NetSight
IP …
low2.6

CVE-2010-3862

The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x befor…

Impact

The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09, and 5.1.0; and JBoss Enterprise Web Platform (aka JBEWP) 5.1.0; allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application data.

Affected products

VendorProductAffected versions
RedhatJboss Remoting
Versions 2.2.0, 2.2.2, 2.2.3
RedhatJboss Enterprise Application Platform
Versions 4.3.0, 5.1.0
RedhatJboss Enterprise Web Platform
Version 5.1.0

Weakness classification

CWE-20

References