Apache Software Foundation Releases Security Updates

ronjor · Mar 8, 2017

Original release date: March 08, 2017

The Apache Software Foundation has released security updates to address a vulnerability in Struts 2. A remote attacker could exploit this vulnerability to take control of an affected system.
Click to expand...

ronjor · Mar 9, 2017

Critical vulnerability under “massive” attack imperils high-impact sites

Dan Goodin - Mar 9, 2017 7:04 am UTC
Exploits for easy-to-spot bug are trivial, reliable, and publicly available.
The code-execution bug resides in the Apache Struts 2 Web application framework and is trivial to exploit.
Click to expand...

ronjor · Mar 9, 2017

Content-Type: Malicious - New Apache Struts2 0-day Under Attack

This Post Authored by Nick Biasini Wednesday, March 8, 2017
Talos has observed a new Apache vulnerability that is being actively exploited in the wild. The vulnerability (CVE-2017-5638 ) is a remote code execution bug that affects the Jakarta Multipart parser in Apache Struts, referenced in this security advisory.
Click to expand...

ronjor · Mar 14, 2017

Canada Takes Tax Site Offline After Apache Struts Attacks

Dark Reading Staff 3/14/2017
Hackers exploit vulnerability in Apache Struts 2 software of Statistics Canada but no damage done.
Click to expand...

ronjor · Mar 14, 2017

Apache Struts 2 is vulnerable to remote code execution

Original Release date: 14 Mar 2017 | Last revised: 14 Mar 2017
Solution

Apply an update
Update to Apache Struts 2.3.32 or 2.5.10.1
Click to expand...

Minimalist · Mar 15, 2017

In-the-wild exploits ramp up against high-impact sites using Apache Struts
As of Tuesday morning, 503 unique IP addresses were attempting to exploit the code execution bug, Jaime Blasco, chief scientist with security firm AlienVault Labs, told Ars. Based on the addresses, the attack origins were most concentrated in China (300 unique IPs), followed by the US (92), Taiwan (71), Hong Kong (15), the Netherlands (9), Russia (4), Canada (3), Italy (3), the UK, (3), and Indonesia (3). In an attempt to go undetected, the attackers in many cases have tweaked the two exploits that were being widely used in last week's wave. AlienVault has responded by updating the signatures it uses to detect the attacks.
Click to expand...

https://arstechnica.com/security/20...gainst-high-impact-sites-using-apache-struts/

Log in or Sign up

Apache Software Foundation Releases Security Updates

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Minimalist Registered Member

Log in or Sign up

Apache Software Foundation Releases Security Updates

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Minimalist Registered Member

Useful Searches