Vulnerabilities > CVE-2013-2133 - Permissions, Privileges, and Access Controls vulnerability in Redhat products

CVSS 5.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

SINGLE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

NONE

network

low complexity

redhat

CWE-264

nessus

NVD

Published: 2013-12-06

Updated: 2019-04-22

Summary

The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise Application Platform (EAP) before 6.2.0, does not properly enforce the method level restrictions for JAX-WS Service endpoints, which allows remote authenticated users to access otherwise restricted JAX-WS handlers by leveraging permissions to the EJB class.

Vulnerable Configurations

Part	Description	Count
Application	Redhat Redhat Jboss Enterprise Application Platform 4.2.0 Redhat Jboss Enterprise Application Platform 4.3.0 Redhat Jboss Enterprise Application Platform 5.0.0 Redhat Jboss Enterprise Application Platform 5.0.1 Redhat Jboss Enterprise Application Platform 5.1.0 Redhat Jboss Enterprise Application Platform 5.1.1 Redhat Jboss Enterprise Application Platform 5.1.2 Redhat Jboss Enterprise Application Platform 5.2.0 Redhat Jboss Enterprise Application Platform 5.2.1 Redhat Jboss Enterprise Application Platform 5.2.2 Redhat Jboss Enterprise Application Platform 6.0.0 Redhat Jboss Enterprise Application Platform 6.0.1 Redhat Jboss Enterprise Application Platform 4.0.0 Redhat Jboss Enterprise Application Platform 6.1.0	16
OS	Redhat Redhat Enterprise Linux 5 Redhat Enterprise Linux 6.0	2

Common Weakness Enumeration (CWE)

CWE-264 - Permissions, Privileges, and Access Controls

Common Attack Pattern Enumeration and Classification (CAPEC)

Accessing, Modifying or Executing Executable Files
An attack of this type exploits a system's configuration that allows an attacker to either directly access an executable file, for example through shell access; or in a possible worst case allows an attacker to upload a file and then execute it. Web servers, ftp servers, and message oriented middleware systems which have many integration points are particularly vulnerable, because both the programmers and the administrators must be in synch regarding the interfaces and the correct privileges for each interface.
Leverage Executable Code in Non-Executable Files
An attack of this type exploits a system's trust in configuration and resource files, when the executable loads the resource (such as an image file or configuration file) the attacker has modified the file to either execute malicious code directly or manipulate the target process (e.g. application server) to execute based on the malicious configuration parameters. Since systems are increasingly interrelated mashing up resources from local and remote sources the possibility of this attack occurring is high. The attack can be directed at a client system, such as causing buffer overrun through loading seemingly benign image files, as in Microsoft Security Bulletin MS04-028 where specially crafted JPEG files could cause a buffer overrun once loaded into the browser. Another example targets clients reading pdf files. In this case the attacker simply appends javascript to the end of a legitimate url for a pdf (http://www.gnucitizen.org/blog/danger-danger-danger/) http://path/to/pdf/file.pdf#whatever_name_you_want=javascript:your_code_here The client assumes that they are reading a pdf, but the attacker has modified the resource and loaded executable javascript into the client's browser process. The attack can also target server processes. The attacker edits the resource or configuration file, for example a web.xml file used to configure security permissions for a J2EE app server, adding role name "public" grants all users with the public role the ability to use the administration functionality. The server trusts its configuration file to be correct, but when they are manipulated, the attacker gains full control.
Blue Boxing
This type of attack against older telephone switches and trunks has been around for decades. A tone is sent by an adversary to impersonate a supervisor signal which has the effect of rerouting or usurping command of the line. While the US infrastructure proper may not contain widespread vulnerabilities to this type of attack, many companies are connected globally through call centers and business process outsourcing. These international systems may be operated in countries which have not upgraded Telco infrastructure and so are vulnerable to Blue boxing. Blue boxing is a result of failure on the part of the system to enforce strong authorization for administrative functions. While the infrastructure is different than standard current applications like web applications, there are historical lessons to be learned to upgrade the access control for administrative functions.
Restful Privilege Elevation
Rest uses standard HTTP (Get, Put, Delete) style permissions methods, but these are not necessarily correlated generally with back end programs. Strict interpretation of HTTP get methods means that these HTTP Get services should not be used to delete information on the server, but there is no access control mechanism to back up this logic. This means that unless the services are properly ACL'd and the application's service implementation are following these guidelines then an HTTP request can easily execute a delete or update on the server side. The attacker identifies a HTTP Get URL such as http://victimsite/updateOrder, which calls out to a program to update orders on a database or other resource. The URL is not idempotent so the request can be submitted multiple times by the attacker, additionally, the attacker may be able to exploit the URL published as a Get method that actually performs updates (instead of merely retrieving data). This may result in malicious or inadvertent altering of data on the server.
Target Programs with Elevated Privileges
This attack targets programs running with elevated privileges. The attacker would try to leverage a bug in the running program and get arbitrary code to execute with elevated privileges. For instance an attacker would look for programs that write to the system directories or registry keys (such as HKLM, which stores a number of critical Windows environment variables). These programs are typically running with elevated privileges and have usually not been designed with security in mind. Such programs are excellent exploit targets because they yield lots of power when they break. The malicious user try to execute its code at the same level as a privileged system call.

Nessus

NASL family	Red Hat Local Security Checks
NASL id	REDHAT-RHSA-2013-1784.NASL
description	An update for Red Hat JBoss Enterprise Application Platform 6.2.0, which fixes two security issues, several bugs, and adds various enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7. The HawtJNI Library class wrote native libraries to a predictable file name in /tmp/ when the native libraries were bundled in a JAR file, and no custom library path was specified. A local attacker could overwrite these native libraries with malicious versions during the window between when HawtJNI writes them and when they are executed. (CVE-2013-2035) A flaw was found in the way method-level authorization for JAX-WS Service endpoints was performed by the EJB invocation handler implementation. Any restrictions declared on EJB methods were ignored when executing the JAX-WS handlers, and only class-level restrictions were applied. A remote attacker who is authorized to access the EJB class, could invoke a JAX-WS handler which they were not authorized to invoke. (CVE-2013-2133) The CVE-2013-2035 issue was discovered by Florian Weimer of the Red Hat Product Security Team, and the CVE-2013-2133 issue was discovered by Richard Opalka and Arun Neelicattu of Red Hat. This release serves as a replacement for JBoss Enterprise Application Platform 6.1.1, and includes bug fixes and enhancements. Documentation for these changes will be available shortly from the JBoss Enterprise Application Platform 6.2.0 Release Notes, linked to in the References. All users of Red Hat JBoss Enterprise Application Platform 6.2.0 as provided from the Red Hat Customer Portal are advised to apply this update. The JBoss server process must be restarted for the update to take effect. This plugin does not check for JBoss installs on the following remote filesystem types: NFS, AFS, SMBFS, CIFS.
last seen	2020-06-01
modified	2020-06-02
plugin id	71900
published	2014-01-10
reporter	This script is Copyright (C) 2014-2019 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/71900
title	RHEL 5 : JBoss EAP (RHSA-2013:1784)
code	# # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Red Hat Security Advisory RHSA-2013:1784. The text # itself is copyright (C) Red Hat, Inc. # include("compat.inc"); if (description) { script_id(71900); script_version("1.7"); script_cvs_date("Date: 2019/10/24 15:35:37"); script_cve_id("CVE-2013-2035", "CVE-2013-2133"); script_bugtraq_id(59876, 64125); script_xref(name:"RHSA", value:"2013:1784"); script_name(english:"RHEL 5 : JBoss EAP (RHSA-2013:1784)"); script_summary(english:"Checks rpm output for the updated packages"); script_set_attribute(attribute:"synopsis", value:"The remote Red Hat host is missing one or more security updates."); script_set_attribute(attribute:"description", value: "An update for Red Hat JBoss Enterprise Application Platform 6.2.0, which fixes two security issues, several bugs, and adds various enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7. The HawtJNI Library class wrote native libraries to a predictable file name in /tmp/ when the native libraries were bundled in a JAR file, and no custom library path was specified. A local attacker could overwrite these native libraries with malicious versions during the window between when HawtJNI writes them and when they are executed. (CVE-2013-2035) A flaw was found in the way method-level authorization for JAX-WS Service endpoints was performed by the EJB invocation handler implementation. Any restrictions declared on EJB methods were ignored when executing the JAX-WS handlers, and only class-level restrictions were applied. A remote attacker who is authorized to access the EJB class, could invoke a JAX-WS handler which they were not authorized to invoke. (CVE-2013-2133) The CVE-2013-2035 issue was discovered by Florian Weimer of the Red Hat Product Security Team, and the CVE-2013-2133 issue was discovered by Richard Opalka and Arun Neelicattu of Red Hat. This release serves as a replacement for JBoss Enterprise Application Platform 6.1.1, and includes bug fixes and enhancements. Documentation for these changes will be available shortly from the JBoss Enterprise Application Platform 6.2.0 Release Notes, linked to in the References. All users of Red Hat JBoss Enterprise Application Platform 6.2.0 as provided from the Red Hat Customer Portal are advised to apply this update. The JBoss server process must be restarted for the update to take effect. This plugin does not check for JBoss installs on the following remote filesystem types: NFS, AFS, SMBFS, CIFS."); script_set_attribute(attribute:"see_also", value:"https://www.redhat.com/security/data/cve/CVE-2013-2035.html"); script_set_attribute(attribute:"see_also", value:"https://www.redhat.com/security/data/cve/CVE-2013-2133.html"); script_set_attribute(attribute:"see_also", value:"http://rhn.redhat.com/errata/RHSA-2013-1784.html"); script_set_attribute(attribute:"solution", value:"Upgrade to JBoss Enterprise Application Platform 6.2.0."); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:N"); script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"exploit_available", value:"false"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"cpe:/a:redhat:jboss_enterprise_application_platform:6.2.0"); script_set_attribute(attribute:"vuln_publication_date", value:"2013/08/28"); script_set_attribute(attribute:"patch_publication_date", value:"2013/12/04"); script_set_attribute(attribute:"plugin_publication_date", value:"2014/01/10"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2014-2019 Tenable Network Security, Inc."); script_family(english:"Red Hat Local Security Checks"); script_dependencies("jboss_detect.nbin"); script_require_keys("Host/local_checks_enabled", "Host/RedHat/release"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("misc_func.inc"); # We are only interested in Red Hat systems if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/RedHat/release"); if (isnull(release) \|\| "Red Hat" >!< release) audit(AUDIT_OS_NOT, "Red Hat"); info = ""; jboss = 0; installs = get_kb_list_or_exit("Host/JBoss/EAP"); if(!isnull(installs)) jboss = 1; foreach install (make_list(installs)) { match = eregmatch(string:install, pattern:"([0-9\.]+):(.*)"); if (!isnull(match)) { ver = match[1]; path = match[2]; # check for install version < 6.2.0 if (ver_compare(ver:ver, fix:"6.2.0") < 0) { info += '\n' + ' Path : ' + path+ '\n'; info += ' Version : ' + ver + '\n'; } } } # Report what we found. if (info) { if (report_verbosity > 0) { if (max_index(split(info)) > 3) s = 's of JBoss Enterprise Application Platform are'; else s = ' of JBoss Enterprise Application Platform is'; report = '\n' + 'The following instance'+s+' out of date and\nshould be patched or upgraded as appropriate :\n' + info; security_warning(port:0, extra:report); } else security_warning(port:0); } else if ( (!info) && (jboss) ) { exit(0, "The JBoss Portal Platform version installed is not affected."); } else audit(AUDIT_HOST_NOT, "affected");

