CVE-2012-3155: Medium severity glassfish vulnerability

Published Oct 16, 2012

Updated

Unspecified vulnerability in the CORBA ORB component in Sun GlassFish Enterprise Server 2.1.1, Oracle GlassFish Server 3.0.1 and 3.1.2, and Sun Java System Application Server 8.1 and 8.2 allows remote attackers to affect availability, related to CORBA ORB.

Affected Software

5 affected components

Oracle GlassFish Server=2.1.1

Oracle GlassFish Server=3.0.1

Oracle GlassFish Server=3.1.2

Sun Java System Application Server=8.1

Sun Java System Application Server=8.2

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html

Event History

Oct 16, 2012

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3155?

The severity of CVE-2012-3155 is considered critical as it allows remote attackers to affect the availability of the affected systems.

How do I fix CVE-2012-3155?

To fix CVE-2012-3155, you should update your Oracle GlassFish Server or Sun Java System Application Server to the latest patched version available.

Which versions are affected by CVE-2012-3155?

CVE-2012-3155 affects Oracle GlassFish Server versions 2.1.1, 3.0.1 and 3.1.2, as well as Sun Java System Application Server versions 8.1 and 8.2.

What components are involved in CVE-2012-3155?

CVE-2012-3155 involves a vulnerability in the CORBA ORB component of the affected servers.

Can CVE-2012-3155 be exploited remotely?

Yes, CVE-2012-3155 can be exploited remotely, allowing attackers to disrupt server availability without physical access.