QwikSec

Security Database

CVE

CWE

Training

CVE-2016-3094

Published: Jun 1, 2016

Modified: Aug 5, 2024

PUBLISHED

Description

PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service (broker termination) via a crafted authentication attempt, which triggers an uncaught exception.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://issues.apache.org/jira/browse/QPID-7271

x_refsource_CONFIRM

https://svn.apache.org/viewvc?view=revision&revision=1744403

x_refsource_CONFIRM

vdb-entry

x_refsource_SECTRACK

http://packetstormsecurity.com/files/137215/Apache-Qpid-Java-Broker-6.0.2-Denial-Of-Service.html

x_refsource_MISC

http://qpid.apache.org/releases/qpid-java-6.0.3/release-notes.html

x_refsource_CONFIRM

20160527 [CVE-2016-3094] Apache Qpid Java Broker denial of service vulnerability

mailing-list

x_refsource_BUGTRAQ

[qpid-users] 20160527 [CVE-2016-3094] Apache Qpid Java Broker denial of service vulnerability

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.