Apache Commons FileUpload CVE-2016-3092 Denial Of Service Vulnerability

Bugtraq ID: 91453
Class: Failure to Handle Exceptional Conditions
CVE: CVE-2016-3092
Remote: Yes
Local: No
Published: Jun 21 2016 12:00AM
Updated: Oct 19 2017 03:03AM
Credit: TERASOLUNA Framework Development Team at the Software Engineering, Research and Development Headquarter.
Vulnerable: Oracle Utilities Work and Asset Management 1.9.1.2.11
Oracle Utilities Framework 4.3.0.3.0
Oracle Utilities Framework 4.3.0.2.0
Oracle Utilities Framework 4.3.0.1.0
Oracle Utilities Framework 4.2.0.3.0
Oracle Utilities Framework 4.2.0.2.0
Oracle Utilities Framework 4.2.0.1.0
Oracle Utilities Framework 4.1.0.2.0
Oracle Utilities Framework 4.1.0.1.0
Oracle Utilities Framework 2.2.0.0.0
Oracle Solaris 11.3
Oracle MySQL Enterprise Monitor 3.2.1182
Oracle MySQL Enterprise Monitor 3.3.2.1162
Oracle MySQL Enterprise Monitor 3.3.0.1098
Oracle MySQL Enterprise Monitor 3.2.4.1102
Oracle MySQL Enterprise Monitor 3.1.6.8003
Oracle MySQL Enterprise Monitor 3.1.5.7958
Oracle MySQL Enterprise Monitor 3.1.4.7895
Oracle MySQL Enterprise Monitor 3.1.3.7856
Oracle MySQL Enterprise Backup 4.0.1
Oracle MySQL Enterprise Backup 3.12.2
Oracle MySQL Enterprise Backup 3.10.1
Oracle MySQL Enterprise Backup 3.10
Oracle Healthcare Master Person Index 4.0.1.0
Oracle Healthcare Master Person Index 3.0.0.0
Oracle Healthcare Master Person Index 2.0.1.0
Oracle Healthcare Master Person Index 2.0
Oracle Healthcare Master Person Index 1.0
Oracle Enterprise Manager Base Platform 12.1
Oracle Enterprise Manager Base Platform 13.2.0.0
Oracle Enterprise Manager Base Platform 13.1.0.0
Oracle Communications Service Broker Engineered System Edition 6.1
Oracle Communications Service Broker Engineered System Edition 6.0
Jenkins-Ci commons-fileupload library 0
IBM WebSphere Service Registry and Repository 8.5
IBM WebSphere Service Registry and Repository 8.0
IBM Websphere Portal 8.5
IBM Websphere Portal 8.0
IBM Websphere Portal 7.0
IBM Websphere Portal 6.1
IBM WebSphere Message Broker 8.0
IBM WebSphere Lombardi Edition 7.2.0.5
IBM WebSphere Lombardi Edition 7.2.0
IBM WebSphere Lombardi Edition 7.2
IBM WebSphere Dashboard Framework 7.0.1
IBM WebSphere Application Server Liberty Profile 0
IBM WebSphere Application Server Hypervisor Edition 0
IBM Websphere Application Server 8.5.5
IBM Websphere Application Server 8.0 2
IBM Websphere Application Server 7.0 3
IBM Websphere Application Server 7.0 29
IBM Websphere Application Server 7.0 21
IBM Websphere Application Server 7.0 10
IBM Websphere Application Server 7.0 .9
IBM Websphere Application Server 7.0 .8
IBM Websphere Application Server 7.0 .2
IBM Websphere Application Server 7.0 .13
IBM Websphere Application Server 7.0 .12