NASL family	Red Hat Local Security Checks
NASL id	REDHAT-RHSA-2013-1786.NASL
description	Updated Red Hat JBoss Enterprise Application Platform 6.2.0 packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7. The HawtJNI Library class wrote native libraries to a predictable file name in /tmp/ when the native libraries were bundled in a JAR file, and no custom library path was specified. A local attacker could overwrite these native libraries with malicious versions during the window between when HawtJNI writes them and when they are executed. (CVE-2013-2035) A flaw was found in the way method-level authorization for JAX-WS Service endpoints was performed by the EJB invocation handler implementation. Any restrictions declared on EJB methods were ignored when executing the JAX-WS handlers, and only class-level restrictions were applied. A remote attacker who is authorized to access the EJB class, could invoke a JAX-WS handler which they were not authorized to invoke. (CVE-2013-2133) The CVE-2013-2035 issue was discovered by Florian Weimer of the Red Hat Product Security Team, and the CVE-2013-2133 issue was discovered by Richard Opalka and Arun Neelicattu of Red Hat. This release serves as a replacement for JBoss Enterprise Application Platform 6.1.1, and includes bug fixes and enhancements. Documentation for these changes will be available shortly from the JBoss Enterprise Application Platform 6.2.0 Release Notes, linked to in the References. All users of JBoss Enterprise Application Platform 6.1.1 on Red Hat Enterprise Linux 6 are advised to upgrade to these updated packages. The JBoss server process must be restarted for the update to take effect.
last seen	2020-06-01
modified	2020-06-02
plugin id	71225
published	2013-12-05
reporter	This script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/71225
title	RHEL 6 : JBoss EAP (RHSA-2013:1786)
code	# # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Red Hat Security Advisory RHSA-2013:1786. The text # itself is copyright (C) Red Hat, Inc. # include("compat.inc"); if (description) { script_id(71225); script_version("1.17"); script_cvs_date("Date: 2019/10/24 15:35:37"); script_cve_id("CVE-2013-2035", "CVE-2013-2133"); script_xref(name:"RHSA", value:"2013:1786"); script_name(english:"RHEL 6 : JBoss EAP (RHSA-2013:1786)"); script_summary(english:"Checks the rpm output for the updated packages"); script_set_attribute( attribute:"synopsis", value:"The remote Red Hat host is missing one or more security updates." ); script_set_attribute( attribute:"description", value: "Updated Red Hat JBoss Enterprise Application Platform 6.2.0 packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7. The HawtJNI Library class wrote native libraries to a predictable file name in /tmp/ when the native libraries were bundled in a JAR file, and no custom library path was specified. A local attacker could overwrite these native libraries with malicious versions during the window between when HawtJNI writes them and when they are executed. (CVE-2013-2035) A flaw was found in the way method-level authorization for JAX-WS Service endpoints was performed by the EJB invocation handler implementation. Any restrictions declared on EJB methods were ignored when executing the JAX-WS handlers, and only class-level restrictions were applied. A remote attacker who is authorized to access the EJB class, could invoke a JAX-WS handler which they were not authorized to invoke. (CVE-2013-2133) The CVE-2013-2035 issue was discovered by Florian Weimer of the Red Hat Product Security Team, and the CVE-2013-2133 issue was discovered by Richard Opalka and Arun Neelicattu of Red Hat. This release serves as a replacement for JBoss Enterprise Application Platform 6.1.1, and includes bug fixes and enhancements. Documentation for these changes will be available shortly from the JBoss Enterprise Application Platform 6.2.0 Release Notes, linked to in the References. All users of JBoss Enterprise Application Platform 6.1.1 on Red Hat Enterprise Linux 6 are advised to upgrade to these updated packages. The JBoss server process must be restarted for the update to take effect." ); # https://access.redhat.com/site/documentation/en-US/ script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/documentation/en-US/" ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/errata/RHSA-2013:1786" ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-2035" ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-2133" ); script_set_attribute(attribute:"solution", value:"Update the affected packages."); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:N"); script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"exploit_available", value:"false"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:antlr-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-commons-beanutils"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-commons-cli"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-commons-configuration"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-commons-daemon-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-commons-pool-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-cxf"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-cxf-xjc-utils"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-mime4j"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:atinject-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:cxf-xjc-boolean"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:cxf-xjc-dv"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:cxf-xjc-ts"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:dom4j-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:glassfish-jaxb-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:glassfish-jsf-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gnu-getopt"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hibernate4-core-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hibernate4-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hibernate4-entitymanager-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hibernate4-envers-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hibernate4-infinispan-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hornetq"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hornetq-native"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:httpserver"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:infinispan"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:infinispan-cachestore-jdbc"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:infinispan-cachestore-remote"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:infinispan-client-hotrod"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:infinispan-core"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-common-api-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-common-impl-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-common-spi-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-core-api-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-core-impl-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-deployers-common-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-jdbc-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-spec-api-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-validator-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jacorb-jboss"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jansi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:javassist-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jaxen"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbosgi-metadata"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-aesh"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-appclient"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-cli"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-client-all"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-clustering"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-cmp"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-configadmin"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-connector"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-console"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-controller"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-controller-client"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-core-security"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-deployment-repository"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-deployment-scanner"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-domain-http"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-domain-management"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-ee"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-ee-deployment"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-ejb3"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-embedded"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-host-controller"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-jacorb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-jaxr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-jaxrs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-jdr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-jmx"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-jpa"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-jsf"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-jsr77"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-logging"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-mail"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-management-client-content"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-messaging"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-modcluster"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-naming"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-network"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-osgi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-osgi-configadmin"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-osgi-service"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-platform-mbean"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-pojo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-process-controller"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-protocol"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-remoting"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-sar"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-security"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-server"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-system-jmx"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-threads"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-transactions"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-version"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-web"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-webservices"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-weld"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-xts"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-dmr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-ejb-client"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-ejb3-ext-api"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-genericjms"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-hal"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-jacc-api_1.4_spec"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-logmanager"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-marshalling"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-modules"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-remoting3"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-remoting3-jmx"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-security-negotiation"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-security-xacml"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-threads"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-vfs2"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-weld-1.1-api"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-appclient"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-bundles"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-core"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-domain"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-hornetq-native"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-javadocs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-modules-eap"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-product-eap"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-standalone"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-welcome-content-eap"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossts"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossws-api"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossws-common"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossws-common-tools"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossws-cxf"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossws-native"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossws-spi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jcip-annotations-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jdom-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jettison"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jgroups"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:juddi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mod_cluster"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mod_cluster-demo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mod_cluster-native"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mod_jk-ap22"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:objectweb-asm-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:opensaml"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openws"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:org.apache.felix.configadmin"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:org.apache.felix.log"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:org.osgi.core-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:org.osgi.enterprise-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:picketbox"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:picketlink-federation"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:resteasy"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:scannotation"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:shrinkwrap-api"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:shrinkwrap-impl-base"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:shrinkwrap-parent"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:shrinkwrap-spi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:slf4j-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:stilts"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:sun-ws-metadata-2.0-api"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:velocity-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:weld-cdi-1.0-api"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:weld-core"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ws-commons-XmlSchema"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ws-commons-neethi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ws-scout"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:wsdl4j-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:wss4j"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:xerces-j2-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:xjc-utils"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:xml-commons-resolver-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:xml-security"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:xmltooling"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:xom"); script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:6"); script_set_attribute(attribute:"vuln_publication_date", value:"2013/08/28"); script_set_attribute(attribute:"patch_publication_date", value:"2013/12/04"); script_set_attribute(attribute:"plugin_publication_date", value:"2013/12/05"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Red Hat Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/cpu"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("misc_func.