ID de Prueba:	1.3.6.1.4.1.25623.1.0.140051
Categoría:	Gain a shell remotely
Título:	Java RMI Server Insecure Default Configuration RCE Vulnerability - Active Check
Resumen:	Multiple Java products that implement the RMI Server contain a; vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code; (remote code execution/RCE) on a targeted system with elevated privileges.
Descripción:	Summary: Multiple Java products that implement the RMI Server contain a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code (remote code execution/RCE) on a targeted system with elevated privileges. Vulnerability Insight: The vulnerability exists because of an incorrect default configuration of the Remote Method Invocation (RMI) Server in the affected software. Vulnerability Impact: An unauthenticated, remote attacker could exploit the vulnerability by transmitting crafted packets to the affected software. When the packets are processed, the attacker could execute arbitrary code on the system with elevated privileges. Solution: Disable class-loading. Please contact the vendor of the affected system for additional guidance. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3556 BugTraq ID: 50231 http://www.securityfocus.com/bid/50231 CERT/CC vulnerability note: VU#597809 https://www.kb.cert.org/vuls/id/597809 http://security.gentoo.org/glsa/glsa-201406-32.xml HPdes Security Advisory: HPSBMU02797 http://marc.info/?l=bugtraq&m=134254957702612&w=2 HPdes Security Advisory: HPSBMU02799 http://marc.info/?l=bugtraq&m=134254866602253&w=2 HPdes Security Advisory: HPSBUX02730 http://marc.info/?l=bugtraq&m=132750579901589&w=2 HPdes Security Advisory: HPSBUX02760 http://marc.info/?l=bugtraq&m=133365109612558&w=2 HPdes Security Advisory: HPSBUX02777 http://marc.info/?l=bugtraq&m=133728004526190&w=2 HPdes Security Advisory: SSRT100710 HPdes Security Advisory: SSRT100805 HPdes Security Advisory: SSRT100854 HPdes Security Advisory: SSRT100867 http://osvdb.org/76505 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14316 http://www.redhat.com/support/errata/RHSA-2011-1384.html http://www.redhat.com/support/errata/RHSA-2011-1478.html http://www.redhat.com/support/errata/RHSA-2012-0006.html RedHat Security Advisories: RHSA-2013:1455 http://rhn.redhat.com/errata/RHSA-2013-1455.html http://www.securitytracker.com/id?1026215 http://secunia.com/advisories/48308 http://secunia.com/advisories/48692 http://secunia.com/advisories/49198 SuSE Security Announcement: SUSE-SU-2012:0114 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html SuSE Security Announcement: SUSE-SU-2012:0122 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html http://www.ubuntu.com/usn/USN-1263-1 XForce ISS Database: jre-rmi-unspecified(70837) https://exchange.xforce.ibmcloud.com/vulnerabilities/70837
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.