IBM Websphere Application Server 7.0 .11
IBM Websphere Application Server 9.0.0.0
IBM Websphere Application Server 9.0
IBM Websphere Application Server 8.5.5.9
IBM Websphere Application Server 8.5.5.8
IBM Websphere Application Server 8.5.5.7
IBM Websphere Application Server 8.5.5.6
IBM Websphere Application Server 8.5.5.5
IBM Websphere Application Server 8.5.5.4
IBM Websphere Application Server 8.5.5.3
IBM Websphere Application Server 8.5.5.2
IBM Websphere Application Server 8.5.5.10
IBM Websphere Application Server 8.5.5.1
IBM Websphere Application Server 8.5.5.0
IBM Websphere Application Server 8.5.5 Liberty Profil
IBM Websphere Application Server 8.5.5 Full Profile
IBM Websphere Application Server 8.5.0.1
IBM Websphere Application Server 8.5.0.0
IBM Websphere Application Server 8.5 Liberty Profile
IBM Websphere Application Server 8.5 Full Profile
IBM Websphere Application Server 8.0.0.9
IBM Websphere Application Server 8.0.0.8
IBM Websphere Application Server 8.0.0.7
IBM Websphere Application Server 8.0.0.6
IBM Websphere Application Server 8.0.0.5
IBM Websphere Application Server 8.0.0.4
IBM Websphere Application Server 8.0.0.3
IBM Websphere Application Server 8.0.0.12
IBM Websphere Application Server 8.0.0.11
IBM Websphere Application Server 8.0.0.10
IBM Websphere Application Server 8.0.0.1
IBM Websphere Application Server 8.0.0.0
IBM Websphere Application Server 7.0.0.7
IBM Websphere Application Server 7.0.0.6
IBM Websphere Application Server 7.0.0.5
IBM Websphere Application Server 7.0.0.41
IBM Websphere Application Server 7.0.0.4
IBM Websphere Application Server 7.0.0.39
IBM Websphere Application Server 7.0.0.37
IBM Websphere Application Server 7.0.0.35
IBM Websphere Application Server 7.0.0.34
IBM Websphere Application Server 7.0.0.33
IBM Websphere Application Server 7.0.0.32
IBM Websphere Application Server 7.0.0.31
IBM Websphere Application Server 7.0.0.27
IBM Websphere Application Server 7.0.0.25
IBM Websphere Application Server 7.0.0.24
IBM Websphere Application Server 7.0.0.23
IBM Websphere Application Server 7.0.0.22
IBM Websphere Application Server 7.0.0.19
IBM Websphere Application Server 7.0.0.18
IBM Websphere Application Server 7.0.0.17
IBM Websphere Application Server 7.0.0.16
IBM Websphere Application Server 7.0.0.15
IBM Websphere Application Server 7.0.0.14
IBM Websphere Application Server 7.0.0.1
IBM Websphere Application Server 7.0.0.0
IBM Web Experience Factory 8.0 3
IBM Web Experience Factory 8.0 1
IBM Web Experience Factory 8.5.0.1
IBM Web Experience Factory 8.5.0.0
IBM Web Experience Factory 8.0.0.2
IBM Web Experience Factory 8.0.0
IBM Tivoli Storage Productivity Center 5.2.10
IBM Tivoli Storage Productivity Center 5.2.6
IBM Tivoli Storage Productivity Center 5.2.5
IBM Tivoli Storage Productivity Center 5.2.2
