDB - JVNDB-2014-000017
- MISC - http://blog.spiderlabs.com/2014/02/cve-2014-0050-exploit-with-boundaries-loops-without-boundaries.html
- MLIST - [commons-dev] 20140206 [SECURITY] CVE-2014-0050 Apache Commons FileUpload and Apache Tomcat DoS
- REDHAT - RHSA-2014:0400
- SECUNIA - 57915

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:commons_fileupload:1.1.1
- ...
- cpe:/a:apache:commons_fileupload:1.0
- cpe:/a:apache:commons_fileupload:1.1
- cpe:/a:apache:commons_fileupload:1.1.1
- cpe:/a:apache:commons_fileupload:1.2
- cpe:/a:apache:commons_fileupload:1.2.1
- cpe:/a:apache:commons_fileupload:1.2.2
- cpe:/a:apache:commons_fileupload:1.3
- cpe:/a:apache:commons_fileupload:1.3.1 and all previous versions
- cpe:/a:apache:tomcat:7.0.0
- cpe:/a:apache:tomcat:7.0.0:beta
- cpe:/a:apache:tomcat:7.0.1
- cpe:/a:apache:tomcat:7.0.2
- cpe:/a:apache:tomcat:7.0.2:beta
- cpe:/a:apache:tomcat:7.0.3
- cpe:/a:apache:tomcat:7.0.4
- cpe:/a:apache:tomcat:7.0.4:beta
- cpe:/a:apache:tomcat:7.0.5
- cpe:/a:apache:tomcat:7.0.6
- cpe:/a:apache:tomcat:7.0.7
- cpe:/a:apache:tomcat:7.0.8
- cpe:/a:apache:tomcat:7.0.9
- cpe:/a:apache:tomcat:7.0.10
- cpe:/a:apache:tomcat:7.0.11
- cpe:/a:apache:tomcat:7.0.12
- cpe:/a:apache:tomcat:7.0.13
- cpe:/a:apache:tomcat:7.0.14
- cpe:/a:apache:tomcat:7.0.15
- cpe:/a:apache:tomcat:7.0.16
- cpe:/a:apache:tomcat:7.0.17
- cpe:/a:apache:tomcat:7.0.18
- cpe:/a:apache:tomcat:7.0.19
- cpe:/a:apache:tomcat:7.0.20
- cpe:/a:apache:tomcat:7.0.21
- cpe:/a:apache:tomcat:7.0.22
- cpe:/a:apache:tomcat:7.0.23
- cpe:/a:apache:tomcat:7.0.24
- cpe:/a:apache:tomcat:7.0.25
- cpe:/a:apache:tomcat:7.0.26
- cpe:/a:apache:tomcat:7.0.27
- cpe:/a:apache:tomcat:7.0.28
- cpe:/a:apache:tomcat:7.0.29
- cpe:/a:apache:tomcat:7.0.30
- cpe:/a:apache:tomcat:7.0.31
- cpe:/a:apache:tomcat:7.0.32
- cpe:/a:apache:tomcat:7.0.33
- cpe:/a:apache:tomcat:7.0.34
- cpe:/a:apache:tomcat:7.0.35
- cpe:/a:apache:tomcat:7.0.36
- cpe:/a:apache:tomcat:7.0.37
- cpe:/a:apache:tomcat:7.0.38
- cpe:/a:apache:tomcat:7.0.39
- cpe:/a:apache:tomcat:7.0.40
- cpe:/a:apache:tomcat:7.0.41
- cpe:/a:apache:tomcat:7.0.42
- cpe:/a:apache:tomcat:7.0.43
- cpe:/a:apache:tomcat:7.0.44
- cpe:/a:apache:tomcat:7.0.45
- cpe:/a:apache:tomcat:7.0.46
- cpe:/a:apache:tomcat:7.0.47
- cpe:/a:apache:tomcat:7.0.48
- cpe:/a:apache:tomcat:7.0.49
- cpe:/a:apache:tomcat:7.0.50
- cpe:/a:apache:tomcat:8.0.0:rc1
- cpe:/a:apache:tomcat:8.0.0:rc10
- cpe:/a:apache:tomcat:8.0.0:rc2
- cpe:/a:apache:tomcat:8.0.0:rc5
- cpe:/a:apache:tomcat:8.0.1

CVE-2013-0248

Severity: Low
CVSS Score: 3.3
CWE: CWE-264 Permissions, Privileges, and Access Controls

The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.

