Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service (shutdown) by sending a shutdown command to all listening high ports.
References
Link | Resource |
---|---|
https://bugzilla.redhat.com/show_bug.cgi?id=1095974 | Issue Tracking Third Party Advisory |
http://www.securityfocus.com/bid/101872 | Third Party Advisory VDB Entry |
http://karaf.apache.org/security/cve-2014-0219.txt | Vendor Advisory |
Configurations
Information
Published : 2017-11-15 10:29
Updated : 2019-01-08 06:14
NVD link : CVE-2014-0219
Mitre link : CVE-2014-0219
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
apache
- karaf