Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Update JBoss 308 & 321: Remote Command Injection Oct 06 2003 08:39PM
Marc Schoenefeld (schonef uni-muenster de)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Adam,

thanks for the question, here is the answer:

just downloaded the 3.0.8 from Jboss.org and
changed the port of the exploit code from
1701 to 1476, which is the HSQL port in
Version 3.0.8 of JBoss.
I can confirm that

JBOSS 3.0.8 is als...

[ more ]  





 

Privacy Statement
Copyright 2009, SecurityFocus