- BUGTRAQ - 20130306 [SECURITY] CVE-2013-0248 Apache Commons FileUpload - Insecure examples
- OSVDB - 90906

Vulnerable Software & Versions: (show all)

- cpe:/a:apache:commons_fileupload:1.1.1
- ...
- cpe:/a:apache:commons_fileupload:1.0
- cpe:/a:apache:commons_fileupload:1.1
- cpe:/a:apache:commons_fileupload:1.1.1
- cpe:/a:apache:commons_fileupload:1.2
- cpe:/a:apache:commons_fileupload:1.2.1
- cpe:/a:apache:commons_fileupload:1.2.2

### war-4.0.war\commons-io-1.3.1.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\war-4.0.war\WEB-INF\extra\commons-io-1.3.1.jar
MD5: 2E55C05D3386889AF97CAAE4517AC9DF
SHA1: B90B6AC57CF27A2858EAA490D02BA7945D18CA7B

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.3.1
file | name | commons-io-1.3.1
jar | package | apache
jar | package | commons
jar | package | io
jar | package name | apache
jar | package name | commons
jar | package name | io
Manifest | extension-name | commons-io
Manifest | Implementation-Title | Commons IO
Manifest | Implementation-Vendor | Apache Software Foundation
Manifest | Implementation-Vendor-Id | org.apache
Manifest | Implementation-Version | 1.3.1
Manifest | specification-title | Commons IO
Manifest | specification-vendor | Apache Software Foundation
Manifest | specification-version | 1.3.1
nexus | artifactid | commons-io
nexus | groupid | commons-io
nexus | version | 1.3.1

#### Identifiers

- maven: commons-io:commons-io:1.3.1 Confidence:HIGHEST

### war-4.0.war\console-core-4.0.jar

Description: Java.net - The Source for Java Technology Collaboration

License:

    http://glassfish.java.net/nonav/public/CDDL+GPL.html

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\war-4.0.war\WEB-INF\lib\console-core-4.0.jar
MD5: 34989EF1706408666EE87EEC5B55C09B
SHA1: 165C3DF4D1EDE6F2850E44730CB547DCFDB45A08

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 4.0
file | name | console-core-4.0
hint analyzer | product | springsource_spring_framework
hint analyzer | vendor | vmware
jar | package name | admingui
jar | package name | glassfish
Manifest | Bundle-Name | Admin Console Core Jar
Manifest | bundle-symbolicname | org.glassfish.main.admingui.console-core
Manifest | Bundle-Version | 4.0.0
nexus | artifactid | console-core
nexus | groupid | org.glassfish.main.admingui
nexus | version | 4.0
pom | artifactid | console-core
pom | name | Admin Console Core Jar

#### Identifiers

- maven: org.glassfish.main.admingui:console-core:4.0 Confidence:HIGHEST

### war-4.0.war\dojo-ajax-nodemo-0.4.1.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\war-4.0.war\WEB-INF\extra\dojo-ajax-nodemo-0.4.1.jar
MD5: 91FDA9E8B3C95EEE6F566567CF790A9E
SHA1: 0E77D6BB7687A7084A1B92DA563DFDA6324BA83F

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 0.4.1
file | name | dojo-ajax-nodemo-0.4.1
nexus | artifactid | dojo-ajax-nodemo
nexus | groupid | com.sun.woodstock.dependlibs
nexus | version | 0.4.1