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/RedHat/release"); if (isnull(release) \|\| "Red Hat" >!< release) audit(AUDIT_OS_NOT, "Red Hat"); os_ver = pregmatch(pattern: "Red Hat Enterprise Linux.*release ([0-9]+(\.[0-9]+)?)", string:release); if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Red Hat"); os_ver = os_ver[1]; if (! preg(pattern:"^6([^0-9]\|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Red Hat 6.x", "Red Hat " + os_ver); if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "s390" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Red Hat", cpu); yum_updateinfo = get_kb_item("Host/RedHat/yum-updateinfo"); if (!empty_or_null(yum_updateinfo)) { rhsa = "RHSA-2013:1786"; yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa); if (!empty_or_null(yum_report)) { security_report_v4( port : 0, severity : SECURITY_WARNING, extra : yum_report ); exit(0); } else { audit_message = "affected by Red Hat security advisory " + rhsa; audit(AUDIT_OS_NOT, audit_message); } } else { flag = 0; if (! (rpm_exists(release:"RHEL6", rpm:"jbossas-core-"))) audit(AUDIT_PACKAGE_NOT_INSTALLED, "JBoss EAP"); if (rpm_check(release:"RHEL6", reference:"antlr-eap6-2.7.7-17.redhat_4.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"apache-commons-beanutils-1.8.3-13.redhat_6.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"apache-commons-cli-1.2-8.redhat_3.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"apache-commons-configuration-1.6-8.redhat_3.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"apache-commons-daemon-eap6-1.0.15-5.redhat_1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"apache-commons-pool-eap6-1.6-7.redhat_6.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"apache-cxf-2.7.7-1.redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"apache-cxf-xjc-utils-2.6.1-4.redhat_2.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"apache-mime4j-0.6-8.redhat_3.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"atinject-eap6-1-5.redhat_4.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"cxf-xjc-boolean-2.6.1-4.redhat_2.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"cxf-xjc-dv-2.6.1-4.redhat_2.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"cxf-xjc-ts-2.6.1-4.redhat_2.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"dom4j-eap6-1.6.1-20.redhat_6.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"glassfish-jaxb-eap6-2.2.5-17.redhat_7.2.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"glassfish-jsf-eap6-2.1.19-2.3.redhat_2.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"gnu-getopt-1.0.13-3.redhat_4.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"hibernate4-core-eap6-4.2.7-3.3.SP1_redhat_3.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"hibernate4-eap6-4.2.7-3.3.SP1_redhat_3.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"hibernate4-entitymanager-eap6-4.2.7-3.3.SP1_redhat_3.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"hibernate4-envers-eap6-4.2.7-3.3.SP1_redhat_3.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"hibernate4-infinispan-eap6-4.2.7-3.3.SP1_redhat_3.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"hornetq-2.3.12-1.Final_redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", cpu:"i386", reference:"hornetq-native-2.3.8-1.Final_redhat_1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", cpu:"x86_64", reference:"hornetq-native-2.3.8-1.Final_redhat_1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"httpserver-1.0.1-4.Final_redhat_3.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"infinispan-5.2.7-2.Final_redhat_2.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"infinispan-cachestore-jdbc-5.2.7-2.Final_redhat_2.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"infinispan-cachestore-remote-5.2.7-2.Final_redhat_2.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"infinispan-client-hotrod-5.2.7-2.Final_redhat_2.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"infinispan-core-5.2.7-2.Final_redhat_2.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"ironjacamar-common-api-eap6-1.0.23-1.3.Final_redhat_1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"ironjacamar-common-impl-eap6-1.0.23-1.3.Final_redhat_1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"ironjacamar-common-spi-eap6-1.0.23-1.3.Final_redhat_1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"ironjacamar-core-api-eap6-1.0.23-1.3.Final_redhat_1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"ironjacamar-core-impl-eap6-1.0.23-1.3.Final_redhat_1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"ironjacamar-deployers-common-eap6-1.0.23-1.3.Final_redhat_1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"ironjacamar-eap6-1.0.23-1.3.Final_redhat_1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"ironjacamar-jdbc-eap6-1.0.23-1.3.Final_redhat_1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"ironjacamar-spec-api-eap6-1.0.23-1.3.Final_redhat_1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"ironjacamar-validator-eap6-1.0.23-1.3.Final_redhat_1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jacorb-jboss-2.3.2-12.redhat_5.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jansi-1.9-5.redhat_3.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"javassist-eap6-3.18.1-1.GA_redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jaxen-1.1.3-9.redhat_3.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jbosgi-metadata-2.2.0-2.Final_redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-aesh-0.33.8-1.redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-appclient-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-cli-7.3.0-5.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-client-all-7.3.0-7.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-clustering-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-cmp-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-configadmin-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-connector-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-console-2.0.6-1.Final_redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-controller-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-controller-client-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-core-security-7.3.0-7.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-deployment-repository-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-deployment-scanner-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-domain-http-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-domain-management-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-ee-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-ee-deployment-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-ejb3-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-embedded-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-host-controller-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-jacorb-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-jaxr-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-jaxrs-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-jdr-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-jmx-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-jpa-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-jsf-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-jsr77-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-logging-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-mail-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-management-client-content-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-messaging-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-modcluster-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-naming-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-network-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-osgi-7.3.0-7.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-osgi-configadmin-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-osgi-service-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-platform-mbean-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-pojo-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-process-controller-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-protocol-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-remoting-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-sar-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-security-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-server-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-system-jmx-7.3.0-7.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-threads-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-transactions-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-version-7.3.0-7.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-web-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-webservices-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-weld-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-as-xts-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-dmr-1.2.0-1.Final_redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-ejb-client-1.0.24-1.Final_redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-ejb3-ext-api-2.1.0-1.redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-genericjms-1.0.1-1.Final_redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-hal-2.0.6-1.Final_redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-jacc-api_1.4_spec-1.0.3-1.Final_redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-logmanager-1.5.1-1.Final_redhat_1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-marshalling-1.4.2-1.Final_redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-modules-1.3.0-2.Final_redhat_2.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-remoting3-3.2.18-1.GA_redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-remoting3-jmx-1.1.2-1.Final_redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-security-negotiation-2.2.6-2.Final_redhat_1.2.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-security-xacml-2.0.8-10.Final_redhat_5.2.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-threads-2.1.1-1.Final_redhat_1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-vfs2-3.2.2-1.Final_redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jboss-weld-1.1-api-1.1-8.Final_redhat_4.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jbossas-appclient-7.3.0-8.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jbossas-bundles-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jbossas-core-7.3.0-7.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jbossas-domain-7.3.0-22.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", cpu:"i386", reference:"jbossas-hornetq-native-2.3.8-1.Final_redhat_1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", cpu:"x86_64", reference:"jbossas-hornetq-native-2.3.8-1.Final_redhat_1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jbossas-javadocs-7.3.0-14.Final_redhat_14.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jbossas-modules-eap-7.3.0-21.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jbossas-product-eap-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jbossas-standalone-7.3.0-7.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jbossas-welcome-content-eap-7.3.0-6.Final_redhat_14.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jbossts-4.17.15-4.Final_redhat_4.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jbossws-api-1.0.2-1.Final_redhat_1.2.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jbossws-common-2.2.3-1.Final_redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jbossws-common-tools-1.2.0-2.Final_redhat_2.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jbossws-cxf-4.2.3-1.Final_redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jbossws-native-4.1.2-1.Final_redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jbossws-spi-2.2.2-1.Final_redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jcip-annotations-eap6-1.0-5.redhat_6.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jdom-eap6-1.1.2-5.redhat_3.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jettison-1.3.1-8.redhat_3.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"jgroups-3.2.12-1.Final_redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"juddi-3.1.3-4.redhat_3.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"mod_cluster-1.2.6-2.Final_redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"mod_cluster-demo-1.2.6-2.Final_redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", cpu:"i386", reference:"mod_cluster-native-1.2.6-1.Final.redhat_1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", cpu:"x86_64", reference:"mod_cluster-native-1.2.6-1.Final.redhat_1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", cpu:"i386", reference:"mod_jk-ap22-1.2.37-4.redhat_3.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", cpu:"x86_64", reference:"mod_jk-ap22-1.2.37-4.redhat_3.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"objectweb-asm-eap6-3.3.1-6.3.redhat_5.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"opensaml-2.5.3-3.redhat_2.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"openws-1.4.4-2.redhat_2.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"org.apache.felix.configadmin-1.2.8-7.redhat_4.2.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"org.apache.felix.log-1.0.0-6.redhat_3.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"org.osgi.core-eap6-4.2.0-11.10.redhat_4.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"org.osgi.enterprise-eap6-4.2.0-11.10.redhat_4.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"picketbox-4.0.19-1.SP2_redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"picketlink-federation-2.1.9-3.SP2_redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"resteasy-2.3.7-2.Final_redhat_2.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"scannotation-1.0.3-2.redhat_4.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"shrinkwrap-api-1.1.2-3.redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"shrinkwrap-impl-base-1.1.2-3.redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"shrinkwrap-parent-1.1.2-3.redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"shrinkwrap-spi-1.1.2-3.redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"slf4j-eap6-1.7.2-11.redhat_2.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"stilts-0.1.26-10.redhat_3.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"sun-ws-metadata-2.0-api-1.0.MR1-16_MR1_redhat_6.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"velocity-eap6-1.7-4.redhat_3.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"weld-cdi-1.0-api-1.0-9.SP4.redhat_3.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"weld-core-1.1.16-3.Final_redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"ws-commons-XmlSchema-2.0.2-8.redhat_3.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"ws-commons-neethi-3.0.2-6.redhat_3.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"ws-scout-1.2.6-4.redhat_3.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"wsdl4j-eap6-1.6.2-14.redhat_6.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"wss4j-1.6.12-1.redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"xerces-j2-eap6-2.9.1-16.redhat_5.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"xjc-utils-2.6.1-4.redhat_2.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"xml-commons-resolver-eap6-1.2-16.redhat_9.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"xml-security-1.5.5-2.redhat_2.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"xmltooling-1.3.4-3.redhat_1.1.ep6.el6")) flag++; if (rpm_check(release:"RHEL6", reference:"xom-1.2.7-2.redhat_4.1.ep6.el6")) flag++; if (flag) { security_report_v4( port : 0, severity : SECURITY_WARNING, extra : rpm_report_get() + redhat_report_package_caveat() ); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "antlr-eap6 / apache-commons-beanutils / apache-commons-cli / etc"); } }