IBM Tivoli Storage Productivity Center 5.2.1 0
IBM Tivoli Storage Productivity Center 5.2
IBM Tivoli Storage Productivity Center 5.1.1 3
IBM Tivoli Storage Productivity Center 5.1.1
IBM Tivoli Storage Productivity Center 5.1
IBM Tivoli Storage Productivity Center 5.2.7.1
IBM Tivoli Storage Productivity Center 5.2.7
IBM Tivoli Storage Productivity Center 5.2.5.1
IBM Tivoli Storage Productivity Center 5.2.4.1
IBM Tivoli Storage Productivity Center 5.2.4
IBM Tivoli Storage Productivity Center 5.2.3
IBM Tivoli Storage Productivity Center 5.2.1.1
IBM Tivoli Storage Productivity Center 5.1.1.9
IBM Tivoli Storage Productivity Center 5.1.1.8
IBM Tivoli Storage Productivity Center 5.1.1.7
IBM Tivoli Storage Productivity Center 5.1.1.6
IBM Tivoli Storage Productivity Center 5.1.1.5
IBM Tivoli Storage Productivity Center 5.1.1.4
IBM Tivoli Storage Productivity Center 5.1.1.2
IBM Tivoli Storage Productivity Center 5.1.1.11
IBM Tivoli Storage Productivity Center 5.1.1.10
IBM Tivoli Storage Productivity Center 5.1.1.1
IBM Tivoli Storage Productivity Center 5.1.1.0
IBM Tivoli Storage Manager for Virtual Environments 7.1
IBM Tivoli Storage Manager for Virtual Environments 6.4
IBM Tivoli Storage Manager for Virtual Environments 6.3
IBM Tivoli Monitoring 6.3 FP7
IBM Tivoli Monitoring 6.3 FP6
IBM Tivoli Monitoring 6.3 FP4
IBM Tivoli Monitoring 6.3
IBM Tivoli Monitoring 6.2.3 FP5
IBM Tivoli Monitoring 6.2.3
IBM Tivoli Monitoring 6.2.2 FP9
IBM Tivoli Monitoring 6.2.2
IBM Tivoli Enterprise portal server -
IBM Tivoli Application Dependency Discovery Manager 7.2.2.5
IBM Tivoli Application Dependency Discovery Manager 7.2.2.4
IBM Tivoli Application Dependency Discovery Manager 7.2.2.3
IBM Tivoli Application Dependency Discovery Manager 7.2.2.2
IBM Tivoli Application Dependency Discovery Manager 7.2.2.1
IBM Support Assistant Team Server 5.0.1
IBM Support Assistant Team Server 5.0
IBM Support Assistant Team Server 5.0.2.2
IBM Storwize V7000 Unified 1.6.1.0
IBM Storwize V7000 Unified 1.6.0.1
IBM Storwize V7000 Unified 1.6.0.0
IBM Storwize V7000 Unified 1.5.2.4
IBM Storwize V7000 Unified 1.5.2.3
IBM Storwize V7000 Unified 1.5.2.2
IBM Storwize V7000 Unified 1.5.2.1
IBM Storwize V7000 Unified 1.5.2.0
IBM Storwize V7000 Unified 1.5.1.3
IBM Storwize V7000 Unified 1.5.1.0
IBM Storwize V7000 Unified 1.5.0.2
IBM Storwize V7000 Unified 1.5.0.1
IBM Storwize V7000 Unified 1.5.0.0
IBM Sterling Secure Proxy 3.4.3
IBM Sterling Secure Proxy 3.4.2
IBM Sterling Secure Proxy 3.4.3.0 iFix 1
IBM Sterling Secure Proxy 3.4.2.0 iFix 8
IBM Sterling Secure Proxy 3.4.2.0 iFix 7
IBM Sterling Secure Proxy 3.4.2.0 iFix 6
IBM Sterling Secure Proxy 3.4.2.0 iFix 5
IBM Sterling Secure Proxy 3.4.2.0 iFix 4
IBM Spectrum Control 5.2.10