#### Identifiers

- maven: com.sun.woodstock.dependlibs:dojo-ajax-nodemo:0.4.1 Confidence:HIGHEST

### war-4.0.war\json-1.0.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\war-4.0.war\WEB-INF\extra\json-1.0.jar
MD5: A7AA9A187CB901EC6E299F65F583F140
SHA1: 0FE8CE55B9F83F16185192821A385916B0EEF38E

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.0
file | name | json-1.0
jar | package | json
nexus | artifactid | json
nexus | groupid | com.sun.woodstock.dependlibs
nexus | version | 1.0

#### Identifiers

- maven: com.sun.woodstock.dependlibs:json:1.0 Confidence:HIGHEST

### war-4.0.war\prototype-1.5.0.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\war-4.0.war\WEB-INF\extra\prototype-1.5.0.jar
MD5: 206BD786024ECA29E41A12E44C055C0A
SHA1: B02B002F0E9BB289B311DB49C561C58AFB8EB58C

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.5.0
file | name | prototype-1.5.0
nexus | artifactid | prototype
nexus | groupid | com.sun.woodstock.dependlibs
nexus | version | 1.5.0

#### Identifiers

- maven: com.sun.woodstock.dependlibs:prototype:1.5.0 Confidence:HIGHEST

### war-4.0.war\webui-jsf-4.0.2.10.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\war-4.0.war\WEB-INF\extra\webui-jsf-4.0.2.10.jar
MD5: 411E6E13BC190D58E10337E502371CFC
SHA1: 977A6FA7F65F8EA68101AA1252C05E8193DE97B5

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 4.0.2.10
file | name | webui-jsf-4.0.2.10
jar | package | jsf
jar | package | sun
jar | package | webui
jar | package name | sun
jar (hint) | package | oracle
jar (hint) | package name | oracle
Manifest | Implementation-Title | Woodstock 4.0-201201260851-dev
Manifest | Implementation-Vendor | Sun Microsystems Inc.
Manifest | Implementation-Vendor-Id | com.sun
Manifest | Implementation-Version | 4.0-201201260851-dev
Manifest | specification-title | Woodstock
Manifest | specification-vendor | Sun Microsystems Inc.
Manifest | specification-version | 4.0-dev
nexus | artifactid | webui-jsf
nexus | groupid | com.sun.woodstock
nexus | version | 4.0.2.10

#### Identifiers

- maven: com.sun.woodstock:webui-jsf:4.0.2.10 Confidence:HIGHEST
- cpe: cpe:/a:sun:woodstock:4.0.2.10 Confidence:LOW

### war-4.0.war\webui-jsf-suntheme-4.0.2.10.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\war-4.0.war\WEB-INF\extra\webui-jsf-suntheme-4.0.2.10.jar
MD5: 62A5F094E9832DCE2A7CE138DFEE3507
SHA1: 4EC663AE9AB37D9D6504DC5754E1E59D36D2CD9E

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 4.0.2.10
file | name | webui-jsf-suntheme-4.0.2.10
Manifest | Implementation-Title | Woodstock Components "DEV_4.0" Theme: suntheme
Manifest | Implementation-Vendor | Sun Microsystems, Inc.
Manifest | Implementation-Vendor-Id | com.sun
Manifest | Implementation-Version | "DEV_4.0"
Manifest | specification-title | Woodstock Components Theme: suntheme
Manifest | specification-vendor | Sun Microsystems, Inc.
Manifest | specification-version | "DEV_4.0"
nexus | artifactid | webui-jsf-suntheme
nexus | groupid | com.sun.woodstock
nexus | version | 4.0.2.10

#### Identifiers

- maven: com.sun.woodstock:webui-jsf-suntheme:4.0.2.10 Confidence:HIGHEST
- cpe: cpe:/a:sun:woodstock:4.0.2.10 Confidence:LOW

### woden-api-1.0M8.jar

Description: The Woden project is a subproject of the Apache Web Services Project to develop a Java class library for reading, manipulating, creating and writing WSDL documents, initially to support WSDL 2.0 but with the longer term aim of supporting past, present and future versions of WSDL. There are two main deliverables: an API and an implementation. The Woden API consists of a set of Java interfaces. The WSDL 2.0-specific portion of the Woden API conforms to the W3C WSDL 2.0 specification. The implementation will be a high performance implementation directly usable in other Apache projects such as Axis2.

