Caucho Quercus Running On Resin Multiple Security Vulnerabilities

Bugtraq ID:	54645
Class:	Unknown
CVE:	CVE-2012-2968 CVE-2012-2969 CVE-2012-2965 CVE-2012-2966 CVE-2012-2967
Remote:	Yes
Local:	No
Published:	Jul 23 2012 12:00AM
Updated:	Mar 19 2015 09:37AM
Credit:	Sergey Scherbel
Vulnerable:
Not Vulnerable:

Caucho Quercus Running On Resin Multiple Security Vulnerabilities

Caucho Quercus running on Resin is prone to multiple security vulnerabilities.

Exploiting these issues will allow an attacker to obtain sensitive information, cause a denial of service condition, or execute arbitrary code with the privileges of the application.

Caucho Quercus Running On Resin Multiple Security Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Caucho Quercus Running On Resin Multiple Security Vulnerabilities

Solution:
Vendor updates are available. Please see the references for more information.

Caucho Quercus Running On Resin Multiple Security Vulnerabilities

References:

• Resin Change Log- 4.0 (Caucho Technology)
  
• Resin Homepage (Caucho Technology)
  
• VU#309979: Caucho's Quercus on Resin contains multiple vulnerabilities (US-CERT)