CVE-2016-3088

Apache ActiveMQ Improper Input Validation Vulnerability

Activemq

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.

1. Jun 2016

Ausgewertete Quellen

• Red Hat
  http://rhn.redhat.com/errata/RHSA-2016-2036.html
• Hersteller
  http://activemq.apache.org/security-advisories.data/CVE-2016-3088-announcement.txt
• Hersteller
  https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E
• Hinweis
  http://www.securitytracker.com/id/1035951
• Hinweis
  http://www.zerodayinitiative.com/advisories/ZDI-16-356
• Hinweis
  http://www.zerodayinitiative.com/advisories/ZDI-16-357
• Hinweis
  https://www.exploit-db.com/exploits/42283/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3088
• CISA
  Apache ActiveMQ Improper Input Validation Vulnerability
• NVD
  CVE-2016-3088