Red Hat update for JBoss Enterprise Products

Secunia ID	SA50736
CVE-ID	CVE-2011-4108, CVE-2011-4109, CVE-2011-4576, CVE-2011-4619, CVE-2012-0884, CVE-2012-1165, CVE-2012-2110, CVE-2012-2333
Release Date	25 Sep 2012
Criticality	Highly Critical
Solution Status	Vendor Patch
Software	JBoss Enterprise Application Platform 5.x JBoss Enterprise Application Platform 6.x Red Hat JBoss Enterprise Application Platform 5.x Red Hat JBoss Enterprise Web Server 1.x
Where	From remote
Impact	DoS (Denial of Service) This includes vulnerabilities ranging from excessive resource consumption (e.g. causing a system to use a lot of memory) to crashing an application or an entire system. System access This covers vulnerabilities where malicious people are able to gain system access and execute arbitrary code with the privileges of a local user. Exposure of sensitive information Vulnerabilities where documents or credentials are leaked or can be revealed either locally or from remote. Security Bypass This covers vulnerabilities or security issues where malicious users or people can bypass certain security mechanisms of the application. The actual impact varies significantly depending on the design and purpose of the affected application.
Description	Red Hat has issued an update for multiple JBoss Enterprise products. This fixes multiple vulnerabilities, which can be exploited by malicious people to disclose potentially sensitive information, bypass certain security restrictions, cause a DoS (Denial of Service), and potentially compromise an application using the library. For more information: SA46958 SA47426 SA48847 SA49116
Solution	Updated packages are available via Red Hat Network. JBoss Enterprise Application Platform 5.1.2: https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform&downloadType=securityPatches&version=5.1.2 JBoss Enterprise Application Platform 6.0.0: https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform&downloadType=securityPatches&version=6.0.0 JBoss Enterprise Web Server 1.0.2: https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=webserver&downloadType=securityPatches&version=1.0.2
Original Advisory	RHSA-2012:1306-01: https://rhn.redhat.com/errata/RHSA-2012-1306.html RHSA-2012:1307-01: https://rhn.redhat.com/errata/RHSA-2012-1307.html RHSA-2012:1308-01: https://rhn.redhat.com/errata/RHSA-2012-1308.html

© 1997-2013 Kaspersky Lab ZAO. All Rights Reserved.
Industry-leading Antivirus Software.
Registered trademarks and service marks are the property of their respective owners.
The authors' opinions do not necessarily reflect the official positions of Kaspersky Lab.