7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.031 Low
EPSS
Percentile
89.5%
The Apache Commons FileUpload component can be used to add a file upload
capability to your applications.
A flaw was found in the way the DiskFileItem class handled NULL characters
in file names. A remote attacker able to supply a serialized instance of
the DiskFileItem class, which will be deserialized on a server, could use
this flaw to write arbitrary content to any location on the server that is
accessible to the user running the application server process.
(CVE-2013-2186)
Warning: Before applying the update, back up your existing Red Hat
JBoss Enterprise Web Server installation (including all applications and
configuration files).
All users of Red Hat JBoss Web Server 1.0.2 on Red Hat Enterprise Linux
5 and 6 are advised to upgrade to this updated package. The JBoss server
process must be restarted for the update to take effect.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | 6 | src | jakarta-commons-fileupload | < 1.1.1-7.7.ep5.el6 | jakarta-commons-fileupload-1.1.1-7.7.ep5.el6.src.rpm |
RedHat | 6 | noarch | jakarta-commons-fileupload | < 1.1.1-7.7.ep5.el6 | jakarta-commons-fileupload-1.1.1-7.7.ep5.el6.noarch.rpm |
RedHat | 5 | src | jakarta-commons-fileupload | < 1.1.1-7.7.ep5.el5 | jakarta-commons-fileupload-1.1.1-7.7.ep5.el5.src.rpm |
RedHat | 5 | noarch | jakarta-commons-fileupload | < 1.1.1-7.7.ep5.el5 | jakarta-commons-fileupload-1.1.1-7.7.ep5.el5.noarch.rpm |