CVE-2009-3554
Fixed in a distro release EPSS <1%
Twiddle in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP08 and 4.3 before 4.3.0.CP07 writes the JMX password, and other command-line arguments, to the twiddle.log file, which allows local users to obtain sensitive information by reading this file.
Products: redhat jboss_enterprise_application_platform
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat jboss enterprise application platform 4.2.0 | glassfish-javamail | 0:1.4.2-0jpp.ep1.5.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | glassfish-jsf | 0:1.2_13-2.1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.2.0 | glassfish-jsf | 0:1.2_13-2.1.ep1.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | hibernate3 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | hibernate3 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 |
| Red Hat jboss enterprise application platform 4.2.0 | hibernate3-annotations | 0:3.3.1-1.11.GA_CP02.ep1.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | hibernate3-annotations | 0:3.3.1-1.11GA_CP02.ep1.el5 |
| Red Hat jboss enterprise application platform 4.2.0 | hibernate3-annotations-javadoc | 0:3.3.1-1.11.GA_CP02.ep1.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | hibernate3-annotations-javadoc | 0:3.3.1-1.11GA_CP02.ep1.el5 |
| Red Hat jboss enterprise application platform 4.2.0 | hibernate3-entitymanager | 0:3.3.2-2.5.GA_CP01.ep1.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | hibernate3-entitymanager | 0:3.3.2-2.5.1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.2.0 | hibernate3-entitymanager-javadoc | 0:3.3.2-2.5.GA_CP01.ep1.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | hibernate3-entitymanager-javadoc | 0:3.3.2-2.5.1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.2.0 | hibernate3-javadoc | 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | hibernate3-javadoc | 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 |
| Red Hat jboss enterprise application platform 4.2.0 | jacorb | 0:2.3.0-1jpp.ep1.9.1.el5 |
| Red Hat jboss enterprise application platform 4.2.0 | jacorb | 0:2.3.0-1jpp.ep1.9.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | jakarta-commons-logging-jboss | 0:1.1-9.ep1.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | jboss-aop | 0:1.5.5-3.CP04.2.ep1.el5 |
| Red Hat jboss enterprise application platform 4.2.0 | jboss-aop | 0:1.5.5-3.CP04.2.ep1.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | jboss-common | 0:1.2.1-0jpp.ep1.3.el5.1 |
| Red Hat jboss enterprise application platform 4.2.0 | jboss-common | 0:1.2.1-0jpp.ep1.3.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | jboss-remoting | 0:2.2.3-3.SP1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.2.0 | jboss-remoting | 0:2.2.3-3.SP1.ep1.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | jboss-seam | 0:1.2.1-1.ep1.22.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | jboss-seam | 0:1.2.1-1.ep1.14.el5 |
| Red Hat jboss enterprise application platform 4.2.0 | jboss-seam-docs | 0:1.2.1-1.ep1.14.el5 |
| Red Hat jboss enterprise application platform 4.2.0 | jboss-seam-docs | 0:1.2.1-1.ep1.22.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | jbossas | 0:4.2.0-5.GA_CP08.5.2.ep1.el5 |
| Red Hat jboss enterprise application platform 4.2.0 | jbossas | 0:4.2.0-5.GA_CP08.5.ep1.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | jbossas-4.2.0.GA_CP08-bin | 0:4.2.0-5.GA_CP08.5.ep1.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | jbossas-4.2.0.GA_CP08-bin | 0:4.2.0-5.GA_CP08.5.2.ep1.el5 |
| Red Hat jboss enterprise application platform 4.2.0 | jbossas-client | 0:4.2.0-5.GA_CP08.5.ep1.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | jbossas-client | 0:4.2.0-5.GA_CP08.5.2.ep1.el5 |
| Red Hat jboss enterprise application platform 4.2.0 | jbossts | 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | jbossts | 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5 |
| Red Hat jboss enterprise application platform 4.2.0 | jbossweb | 0:2.0.0-6.CP12.0jpp.ep1.2.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | jbossweb | 0:2.0.0-6.CP12.0jpp.ep1.2.el5 |
| Red Hat jboss enterprise application platform 4.2.0 | jcommon | 0:1.0.16-1.1.ep1.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | jcommon | 0:1.0.16-1.1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.2.0 | jfreechart | 0:1.0.13-2.3.1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.2.0 | jfreechart | 0:1.0.13-2.3.1.ep1.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | jgroups | 1:2.4.7-1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.2.0 | jgroups | 1:2.4.7-1.ep1.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | quartz | 0:1.5.2-1jpp.patch01.ep1.4.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | quartz | 0:1.5.2-1jpp.patch01.ep1.4.1.el5 |
| Red Hat jboss enterprise application platform 4.2.0 | rh-eap-docs | 0:4.2.0-6.GA_CP08.ep1.3.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | rh-eap-docs | 0:4.2.0-6.GA_CP08.ep1.3.el5 |
| Red Hat jboss enterprise application platform 4.2.0 | rh-eap-docs-examples | 0:4.2.0-6.GA_CP08.ep1.3.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | rh-eap-docs-examples | 0:4.2.0-6.GA_CP08.ep1.3.el5 |
| Red Hat jboss enterprise application platform 4.2.0 | xerces-j2 | 0:2.7.1-9jpp.4.patch_02.1.ep1.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | xml-security | 0:1.3.0-1.3.patch01.ep1.2.el4 |