IBM Spectrum Control 5.2.9
IBM Spectrum Control 5.2.8
IBM Security Guardium Data Redaction 2.5.1
IBM Rational Directory Server 5.2.1 iFix9
IBM Multi-Enterprise Integration Gateway 1.0.0.1
IBM Multi-Enterprise Integration Gateway 1.0
IBM Marketing Operations 9.1.2
IBM Marketing Operations 9.1.1
IBM Marketing Operations 9.1
IBM Marketing Operations 9.0
IBM Marketing Operations 8.6
IBM Marketing Operations 9.1.2.1
IBM Marketing Operations 10.0
IBM Interact 9.1.2
IBM Interact 9.1
IBM Interact 8.6
IBM Interact 10.0
IBM Integration Bus 9.0
IBM Integration Bus 10.0
IBM InfoSphere QualityStage 9.1
IBM InfoSphere QualityStage 11.5
IBM InfoSphere QualityStage 11.3
IBM Infosphere Metadata Workbench 9.1
IBM Infosphere Metadata Workbench 8.7
IBM InfoSphere Metadata Asset Manager 9.5
IBM InfoSphere Metadata Asset Manager 9.1
IBM InfoSphere Metadata Asset Manager 8.7
IBM InfoSphere Metadata Asset Manager 11.3
IBM InfoSphere Information Server Business Glossary 9.1
IBM InfoSphere Information Server Business Glossary 11.5
IBM InfoSphere Information Server Business Glossary 11.3
IBM InfoSphere Information Server Blueprint Director 9.1
IBM InfoSphere Information Server Blueprint Director 11.3
IBM InfoSphere Information Server 9.1
IBM InfoSphere Information Server 8.7
IBM InfoSphere Information Server 8.5
IBM InfoSphere Information Governance Catalog 11.5
IBM InfoSphere Information Governance Catalog 11.3
IBM InfoSphere Business Glossary 9.1
IBM i 7.3
IBM i 7.2
IBM i 7.1
IBM i 6.1
IBM Global Retention Policy and Schedule Management 6.0.3.3
IBM Forms Server 8.0.1
IBM Forms Server 8.2
IBM Forms Server 8.1
IBM Forms Server 8.0
IBM Enterprise Content Management System Monitor 5.2
IBM Enterprise Content Management System Monitor 5.1
IBM Distributed Marketing 9.1.2
IBM Distributed Marketing 9.1
IBM Distributed Marketing 9.0
IBM Distributed Marketing 8.6
IBM Distributed Marketing 10.0
IBM Disposal and Governance Management for IT 6.0.3.3
IBM Control Center 6.1.0.0iFix02
IBM Control Center 6.1.0.0iFix01
IBM Control Center 6.1.0.0
IBM Control Center 6.0.0.1 iFix05
IBM Control Center 6.0.0.1 iFix04
IBM Control Center 6.0.0.1 iFix03
IBM Control Center 6.0.0.1
IBM Control Center 6.0.0.0iFix03
IBM Control Center 6.0.0.0 iFix02
IBM Control Center 6.0.0.0 iFix01
IBM Control Center 6.0.0.0
IBM Control Center 5.4.2.1 iFix08
IBM Control Center 5.4.2.1 iFix05
IBM Cognos Business Intelligence Server 10.2.2
IBM Cognos Business Intelligence Server 10.2.1 1
IBM Cognos Business Intelligence Server 10.2.1
IBM Cognos Business Intelligence Server 10.1.1
IBM Cognos Business Intelligence Server 10.2
IBM Case Manager 5.2.1.5
IBM Case Manager 5.2.1.0
IBM Case Manager 5.2.0.4
IBM Case Manager 5.2.0.0
IBM Case Manager 5.1.1.3
IBM Case Manager 5.1.1.0
IBM Campaign 9.1.2
