XML external entity (XXE) vulnerability in the Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted DTD.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - XML external entity (XXE) vulnerability in the Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in     Apache Archiva, allows remote attackers to conduct server-side request forgery (SSRF) attacks via a     crafted DTD. (CVE-2016-5002)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host is affected by the vulnerability described in GLSA-202401-26 (Apache XML-RPC: Multiple Vulnerabilities)

  - XML external entity (XXE) vulnerability in the Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in     Apache Archiva, allows remote attackers to conduct server-side request forgery (SSRF) attacks via a     crafted DTD. (CVE-2016-5002)

  - The Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to     execute arbitrary code via a crafted serialized Java object in an <ex:serializable> element.
    (CVE-2016-5003)

  - An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult     method of Apache XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a XML-RPC client     causing it to execute arbitrary code. Apache XML-RPC is no longer maintained and this issue will not be     fixed. (CVE-2019-17570)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2089 advisory.

    XML external entity (XXE) vulnerability in the Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in     Apache Archiva, allows remote attackers to conduct server-side request forgery (SSRF) attacks via a     crafted DTD. (CVE-2016-5002)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Security fix for CVE-2016-5003, CVE-2016-5002

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
219597	Linux Distros Unpatched Vulnerability : CVE-2016-5002	Nessus	Misc.	high
189291	GLSA-202401-26 : Apache XML-RPC: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	critical
177159	Amazon Linux 2 : xmlrpc (ALAS-2023-2089)	Nessus	Amazon Linux Local Security Checks	high
120400	Fedora 28 : 1:xmlrpc (2018-4ac4229aa8)	Nessus	Fedora Local Security Checks	critical
110301	Fedora 27 : 1:xmlrpc (2018-6e6f1003d6)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2016-5002

high

Tenable Plugins

high

critical

high

critical

critical