NASL family	Red Hat Local Security Checks
NASL id	REDHAT-RHSA-2013-1785.NASL
description	Updated Red Hat JBoss Enterprise Application Platform 6.2.0 packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7. The HawtJNI Library class wrote native libraries to a predictable file name in /tmp/ when the native libraries were bundled in a JAR file, and no custom library path was specified. A local attacker could overwrite these native libraries with malicious versions during the window between when HawtJNI writes them and when they are executed. (CVE-2013-2035) A flaw was found in the way method-level authorization for JAX-WS Service endpoints was performed by the EJB invocation handler implementation. Any restrictions declared on EJB methods were ignored when executing the JAX-WS handlers, and only class-level restrictions were applied. A remote attacker who is authorized to access the EJB class, could invoke a JAX-WS handler which they were not authorized to invoke. (CVE-2013-2133) The CVE-2013-2035 issue was discovered by Florian Weimer of the Red Hat Product Security Team, and the CVE-2013-2133 issue was discovered by Richard Opalka and Arun Neelicattu of Red Hat. This release serves as a replacement for JBoss Enterprise Application Platform 6.1.1, and includes bug fixes and enhancements. Documentation for these changes will be available shortly from the JBoss Enterprise Application Platform 6.2.0 Release Notes, linked to in the References. All users of JBoss Enterprise Application Platform 6.1.1 on Red Hat Enterprise Linux 5 are advised to upgrade to these updated packages. The JBoss server process must be restarted for the update to take effect.
last seen	2020-06-01
modified	2020-06-02
plugin id	71224
published	2013-12-05
reporter	This script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/71224
title	RHEL 5 : JBoss EAP (RHSA-2013:1785)
code	# # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Red Hat Security Advisory RHSA-2013:1785. The text # itself is copyright (C) Red Hat, Inc. # include("compat.inc"); if (description) { script_id(71224); script_version("1.19"); script_cvs_date("Date: 2019/10/24 15:35:37"); script_cve_id("CVE-2013-2035", "CVE-2013-2133"); script_xref(name:"RHSA", value:"2013:1785"); script_name(english:"RHEL 5 : JBoss EAP (RHSA-2013:1785)"); script_summary(english:"Checks the rpm output for the updated packages"); script_set_attribute( attribute:"synopsis", value:"The remote Red Hat host is missing one or more security updates." ); script_set_attribute( attribute:"description", value: "Updated Red Hat JBoss Enterprise Application Platform 6.2.0 packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7. The HawtJNI Library class wrote native libraries to a predictable file name in /tmp/ when the native libraries were bundled in a JAR file, and no custom library path was specified. A local attacker could overwrite these native libraries with malicious versions during the window between when HawtJNI writes them and when they are executed. (CVE-2013-2035) A flaw was found in the way method-level authorization for JAX-WS Service endpoints was performed by the EJB invocation handler implementation. Any restrictions declared on EJB methods were ignored when executing the JAX-WS handlers, and only class-level restrictions were applied. A remote attacker who is authorized to access the EJB class, could invoke a JAX-WS handler which they were not authorized to invoke. (CVE-2013-2133) The CVE-2013-2035 issue was discovered by Florian Weimer of the Red Hat Product Security Team, and the CVE-2013-2133 issue was discovered by Richard Opalka and Arun Neelicattu of Red Hat. This release serves as a replacement for JBoss Enterprise Application Platform 6.1.1, and includes bug fixes and enhancements. Documentation for these changes will be available shortly from the JBoss Enterprise Application Platform 6.2.0 Release Notes, linked to in the References. All users of JBoss Enterprise Application Platform 6.1.1 on Red Hat Enterprise Linux 5 are advised to upgrade to these updated packages. The JBoss server process must be restarted for the update to take effect." ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-2035" ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-2133" ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/site/documentation/en-US/" ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/errata/RHSA-2013:1785" ); script_set_attribute(attribute:"solution", value:"Update the affected packages."); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:N"); script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"exploit_available", value:"false"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:antlr-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-commons-beanutils"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-commons-cli"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-commons-configuration"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-commons-daemon-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-commons-pool-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-cxf"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-cxf-xjc-utils"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-mime4j"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:atinject-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:cxf-xjc-boolean"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:cxf-xjc-dv"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:cxf-xjc-ts"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:dom4j-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:glassfish-jaxb-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:glassfish-jsf-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gnu-getopt"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hibernate4-core-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hibernate4-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hibernate4-entitymanager-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hibernate4-envers-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hibernate4-infinispan-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hornetq"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hornetq-native"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:httpserver"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:infinispan"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:infinispan-cachestore-jdbc"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:infinispan-cachestore-remote"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:infinispan-client-hotrod"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:infinispan-core"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-common-api-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-common-impl-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-common-spi-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-core-api-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-core-impl-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-deployers-common-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-jdbc-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-spec-api-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-validator-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jacorb-jboss"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jansi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:javassist-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jaxen"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbosgi-metadata"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-aesh"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-appclient"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-cli"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-client-all"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-clustering"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-cmp"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-configadmin"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-connector"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-console"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-controller"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-controller-client"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-core-security"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-deployment-repository"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-deployment-scanner"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-domain-http"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-domain-management"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-ee"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-ee-deployment"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-ejb3"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-embedded"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-host-controller"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-jacorb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-jaxr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-jaxrs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-jdr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-jmx"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-jpa"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-jsf"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-jsr77"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-logging"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-mail"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-management-client-content"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-messaging"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-modcluster"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-naming"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-network"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-osgi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-osgi-configadmin"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-osgi-service"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-platform-mbean"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-pojo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-process-controller"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-protocol"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-remoting"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-sar"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-security"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-server"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-system-jmx"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-threads"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-transactions"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-version"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-web"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-webservices"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-weld"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-xts"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-dmr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-ejb-client"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-ejb3-ext-api"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-genericjms"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-hal"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-jacc-api_1.4_spec"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-logmanager"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-marshalling"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-modules"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-remoting3"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-remoting3-jmx"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-security-negotiation"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-security-xacml"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-threads"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-vfs2"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-weld-1.1-api"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-appclient"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-bundles"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-core"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-domain"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-hornetq-native"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-javadocs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-modules-eap"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-product-eap"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-standalone"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-welcome-content-eap"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossts"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossws-api"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossws-common"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossws-common-tools"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossws-cxf"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossws-native"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossws-spi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jcip-annotations-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jdom-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jettison"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jgroups"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:juddi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mod_cluster"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mod_cluster-demo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mod_cluster-native"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mod_jk-ap22"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:objectweb-asm-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:opensaml"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openws"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:org.apache.felix.configadmin"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:org.apache.felix.log"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:org.osgi.core-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:org.osgi.enterprise-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:picketbox"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:picketlink-federation"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:resteasy"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:scannotation"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:shrinkwrap-api"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:shrinkwrap-impl-base"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:shrinkwrap-parent"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:shrinkwrap-spi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:slf4j"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:slf4j-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:stilts"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:sun-ws-metadata-2.0-api"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:velocity-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:weld-cdi-1.0-api"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:weld-core"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ws-commons-XmlSchema"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ws-commons-neethi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ws-scout"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:wsdl4j-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:wss4j"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:xerces-j2-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:xjc-utils"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:xml-commons-resolver-eap6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:xml-security"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:xmltooling"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:xom"); script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:5"); script_set_attribute(attribute:"patch_publication_date", value:"2013/12/04"); script_set_attribute(attribute:"plugin_publication_date", value:"2013/12/05"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Red Hat Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/cpu"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("misc_func.