NVD

Id
37927  
Name
CVE-2013-1777  
Description
The JMX Remoting functionality in Apache Geronimo 3.x before 3.0.1, as used in IBM WebSphere Application Server (WAS) Community Edition 3.0.0.3 and other products, does not properly implement the RMI classloader, which allows remote attackers to execute arbitrary code by using the JMX connector to send a crafted serialized object.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-07-11  
Modified Date
2014-04-01  
Seq
2013-1777  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
193596 37927 CVE-2013-1777 20130701 [SECURITY] CVE-2013-1777: Apache Geronimo 3 RMI classloader exposure  View
193597 37927 CVE-2013-1777 http://geronimo.apache.org/30x-security-report.html  View
193598 37927 CVE-2013-1777 http://www-01.ibm.com/support/docview.wss?uid=swg21643282  View
193599 37927 CVE-2013-1777 https://issues.apache.org/jira/browse/GERONIMO-6477  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21763 JVNDB-2013-003338 IBM WebSphere Application Server などの製品で使用される Apache Geronimo における任意のコードを実行される脆弱性 IBM WebSphere Application Server (WAS) およびその他の製品で使用される Apache Geronimo の JMX Remoting 機能は、RMI クラスローダを適切に実装しないため、任意のコードを実行される脆弱性が存在します。 CVE-2013-1777 61719 CVE-2013-1777 37927 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003338.html 2013-07-01 2013-07-16 View