NVD

Id
38280  
Name
CVE-2013-2186  
Description
The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-10-28  
Modified Date
2016-11-28  
Seq
2013-2186  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
195761 38280 CVE-2013-2186 RHSA-2013:1428  View
195762 38280 CVE-2013-2186 RHSA-2013:1429  View
195763 38280 CVE-2013-2186 RHSA-2013:1430  View
195764 38280 CVE-2013-2186 RHSA-2013:1448  View
195765 38280 CVE-2013-2186 USN-2029-1  View
195766 38280 CVE-2013-2186 DSA-2827  View
195767 38280 CVE-2013-2186 http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html  View
195768 38280 CVE-2013-2186 http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html  View
195769 38280 CVE-2013-2186 http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html  View
195770 38280 CVE-2013-2186 63174  View
195771 38280 CVE-2013-2186 apache-commons-cve20132186-file-overrwite(88133)  View
195772 38280 CVE-2013-2186 RHSA-2016:0070  View
195773 38280 CVE-2013-2186 https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23352 JVNDB-2013-004927 複数の Red Hat JBoss 製品で使用される Apache Commons FileUpload における任意のファイルに書き込まれる脆弱性 Red Hat JBoss Enterprise BRMS Platform、JBoss Enterprise Portal Platform、および JBoss Enterprise Web Server で使用される Apache Commons FileUpload の DiskFileItem クラスには、任意のファイルに書き込まれる脆弱性が存在します。 CVE-2013-2186 62128 CVE-2013-2186 38280 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004927.html 2013-10-15 2016-02-04 View