SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   Application (Web Server/CGI)  >   Red Hat JBoss Vendors:   Red Hat
JBoss Operations Network Cassandra JMX/RMI Interface Lets Remote Users Execute Arbitrary Code on the Target System
SecurityTracker Alert ID:  1034002
SecurityTracker URL:  http://securitytracker.com/id/1034002
CVE Reference:   CVE-2015-0225   (Links to External Site)
Date:  Oct 28 2015
Impact:   Execution of arbitrary code via network, User access via network
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): JBoss Operations Network 3.3.3
Description:   A vulnerability was reported in JBoss Operations Network. A remote user can execute arbitrary code on the target system.

The system binds a JMX/RMI interface to all network interfaces. A remote user can connect to the service and execute arbitrary code on the target system. The code will run with the privileges of the target Cassandra service.

The underlying vulnerability resides in the Apache Cassandra component.

Impact:   A remote user can execute arbitrary code on the target system.
Solution:   Red Hat has issued a fix (JBoss Operations Network 3.3.4).

The Red Hat advisory is available at:

https://rhn.redhat.com/errata/RHSA-2015-1947.html

Vendor URL:  rhn.redhat.com/errata/RHSA-2015-1947.html (Links to External Site)
Cause:   Access control error
Underlying OS:  Linux (Red Hat Enterprise)

Message History:   None.


 Source Message Contents

Subject:  [RHSA-2015:1947-01] Important: Red Hat JBoss Operations Network 3.3.4 update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

=====================================================================
                   Red Hat Security Advisory

Synopsis:          Important: Red Hat JBoss Operations Network 3.3.4 update
Advisory ID:       RHSA-2015:1947-01
Product:           Red Hat JBoss Operations Network
Advisory URL:      https://rhn.redhat.com/errata/RHSA-2015-1947.html
Issue date:        2015-10-28
CVE Names:         CVE-2015-0225 
=====================================================================

1. Summary:

Red Hat JBoss Operations Network 3.3 update 4, which fixes one security
issue and several bugs, is now available from the Red Hat Customer Portal.

Red Hat Product Security has rated this update as having Important security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.

2. Description:

Red Hat JBoss Operations Network is a Middleware management solution that
provides a single point of control to deploy, manage, and monitor JBoss
Enterprise Middleware, applications, and services.

This JBoss Operations Network 3.3.4 release serves as a replacement for
JBoss Operations Network 3.3.3, and includes several bug fixes. Refer to
the Customer Portal page linked in the References section for information
on the most significant of these changes.

The following security issue is also fixed with this release:

It was found that Apache Cassandra bound an unauthenticated JMX/RMI
interface to all network interfaces. A remote attacker able to access the
RMI, an API for the transport and remote execution of serialized Java,
could use this flaw to execute arbitrary code as the user running
Cassandra. (CVE-2015-0225)

All users of JBoss Operations Network 3.3.3 as provided from the Red Hat
Customer Portal are advised to upgrade to JBoss Operations Network 3.3.4.

3. Solution:

The References section of this erratum contains a download link (you must
log in to download the update). Before applying this update, back up your
existing JBoss Operations Network installation (including its databases,
applications, configuration files, the JBoss Operations Network server's
file system directory, and so on).

Refer to the JBoss Operations Network 3.3.4 Release Notes for
installation information.

4. Bugs fixed (https://bugzilla.redhat.com/):

1035481 - Port 9999 is already in use or unavailable when starting/installing/upgrading
1208181 - CVE-2015-0225 Cassandra: remote code execution via unauthenticated JMX/RMI interface
1212407 - RejectedExecutionException during installation of JON server which has been previously patched
1230411 - Storage node results in 1000s of configuration changes filling up the database
1232847 - Increase timeout for repair operation
1234651 - Remove unsupported alert-scripts/README.txt and alert-scripts/example.rb files from product distribution
1234912 - Do not authenticate against new storage node when replication_factor of system_auth keyspace is wrong
1243545 - Assigned resource group list cleared when using group assignment search function
1244941 - Group inventory pages (compatible, mixed, all) fail to display groups due to UI timeouts
1247311 - The patch will fail on windows when it is trying to copy files with too long paths due to windows path length limitation
1251503 - Creation and group association of bundle fails with IllegalArgumentException: Token did not result in valid file when deploy.xml uses rhq handover
1252136 - Initial drift definition snapshot is not taken and breaks drift
1252142 - Creation and group association of bundle fails with timeout followed by IllegalArgumentException: Token did not result in valid file
1252458 - Rebase container upon EAP 6.4 update-03
1255821 - Expose deleteBundleDestination for BundleManagerRemote in JBoss ON CLI
1256329 - JON upgrade from 3.3.2 to JON 3.3.3 does not remove files introduced with JON 3.3.0 upgrade 02
1258870 - It is not possible to delete events using JBoss ON CLI
1259555 - Changing the Storage Node JMX port does not update the JMX connection URL
1265309 - Operations running longer than 24hours should not be considered as not started

5. References:

https://access.redhat.com/security/cve/CVE-2015-0225
https://access.redhat.com/security/updates/classification/#important
https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=em&downloadType=securityPatches&version=3.3

6. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2015 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iD8DBQFWMN30XlSAg2UNWIIRAi+4AKCzsp2O2K8KV7KTeLnCHT/zW4tiIQCgw0l6
t9ViqX1oTMS7sWxrvuQuHIo=
=smmd
-----END PGP SIGNATURE-----

--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce
 
 


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2019, SecurityGlobal.net LLC