License:

    http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\woden-api-1.0M8.jar
MD5: FFA59063E09EE05D3F588ADC0DCE97BF
SHA1: E15D817DC457976E9AB5ED5B92E14C6F0FF4BCC9

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.0.m8
file | name | woden-api-1.0M8
jar | package name | apache
jar | package name | interface
jar | package name | service
jar | package name | woden
Manifest | bundle-docurl | http://www.apache.org/
Manifest | Bundle-Name | Woden - API
Manifest | bundle-symbolicname | org.apache.woden.woden-api
Manifest | Bundle-Vendor | Apache Software Foundation
Manifest | Bundle-Version | 1.0.0
nexus | artifactid | woden-api
nexus | groupid | org.apache.woden
nexus | version | 1.0M8
pom | artifactid | woden-api
pom | name | Woden - API

#### Identifiers

- maven: org.apache.woden:woden-api:1.0M8 Confidence:HIGHEST

### woden-impl-dom-1.0M8.jar

Description: The Woden project is a subproject of the Apache Web Services Project to develop a Java class library for reading, manipulating, creating and writing WSDL documents, initially to support WSDL 2.0 but with the longer term aim of supporting past, present and future versions of WSDL. There are two main deliverables: an API and an implementation. The Woden API consists of a set of Java interfaces. The WSDL 2.0-specific portion of the Woden API conforms to the W3C WSDL 2.0 specification. The implementation will be a high performance implementation directly usable in other Apache projects such as Axis2.

License:

    http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\woden-impl-dom-1.0M8.jar
MD5: 6CEFBDE48CF35F36AE20F72B6E58A30A
SHA1: A8F543456FC71426E62D003DADF3004B198ACEAF

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.0.m8
file | name | woden-impl-dom-1.0M8
jar | package name | apache
jar | package name | woden
Manifest | bundle-docurl | http://www.apache.org/
Manifest | Bundle-Name | Woden - DOM
Manifest | bundle-symbolicname | org.apache.woden.woden-impl-dom
Manifest | Bundle-Vendor | Apache Software Foundation
Manifest | Bundle-Version | 1.0.0
nexus | artifactid | woden-impl-dom
nexus | groupid | org.apache.woden
nexus | version | 1.0M8
pom | artifactid | woden-impl-dom
pom | name | Woden - DOM

#### Identifiers

- maven: org.apache.woden:woden-impl-dom:1.0M8 Confidence:HIGHEST

### wsdl4j-1.6.2.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\wsdl4j-1.6.2.jar
MD5: 2608A8EA3F07B0C08DE8A7D3D0D3FC09
SHA1: DEC1669FB6801B7328E01AD72FC9E10B69EA06C1

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.6.2
file | name | wsdl4j-1.6.2
jar | package | extensions
jar | package | ibm
jar | package | wsdl
jar | package name | ibm
jar | package name | wsdl
Manifest | Implementation-Title | WSDL4J
Manifest | Implementation-Vendor | IBM
Manifest | Implementation-Version | 1.6
Manifest | specification-title | JWSDL
Manifest | specification-vendor | IBM (Java Community Process)
Manifest | specification-version | 1.2
nexus | artifactid | wsdl4j
nexus | groupid | wsdl4j
nexus | version | 1.6.2

#### Identifiers

- maven: wsdl4j:wsdl4j:1.6.2 Confidence:HIGHEST

### wss4j-1.5.7.jar

Description: Apache WSS4J is an implementation of the Web Services Security (WS-Security) being developed at OASIS Web Services Security TC. WSS4J is a primarily a Java library that can be used to sign and verify SOAP Messages with WS-Security information. WSS4J will use Apache Axis and Apache XML-Security projects and will be interoperable with JAX-RPC based server/clients and .NET server/clients.

