CVE-2010-1871: Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability
An improper input sanitization flaw was found in the way JBoss Seam web application framework processed certain parametrized JBoss Expression Language expressions. A remote attacker could use this flaw to execute arbitrary code via a URL, containing appended, specially-crafted expression language parameters, provided to certain applications based on the JBoss Seam framework. Note: A properly configured and enabled Java Security Manager would prevent exploitation of this flaw.
References: [1] http://seamframework.org/ [2] http://docs.jboss.org/seam/2.2.0.GA/en-US/html/elenhancements.html
Acknowledgements:
Red Hat would like to thank Meder Kydyraliev of Google Security Team for responsibly reporting this issue.
Other sources
JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, allows attackers to perform remote code execution. This vulnerability can only be exploited when the Java Security Manager is not properly configured.
— CISA
JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL. NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/jboss-seam2to a version that resolves this vulnerability.Fixed in 0:2.0.2.FP-1.ep1.24.el4 - Upgrade
Upgrade
redhat/jboss-seam2to a version that resolves this vulnerability.Fixed in 0:2.0.2.FP-1.ep1.24.el5 - Configuration
Enable and properly configure the Java Security Manager for JVMs running JBoss Seam so that the Security Manager is active and correctly configured to prevent exploitation of the JBoss Seam EL input sanitization vulnerability.
Java Security Manager enabled = true (properly configured)
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1871?
CVE-2010-1871 has a high severity rating due to its potential for remote code execution.
How do I fix CVE-2010-1871?
To fix CVE-2010-1871, ensure that you upgrade to JBoss Seam 2 version 2.0.2.FP-1.ep1.24.el4 or el5.
Who is affected by CVE-2010-1871?
CVE-2010-1871 affects systems running JBoss Seam 2 as implemented in JBoss Enterprise Application Platform 4.3.0.
What causes the vulnerability in CVE-2010-1871?
The vulnerability in CVE-2010-1871 is caused by improper configuration of the Java Security Manager.
Can CVE-2010-1871 be exploited remotely?
Yes, CVE-2010-1871 allows remote code execution, making it a significant threat when exploited.