Restlet Framework Object Deserialization Remote Code Execution Vulnerability

Bugtraq ID:	62000
Class:	Design Error
CVE:	CVE-2013-4271
Remote:	Yes
Local:	No
Published:	Aug 23 2013 12:00AM
Updated:	Jan 01 2014 12:21AM
Credit:	David Jorm
Vulnerable:
Not Vulnerable:

Restlet Framework Object Deserialization Remote Code Execution Vulnerability

Restlet Framework is prone to a remote-code execution vulnerability.

Exploiting this issue will allow attackers to execute arbitrary code within the context of the affected application.

Restlet Framework 2.1.2 is vulnerable; other versions may also be affected.

Restlet Framework Object Deserialization Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Restlet Framework Object Deserialization Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Restlet Framework Object Deserialization Remote Code Execution Vulnerability

References:

• Restlet Framework Homepage (Restlet)