Vulnerability Database
289,599
Total vulnerabilities in the database
CVE-2011-1483
wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09, 4.3, and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss Enterprise SOA Platform 4.2.CP05, 4.3.CP05, and 5.1.0; JBoss Communications Platform 1.2.11 and 5.1.1; JBoss Enterprise BRMS Platform 5.1.0; and JBoss Enterprise Web Platform 5.1.1 does not properly handle recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted request containing an XML document with a DOCTYPE declaration and a large number of nested entity references, a similar issue to CVE-2003-1564.
| Software | From | Fixed in |
|---|---|---|
| redhat / jboss_enterprise_application_platform | 4.2.0-cp09 | 4.2.0-cp09.x |
| redhat / jboss_enterprise_application_platform | 4.3.0 | 4.3.0.x |
| redhat / jboss_enterprise_portal_platform | 5.1.1 | 5.1.1.x |
| redhat / jboss_enterprise_portal_platform | 4.3.0-cp06 | 4.3.0-cp06.x |
| redhat / jboss_enterprise_application_platform | 5.1.1 | 5.1.1.x |
| redhat / jboss_enterprise_soa_platform | 5.1.0 | 5.1.0.x |
| redhat / jboss_enterprise_soa_platform | 4.2.0-cp05 | 4.2.0-cp05.x |
| redhat / jboss_communications_platform | 5.1.1 | 5.1.1.x |
| redhat / jboss_enterprise_brms_platform | 5.1.0 | 5.1.0.x |
| redhat / jboss_enterprise_soa_platform | 4.3.0-cp05 | 4.3.0-cp05.x |
| redhat / jboss_enterprise_web_platform | 5.1.1 | 5.1.1.x |
| redhat / jboss_communications_platform | 1.2.11 | 1.2.11.x |
| hp / network_node_manager_i | 9.03 | 9.03.x |
| hp / network_node_manager_i | 9.0 | 9.0.x |
| hp / network_node_manager_i | 9.10 | 9.10.x |
| hp / network_node_manager_i | 9.01 | 9.01.x |
| hp / network_node_manager_i | 9.02 | 9.02.x |
org.jboss.ws / jbossws-common
|
- | 2.1.0.Final |