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/RedHat/release"); if (isnull(release) \|\| "Red Hat" >!< release) audit(AUDIT_OS_NOT, "Red Hat"); os_ver = eregmatch(pattern: "Red Hat Enterprise Linux.*release ([0-9]+(\.[0-9]+)?)", string:release); if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Red Hat"); os_ver = os_ver[1]; if (! ereg(pattern:"^5([^0-9]\|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Red Hat 5.x", "Red Hat " + os_ver); if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "s390" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Red Hat", cpu); yum_updateinfo = get_kb_item("Host/RedHat/yum-updateinfo"); if (!empty_or_null(yum_updateinfo)) { rhsa = "RHSA-2013:1785"; yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa); if (!empty_or_null(yum_report)) { security_report_v4( port : 0, severity : SECURITY_WARNING, extra : yum_report ); exit(0); } else { audit_message = "affected by Red Hat security advisory " + rhsa; audit(AUDIT_OS_NOT, audit_message); } } else { flag = 0; if (! (rpm_exists(release:"RHEL5", rpm:"jbossas-core-"))) audit(AUDIT_PACKAGE_NOT_INSTALLED, "JBoss EAP"); if (rpm_check(release:"RHEL5", reference:"antlr-eap6-2.7.7-17.redhat_4.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"apache-commons-beanutils-1.8.3-13.redhat_6.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"apache-commons-cli-1.2-8.redhat_3.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"apache-commons-configuration-1.6-8.redhat_3.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"apache-commons-daemon-eap6-1.0.15-5.redhat_1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"apache-commons-pool-eap6-1.6-7.redhat_6.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"apache-cxf-2.7.7-1.redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"apache-cxf-xjc-utils-2.6.1-4.redhat_2.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"apache-mime4j-0.6-8.redhat_3.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"atinject-eap6-1-5.redhat_4.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"cxf-xjc-boolean-2.6.1-4.redhat_2.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"cxf-xjc-dv-2.6.1-4.redhat_2.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"cxf-xjc-ts-2.6.1-4.redhat_2.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"dom4j-eap6-1.6.1-20.redhat_6.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"glassfish-jaxb-eap6-2.2.5-17.redhat_7.2.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"glassfish-jsf-eap6-2.1.19-2.3.redhat_2.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"gnu-getopt-1.0.13-3.redhat_4.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"hibernate4-core-eap6-4.2.7-3.3.SP1_redhat_3.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"hibernate4-eap6-4.2.7-3.3.SP1_redhat_3.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"hibernate4-entitymanager-eap6-4.2.7-3.3.SP1_redhat_3.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"hibernate4-envers-eap6-4.2.7-3.3.SP1_redhat_3.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"hibernate4-infinispan-eap6-4.2.7-3.3.SP1_redhat_3.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"hornetq-2.3.12-1.Final_redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", cpu:"i386", reference:"hornetq-native-2.3.8-1.Final_redhat_1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", cpu:"x86_64", reference:"hornetq-native-2.3.8-1.Final_redhat_1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"httpserver-1.0.1-4.Final_redhat_3.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"infinispan-5.2.7-2.Final_redhat_2.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"infinispan-cachestore-jdbc-5.2.7-2.Final_redhat_2.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"infinispan-cachestore-remote-5.2.7-2.Final_redhat_2.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"infinispan-client-hotrod-5.2.7-2.Final_redhat_2.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"infinispan-core-5.2.7-2.Final_redhat_2.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"ironjacamar-common-api-eap6-1.0.23-1.3.Final_redhat_1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"ironjacamar-common-impl-eap6-1.0.23-1.3.Final_redhat_1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"ironjacamar-common-spi-eap6-1.0.23-1.3.Final_redhat_1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"ironjacamar-core-api-eap6-1.0.23-1.3.Final_redhat_1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"ironjacamar-core-impl-eap6-1.0.23-1.3.Final_redhat_1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"ironjacamar-deployers-common-eap6-1.0.23-1.3.Final_redhat_1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"ironjacamar-eap6-1.0.23-1.3.Final_redhat_1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"ironjacamar-jdbc-eap6-1.0.23-1.3.Final_redhat_1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"ironjacamar-spec-api-eap6-1.0.23-1.3.Final_redhat_1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"ironjacamar-validator-eap6-1.0.23-1.3.Final_redhat_1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jacorb-jboss-2.3.2-12.redhat_5.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jansi-1.9-5.redhat_3.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"javassist-eap6-3.18.1-1.GA_redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jaxen-1.1.3-9.redhat_3.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jbosgi-metadata-2.2.0-2.Final_redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-aesh-0.33.8-1.redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-appclient-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-cli-7.3.0-5.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-client-all-7.3.0-7.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-clustering-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-cmp-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-configadmin-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-connector-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-console-2.0.6-1.Final_redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-controller-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-controller-client-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-core-security-7.3.0-7.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-deployment-repository-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-deployment-scanner-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-domain-http-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-domain-management-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-ee-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-ee-deployment-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-ejb3-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-embedded-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-host-controller-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-jacorb-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-jaxr-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-jaxrs-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-jdr-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-jmx-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-jpa-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-jsf-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-jsr77-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-logging-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-mail-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-management-client-content-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-messaging-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-modcluster-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-naming-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-network-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-osgi-7.3.0-7.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-osgi-configadmin-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-osgi-service-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-platform-mbean-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-pojo-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-process-controller-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-protocol-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-remoting-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-sar-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-security-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-server-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-system-jmx-7.3.0-7.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-threads-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-transactions-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-version-7.3.0-7.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-web-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-webservices-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-weld-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-as-xts-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-dmr-1.2.0-1.Final_redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-ejb-client-1.0.24-1.Final_redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-ejb3-ext-api-2.1.0-1.redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-genericjms-1.0.1-1.Final_redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-hal-2.0.6-1.Final_redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-jacc-api_1.4_spec-1.0.3-1.Final_redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-logmanager-1.5.1-1.Final_redhat_1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-marshalling-1.4.2-1.Final_redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-modules-1.3.0-2.Final_redhat_2.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-remoting3-3.2.18-1.GA_redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-remoting3-jmx-1.1.2-1.Final_redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-security-negotiation-2.2.6-2.Final_redhat_1.2.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-security-xacml-2.0.8-10.Final_redhat_5.2.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-threads-2.1.1-1.Final_redhat_1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-vfs2-3.2.2-1.Final_redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jboss-weld-1.1-api-1.1-8.Final_redhat_4.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jbossas-appclient-7.3.0-8.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jbossas-bundles-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jbossas-core-7.3.0-7.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jbossas-domain-7.3.0-22.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", cpu:"i386", reference:"jbossas-hornetq-native-2.3.8-1.Final_redhat_1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", cpu:"x86_64", reference:"jbossas-hornetq-native-2.3.8-1.Final_redhat_1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jbossas-javadocs-7.3.0-14.Final_redhat_14.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jbossas-modules-eap-7.3.0-21.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jbossas-product-eap-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jbossas-standalone-7.3.0-7.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jbossas-welcome-content-eap-7.3.0-6.Final_redhat_14.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jbossts-4.17.15-4.Final_redhat_4.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jbossws-api-1.0.2-1.Final_redhat_1.2.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jbossws-common-2.2.3-1.Final_redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jbossws-common-tools-1.2.0-2.Final_redhat_2.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jbossws-cxf-4.2.3-1.Final_redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jbossws-native-4.1.2-1.Final_redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jbossws-spi-2.2.2-1.Final_redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jcip-annotations-eap6-1.0-5.redhat_6.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jdom-eap6-1.1.2-5.redhat_3.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jettison-1.3.1-8.redhat_3.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"jgroups-3.2.12-1.Final_redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"juddi-3.1.3-4.redhat_3.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"mod_cluster-1.2.6-2.Final_redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"mod_cluster-demo-1.2.6-2.Final_redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", cpu:"i386", reference:"mod_cluster-native-1.2.6-1.Final.redhat_1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", cpu:"x86_64", reference:"mod_cluster-native-1.2.6-1.Final.redhat_1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", cpu:"i386", reference:"mod_jk-ap22-1.2.37-4.redhat_3.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", cpu:"x86_64", reference:"mod_jk-ap22-1.2.37-4.redhat_3.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"objectweb-asm-eap6-3.3.1-6.3.redhat_5.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"opensaml-2.5.3-3.redhat_2.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"openws-1.4.4-2.redhat_2.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"org.apache.felix.configadmin-1.2.8-7.redhat_4.2.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"org.apache.felix.log-1.0.0-6.redhat_3.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"org.osgi.core-eap6-4.2.0-11.10.redhat_4.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"org.osgi.enterprise-eap6-4.2.0-11.10.redhat_4.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"picketbox-4.0.19-1.SP2_redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"picketlink-federation-2.1.9-3.SP2_redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"resteasy-2.3.7-2.Final_redhat_2.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"scannotation-1.0.3-2.redhat_4.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"shrinkwrap-api-1.1.2-3.redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"shrinkwrap-impl-base-1.1.2-3.redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"shrinkwrap-parent-1.1.2-3.redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"shrinkwrap-spi-1.1.2-3.redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"slf4j-1.7.2-11.redhat_2.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"slf4j-eap6-1.7.2-11.redhat_2.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"stilts-0.1.26-10.redhat_3.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"sun-ws-metadata-2.0-api-1.0.MR1-16_MR1_redhat_6.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"velocity-eap6-1.7-4.redhat_3.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"weld-cdi-1.0-api-1.0-9.SP4.redhat_3.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"weld-core-1.1.16-3.Final_redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"ws-commons-XmlSchema-2.0.2-8.redhat_3.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"ws-commons-neethi-3.0.2-6.redhat_3.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"ws-scout-1.2.6-4.redhat_3.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"wsdl4j-eap6-1.6.2-14.redhat_6.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"wss4j-1.6.12-1.redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"xerces-j2-eap6-2.9.1-16.redhat_5.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"xjc-utils-2.6.1-4.redhat_2.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"xml-commons-resolver-eap6-1.2-16.redhat_9.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"xml-security-1.5.5-2.redhat_2.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"xmltooling-1.3.4-3.redhat_1.1.ep6.el5")) flag++; if (rpm_check(release:"RHEL5", reference:"xom-1.2.7-2.redhat_4.1.ep6.el5")) flag++; if (flag) { security_report_v4( port : 0, severity : SECURITY_WARNING, extra : rpm_report_get() + redhat_report_package_caveat() ); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "antlr-eap6 / apache-commons-beanutils / apache-commons-cli / etc"); } }

