Test ID:	1.3.6.1.4.1.25623.1.0.902286
Category:	Web Servers
Title:	Oracle Java GlassFish Server Privilege Escalation Vulnerability (Jan 2011)
Summary:	GlassFish Server is prone to a privilege escalation; vulnerability.
Description:	Summary: GlassFish Server is prone to a privilege escalation vulnerability. Vulnerability Insight: The issue is caused by an unspecified error related to the Java Message Service, which could allow local attackers to disclose or manipulate certain information, or create a denial of service condition. Vulnerability Impact: Successful exploitation could allow local attackers to affect confidentiality and integrity via unknown vectors. Affected Software/OS: Oracle GlassFish version 2.1, 2.1.1 and 3.0.1. Solution: Apply the security updates. CVSS Score: 5.7 CVSS Vector: AV:L/AC:L/Au:S/C:P/I:P/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4438 BugTraq ID: 45890 http://www.securityfocus.com/bid/45890 http://osvdb.org/70572 http://osvdb.org/70573 http://secunia.com/advisories/42988 http://www.vupen.com/english/advisories/2011/0155 XForce ISS Database: glassfish-jms-privilege-escalation(64813) https://exchange.xforce.ibmcloud.com/vulnerabilities/64813
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.