Lucene search
PRIOn knowledge basePRION:CVE-2016-0779HistoryApr 11, 2017 - 4:59 p.m.
Code injection
2017-04-1116:59:00
PRIOn knowledge base
www.prio-n.com
7
The EjbObjectInputStream class in Apache TomEE before 1.7.4 and 7.x before 7.0.0-M3 allows remote attackers to execute arbitrary code via a crafted serialized object.
References
packetstormsecurity.com/files/136256/Apache-TomEE-Patched.html
tomee-openejb.979440.n4.nabble.com/Document-resolved-vulnerability-CVE-2015-8581-td4678073.html
tomee.apache.org/security/tomee.html
www.securityfocus.com/archive/1/537806/100/0/threaded
www.securityfocus.com/bid/79204
www.zerodayinitiative.com/advisories/ZDI-15-638
Related
cvelist
cvelist
CVE-2016-0779
2017-04-11 16:00:00
nvd
nvd
CVE-2016-0779
2017-04-11 16:59:00
CVE-2015-8581
2015-12-16 21:59:13
cve
cve
CVE-2016-0779
2017-04-11 16:59:00
CVE-2015-8581
2015-12-16 21:59:13
openvas
openvas
Apache TomEE Remote Code Execution Vulnerability
2017-06-28 00:00:00
osv
osv
CVE-2016-0779
2017-04-11 16:59:00
nessus
nessus
Apache TomEE 1.x < 1.7.4 / 7.x < 7.0.0-M3 Multiple RCE
2016-05-24 00:00:00
impervablog
impervablog
Deserialization Attacks Surge Motivated by Illegal Crypto-mining
2018-01-24 17:45:08