License:

    The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\wss4j-1.5.7.jar
MD5: 232797D8E8399C0A64EE9DD536721B8C
SHA1: B3DCF361DA64B4C1438B46F133F7D3E9D3384B04

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.5.7
file | name | wss4j-1.5.7
jar | package name | apache
jar | package name | message
jar | package name | security
jar | package name | ws
Manifest | bundle-docurl | http://www.apache.org/
Manifest | Bundle-Name | org.apache.ws.security
Manifest | bundle-symbolicname | org.apache.ws.security
Manifest | Bundle-Vendor | Apache Software Foundation
Manifest | Bundle-Version | 1.0.0
pom | artifactid | wss4j
pom | description | Apache WSS4J is an implementation of the Web Services Security (WS-Security) being developed at OASIS Web Services Security TC. WSS4J is a primarily a Java library that can be used to sign and verify SOAP Messages with WS-Security information. WSS4J ...
pom | groupid | apache.ws.security
pom | name | WSS4J
pom | organization name | The Apache Software Foundation
pom | version | 1.5.7

#### Identifiers

- None

### wstx-asl-3.2.4.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\wstx-asl-3.2.4.jar
MD5: F3FAC27A7387452F1C4243C695FA0F0D
SHA1: AADA03A08AE547BEE92CAF3B1E0CD756134E9226

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 3.2.4
file | name | wstx-asl-3.2.4
jar | package | ctc
jar | package | wstx
jar | package name | api
jar | package name | codehaus
jar | package name | stax
Manifest | Implementation-Title | WoodSToX XML-processor
Manifest | Implementation-Vendor | woodstox.codehaus.org
Manifest | Implementation-Version | 3.2.4
Manifest | specification-title | StAX 1.0 API
Manifest | specification-vendor | http://jcp.org/en/jsr/detail?id=173
Manifest | specification-version | 1.0
nexus | artifactid | wstx-asl
nexus | groupid | org.codehaus.woodstox
nexus | version | 3.2.4

#### Identifiers

- maven: org.codehaus.woodstox:wstx-asl:3.2.4 Confidence:HIGHEST

### xalan-2.7.0.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\xalan-2.7.0.jar
MD5: A018D032C21A873225E702B36B171A10
SHA1: A33C0097F1C70B20FA7DED220EA317EB3500515E

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 2.7.0
file | name | xalan-2.7.0
jar | package | apache
jar | package | xalan
nexus | artifactid | xalan
nexus | groupid | xalan
nexus | version | 2.7.0

#### Identifiers

- maven: xalan:xalan:2.7.0 Confidence:HIGHEST

### xercesImpl-2.8.1.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\xercesImpl-2.8.1.jar
MD5: E86F321C8191B37BD720FF5679F57288
SHA1: 25101E37EC0C907DB6F0612CBF106EE519C1AEF1

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 2.8.1
file | name | xercesImpl-2.8.1
jar | package | apache
jar | package | xerces
nexus | artifactid | xercesImpl
nexus | groupid | xerces
nexus | version | 2.8.1

#### Identifiers

- maven: xerces:xercesImpl:2.8.1 Confidence:HIGHEST

### xml-apis-1.3.04.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\xml-apis-1.3.04.jar
MD5: 9AE9C29E4497FC35A3EADE1E6DD0BBEB
SHA1: 90B215F48FE42776C8C7F6E3509EC54E84FD65EF

