PT-2013-1117 · Apache+3 · Apache Commons Fileupload+5

Published

2013-10-28

·

Updated

2024-08-06

·

CVE-2013-2186

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Apache Commons FileUpload versions (affected versions not specified) Red Hat JBoss BRMS version 5.3.1 Red Hat JBoss Portal versions 4.3 CP07, 5.2.2, and 6.0.0 Red Hat JBoss Web Server version 1.0.2
Description The issue affects the DiskFileItem class in Apache Commons FileUpload, allowing remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance. This can lead to a violation of confidentiality, integrity, and availability of protected information. The exploitation of these vulnerabilities can be carried out remotely.
Recommendations For Red Hat JBoss BRMS version 5.3.1, update to a version that includes the fix for the DiskFileItem class vulnerability. For Red Hat JBoss Portal versions 4.3 CP07, 5.2.2, and 6.0.0, update to a version that includes the fix for the DiskFileItem class vulnerability. For Red Hat JBoss Web Server version 1.0.2, update to a version that includes the fix for the DiskFileItem class vulnerability. As a temporary workaround, consider restricting access to the DiskFileItem class until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability in Apache Commons FileUpload.

Exploit

Fix

RCE

Weakness Enumeration

Related Identifiers

BDU:2015-03287
CVE-2013-2186
DSA-2827-1
GHSA-QX6H-9567-5FQW
OPENSUSE-SU-2024:10262-1
OPENSUSE-SU-2024:10620-1
RHSA-2013:1428
RHSA-2016:0070
SUSE-SU-2013_1660-1

Affected Products

Apache Commons Fileupload
Oracle Weblogic Server
Red Hat Jboss Brms
Red Hat Jboss Portal
Red Hat Jboss Web Server
Suse