IBM Campaign 9.1.1
IBM Campaign 9.1 1
IBM Campaign 9.1 0
IBM Campaign 9.1
IBM Campaign 9.1.2.1
IBM Campaign 9.1.0.4
IBM Campaign 9.1
IBM Campaign 9.0
IBM Campaign 8.6
IBM Campaign 10.0
IBM Business Process Manager Advanced 8.5
IBM Business Process Manager Advanced 8.0.1
IBM Business Process Manager Advanced 7.5.1
IBM Business Process Manager Advanced 8.0.1.3
IBM Business Process Manager Advanced 8.0.1.2
IBM Business Process Manager Advanced 8.0.1.1
IBM Business Process Manager Advanced 8.0.1.0
IBM Business Process Manager Advanced 8.0.0.0
IBM Business Process Manager Advanced 7.5.1.2
IBM Business Process Manager Advanced 7.5.1.1
IBM Business Process Manager Advanced 7.5.1.0
IBM Business Process Manager Advanced 7.5.0.1
IBM Business Process Manager Advanced 7.5.0.0
IBM Business Process Manager Advanced 7.5.0
IBM Business Process Manager Advanced 7.5
IBM Bluemix Liberty for Java 3.2
IBM Bluemix Liberty for Java 2.9
IBM Bluemix Liberty for Java 2.3
IBM Bluemix Liberty for Java 2.2
IBM Bluemix Liberty for Java 2.1
IBM Bluemix Liberty for Java 2.0
IBM Bluemix Liberty for Java 1.9
IBM Bluemix Liberty for Java 1.8
IBM Bluemix Liberty for Java 1.7
IBM Bluemix Liberty for Java 1.6
IBM Bluemix Liberty for Java 1.5
IBM Bluemix Liberty for Java 1.3
IBM BigFix Remote Control 9.1.2
IBM B2B Advanced Communications 1.0.0.5_1
IBM B2B Advanced Communications 1.0.0.5
IBM B2B Advanced Communications 1.0.0.4
IBM B2B Advanced Communications 1.0.0.3
IBM B2B Advanced Communications 1.0.0.2
IBM Atlas eDiscovery Process Management 6.0.3.3
IBM Algo One Algo Risk Application 5.0
IBM Algo One Algo Risk Application 4.9.1
IBM Algo One Algo Risk Application 5.1.0
IBM Algo One Algo Risk Application 4.9
IBM Algo One 5.1.0
IBM Algo Credit Manager 5.2.0
IBM Algo Credit Limits 4.7.0
IBM Algo Credit Administrator 2.2
HP Tomcat 7.0.70.01 for HP-UX B.11.31
HP JG768AAE HP PCM+ to IMC Std Upg w/ 200-node E-LTU 0
HP JG767AAE HP IMC SmCnct WSM Vrtl Applnc SW E-LTU 0
HP JG766AAE HP IMC SmCnct Vrtl Applnc SW E-LTU 0
HP JG748AAE HP IMC Ent SW Plat w/ 50 Nodes E-LTU 0
HP JG747AAE HP IMC Std SW Plat w/ 50 Nodes E-LTU 0
HP JG660AAE HP IMC Smart Connect w/WLM VAE E-LTU 0
HP JG590AAE HP IMC Bsc WLAN Mgr SW Pltfm 50 AP E-LTU 0
HP JG550AAE HP PMM to IMC Bsc WLM Upgr w/150AP E-LTU 0
HP JG549AAE HP PCM+ to IMC Std Upgr w/200-node E-LTU 0
HP JG548AAE HP PCM+ to IMC Bsc Upgr w/50-node E-LTU 0
HP JG546AAE HP IMC Basic SW Platform w/50-node E-LTU 0
HP JF378AAE HP IMC Ent S/W Pltfrm w/200-node E-LTU 0
HP JF378A HP IMC Ent S/W Platform w/200-node Lic 0
HP JF377AAE HP IMC Std S/W Pltfrm w/100-node E-LTU 0
HP JF377A HP IMC Std S/W Platform w/100-node Lic 0
HP JF289AAE HP Enterprise Management System to Intelligent Manageme 0
