Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2014-0556
HistoryDec 31, 2014 - 3:28 p.m.

Updated castor packages fix CVE-2014-3004

2014-12-3115:28:04
Gentoo Foundation
advisories.mageia.org
21

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.016 Low

EPSS

Percentile

87.6%

JSON

Updated castor packages fix security vulnerability: The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XML document (CVE-2014-3004).

OSVersionArchitecturePackageVersionFilename
Mageia4noarchcastor< 1.3.3-1castor-1.3.3-1.mga4

Related

packetstorm 2
ibm 11
cvelist 1
github 1
symantec 1
fedora 2
ubuntucve 1
cve 2
nessus 3
prion 1
nvd 2
openvas 3
osv 1
oracle 1
packetstorm
packetstorm
Castor Library XXE Disclosure
2014-05-30 00:00:00
Cisco WebEx Meetings Server XML Injection
2018-11-05 00:00:00
ibm
ibm
Security Bulletin: XML External Entity Processing in Castor might affect WebSphere Lombardi Edition (CVE-2014-3004)
2018-06-15 07:02:08
Security Bulletin: Rational Test Control Panel component in Rational Test Workbench and Rational Test Virtualization Server affected by Castor Library vulnerablity (CVE-2014-3004)
2018-06-17 04:59:34
Security Bulletin: XML External Entity Injection vulnerability affect IBM Business Automation Workflow and IBM Business Process Manager (BPM) - CVE-2014-3004
2022-11-02 21:46:48
cvelist
cvelist
CVE-2014-3004
2014-06-11 14:00:00
github
github
Improper Restriction of XML External Entity Reference in Castor
2022-05-13 01:05:37
symantec
symantec
Castor Library CVE-2014-3004 XML External Entity Information Disclosure Vulnerability
2014-05-27 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: castor-1.3.3-1.fc21
2014-12-15 04:35:34
[SECURITY] Fedora 20 Update: castor-1.3.3-1.fc20
2014-12-15 04:35:59
ubuntucve
ubuntucve
CVE-2014-3004
2014-06-11 00:00:00
cve
cve
CVE-2014-3004
2014-06-11 14:55:07
CVE-2018-18895
2019-02-12 18:00:00
nessus
nessus
Fedora 21 : castor-1.3.3-1.fc21 (2014-16446)
2014-12-15 00:00:00
Fedora 20 : castor-1.3.3-1.fc20 (2014-16346)
2014-12-15 00:00:00
openSUSE Security Update : castor (openSUSE-SU-2014:0822-1)
2014-06-23 00:00:00
prion
prion
Xxe
2014-06-11 14:55:00
nvd
nvd
CVE-2014-3004
2014-06-11 14:55:07
CVE-2018-18895
2019-01-30 15:29:05
openvas
openvas
Fedora Update for castor FEDORA-2014-16346
2014-12-15 00:00:00
Fedora Update for castor FEDORA-2014-16446
2015-01-05 00:00:00
Mageia: Security Advisory (MGASA-2014-0556)
2022-01-28 00:00:00
osv
osv
Improper Restriction of XML External Entity Reference in Castor
2022-05-13 01:05:37
oracle
oracle
Oracle Critical Patch Update Advisory - January 2020
2020-01-14 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.016 Low

EPSS

Percentile

87.6%

JSON
Related for MGASA-2014-0556
packetstorm2ibm11cvelist1github1symantec1fedora2ubuntucve1cve2nessus3prion1nvd2openvas3osv1oracle1