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.3.04
file | name | xml-apis-1.3.04
jar | package | dom
jar | package | xml
nexus | artifactid | xml-apis
nexus | groupid | xml-apis
nexus | version | 1.3.04

#### Identifiers

- maven: xml-apis:xml-apis:1.3.04 Confidence:HIGHEST

### xmlParserAPIs-2.6.0.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\xmlParserAPIs-2.6.0.jar
MD5: 2651F9F7C39E3524F3E2C394625AC63A
SHA1: 065ACEDE1E5305BD2B92213D7B5761328C6F4FD9

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 2.6.0
file | name | xmlParserAPIs-2.6.0
jar | package | dom
jar | package | w3c
nexus | artifactid | xmlParserAPIs
nexus | groupid | xerces
nexus | version | 2.6.2

#### Identifiers

- maven: xerces:xmlParserAPIs:2.6.2 Confidence:HIGHEST

### xmlpull-1.1.3.1.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\xmlpull-1.1.3.1.jar
MD5: CC57DACC720ECA721A50E78934B822D2
SHA1: 2B8E230D2AB644E4ECAA94DB7CDEDBC40C805DFA

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.1.3.1
file | name | xmlpull-1.1.3.1
jar | package | v1
jar | package | xmlpull
nexus | artifactid | xmlpull
nexus | groupid | xmlpull
nexus | version | 1.1.3.1

#### Identifiers

- maven: xmlpull:xmlpull:1.1.3.1 Confidence:HIGHEST

### XmlSchema-1.4.2.jar

Description: Commons XMLSchema is a light weight schema object model that can be used to manipualte or generate a schema. It has a clean, easy to use API and can easily be integrated into an existing project since it has almost no dependancies on third party libraries.

License:

    The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\XmlSchema-1.4.2.jar
MD5: CED8C8555D4E965CF7CE06459730479A
SHA1: 7CF868B0D6A5B68BE0DEA014126B986B3387755A

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.4.2
file | name | XmlSchema-1.4.2
jar | package name | apache
jar | package name | commons
jar | package name | schema
jar | package name | ws
Manifest | bundle-docurl | http://www.apache.org/
Manifest | Bundle-Name | XmlSchema
Manifest | bundle-symbolicname | org.apache.ws.commons.schema
Manifest | Bundle-Vendor | Apache Software Foundation
Manifest | Bundle-Version | 1.4.2
nexus | artifactid | XmlSchema
nexus | groupid | org.apache.ws.commons.schema
nexus | version | 1.4.2
pom | artifactid | XmlSchema
pom | description | Commons XMLSchema is a light weight schema object model that can be used to manipualte or generate a schema. It has a clean, easy to use API and can easily be integrated into an existing project since it has almost no dependancies on third party libraries.
pom | groupid | apache.ws.commons.schema
pom | name | XmlSchema
pom | organization name | Apache Software Foundation
pom | version | 1.4.2

#### Identifiers

- maven: org.apache.ws.commons.schema:XmlSchema:1.4.2 Confidence:HIGHEST

### xmlsec-1.4.2.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\xmlsec-1.4.2.jar
MD5: C1F469EA540408D0FC8025E9E2E6569C
SHA1: 72E2A0012F386FE0C7901D4311D60DF155E585B5

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.4.2
file | name | xmlsec-1.4.2
jar | package | apache
jar | package | security
jar | package | xml
nexus | artifactid | xmlsec
nexus | groupid | org.apache.santuario
nexus | version | 1.4.2

#### Identifiers

- maven: org.apache.santuario:xmlsec:1.4.2 Confidence:HIGHEST

### xpp3_min-1.1.4c.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\xpp3_min-1.1.4c.jar
MD5: DCD95BCB84B09897B2B66D4684C040DA
SHA1: 19D4E90B43059058F6E056F794F0EA4030D60B86

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.1.4
file | name | xpp3_min-1.1.4c
jar | package | v1
jar | package | xmlpull
nexus | artifactid | xpp3_min
nexus | groupid | xpp3
nexus | version | 1.1.4c

