CVE

Id
64391  
CVE No.
CVE-2013-4444  
Status
Candidate  
Description
Unrestricted file upload vulnerability in Apache Tomcat 7.x before 7.0.40, in certain situations involving outdated java.io.File code and a custom JMX configuration, allows remote attackers to execute arbitrary code by uploading and accessing a JSP file.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
634846 64391 CVE-2013-4444 BUGTRAQ:20140910 CVE-2013-4444 Remote Code Execution in Apache Tomcat  View
634847 64391 CVE-2013-4444 URL:http://archives.neohapsis.com/archives/bugtraq/2014-09/0075.html  View
634848 64391 CVE-2013-4444 MLIST:[oss-security] 20141024 Re: Duplicate Request: CVE-2013-4444 as a duplicate of CVE-2013-2185  View
634849 64391 CVE-2013-4444 URL:http://openwall.com/lists/oss-security/2014/10/24/12  View
634850 64391 CVE-2013-4444 CONFIRM:http://tomcat.apache.org/security-7.html  View
634851 64391 CVE-2013-4444 CONFIRM:http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html  View
634852 64391 CVE-2013-4444 CONFIRM:https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013  View
634853 64391 CVE-2013-4444 DEBIAN:DSA-3447  View
634854 64391 CVE-2013-4444 URL:http://www.debian.org/security/2016/dsa-3447  View
634855 64391 CVE-2013-4444 HP:HPSBOV03503  View
634856 64391 CVE-2013-4444 URL:http://marc.info/?l=bugtraq&m=144498216801440&w=2  View
634857 64391 CVE-2013-4444 BID:69728  View
634858 64391 CVE-2013-4444 URL:http://www.securityfocus.com/bid/69728  View
634859 64391 CVE-2013-4444 SECTRACK:1030834  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
24423 JVNDB-2013-005998 OpenLDAP の rwm オーバーレイにおけるサービス運用妨害 (DoS) の脆弱性 OpenLDAP の rwm オーバーレイは、参照を適切にカウントしないため、サービス運用妨害 (slapd クラッシュ) 状態にされる脆弱性が存在します。 CVE-2013-4449 64391 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005998.html  View