CVE

Id
44038  
CVE No.
CVE-2010-1454  
Status
Candidate  
Description
com.springsource.tcserver.serviceability.rmi.JmxSocketListener in VMware SpringSource tc Server Runtime 6.0.19 and 6.0.20 before 6.0.20.D, and 6.0.25.A before 6.0.25.A-SR01, does not properly enforce the requirement for an encrypted (aka s2enc) password, which allows remote attackers to obtain JMX interface access via a blank password.  
Phase
Assigned (20100415)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
480727 44038 CVE-2010-1454 BUGTRAQ:20100517 CVE-2010-1454: SpringSource tc Server unauthenticated remote access to JMX interface  View
480728 44038 CVE-2010-1454 URL:http://www.securityfocus.com/archive/1/archive/1/511307/100/0/threaded  View
480729 44038 CVE-2010-1454 CONFIRM:http://www.springsource.com/security/cve-2010-1454  View
480730 44038 CVE-2010-1454 BID:40205  View
480731 44038 CVE-2010-1454 URL:http://www.securityfocus.com/bid/40205  View
480732 44038 CVE-2010-1454 SECUNIA:39778  View
480733 44038 CVE-2010-1454 URL:http://secunia.com/advisories/39778  View
480734 44038 CVE-2010-1454 XF:tcserver-listener-security-bypass(58684)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39618 JVNDB-2010-005403 FSX 用の Create and Extract Zips TweakFS Zip Utility におけるスタックベースのバッファオーバーフローの脆弱性 Flight Simulator X (FSX) 用の Create and Extract Zips TweakFS Zip Utility には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2010-1458 44038 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005403.html  View