#### Identifiers

- maven: xpp3:xpp3_min:1.1.4c Confidence:HIGHEST

### xstream-1.4.2.jar

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\xstream-1.4.2.jar
MD5: 23947B036DD0D9CD23CB2F388C373181
SHA1: 97E5013F391487CCE4DE6B0EEBCDE21549E91872

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 1.4.2
file | name | xstream-1.4.2
jar | package | thoughtworks
jar | package | xstream
jar | package name | core
jar | package name | xstream
nexus | artifactid | xstream
nexus | groupid | com.thoughtworks.xstream
nexus | version | 1.4.2
pom | artifactid | xstream
pom | name | XStream Core

#### Identifiers

- maven: com.thoughtworks.xstream:xstream:1.4.2 Confidence:HIGHEST

### xwork-2.1.1.jar

Description: XWork is an command-pattern framework that is used to power WebWork as well as other applications. XWork provides an Inversion of Control container, a powerful expression language, data type conversion, validation, and pluggable configuration.

License:

    The OpenSymphony Software License 1.1: src/etc/LICENSE.txt

File Path: C:\Users\jeremy\Documents\NetBeansProjects\DependencyCheck\dependency-check-core\target\test-classes\xwork-2.1.1.jar
MD5: FED42FC127540DBBF88FB4EE80A2C039
SHA1: E509A9C3A66AE7B26B56CCE0657CA2550AA43512

#### Evidence

Source | Name | Value
--- | --- | ---
file | name | 2.1.1
file | name | xwork-2.1.1
jar | package | opensymphony
jar | package | xwork2
jar | package name | config
jar | package name | configuration
jar | package name | container
jar | package name | conversion
jar | package name | opensymphony
jar | package name | xwork
pom | artifactid | xwork
pom | description | XWork is an command-pattern framework that is used to power WebWork as well as other applications. XWork provides an Inversion of Control container, a powerful expression language, data type conversion, validation, and pluggable configuration.
pom | groupid | opensymphony
pom | name | XWork
pom | organization name | OpenSymphony
pom | version | 2.1.1

#### Identifiers

- cpe: cpe:/a:opensymphony:xwork:2.1.1 Confidence:HIGHEST

#### Published Vulnerabilities

CVE-2011-2088

Severity: Medium
CVSS Score: 5.0
CWE: CWE-200 Information Exposure

XWork 2.2.1 in Apache Struts 2.2.1, and OpenSymphony XWork in OpenSymphony WebWork, allows remote attackers to obtain potentially sensitive information about internal Java class paths via vectors involving an s:submit element and a nonexistent method, a different vulnerability than CVE-2011-1772.3.

- BUGTRAQ - 20110518 Apache Struts 2, XWork, OpenSymphony WebWork Java Class Path Information Disclosure
- MISC - http://secureappdev.blogspot.com/2011/05/Struts_2_XWork_WebWork_XSS_in_error_pages.html
- MISC - http://secureappdev.blogspot.com/2011/05/apache-struts-2-xwork-webwork-reflected.html
- MISC - http://www.ventuneac.net/security-advisories/MVSA-11-006
- MISC - https://issues.apache.org/jira/browse/WW-3579

Vulnerable Software & Versions: (show all)

- cpe:/a:opensymphony:xwork:-
- ...
- cpe:/a:apache:struts:2.2.1
- cpe:/a:opensymphony:webwork:-
- cpe:/a:opensymphony:xwork:-
- cpe:/a:opensymphony:xwork:2.2.1

CVE-2011-1772

Severity: Low
CVSS Score: 2.6
CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x before 2.2.3, and OpenSymphony XWork in OpenSymphony WebWork, allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) an action name, (2) the action attribute of an s:submit element, or (3) the method attribute of an s:submit element.