| Red Hat jboss enterprise application platform 4.2.0 | xml-security | 0:1.3.0-1.3.patch01.ep1.2.1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | glassfish-javamail | 0:1.4.2-0jpp.ep1.5.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | glassfish-jaxb | 0:2.1.4-1.12.patch03.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | glassfish-jaxb | 0:2.1.4-1.12.patch03.1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | glassfish-jaxb-javadoc | 0:2.1.4-1.12.patch03.1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | glassfish-jaxb-javadoc | 0:2.1.4-1.12.patch03.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | glassfish-jsf | 0:1.2_13-2.1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | glassfish-jsf | 0:1.2_13-2.1.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3-annotations | 0:3.3.1-1.11GA_CP02.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3-annotations | 0:3.3.1-1.11.GA_CP02.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3-annotations-javadoc | 0:3.3.1-1.11.GA_CP02.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3-annotations-javadoc | 0:3.3.1-1.11GA_CP02.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3-entitymanager | 0:3.3.2-2.5.GA_CP01.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3-entitymanager | 0:3.3.2-2.5.1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3-entitymanager-javadoc | 0:3.3.2-2.5.GA_CP01.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3-entitymanager-javadoc | 0:3.3.2-2.5.1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3-javadoc | 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3-javadoc | 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jacorb | 0:2.3.0-1jpp.ep1.9.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jacorb | 0:2.3.0-1jpp.ep1.9.1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jakarta-commons-logging-jboss | 0:1.1-9.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-aop | 0:1.5.5-3.CP04.2.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-aop | 0:1.5.5-3.CP04.2.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-common | 0:1.2.1-0jpp.ep1.3.el5.1 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-common | 0:1.2.1-0jpp.ep1.3.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-messaging | 0:1.4.0-3.SP3_CP09.4.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-messaging | 0:1.4.0-3.SP3_CP09.4.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-remoting | 0:2.2.3-3.SP1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-remoting | 0:2.2.3-3.SP1.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-seam | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-seam | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.18.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-seam-docs | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-seam-docs | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.18.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-seam2 | 0:2.0.2.FP-1.ep1.18.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-seam2 | 0:2.0.2.FP-1.ep1.21.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-seam2-docs | 0:2.0.2.FP-1.ep1.21.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-seam2-docs | 0:2.0.2.FP-1.ep1.18.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossas | 0:4.3.0-6.GA_CP07.4.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossas | 0:4.3.0-6.GA_CP07.4.2.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossas-4.3.0.GA_CP07-bin | 0:4.3.0-6.GA_CP07.4.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossas-4.3.0.GA_CP07-bin | 0:4.3.0-6.GA_CP07.4.2.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossas-client | 0:4.3.0-6.GA_CP07.4.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossas-client | 0:4.3.0-6.GA_CP07.4.2.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossts | 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossts | 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossweb | 0:2.0.0-6.CP12.0jpp.ep1.2.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossweb | 0:2.0.0-6.CP12.0jpp.ep1.2.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossws | 0:2.0.1-4.SP2_CP07.2.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossws | 0:2.0.1-4.SP2_CP07.2.1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossws-common | 0:1.0.0-2.GA_CP05.1.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossws-common | 0:1.0.0-2.GA_CP05.1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossws-framework | 0:2.0.1-1.GA_CP05.1.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossws-framework | 0:2.0.1-1.GA_CP05.1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossws-native42 | 0:2.0.1-4.SP2_CP07.2.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossws-native42 | 0:2.0.1-4.SP2_CP07.2.1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jcommon | 0:1.0.16-1.1.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jcommon | 0:1.0.16-1.1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jfreechart | 0:1.0.13-2.3.1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jfreechart | 0:1.0.13-2.3.1.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jgroups | 1:2.4.7-1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jgroups | 1:2.4.7-1.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | quartz | 0:1.5.2-1jpp.patch01.ep1.4.1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | quartz | 0:1.5.2-1jpp.patch01.ep1.4.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | rh-eap-docs | 0:4.3.0-6.GA_CP07.ep1.3.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | rh-eap-docs | 0:4.3.0-6.GA_CP07.ep1.3.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | rh-eap-docs-examples | 0:4.3.0-6.GA_CP07.ep1.3.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | rh-eap-docs-examples | 0:4.3.0-6.GA_CP07.ep1.3.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | xerces-j2 | 0:2.7.1-9jpp.4.patch_02.1.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | xml-security | 0:1.3.0-1.3.patch01.ep1.2.1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | xml-security | 0:1.3.0-1.3.patch01.ep1.2.el4 |