Description
Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service (shutdown) by sending a shutdown command to all listening high ports.
Remediation
References
http://karaf.apache.org/security/cve-2014-0219.txt
http://www.securityfocus.com/bid/101872
https://bugzilla.redhat.com/show_bug.cgi?id=1095974
Related Vulnerabilities
CVE-2022-24822 Vulnerability in npm package @podium/proxy
CVE-2014-0035 Vulnerability in maven package org.apache.cxf:cxf-rt-ws-security
CVE-2023-48309 Vulnerability in npm package next-auth
CVE-2022-29166 Vulnerability in npm package matrix-org-irc
CVE-2022-28156 Vulnerability in maven package com.surenpi.jenkins:phoenix-autotest