PT-2012-4522 · Sun+1 · Sun Java System Application Server+2

Published 2012-10-16 · Updated 2013-10-11 · CVE-2012-3155

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Sun GlassFish Enterprise Server versions 2.1.1 Oracle GlassFish Server versions 3.0.1 through 3.1.2 Sun Java System Application Server versions 8.1 through 8.2

Description The issue affects the CORBA ORB component, allowing remote attackers to impact availability.

Recommendations For Sun GlassFish Enterprise Server version 2.1.1, update to a version that addresses the issue. For Oracle GlassFish Server versions 3.0.1 through 3.1.2, update to a version that addresses the issue. For Sun Java System Application Server versions 8.1 through 8.2, update to a version that addresses the issue.

Fix

Related Identifiers

CVE-2012-3155

Affected Products

Oracle Glassfish Server

Glassfish Enterprise Server

Sun Java System Application Server

References · 10

• https://ubuntu.com/security/CVE-2012-3155 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-3155 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-3155 · Security Note
• http://oracle.com/technetwork/topics/security/cpuoct2012-1515893.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2012-3155 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2013:150 · Vendor Advisory
• http://oracle.com/technetwork/topics/security/cpuoct2012verbose-1515934.html#SUNS · Note
• http://securityfocus.com/bid/56073 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3155 · Note
• http://securitytracker.com/id?1027676 · Note