Redhat

advisories

rhsa
id RHSA-2013:1784
rhsa
id RHSA-2013:1785
rhsa
id RHSA-2013:1786
rhsa
id RHSA-2015:0850
rhsa
id RHSA-2015:0851

rpms

antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5
apache-commons-beanutils-0:1.8.3-13.redhat_6.1.ep6.el5
apache-commons-cli-0:1.2-8.redhat_3.1.ep6.el5
apache-commons-configuration-0:1.6-8.redhat_3.1.ep6.el5
apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5
apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5
apache-cxf-0:2.7.7-1.redhat_1.1.ep6.el5
apache-cxf-xjc-utils-0:2.6.1-4.redhat_2.1.ep6.el5
apache-mime4j-0:0.6-8.redhat_3.1.ep6.el5
atinject-eap6-0:1-5.redhat_4.1.ep6.el5
cxf-xjc-boolean-0:2.6.1-4.redhat_2.1.ep6.el5
cxf-xjc-dv-0:2.6.1-4.redhat_2.1.ep6.el5
cxf-xjc-ts-0:2.6.1-4.redhat_2.1.ep6.el5
dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5
glassfish-jaxb-eap6-0:2.2.5-17.redhat_7.2.ep6.el5
glassfish-jsf-eap6-0:2.1.19-2.3.redhat_2.ep6.el5
glassfish-jsf12-eap6-0:1.2_15-5.b01_redhat_8.1.ep6.el5
gnu-getopt-0:1.0.13-3.redhat_4.1.ep6.el5
hibernate4-core-eap6-0:4.2.7-3.3.SP1_redhat_3.ep6.el5
hibernate4-eap6-0:4.2.7-3.3.SP1_redhat_3.ep6.el5
hibernate4-entitymanager-eap6-0:4.2.7-3.3.SP1_redhat_3.ep6.el5
hibernate4-envers-eap6-0:4.2.7-3.3.SP1_redhat_3.ep6.el5
hibernate4-infinispan-eap6-0:4.2.7-3.3.SP1_redhat_3.ep6.el5
hornetq-0:2.3.12-1.Final_redhat_1.1.ep6.el5
hornetq-native-0:2.3.8-1.Final_redhat_1.ep6.el5
hornetq-native-debuginfo-0:2.3.8-1.Final_redhat_1.ep6.el5
httpserver-0:1.0.1-4.Final_redhat_3.1.ep6.el5
infinispan-0:5.2.7-2.Final_redhat_2.1.ep6.el5
infinispan-cachestore-jdbc-0:5.2.7-2.Final_redhat_2.1.ep6.el5
infinispan-cachestore-remote-0:5.2.7-2.Final_redhat_2.1.ep6.el5
infinispan-client-hotrod-0:5.2.7-2.Final_redhat_2.1.ep6.el5
infinispan-core-0:5.2.7-2.Final_redhat_2.1.ep6.el5
ironjacamar-common-api-eap6-0:1.0.23-1.3.Final_redhat_1.ep6.el5
ironjacamar-common-impl-eap6-0:1.0.23-1.3.Final_redhat_1.ep6.el5
ironjacamar-common-spi-eap6-0:1.0.23-1.3.Final_redhat_1.ep6.el5
ironjacamar-core-api-eap6-0:1.0.23-1.3.Final_redhat_1.ep6.el5
ironjacamar-core-impl-eap6-0:1.0.23-1.3.Final_redhat_1.ep6.el5
ironjacamar-deployers-common-eap6-0:1.0.23-1.3.Final_redhat_1.ep6.el5
ironjacamar-eap6-0:1.0.23-1.3.Final_redhat_1.ep6.el5
ironjacamar-jdbc-eap6-0:1.0.23-1.3.Final_redhat_1.ep6.el5
ironjacamar-spec-api-eap6-0:1.0.23-1.3.Final_redhat_1.ep6.el5
ironjacamar-validator-eap6-0:1.0.23-1.3.Final_redhat_1.ep6.el5
jacorb-jboss-0:2.3.2-12.redhat_5.1.ep6.el5
jansi-0:1.9-5.redhat_3.1.ep6.el5
javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5
jaxen-0:1.1.3-9.redhat_3.1.ep6.el5
jbosgi-metadata-0:2.2.0-2.Final_redhat_1.1.ep6.el5
jboss-aesh-0:0.33.8-1.redhat_1.1.ep6.el5
jboss-as-appclient-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-cli-0:7.3.0-5.Final_redhat_14.1.ep6.el5
jboss-as-client-all-0:7.3.0-7.Final_redhat_14.1.ep6.el5
jboss-as-clustering-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-cmp-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-configadmin-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-connector-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-console-0:2.0.6-1.Final_redhat_1.1.ep6.el5
jboss-as-controller-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-controller-client-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-core-security-0:7.3.0-7.Final_redhat_14.1.ep6.el5
jboss-as-deployment-repository-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-deployment-scanner-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-domain-http-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-domain-management-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-ee-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-ee-deployment-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-ejb3-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-embedded-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-host-controller-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-jacorb-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-jaxr-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-jaxrs-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-jdr-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-jmx-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-jpa-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-jsf-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-jsr77-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-logging-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-mail-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-management-client-content-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-messaging-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-modcluster-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-naming-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-network-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-osgi-0:7.3.0-7.Final_redhat_14.1.ep6.el5
jboss-as-osgi-configadmin-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-osgi-service-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-platform-mbean-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-pojo-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-process-controller-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-protocol-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-remoting-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-sar-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-security-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-server-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-system-jmx-0:7.3.0-7.Final_redhat_14.1.ep6.el5
jboss-as-threads-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-transactions-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-version-0:7.3.0-7.Final_redhat_14.1.ep6.el5
jboss-as-web-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-webservices-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-weld-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-as-xts-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jboss-dmr-0:1.2.0-1.Final_redhat_1.1.ep6.el5
jboss-ejb-client-0:1.0.24-1.Final_redhat_1.1.ep6.el5
jboss-ejb3-ext-api-0:2.1.0-1.redhat_1.1.ep6.el5
jboss-genericjms-0:1.0.1-1.Final_redhat_1.1.ep6.el5
jboss-hal-0:2.0.6-1.Final_redhat_1.1.ep6.el5
jboss-jacc-api_1.4_spec-0:1.0.3-1.Final_redhat_1.1.ep6.el5
jboss-logmanager-0:1.5.1-1.Final_redhat_1.ep6.el5
jboss-marshalling-0:1.4.2-1.Final_redhat_1.1.ep6.el5