- BID - 47784
- CONFIRM - http://struts.apache.org/2.2.3/docs/version-notes-223.html
- CONFIRM - http://struts.apache.org/2.x/docs/s2-006.html
- CONFIRM - https://issues.apache.org/jira/browse/WW-3579
- JVN - JVN#25435092
- JVNDB - JVNDB-2011-000106
- MISC - http://secureappdev.blogspot.com/2011/05/Struts_2_XWork_WebWork_XSS_in_error_pages.html
- MISC - http://secureappdev.blogspot.com/2011/05/apache-struts-2-xwork-webwork-reflected.html
- MISC - http://www.ventuneac.net/security-advisories/MVSA-11-006
- VUPEN - ADV-2011-1198

Vulnerable Software & Versions: (show all)

- cpe:/a:opensymphony:xwork
- ...
- cpe:/a:apache:struts:2.0.0
- cpe:/a:apache:struts:2.0.1
- cpe:/a:apache:struts:2.0.2
- cpe:/a:apache:struts:2.0.3
- cpe:/a:apache:struts:2.0.4
- cpe:/a:apache:struts:2.0.5
- cpe:/a:apache:struts:2.0.6
- cpe:/a:apache:struts:2.0.7
- cpe:/a:apache:struts:2.0.8
- cpe:/a:apache:struts:2.0.9
- cpe:/a:apache:struts:2.0.10
- cpe:/a:apache:struts:2.0.11
- cpe:/a:apache:struts:2.0.11.1
- cpe:/a:apache:struts:2.0.11.2
- cpe:/a:apache:struts:2.0.12
- cpe:/a:apache:struts:2.0.13
- cpe:/a:apache:struts:2.0.14
- cpe:/a:apache:struts:2.1.0
- cpe:/a:apache:struts:2.1.1
- cpe:/a:apache:struts:2.1.2
- cpe:/a:apache:struts:2.1.3
- cpe:/a:apache:struts:2.1.4
- cpe:/a:apache:struts:2.1.5
- cpe:/a:apache:struts:2.1.6
- cpe:/a:apache:struts:2.1.8
- cpe:/a:apache:struts:2.1.8.1
- cpe:/a:apache:struts:2.2.1
- cpe:/a:apache:struts:2.2.1.1
- cpe:/a:opensymphony:webwork
- cpe:/a:opensymphony:xwork

CVE-2008-6504

Severity: Medium
CVSS Score: 5.0
CWE: CWE-20 Improper Input Validation

ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not properly restrict # (pound sign) references to context objects, which allows remote attackers to execute Object-Graph Navigation Language (OGNL) statements and modify server-side context objects, as demonstrated by use of a \u0023 representation for the # character.

- BID - 32101
- CONFIRM - http://fisheye6.atlassian.com/cru/CR-9/
- CONFIRM - http://issues.apache.org/struts/browse/WW-2692
- CONFIRM - http://jira.opensymphony.com/browse/XW-641
- CONFIRM - http://struts.apache.org/2.x/docs/s2-003.html
- OSVDB - 49732
- SECUNIA - 32495
- SECUNIA - 32497
- VUPEN - ADV-2008-3003
- VUPEN - ADV-2008-3004
- XF - xwork-parameterinterceptor-security-bypass(46328)

Vulnerable Software & Versions: (show all)

- cpe:/a:opensymphony:xwork:2.1.1
- ...
- cpe:/a:apache:struts
- cpe:/a:opensymphony:xwork:2.0.0
- cpe:/a:opensymphony:xwork:2.0.1
- cpe:/a:opensymphony:xwork:2.0.2
- cpe:/a:opensymphony:xwork:2.0.3
- cpe:/a:opensymphony:xwork:2.0.4
- cpe:/a:opensymphony:xwork:2.0.5
- cpe:/a:opensymphony:xwork:2.1.0
- cpe:/a:opensymphony:xwork:2.1.1

This report contains data retrieved from the National Vulnerability Database.