Description
Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service (shutdown) by sending a shutdown command to all listening high ports.
Remediation
References
http://karaf.apache.org/security/cve-2014-0219.txt
http://www.securityfocus.com/bid/101872
https://bugzilla.redhat.com/show_bug.cgi?id=1095974
Related Vulnerabilities
CVE-2011-4838 Vulnerability in maven package org.jruby:jruby-stdlib
CVE-2023-27479 Vulnerability in maven package org.xwiki.platform:xwiki-platform-panels-ui
CVE-2018-14042 Vulnerability in maven package org.webjars.bowergithub.twbs:bootstrap-sass
CVE-2022-36916 Vulnerability in maven package org.jenkins-ci.plugins:google-cloud-backup
CVE-2015-5348 Vulnerability in maven package org.apache.camel:camel-http