HP JF288AAE HP Network Director to Intelligent Management Center 0
HP JD816A HP A-IMC Standard Edition Software DVD Media 0
HP JD815A HP IMC Std Platform w/100-node License 0
HP JD814A HP A-IMC Enterprise Edition Software DVD Media 0
HP JD808A HP IMC Ent Platform w/100-node License 0
HP JD126A HP IMC Ent S/W Platform w/100-node 0
HP JD125A HP IMC Std S/W Platform w/100-node 0
HP IceWall SSO Password Reset Option 10.0
HP IceWall Identity Manager 5.0
Gentoo Linux
Apache Tomcat 8.0.35
Apache Tomcat 8.0.34
Apache Tomcat 8.0.33
Apache Tomcat 8.0.30
Apache Tomcat 8.0.27
Apache Tomcat 8.0.17
Apache Tomcat 8.0.15
Apache Tomcat 8.0.9
Apache Tomcat 8.0.8
Apache Tomcat 8.0.5
Apache Tomcat 8.0.3
Apache Tomcat 8.0.1
Apache Tomcat 7.0.69
Apache Tomcat 7.0.67
Apache Tomcat 7.0.65
Apache Tomcat 7.0.59
Apache Tomcat 7.0.57
Apache Tomcat 7.0.54
Apache Tomcat 7.0.53
Apache Tomcat 7.0.50
Apache Tomcat 7.0.33
Apache Tomcat 7.0.32
Apache Tomcat 7.0.31
Apache Tomcat 7.0.30
Apache Tomcat 7.0.29
Apache Tomcat 7.0.28
Apache Tomcat 7.0.27
Apache Tomcat 7.0.26
Apache Tomcat 7.0.25
Apache Tomcat 7.0.24
Apache Tomcat 7.0.23
Apache Tomcat 7.0.16
Apache Tomcat 7.0.15
Apache Tomcat 7.0.14
Apache Tomcat 7.0.13
Apache Tomcat 7.0.12
Apache Tomcat 7.0.9
Apache Tomcat 7.0.8
Apache Tomcat 7.0.7
Apache Tomcat 7.0.6
Apache Tomcat 7.0.4
Apache Tomcat 7.0.3
Apache Tomcat 7.0.2
Apache Tomcat 7.0.1
Apache Tomcat 9.0.0M6
Apache Tomcat 9.0.0.M5
Apache Tomcat 9.0.0.M4
Apache Tomcat 9.0.0.M3
Apache Tomcat 9.0.0.M2
Apache Tomcat 9.0.0.M1
Apache Tomcat 8.5.2
Apache Tomcat 8.5.0
Apache Tomcat 8.0.32
Apache Tomcat 8.0.0-RC6
Apache Tomcat 8.0.0-RC3
Apache Tomcat 8.0.0 Rc5
Apache Tomcat 8.0.0 Rc2
Apache Tomcat 8.0.0 Rc10
Apache Tomcat 8.0.0 Rc1
Apache Tomcat 8.0
Apache Tomcat 7.0.68
Apache Tomcat 7.0.55
Apache Tomcat 7.0.5
Apache Tomcat 7.0.49
Apache Tomcat 7.0.48
Apache Tomcat 7.0.47
Apache Tomcat 7.0.46
Apache Tomcat 7.0.45
Apache Tomcat 7.0.44
Apache Tomcat 7.0.43
Apache Tomcat 7.0.42
Apache Tomcat 7.0.41
Apache Tomcat 7.0.40
Apache Tomcat 7.0.39
Apache Tomcat 7.0.38
Apache Tomcat 7.0.37
Apache Tomcat 7.0.36
Apache Tomcat 7.0.35
Apache Tomcat 7.0.34
Apache Tomcat 7.0.22
Apache Tomcat 7.0.21
Apache Tomcat 7.0.20
Apache Tomcat 7.0.19
Apache Tomcat 7.0.18
Apache Tomcat 7.0.11
Apache Tomcat 7.0.10
Apache Tomcat 7.0
Apache Struts 2.5.1
Apache Struts 2.5
Apache Commons FileUpload 1.3.1
Apache Commons FileUpload 1.3
Apache Commons FileUpload 1.2.2
Apache Commons FileUpload 1.2.1
Apache Commons FileUpload 1.2
Not Vulnerable: Oracle Solaris 11.3 SRU11.6
IBM Case Manager 5.2.1
IBM Case Manager 5.2
IBM BigFix Remote Control 9.1.3
Apache Tomcat 8.0.36
Apache Tomcat 7.0.70
Apache Tomcat 9.0.0M8
Apache Tomcat 8.5.3
Apache Commons FileUpload 1.3.2


 

Privacy Statement
Copyright 2010, SecurityFocus