CVE Vulnerabilities

CVE-2010-4265

Published: Dec 30, 2010 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.6 LOW
AV:N/AC:H/Au:N/C:N/I:N/A:P
RedHat/V2
2.6 LOW
AV:N/AC:H/Au:N/C:N/I:N/A:P
RedHat/V3
Ubuntu
MEDIUM

The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09 allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application data, related to a missing CVE-2010-3862 patch. NOTE: this can be considered a duplicate of CVE-2010-3862 because a missing patch should not be assigned a separate CVE identifier.

Affected Software

Name Vendor Start Version End Version
Jboss_remoting Redhat 2.2.0 (including) 2.2.0 (including)
Jboss_remoting Redhat 2.2.2-sp10 (including) 2.2.2-sp10 (including)
Jboss_remoting Redhat 2.2.2-sp11 (including) 2.2.2-sp11 (including)
Jboss_remoting Redhat 2.2.2-sp2 (including) 2.2.2-sp2 (including)
Jboss_remoting Redhat 2.2.2-sp4 (including) 2.2.2-sp4 (including)
Jboss_remoting Redhat 2.2.2-sp7 (including) 2.2.2-sp7 (including)
Jboss_remoting Redhat 2.2.2-sp8 (including) 2.2.2-sp8 (including)
Jboss_remoting Redhat 2.2.3 (including) 2.2.3 (including)
Jboss_remoting Redhat 2.2.3-sp1 (including) 2.2.3-sp1 (including)
Jboss_remoting Redhat 2.2.3-sp2 (including) 2.2.3-sp2 (including)
Jboss_remoting Redhat 2.2.3-sp3 (including) 2.2.3-sp3 (including)
Red Hat JBoss Enterprise Application Platform 4.3 RedHat *
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 RedHat jboss-remoting-0:2.2.3-4.SP3.ep1.1.el4 *
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 RedHat jboss-remoting-0:2.2.3-4.SP3.ep1.1.el5 *
Jbossas4 Ubuntu hardy *
Jbossas4 Ubuntu karmic *
Jbossas4 Ubuntu lucid *
Jbossas4 Ubuntu maverick *
Jbossas4 Ubuntu natty *
Jbossas4 Ubuntu oneiric *
Jbossas4 Ubuntu precise *
Jbossas4 Ubuntu quantal *
Jbossas4 Ubuntu raring *
Jbossas4 Ubuntu saucy *
Jbossas4 Ubuntu utopic *

References