Signature Detail
Short Name |
APP:VMWARE-SPRING-CLASSLOADER |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
VMware SpringSource Spring Framework class.classloader Remote Code Execution |
Release Date |
2010/10/01 |
Update Number |
1784 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: VMware SpringSource Spring Framework class.classloader Remote Code Execution
This signature detects attempts to exploit a known remote code execution vulnerability in VMware SpringSource. It is due to a design weakness in the Web application framework. A remote attacker can leverage this weakness by sending a crafted HTTP request to a target system. A successful attack results in arbitrary code execution.
Extended Description
Spring Framework is prone to a remote code-injection vulnerability. An attacker can exploit this issue to inject and execute arbitrary malicious Java code within the context of the affected application. Successful exploits will compromise the affected application and the underlying system; other attacks are also possible. Versions of Spring Framework prior to 3.03, 2.5.6.SEC02, and 2.5.7.SR01 are vulnerable.
Affected Products
- Apache Software Foundation Geronimo 2.1
- Apache Software Foundation Geronimo 2.1.1
- Apache Software Foundation Geronimo 2.1.2
- Apache Software Foundation Geronimo 2.1.3
- Apache Software Foundation Geronimo 2.1.4
- Apache Software Foundation Geronimo 2.1.5
- Red Hat JBoss Web Framework Kit for RHEL 4 AS 5.0.0
- Red Hat JBoss Web Framework Kit for RHEL 4 ES 5.0.0
- Red Hat JBoss Web Framework Kit for RHEL 5 Server 1.0.0
- SpringSource Spring Framework 2.5.0.SEC01 (Community Releases)
- SpringSource Spring Framework 2.5.0 (Subscription Customers)
- SpringSource Spring Framework 2.5.1.SEC01 (Community Releases)
- SpringSource Spring Framework 2.5.1 (Subscription Customers)
- SpringSource Spring Framework 2.5.2.SEC01 (Community Releases)
- SpringSource Spring Framework 2.5.2 (Subscription Customers)
- SpringSource Spring Framework 2.5.3.SEC01 (Community Releases)
- SpringSource Spring Framework 2.5.3 (Subscription Customers)
- SpringSource Spring Framework 2.5.4.SEC01 (Community Releases)
- SpringSource Spring Framework 2.5.4 (Subscription Customers)
- SpringSource Spring Framework 2.5.5.SEC01 (Community Releases)
- SpringSource Spring Framework 2.5.5 (Subscription Customers)
- SpringSource Spring Framework 2.5.6.SEC01 (Community Releases)
- SpringSource Spring Framework 2.5.6 (Subscription Customers)
- SpringSource Spring Framework 2.5.7
- SpringSource Spring Framework 2.6.6.SEC01
- SpringSource Spring Framework 3.0.0
- SpringSource Spring Framework 3.0.1
- SpringSource Spring Framework 3.0.2
References
- BugTraq: 40954
- CVE: CVE-2010-1622
- URL: http://www.springsource.com/security/cve-2010-1622