CVE-2013-4373
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2013-4373
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The storeFiles method in JPADriftServerBean in Red Hat JBoss Operations Network (JON) 3.1.2 allows local users to load arbitrary drift files into a server by writing the files to the temporary directory that is used to unpack zip files.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Red Hat JBoss Operations Network ‘storeFiles()’不安全临时目录创建漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Red Hat JBoss Operations Network（JON）是美国红帽（Red Hat）公司的一款基于J2EE的开源应用程序服务器，它可部署、管理、监控JBoss企业中间件、应用程序和服务。 Red Hat JON 3.1.2版本中的JPADriftServerBean中的‘storeFiles’方法创建临时目录过程中存在安全漏洞。当解压ZIP文件时，远程攻击者可通过写入文件到临时目录利用该漏洞加载任意drift文件到服务器。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2013-4373
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2013-4373
Please Login to view more intelligence information
- 🔗 https://bugzilla.redhat.com/show_bug.cgi?id=1011824x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2013-4373
Same Patch Batch · n/a · 2013-10-24 · 52 CVEs total
| CVE-2013-5188 | Apple Mac OS X Screen Lock功能权限许可和访问控制漏洞 | |
| CVE-2013-5537 | Cisco WSA/ESA/Content SMA Web框架拒绝服务漏洞 | |
| CVE-2013-5536 | Cisco Secure ACS 防火墙模块拒绝服务漏洞 | |
| CVE-2013-1743 | Bugzilla 跨站脚本漏洞 | |
| CVE-2013-5143 | Apple OS X Server Server App 设计错误漏洞 | |
| CVE-2013-5130 | Apple Safari WebKit 信息泄露漏洞 | |
| CVE-2013-4299 | Linux Kernel 信息泄露漏洞 | |
| CVE-2013-5148 | Apple Keynote 权限许可和访问控制漏洞 | |
| CVE-2013-5190 | Apple Mac OS X Smart Card Services 权限许可和访问控制漏洞 | |
| CVE-2013-5189 | Apple Mac OS X 权限许可和访问控制漏洞 | |
| CVE-2013-5191 | Apple Mac OS X syslog功能权限许可和访问控制漏洞 | |
| CVE-2013-5187 | Apple Mac OS X Screen Lock功能权限许可和访问控制漏洞 | |
| CVE-2013-5186 | Apple Mac OS X Power Management 权限许可和访问控制漏洞 | |
| CVE-2013-5185 | Apple Mac OS X ldapsearch命令行程序加密问题漏洞 | |
| CVE-2013-5184 | Apple Mac OS X kernel 拒绝服务漏洞 | |
| CVE-2013-5183 | Apple Mac OS X Mail 信息泄露漏洞 | |
| CVE-2013-5182 | Apple Mac OS X Mail 加密问题漏洞 | |
| CVE-2013-5181 | Apple Mac OS X Mail 加密问题漏洞 | |
| CVE-2013-5180 | Apple Mac OS X Libc 加密问题漏洞 | |
| CVE-2013-5179 | Apple Mac OS X App Sandbox 安全绕过漏洞 |
Showing top 20 of 52 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service - CVE-2026-8267
Open5GS SMF smf_nsmf_handle_created_data_in_vsmf denial of s - CVE-2026-8266
Open5GS SMF gsm-build.c gsm_build_pdu_session_establishment_ - CVE-2026-8261
Squirrel sqobject.cpp Load heap-based overflow - CVE-2026-8258
Squirrel sqstdstring.cpp validate_format stack-based overflo
V. Comments for CVE-2013-4373
No comments yet