1783 matches found
PT-2015-2776 · Apache · Apache Activemq
Name of the Vulnerable Software and Affected Versions: Apache ActiveMQ versions 5.x through 5.11.1 Description: The issue exists due to incorrect restriction of the directory path name with limited access in the file server upload/download functionality of Apache ActiveMQ. This allows a remote...
Apache ActiveMQ 5.x-5.11.1 Directory Traversal Shell Upload
This module exploits a directory traversal vulnerability CVE-2015-1830 in Apache ActiveMQ 5.x before 5.11.2 for Windows. The module tries to upload a JSP payload to the /admin directory via the traversal path /fileserver/..\admin\ using an HTTP PUT request with the default ActiveMQ credentials...
Apache ActiveMQ 5.11.1/5.13.2 - Directory Traversal / Command Execution
I have recently been playing with Apache ActiveMQ, and came across a simple but interesting directory traversal flaw in the fileserver upload/download functionality. I have only been able to reproduce this on Windows, i.e. where "" is a path delimiter. An attacker could use this flaw to upload...
Apache ActiveMQ 5.11.15.13.2 - Directory Traversal Command Execution
Apache ActiveMQ 5.11.15.13.2 - Directory Traversal Command Execution I have recently been playing with Apache ActiveMQ, and came across a simple but interesting directory traversal flaw in the fileserver upload/download functionality. I have only been able to reproduce this on Windows, i.e. where...
UBUNTU-CVE-2014-3576
The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service shutdown via a shutdown command...
CVE-2014-3576
The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service shutdown via a shutdown command...
Command injection
The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service shutdown via a shutdown command...
CVE-2014-3576
The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service shutdown via a shutdown command...
CVE-2014-3576
The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service shutdown via a shutdown command...
DEBIAN-CVE-2014-3576
The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service shutdown via a shutdown command...
EUVD-2022-2254
The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service shutdown via a shutdown command...
CVE-2014-3576
The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service shutdown via a shutdown command...
CVE-2014-3576
CVE-2014-3576 affects Apache ActiveMQ before 5.11.0, where the processControlCommand function in broker/TransportConnection.java allows a remote attacker to shut down the broker via a shutdown command, causing a denial of service. The vulnerability is confirmed in multiple connected sources, incl...
CVE-2014-3576
The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service shutdown via a shutdown command...
Apache ActiveMQ Denial of Service Vulnerability
Apache ActiveMQ is the United States Apache Apache Software Foundation developed a set of open source messaging middleware , which supports Java messaging services , clustering , Spring Framework and so on. There is a denial of service vulnerability in Apache ActiveMQ. An attacker can exploit thi...
Debian DSA-3330-1 : activemq - security update
It was discovered that the Apache ActiveMQ message broker is susceptible to denial of service through an undocumented, remote shutdown command. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...
[SECURITY] [DSA 3330-1] activemq security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3330-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 07, 2015 https://www.debian.org/security/faq -...
PT-2015-2724 · Apache · Apache Activemq
Name of the Vulnerable Software and Affected Versions: Apache ActiveMQ versions 5.x through 5.10.0 Description: The issue is related to the implementation of LDAPLoginModule and components of the Java Authentication and Authorization Service in Apache ActiveMQ, which has weaknesses in its...
Debian Security Advisory DSA 3330-1 (activemq - security update)
It was discovered that the Apache ActiveMQ message broker is susceptible to denial of service through an undocumented, remote shutdown command. OpenVAS Vulnerability Test $Id: deb3330.nasl 7798 2017-11-17 05:43:16Z teissa $ Auto-generated from advisory DSA 3330-1 using nvtgen 1.0 Script version:...