jboss-modules-0:1.3.0-2.Final_redhat_2.1.ep6.el5
jboss-remoting3-0:3.2.18-1.GA_redhat_1.1.ep6.el5
jboss-remoting3-jmx-0:1.1.2-1.Final_redhat_1.1.ep6.el5
jboss-security-negotiation-0:2.2.6-2.Final_redhat_1.2.ep6.el5
jboss-security-xacml-0:2.0.8-10.Final_redhat_5.2.ep6.el5
jboss-threads-0:2.1.1-1.Final_redhat_1.ep6.el5
jboss-vfs2-0:3.2.2-1.Final_redhat_1.1.ep6.el5
jboss-weld-1.1-api-0:1.1-8.Final_redhat_4.1.ep6.el5
jbossas-appclient-0:7.3.0-8.Final_redhat_14.1.ep6.el5
jbossas-bundles-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jbossas-core-0:7.3.0-7.Final_redhat_14.1.ep6.el5
jbossas-domain-0:7.3.0-22.Final_redhat_14.1.ep6.el5
jbossas-hornetq-native-0:2.3.8-1.Final_redhat_1.ep6.el5
jbossas-javadocs-0:7.3.0-14.Final_redhat_14.ep6.el5
jbossas-modules-eap-0:7.3.0-21.Final_redhat_14.1.ep6.el5
jbossas-product-eap-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jbossas-standalone-0:7.3.0-7.Final_redhat_14.1.ep6.el5
jbossas-welcome-content-eap-0:7.3.0-6.Final_redhat_14.1.ep6.el5
jbossts-1:4.17.15-4.Final_redhat_4.1.ep6.el5
jbossws-api-0:1.0.2-1.Final_redhat_1.2.ep6.el5
jbossws-common-0:2.2.3-1.Final_redhat_1.1.ep6.el5
jbossws-common-tools-0:1.2.0-2.Final_redhat_2.1.ep6.el5
jbossws-cxf-0:4.2.3-1.Final_redhat_1.1.ep6.el5
jbossws-native-0:4.1.2-1.Final_redhat_1.1.ep6.el5
jbossws-spi-0:2.2.2-1.Final_redhat_1.1.ep6.el5
jcip-annotations-eap6-0:1.0-5.redhat_6.1.ep6.el5
jdom-eap6-0:1.1.2-5.redhat_3.1.ep6.el5
jettison-0:1.3.1-8.redhat_3.1.ep6.el5
jgroups-1:3.2.12-1.Final_redhat_1.1.ep6.el5
juddi-0:3.1.3-4.redhat_3.1.ep6.el5
mod_cluster-0:1.2.6-2.Final_redhat_1.1.ep6.el5
mod_cluster-demo-0:1.2.6-2.Final_redhat_1.1.ep6.el5
mod_cluster-native-0:1.2.6-1.Final.redhat_1.ep6.el5
mod_cluster-native-debuginfo-0:1.2.6-1.Final.redhat_1.ep6.el5
mod_jk-ap22-0:1.2.37-4.redhat_3.ep6.el5
mod_jk-debuginfo-0:1.2.37-4.redhat_3.ep6.el5
objectweb-asm-eap6-0:3.3.1-6.3.redhat_5.ep6.el5
opensaml-0:2.5.3-3.redhat_2.1.ep6.el5
openws-0:1.4.4-2.redhat_2.1.ep6.el5
org.apache.felix.configadmin-0:1.2.8-7.redhat_4.2.ep6.el5
org.apache.felix.log-0:1.0.0-6.redhat_3.1.ep6.el5
org.osgi.core-eap6-0:4.2.0-11.10.redhat_4.ep6.el5
org.osgi.enterprise-eap6-0:4.2.0-11.10.redhat_4.ep6.el5
picketbox-0:4.0.19-1.SP2_redhat_1.1.ep6.el5
picketlink-federation-0:2.1.9-3.SP2_redhat_1.1.ep6.el5
resteasy-0:2.3.7-2.Final_redhat_2.ep6.el5
scannotation-0:1.0.3-2.redhat_4.ep6.el5
shrinkwrap-api-0:1.1.2-3.redhat_1.1.ep6.el5
shrinkwrap-impl-base-0:1.1.2-3.redhat_1.1.ep6.el5
shrinkwrap-parent-0:1.1.2-3.redhat_1.1.ep6.el5
shrinkwrap-spi-0:1.1.2-3.redhat_1.1.ep6.el5
slf4j-0:1.7.2-11.redhat_2.1.ep6.el5
slf4j-eap6-0:1.7.2-11.redhat_2.1.ep6.el5
stilts-0:0.1.26-10.redhat_3.1.ep6.el5
sun-ws-metadata-2.0-api-0:1.0.MR1-16_MR1_redhat_6.1.ep6.el5
velocity-eap6-0:1.7-4.redhat_3.1.ep6.el5
weld-cdi-1.0-api-0:1.0-9.SP4.redhat_3.1.ep6.el5
weld-core-0:1.1.16-3.Final_redhat_1.1.ep6.el5
ws-commons-XmlSchema-0:2.0.2-8.redhat_3.1.ep6.el5
ws-commons-neethi-0:3.0.2-6.redhat_3.1.ep6.el5
ws-scout-0:1.2.6-4.redhat_3.1.ep6.el5
wsdl4j-eap6-0:1.6.2-14.redhat_6.1.ep6.el5
wss4j-0:1.6.12-1.redhat_1.1.ep6.el5
xerces-j2-eap6-0:2.9.1-16.redhat_5.1.ep6.el5
xjc-utils-0:2.6.1-4.redhat_2.1.ep6.el5
xml-commons-resolver-eap6-0:1.2-16.redhat_9.1.ep6.el5
xml-security-0:1.5.5-2.redhat_2.1.ep6.el5
xmltooling-0:1.3.4-3.redhat_1.1.ep6.el5
xom-0:1.2.7-2.redhat_4.1.ep6.el5
antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6
apache-commons-beanutils-0:1.8.3-13.redhat_6.1.ep6.el6
apache-commons-cli-0:1.2-8.redhat_3.1.ep6.el6
apache-commons-configuration-0:1.6-8.redhat_3.1.ep6.el6
apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6
apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6
apache-cxf-0:2.7.7-1.redhat_1.1.ep6.el6
apache-cxf-xjc-utils-0:2.6.1-4.redhat_2.1.ep6.el6
apache-mime4j-0:0.6-8.redhat_3.1.ep6.el6
atinject-eap6-0:1-5.redhat_4.1.ep6.el6
cxf-xjc-boolean-0:2.6.1-4.redhat_2.1.ep6.el6
cxf-xjc-dv-0:2.6.1-4.redhat_2.1.ep6.el6
cxf-xjc-ts-0:2.6.1-4.redhat_2.1.ep6.el6
dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6
glassfish-jaxb-eap6-0:2.2.5-17.redhat_7.2.ep6.el6
glassfish-jsf-eap6-0:2.1.19-2.3.redhat_2.ep6.el6
glassfish-jsf12-eap6-0:1.2_15-5.b01_redhat_8.1.ep6.el6
gnu-getopt-0:1.0.13-3.redhat_4.1.ep6.el6
hibernate4-core-eap6-0:4.2.7-3.3.SP1_redhat_3.ep6.el6
hibernate4-eap6-0:4.2.7-3.3.SP1_redhat_3.ep6.el6
hibernate4-entitymanager-eap6-0:4.2.7-3.3.SP1_redhat_3.ep6.el6
hibernate4-envers-eap6-0:4.2.7-3.3.SP1_redhat_3.ep6.el6
hibernate4-infinispan-eap6-0:4.2.7-3.3.SP1_redhat_3.ep6.el6
hornetq-0:2.3.12-1.Final_redhat_1.1.ep6.el6
hornetq-native-0:2.3.8-1.Final_redhat_1.ep6.el6
hornetq-native-debuginfo-0:2.3.8-1.Final_redhat_1.ep6.el6
httpserver-0:1.0.1-4.Final_redhat_3.1.ep6.el6
infinispan-0:5.2.7-2.Final_redhat_2.1.ep6.el6
infinispan-cachestore-jdbc-0:5.2.7-2.Final_redhat_2.1.ep6.el6
infinispan-cachestore-remote-0:5.2.7-2.Final_redhat_2.1.ep6.el6
infinispan-client-hotrod-0:5.2.7-2.Final_redhat_2.1.ep6.el6
infinispan-core-0:5.2.7-2.Final_redhat_2.1.ep6.el6
ironjacamar-common-api-eap6-0:1.0.23-1.3.Final_redhat_1.ep6.el6
ironjacamar-common-impl-eap6-0:1.0.23-1.3.Final_redhat_1.ep6.el6
ironjacamar-common-spi-eap6-0:1.0.23-1.3.Final_redhat_1.ep6.el6
ironjacamar-core-api-eap6-0:1.0.23-1.3.Final_redhat_1.ep6.el6
ironjacamar-core-impl-eap6-0:1.0.23-1.3.Final_redhat_1.ep6.el6
ironjacamar-deployers-common-eap6-0:1.0.23-1.3.Final_redhat_1.ep6.el6
ironjacamar-eap6-0:1.0.23-1.3.Final_redhat_1.ep6.el6
ironjacamar-jdbc-eap6-0:1.0.23-1.3.Final_redhat_1.ep6.el6
ironjacamar-spec-api-eap6-0:1.0.23-1.3.Final_redhat_1.ep6.el6
ironjacamar-validator-eap6-0:1.0.23-1.3.Final_redhat_1.ep6.el6
jacorb-jboss-0:2.3.2-12.redhat_5.1.ep6.el6
jansi-0:1.9-5.redhat_3.1.ep6.el6
javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6
jaxen-0:1.1.3-9.redhat_3.1.ep6.el6
jbosgi-metadata-0:2.2.0-2.Final_redhat_1.1.ep6.el6
jboss-aesh-0:0.33.8-1.redhat_1.1.ep6.el6
jboss-as-appclient-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-cli-0:7.3.0-5.Final_redhat_14.1.ep6.el6
jboss-as-client-all-0:7.3.0-7.Final_redhat_14.1.ep6.el6
jboss-as-clustering-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-cmp-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-configadmin-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-connector-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-console-0:2.0.6-1.Final_redhat_1.1.ep6.el6
jboss-as-controller-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-controller-client-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-core-security-0:7.3.0-7.Final_redhat_14.1.ep6.el6
