NVD

Id
15197  
Name
CVE-2010-3862  
Description
The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09, and 5.1.0; and JBoss Enterprise Web Platform (aka JBEWP) 5.1.0; allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application data.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2010-12-30  
Modified Date
2010-12-31  
Seq
2010-3862  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
85530 15197 CVE-2010-3862 1024813  View
85531 15197 CVE-2010-3862 RHSA-2010:0937  View
85532 15197 CVE-2010-3862 RHSA-2010:0938  View
85533 15197 CVE-2010-3862 RHSA-2010:0939  View
85534 15197 CVE-2010-3862 RHSA-2010:0959  View
85535 15197 CVE-2010-3862 RHSA-2010:0960  View
85536 15197 CVE-2010-3862 RHSA-2010:0961  View
85537 15197 CVE-2010-3862 RHSA-2010:0962  View
85538 15197 CVE-2010-3862 RHSA-2010:0963  View
85539 15197 CVE-2010-3862 https://bugzilla.redhat.com/show_bug.cgi?id=641389  View
85540 15197 CVE-2010-3862 https://issues.jboss.org/browse/JBPAPP-5253  View
85541 15197 CVE-2010-3862 https://issues.jboss.org/browse/JBREM-1261  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37459 JVNDB-2010-003244 Red Hat JBoss Enterprise Application Platform および JBoss Enterprise Web Platform の Boss Remoting におけるサービス運用妨害 (DoS) の脆弱性 Red Hat JBoss Enterprise Application Platform (JBoss EAP または JBEAP) および JBoss Enterprise Web Platform (JBEWP) の Boss Remoting の org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run メソッドには、サービス運用妨害 (daemon 停止 ) 状態となる脆弱性が存在します。 CVE-2010-3862 46442 CVE-2010-3862 15197 2.6 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003244.html 2010-12-08 2012-03-27 View