It was found that Apache ActiveMQ exposed a remote shutdown command in the ActiveMQConnection class. An attacker could use this flaw to achieve denial of service on a client.

For Debian 7 'Wheezy', these problems have been fixed in version 5.6.0+dfsg-1+deb7u3.

We recommend that you upgrade your activemq packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Apache ActiveMQ running on the remote host is 5.x prior to 5.14.5. It is, therefore, affected by an unspecified flaw in ControlCommand handling by the ActiveMQConnection::onControlCommand() function within file ActiveMQConnection.java. An unauthenticated, remote attacker can exploit this to cause a denial of service condition.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6910-1 advisory.

    Chess Hazlett discovered that Apache ActiveMQ incorrectly handled certain commands. A remote attacker     could possibly use this issue to terminate the program, resulting in a denial of service. This issue only     affected Ubuntu 16.04 LTS. (CVE-2015-7559)

    Peter Stckli discovered that Apache ActiveMQ incorrectly handled hostname verification. A remote     attacker could possibly use this issue to perform a person-in-the-middle attack. This issue only affected     Ubuntu 16.04 LTS. (CVE-2018-11775)

    Jonathan Gallimore and Colm  higeartaigh discovered that Apache ActiveMQ incorrectly handled     authentication in certain functions. A remote attacker could possibly use this issue to perform a person-     in-the-middle attack. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
    (CVE-2020-13920)

    Gregor Tudan discovered that Apache ActiveMQ incorrectly handled LDAP authentication. A remote attacker     could possibly use this issue to acquire unauthenticated access. This issue only affected Ubuntu 16.04     LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-26117)

    It was discovered that Apache ActiveMQ incorrectly handled authentication. A remote attacker could     possibly use this issue to run arbitrary code. (CVE-2022-41678)

    It was discovered that Apache ActiveMQ incorrectly handled deserialization. A remote attacker could     possibly use this issue to run arbitrary shell commands. (CVE-2023-46604)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Apache ActiveMQがActiveMQConnectionクラスのリモートシャットダウンコマンドを公開していたことがわかりました。攻撃者はこの欠陥を利用して、クライアントでサービス拒否を実行する可能性があります。

Debian 7「Wheezy」では、これらの問題は、バージョン5.6.0+dfsg-1+deb7u3で修正されました。

activemqパッケージをアップグレードすることを推奨します。

注: Tenable Network Securityは、前述の記述ブロックを DLA セキュリティアドバイザリから直接抽出しています。Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

リモートホストで実行中の Apache ActiveMQ のバージョンは、5.14.5 より前の 5.x です。したがって、ファイル ActiveMQConnection.java 内の ActiveMQConnection::onControlCommand() 関数による ControlCommand 処理で詳細不明な欠陥の影響を受けます。認証されていないリモートの攻撃者がこれを悪用し、サービス拒否状態を引き起こす可能性があります。

已发现 Apache ActiveMQ 在 ActiveMQConnection 类中公开了远程关机命令。攻击者可利用此缺陷在客户端上造成拒绝服务。针对 Debian 7“Wheezy”，这些问题已在版本 5.6.0+dfsg-1+deb7u3 中修复。建议您升级 activemq 程序包。注意：Tenable Network Security 已直接从 DLA 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下，尽可能进行自动整理和排版。

远程主机上运行的 Apache ActiveMQ 版本为低于 5.14.5 的 5.x。因此，它受到文件 ActiveMQConnection.java 中 ActiveMQConnection: : onControlCommand() 函数的 ControlCommand 处理存在的不明缺陷的影响。未经身份验证的远程攻击者可利用此问题造成拒绝服务。

發現 Apache ActiveMQ 的 ActiveMQConnection 類別中存在一個遠端關機命令弱點。攻擊者可利用此缺陷造成用戶端上發生拒絕服務。針對 Debian 7「Wheezy」，這些問題已在 5.6.0+dfsg-1+deb7u3 版本中修正。建議您升級 activemq 套件。注意：Tenable Network Security 已直接從 DLA 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

遠端主機上執行的 Apache ActiveMQ 版本為比 5.14.5 舊的 5.x 版。因此，會受到檔案 ActiveMQConnection.java 中: ActiveMQConnection: onControlCommand() 函式在處理 ControlCommand 時存在的不明缺陷影響。未經驗證的遠端攻擊者可惡意利用此缺陷引發拒絕服務情形。

ID	名前	製品	ファミリー	公開日	更新日	深刻度
99638	Debian DLA-913-1 : activemq security update	Nessus	Debian Local Security Checks	2017/4/25	2021/1/11	medium
99664	Apache ActiveMQ 5.x < 5.14.5 ControlCommand DoS	Nessus	CGI abuses	2017/4/25	2024/6/6	medium
203693	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : Apache ActiveMQ vulnerabilities (USN-6910-1)	Nessus	Ubuntu Local Security Checks	2024/7/23	2024/7/24	critical
99638	Debian DLA-913-1: activemqセキュリティ更新	Nessus	Debian Local Security Checks	2017/4/25	2021/1/11	medium
99664	Apache ActiveMQ 5.x < 5.14.5 の ControlCommand DoS	Nessus	CGI abuses	2017/4/25	2024/6/6	medium
99638	Debian DLA-913-1：activemq 安全更新	Nessus	Debian Local Security Checks	2017/4/25	2021/1/11	medium
99664	Apache ActiveMQ 5.x < 5.14.5 ControlCommand DoS	Nessus	CGI abuses	2017/4/25	2024/6/6	medium
99638	Debian DLA-913-1：activemq 安全性更新	Nessus	Debian Local Security Checks	2017/4/25	2021/1/11	medium
99664	Apache ActiveMQ 5.x < 5.14.5 ControlCommand DoS	Nessus	CGI abuses	2017/4/25	2024/6/6	medium

検出

プラグインの検索

medium

medium

critical

medium

medium

medium

medium

medium

medium