PT-2007-7278 · Red Hat · Jboss Seam

Published 2007-12-18 · Updated 2011-03-08 · CVE-2007-6433

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions JBoss Seam versions prior to 2.0.0.CR3

Description The issue allows remote attackers to inject and execute arbitrary EJBQL commands. This is possible due to a flaw in the getRenderedEjbql method in the org.jboss.seam.framework.Query class. The order parameter is specifically vulnerable to this type of injection.

Recommendations For JBoss Seam versions prior to 2.0.0.CR3, update to version 2.0.0.CR3 or later to resolve the issue. As a temporary workaround, consider restricting access to the getRenderedEjbql method in the org.jboss.seam.framework.Query class to minimize the risk of exploitation. Avoid using the order parameter in affected queries until the issue is resolved.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2007-6433

RHSA-2008:0151

RHSA-2008:0158

RHSA-2008:0213

Affected Products

Jboss Seam

References · 10

• 🔥 http://jira.jboss.com/jira/browse/JBSEAM-2084 · Exploit
• http://redhat.com/support/errata/RHSA-2008-0151.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0213.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0158.html · Vendor Advisory
• http://secunia.com/advisories/28077 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-6433 · Security Note
• http://securityfocus.com/bid/26850 · Note
• http://sourceforge.net/project/shownotes.php?release_id=549490&group_id=22866 · Note
• http://osvdb.org/42631 · Note
• http://vupen.com/english/advisories/2007/4215 · Note