NVD

Id
15538  
Name
CVE-2010-4265  
Description
The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09 allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application data, related to a missing CVE-2010-3862 patch. NOTE: this can be considered a duplicate of CVE-2010-3862 because a missing patch should not be assigned a separate CVE identifier.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2010-12-30  
Modified Date
2010-12-31  
Seq
2010-4265  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
87943 15538 CVE-2010-4265 1024840  View
87944 15538 CVE-2010-4265 RHSA-2010:0964  View
87945 15538 CVE-2010-4265 RHSA-2010:0965  View
87946 15538 CVE-2010-4265 https://bugzilla.redhat.com/show_bug.cgi?id=660623  View
87947 15538 CVE-2010-4265 https://issues.jboss.org/browse/JBPAPP-5253  View
87948 15538 CVE-2010-4265 https://issues.jboss.org/browse/JBREM-1261  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37615 JVNDB-2010-003400 Red Hat JBoss Enterprise Application Platform の JBoss Remoting におけるサービス運用妨害 (DoS) の脆弱性 Red Hat JBoss Enterprise Application Platform (JBoss EAP または JBEAP) に含まれる JBoss Remoting の org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run メソッドには、サービス運用妨害 (デーモン停止) 状態となる脆弱性が存在します。CVE-2010-3862 のパッチ不足に関連しています。 CVE-2010-4265 46845 CVE-2010-4265 15538 2.6 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003400.html 2010-12-08 2012-03-27 View