OpenNMS RMI Exploit
Tarus BALOG <[email protected]> Mon, 9 Nov 2015 08:02:24 -0500
| Newsgroups | gmane.network.opennms.announce |
|---|---|
| Message-ID | <56409960.7070207__20599.9099220664$1447074665$gmane$org@opennms.org> |
Gang: It was brought to our attention that the Apache Commons library that OpenNMS uses is vulnerable to a remote code execution exploit. This is only possible if port 1099 on the OpenNMS server can be accessed from the outside world. Here is a blog post with more detail: http://www.adventuresinoss.com/2015/11/09/opennms-rmi-exploit/ -T -- Tarus BALOG, Maintainer Main: +1 919 533 0160 The OpenNMS Group, Inc. Fax: +1 773 345 3645 Email: [email protected] URL: http://www.opennms.org PGP Key Fingerprint: 8945 8521 9771 FEC9 5481 512B FECA 11D2 FD82 B45C ------------------------------------------------------------------------------ Presto, an open source distributed SQL query engine for big data, initially developed by Facebook, enables you to easily query your data on Hadoop in a more interactive manner. Teradata is also now providing full enterprise support for Presto. Download a free open source copy now. http://pubads.g.doubleclick.net/gampad/clk?id=250295911&iu=/4140 _______________________________________________ Please read the OpenNMS Mailing List FAQ: http://www.opennms.org/wiki/index.php?page=MailingListFaq opennms-announce mailing list To *unsubscribe* or change your subscription options, see the bottom of this page: https://lists.sourceforge.net/lists/listinfo/opennms-announce