CVE-2003-0845: SQL Injection
First published: Thu Oct 09 2003(Updated: )
Unknown vulnerability in the HSQLDB component in JBoss 3.2.1 and 3.0.8 on Java 1.4.x platforms, when running in the default configuration, allows remote attackers to conduct unauthorized activities and possibly execute arbitrary code via certain SQL statements to (1) TCP port 1701 in JBoss 3.2.1, and (2) port 1476 in JBoss 3.0.8.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Jboss Jboss | =3.2.1 | |
| Jboss Jboss | =3.0.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/8773
- http://sourceforge.net/docman/display_doc.php?docid=19314&group_id=22866
- http://www.redhat.com/support/errata/RHSA-2007-1048.html
- http://secunia.com/advisories/27914
- http://marc.info/?l=bugtraq&m=106547728803252&w=2
- http://marc.info/?l=bugtraq&m=106546044416498&w=2
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11300
- collector/nvd-historical
- collector/nvd-index
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/references
- agent/weakness
- agent/description
- agent/softwarecombine
- agent/last-modified-date
- agent/remedy
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/jboss
- canonical/jboss jboss
- version/jboss jboss/3.2.1
- version/jboss jboss/3.0.8