jboss-as-deployment-repository-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-deployment-scanner-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-domain-http-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-domain-management-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-ee-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-ee-deployment-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-ejb3-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-embedded-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-host-controller-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-jacorb-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-jaxr-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-jaxrs-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-jdr-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-jmx-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-jpa-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-jsf-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-jsr77-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-logging-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-mail-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-management-client-content-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-messaging-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-modcluster-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-naming-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-network-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-osgi-0:7.3.0-7.Final_redhat_14.1.ep6.el6
jboss-as-osgi-configadmin-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-osgi-service-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-platform-mbean-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-pojo-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-process-controller-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-protocol-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-remoting-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-sar-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-security-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-server-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-system-jmx-0:7.3.0-7.Final_redhat_14.1.ep6.el6
jboss-as-threads-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-transactions-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-version-0:7.3.0-7.Final_redhat_14.1.ep6.el6
jboss-as-web-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-webservices-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-weld-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-as-xts-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jboss-dmr-0:1.2.0-1.Final_redhat_1.1.ep6.el6
jboss-ejb-client-0:1.0.24-1.Final_redhat_1.1.ep6.el6
jboss-ejb3-ext-api-0:2.1.0-1.redhat_1.1.ep6.el6
jboss-genericjms-0:1.0.1-1.Final_redhat_1.1.ep6.el6
jboss-hal-0:2.0.6-1.Final_redhat_1.1.ep6.el6
jboss-jacc-api_1.4_spec-0:1.0.3-1.Final_redhat_1.1.ep6.el6
jboss-logmanager-0:1.5.1-1.Final_redhat_1.ep6.el6
jboss-marshalling-0:1.4.2-1.Final_redhat_1.1.ep6.el6
jboss-modules-0:1.3.0-2.Final_redhat_2.1.ep6.el6
jboss-remoting3-0:3.2.18-1.GA_redhat_1.1.ep6.el6
jboss-remoting3-jmx-0:1.1.2-1.Final_redhat_1.1.ep6.el6
jboss-security-negotiation-0:2.2.6-2.Final_redhat_1.2.ep6.el6
jboss-security-xacml-0:2.0.8-10.Final_redhat_5.2.ep6.el6
jboss-threads-0:2.1.1-1.Final_redhat_1.ep6.el6
jboss-vfs2-0:3.2.2-1.Final_redhat_1.1.ep6.el6
jboss-weld-1.1-api-0:1.1-8.Final_redhat_4.1.ep6.el6
jbossas-appclient-0:7.3.0-8.Final_redhat_14.1.ep6.el6
jbossas-bundles-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jbossas-core-0:7.3.0-7.Final_redhat_14.1.ep6.el6
jbossas-domain-0:7.3.0-22.Final_redhat_14.1.ep6.el6
jbossas-hornetq-native-0:2.3.8-1.Final_redhat_1.ep6.el6
jbossas-javadocs-0:7.3.0-14.Final_redhat_14.ep6.el6
jbossas-modules-eap-0:7.3.0-21.Final_redhat_14.1.ep6.el6
jbossas-product-eap-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jbossas-standalone-0:7.3.0-7.Final_redhat_14.1.ep6.el6
jbossas-welcome-content-eap-0:7.3.0-6.Final_redhat_14.1.ep6.el6
jbossts-1:4.17.15-4.Final_redhat_4.1.ep6.el6
jbossws-api-0:1.0.2-1.Final_redhat_1.2.ep6.el6
jbossws-common-0:2.2.3-1.Final_redhat_1.1.ep6.el6
jbossws-common-tools-0:1.2.0-2.Final_redhat_2.1.ep6.el6
jbossws-cxf-0:4.2.3-1.Final_redhat_1.1.ep6.el6
jbossws-native-0:4.1.2-1.Final_redhat_1.1.ep6.el6
jbossws-spi-0:2.2.2-1.Final_redhat_1.1.ep6.el6
jcip-annotations-eap6-0:1.0-5.redhat_6.1.ep6.el6
jdom-eap6-0:1.1.2-5.redhat_3.1.ep6.el6
jettison-0:1.3.1-8.redhat_3.1.ep6.el6
jgroups-1:3.2.12-1.Final_redhat_1.1.ep6.el6
juddi-0:3.1.3-4.redhat_3.1.ep6.el6
mod_cluster-0:1.2.6-2.Final_redhat_1.1.ep6.el6
mod_cluster-demo-0:1.2.6-2.Final_redhat_1.1.ep6.el6
mod_cluster-native-0:1.2.6-1.Final.redhat_1.ep6.el6
mod_cluster-native-debuginfo-0:1.2.6-1.Final.redhat_1.ep6.el6
mod_jk-ap22-0:1.2.37-4.redhat_3.ep6.el6
mod_jk-debuginfo-0:1.2.37-4.redhat_3.ep6.el6
objectweb-asm-eap6-0:3.3.1-6.3.redhat_5.ep6.el6
opensaml-0:2.5.3-3.redhat_2.1.ep6.el6
openws-0:1.4.4-2.redhat_2.1.ep6.el6
org.apache.felix.configadmin-0:1.2.8-7.redhat_4.2.ep6.el6
org.apache.felix.log-0:1.0.0-6.redhat_3.1.ep6.el6
org.osgi.core-eap6-0:4.2.0-11.10.redhat_4.ep6.el6
org.osgi.enterprise-eap6-0:4.2.0-11.10.redhat_4.ep6.el6
picketbox-0:4.0.19-1.SP2_redhat_1.1.ep6.el6
picketlink-federation-0:2.1.9-3.SP2_redhat_1.1.ep6.el6
resteasy-0:2.3.7-2.Final_redhat_2.ep6.el6
scannotation-0:1.0.3-2.redhat_4.ep6.el6
shrinkwrap-api-0:1.1.2-3.redhat_1.1.ep6.el6
shrinkwrap-impl-base-0:1.1.2-3.redhat_1.1.ep6.el6
shrinkwrap-parent-0:1.1.2-3.redhat_1.1.ep6.el6
shrinkwrap-spi-0:1.1.2-3.redhat_1.1.ep6.el6
slf4j-eap6-0:1.7.2-11.redhat_2.1.ep6.el6
stilts-0:0.1.26-10.redhat_3.1.ep6.el6
sun-ws-metadata-2.0-api-0:1.0.MR1-16_MR1_redhat_6.1.ep6.el6
velocity-eap6-0:1.7-4.redhat_3.1.ep6.el6
weld-cdi-1.0-api-0:1.0-9.SP4.redhat_3.1.ep6.el6
weld-core-0:1.1.16-3.Final_redhat_1.1.ep6.el6
ws-commons-XmlSchema-0:2.0.2-8.redhat_3.1.ep6.el6
ws-commons-neethi-0:3.0.2-6.redhat_3.1.ep6.el6
ws-scout-0:1.2.6-4.redhat_3.1.ep6.el6
wsdl4j-eap6-0:1.6.2-14.redhat_6.1.ep6.el6
wss4j-0:1.6.12-1.redhat_1.1.ep6.el6
xerces-j2-eap6-0:2.9.1-16.redhat_5.1.ep6.el6
xjc-utils-0:2.6.1-4.redhat_2.1.ep6.el6
xml-commons-resolver-eap6-0:1.2-16.redhat_9.1.ep6.el6
xml-security-0:1.5.5-2.redhat_2.1.ep6.el6
xmltooling-0:1.3.4-3.redhat_1.1.ep6.el6
xom-0:1.2.7-2.redhat_4.1.ep6.el6