Lucene search
PRIOn knowledge basePRION:CVE-2013-4444HistorySep 12, 2014 - 1:55 a.m.
Unrestricted file upload
2014-09-1201:55:00
PRIOn knowledge base
www.prio-n.com
8
Unrestricted file upload vulnerability in Apache Tomcat 7.x before 7.0.40, in certain situations involving outdated java.io.File code and a custom JMX configuration, allows remote attackers to execute arbitrary code by uploading and accessing a JSP file.
References
archives.neohapsis.com/archives/bugtraq/2014-09/0075.html
openwall.com/lists/oss-security/2014/10/24/12
seclists.org/fulldisclosure/2021/Jan/23
tomcat.apache.org/security-7.html
www.debian.org/security/2016/dsa-3447
www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
www.securityfocus.com/bid/69728
www.securitytracker.com/id/1030834
h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013
marc.info/?l=bugtraq&m=144498216801440&w=2
Related
securityvulns
securityvulns
[SECURITY] CVE-2013-4444 Remote Code Execution in Apache Tomcat
2014-09-15 00:00:00
Apache Tomcat security vulnerabilities
2014-09-15 00:00:00
ibm
ibm
osv
osv
Apache Tomcat Unrestricted file upload vulnerability
2022-05-13 01:12:13
tomcat7 - security update
2016-01-17 00:00:00
nvd
nvd
CVE-2013-4444
2014-09-12 01:55:06
openvas
openvas
Apache Tomcat Remote Code Execution Vulnerability (Sep 2014)
2014-09-23 00:00:00
Debian Security Advisory DSA 3447-1 (tomcat7 - security update)
2016-01-17 00:00:00
Debian: Security Advisory (DSA-3447-1)
2016-01-16 00:00:00
cvelist
cvelist
CVE-2013-4444
2014-09-12 01:00:00
debiancve
debiancve
CVE-2013-4444
2014-09-12 01:55:00
cve
cve
CVE-2013-4444
2014-09-12 01:55:06
github
github
Apache Tomcat Unrestricted file upload vulnerability
2022-05-13 01:12:13
threatpost
threatpost
Apache Warns of Tomcat Remote Code Execution Vulnerability
2014-09-10 15:31:47
tomcat
tomcat
Fixed in Apache Tomcat 7.0.40
2013-05-09 00:00:00
nessus
nessus
Apache Tomcat 7.0.0 < 7.0.40 multiple vulnerabilities
2013-05-15 00:00:00
Apache Tomcat 7.0.x < 7.0.40 Multiple Vulnerabilities
2013-05-20 00:00:00
Debian DSA-3447-1 : tomcat7 - security update
2016-01-19 00:00:00
ubuntucve
ubuntucve
CVE-2013-4444
2014-09-12 00:00:00
debian
debian
[SECURITY] [DSA 3447-1] tomcat7 security update
2016-01-17 15:47:11
[SECURITY] [DSA 3447-1] tomcat7 security update
2016-01-17 15:47:11
oracle
oracle
Oracle Critical Patch Update - October 2016
2016-10-18 00:00:00