Uploaded image for project: 'River (Retired)'
  1. River (Retired)
  2. RIVER-362

Denial of Service during unmarshalling of smart proxy's

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Open
    • Major
    • Resolution: Unresolved
    • None
    • None
    • None
    • None

    • Untrusted networks

    Description

      During unmarshalling of smart proxy's there's a period before the proxy has been verified (authenticated) where deserialization methods are executed on untrusted code, the potential exists for untrusted code to perform denial of service.

      Attachments

        1. river-modules.zip
          92 kB
          Michal Kleczek

        Issue Links

          relates to

          Sub-task - The sub-task of the issue RIVER-330 RMIClassLoaderSPI implementation for OSGi bundle codebase annotations during marshalling

          • Major - Major loss of function.
          • Reopened

          New Feature - A new feature of the product, which has yet to be developed. RIVER-336 Jini should support platforms other than those with RMIClassLoader as the classloading control point. IDEs inparticular need help.

          • Major - Major loss of function.
          • Resolved

          Activity

            People

              Unassigned Unassigned
              pfirmst Peter Firmstone
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated: