DEBIAN-CVE-2013-4112

Source
https://security-tracker.debian.org/tracker/DEBIAN-CVE-2013-4112
Import Source
https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2013-4112.json
JSON Data
https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2013-4112
Upstream
Published
2013-09-28T19:55:03Z
Modified
2025-09-17T15:02:25Z
Summary
[none]
Details

The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials.

References

Affected packages

Debian:11 / libjgroups-java

Package

Name
libjgroups-java
Purl
pkg:deb/debian/libjgroups-java?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.12.2.Final-4

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / libjgroups-java

Package

Name
libjgroups-java
Purl
pkg:deb/debian/libjgroups-java?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.12.2.Final-4

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / libjgroups-java

Package

Name
libjgroups-java
Purl
pkg:deb/debian/libjgroups-java?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.12.2.Final-4

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:14 / libjgroups-java

Package

Name
libjgroups-java
Purl
pkg:deb/debian/libjgroups-java?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.12.2.Final-4

Ecosystem specific

{
    "urgency": "not yet assigned"
}