Published: 17/11/2003 Updated: 24/03/2020

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Unknown vulnerability in the HSQLDB component in JBoss 3.2.1 and 3.0.8 on Java 1.4.x platforms, when running in the default configuration, allows remote malicious users to conduct unauthorized activities and possibly execute arbitrary code via certain SQL statements to (1) TCP port 1701 in JBoss 3.2.1, and (2) port 1476 in JBoss 3.0.8.

Vulnerable Product	Search on Vulmon	Subscribe to Product
jboss jboss 3.0.8
jboss jboss 3.2.1

source: wwwsecurityfocuscom/bid/8773/info A remote command-injection vulnerability has been reported in JBoss The issue is reportedly exposed via the HSQLDB component, which is a SQL database server that manages JMS connections Because of a number of flaws, an attacker can pass commands to the HSQLDB component via the port it listens on ...

CWE-89 http://www.securityfocus.com/bid/8773 http://sourceforge.net/docman/display_doc.php?docid=19314&group_id=22866 http://www.redhat.com/support/errata/RHSA-2007-1048.html http://secunia.com/advisories/27914 http://marc.info/?l=bugtraq&m=106547728803252&w=2 http://marc.info/?l=bugtraq&m=106546044416498&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11300 https://nvd.nist.gov https://www.exploit-db.com/exploits/23221/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2003-0845

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect