[gatein-commits] gatein SVN: r8813 - in epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src: main/resources/eap and 14 other directories.

Author: hfnukal Date: 2012-08-09 11:36:01 -0400 (Thu, 09 Aug 2012) New Revision: 8813 Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/META-INF/ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/META-INF/MANIFEST.MF epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/control/ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/control/AddressPort.class epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/control/AttrResultInfo.class epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/control/OpResultInfo.class epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/control/Server.class epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/CSRFUtil.class epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/ClusteredConsoleServlet.class epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/HtmlAdaptorServlet$1.class epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/HtmlAdaptorServlet$2.class epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/HtmlAdaptorServlet$3.class epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/HtmlAdaptorServlet$4.class epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/HtmlAdaptorServlet$5.class epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/HtmlAdaptorServlet.class epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/JMXOpsAccessControlFilter.class epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/JmxConsoleSessionListener.class epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/SecurityActions$1.class epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/SecurityActions.class epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/model/ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/model/DomainData.class epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/model/MBeanData.class epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/jboss-web.xml epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/web.xml epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/cluster/ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/cluster/bootstrap.html epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/cluster/clusterView.jsp epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/cluster/index.html epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/displayMBeans.jsp epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/displayOpResult.jsp epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/filterView.jsp epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/genericError.jsp epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/images/ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/images/logo.gif epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/index.jsp epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/inspectMBean.jsp epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/jboss.css epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/style_master.css Modified: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/build.xml Log: Bug 847030 - CVE-2011-2908 patch Modified: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/build.xml =================================================================== --- epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/build.xml 2012-08-06 22:12:44 UTC (rev 8812) +++ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/build.xml 2012-08-09 15:36:01 UTC (rev 8813) @@ -79,7 +79,7 @@ </target> <target name="finalTasks" - depends="modifyStartupMessage,jbossws-native-PATCH,patch-RESTEasy-CVE-2012-081,patch-JBossWeb-CVE-2011-4610,patch-JBossWeb-CVE-2012-1154,patch-CVE-2012-2377,patch-CVE-2011-4605,patch-CVE-2009-2625,patch-CVE-2012-0213,patch-CVE-2012-1167" + depends="modifyStartupMessage,jbossws-native-PATCH,patch-RESTEasy-CVE-2012-081,patch-JBossWeb-CVE-2011-4610,patch-JBossWeb-CVE-2012-1154,patch-CVE-2012-2377,patch-CVE-2011-4605,patch-CVE-2009-2625,patch-CVE-2012-0213,patch-CVE-2012-1167,patch-CVE-2011-2908" </target> @@ -206,4 +206,11 @@ <copy overwrite="true" file="${basedir}/src/main/resources/eap/CVE-2012-1167/jboss.jar" tofile="${epp.path}/jboss-as/common/lib/jboss.jar"/> </target> + <target name="patch-CVE-2011-2908"> + <echo>Patch for CVE-2011-2908 jmx-console.war</echo> + <copy overwrite="true" todir="${epp.path}/jboss-as/server/default/deploy/jmx-console.war"> + <fileset dir="${basedir}/src/main/resources/eap/CVE-2011-2908/jmx-console.war"/> + </copy> + </target> + </project> \ No newline at end of file Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/META-INF/MANIFEST.MF =================================================================== --- epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/META-INF/MANIFEST.MF (rev 0) +++ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/META-INF/MANIFEST.MF 2012-08-09 15:36:01 UTC (rev 8813) @@ -0,0 +1,4 @@ +Manifest-Version: 1.0 +Ant-Version: Apache Ant 1.7.1 +Created-By: 20.6-b01 (Sun Microsystems Inc.) + Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/control/AddressPort.class =================================================================== (Binary files differ) Property changes on: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/control/AddressPort.class ___________________________________________________________________ Added: svn:mime-type + application/octet-stream Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/control/AttrResultInfo.class =================================================================== (Binary files differ) Property changes on: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/control/AttrResultInfo.class ___________________________________________________________________ Added: svn:mime-type + application/octet-stream Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/control/OpResultInfo.class =================================================================== (Binary files differ) Property changes on: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/control/OpResultInfo.class ___________________________________________________________________ Added: svn:mime-type + application/octet-stream Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/control/Server.class =================================================================== (Binary files differ) Property changes on: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/control/Server.class ___________________________________________________________________ Added: svn:mime-type + application/octet-stream Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/CSRFUtil.class =================================================================== (Binary files differ) Property changes on: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/CSRFUtil.class ___________________________________________________________________ Added: svn:mime-type + application/octet-stream Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/ClusteredConsoleServlet.class =================================================================== (Binary files differ) Property changes on: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/ClusteredConsoleServlet.class ___________________________________________________________________ Added: svn:mime-type + application/octet-stream Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/HtmlAdaptorServlet$1.class =================================================================== (Binary files differ) Property changes on: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/HtmlAdaptorServlet$1.class ___________________________________________________________________ Added: svn:mime-type + application/octet-stream Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/HtmlAdaptorServlet$2.class =================================================================== (Binary files differ) Property changes on: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/HtmlAdaptorServlet$2.class ___________________________________________________________________ Added: svn:mime-type + application/octet-stream Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/HtmlAdaptorServlet$3.class =================================================================== (Binary files differ) Property changes on: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/HtmlAdaptorServlet$3.class ___________________________________________________________________ Added: svn:mime-type + application/octet-stream Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/HtmlAdaptorServlet$4.class =================================================================== (Binary files differ) Property changes on: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/HtmlAdaptorServlet$4.class ___________________________________________________________________ Added: svn:mime-type + application/octet-stream Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/HtmlAdaptorServlet$5.class =================================================================== (Binary files differ) Property changes on: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/HtmlAdaptorServlet$5.class ___________________________________________________________________ Added: svn:mime-type + application/octet-stream Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/HtmlAdaptorServlet.class =================================================================== (Binary files differ) Property changes on: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/HtmlAdaptorServlet.class ___________________________________________________________________ Added: svn:mime-type + application/octet-stream Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/JMXOpsAccessControlFilter.class =================================================================== (Binary files differ) Property changes on: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/JMXOpsAccessControlFilter.class ___________________________________________________________________ Added: svn:mime-type + application/octet-stream Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/JmxConsoleSessionListener.class =================================================================== (Binary files differ) Property changes on: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/JmxConsoleSessionListener.class ___________________________________________________________________ Added: svn:mime-type + application/octet-stream Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/SecurityActions$1.class =================================================================== (Binary files differ) Property changes on: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/SecurityActions$1.class ___________________________________________________________________ Added: svn:mime-type + application/octet-stream Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/SecurityActions.class =================================================================== (Binary files differ) Property changes on: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/html/SecurityActions.class ___________________________________________________________________ Added: svn:mime-type + application/octet-stream Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/model/DomainData.class =================================================================== (Binary files differ) Property changes on: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/model/DomainData.class ___________________________________________________________________ Added: svn:mime-type + application/octet-stream Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/model/MBeanData.class =================================================================== (Binary files differ) Property changes on: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/classes/org/jboss/jmx/adaptor/model/MBeanData.class ___________________________________________________________________ Added: svn:mime-type + application/octet-stream Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/jboss-web.xml =================================================================== --- epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/jboss-web.xml (rev 0) +++ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/jboss-web.xml 2012-08-09 15:36:01 UTC (rev 8813) @@ -0,0 +1,11 @@ +<!DOCTYPE jboss-web PUBLIC + "-//JBoss//DTD Web Application 5.0//EN" + "http://www.jboss.org/j2ee/dtd/jboss-web_5_0.dtd"> + +<jboss-web> + <!-- Uncomment the security-domain to enable security. You will + need to edit the htmladaptor login configuration to setup the + login modules used to authentication users. + --> + <security-domain>java:/jaas/jmx-console</security-domain> +</jboss-web> Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/web.xml =================================================================== --- epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/web.xml (rev 0) +++ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/WEB-INF/web.xml 2012-08-09 15:36:01 UTC (rev 8813) @@ -0,0 +1,125 @@ +<?xml version="1.0"?> +<web-app version="2.5" + xmlns="http://java.sun.com/xml/ns/javaee" + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"> + + <description>The standard web descriptor for the html adaptor</description> + <!-- + <filter> + <filter-name>JmxOpsAccessControlFilter</filter-name> + <filter-class>org.jboss.jmx.adaptor.html.JMXOpsAccessControlFilter</filter-class> + <init-param> + <description>Comma-delimited Roles that define the JMX Operation denoting updation of Attributes</description> + <param-name>updateAttributes</param-name> + <param-value>UpdateAttributeRole</param-value> + </init-param> + <init-param> + <description>Comma-delimited Roles that define the JMX Operation denoting Invocation of Operations</description> + <param-name>invokeOp</param-name> + <param-value>InvokeOpRole</param-value> + </init-param> + </filter> + <filter-mapping> + <filter-name>JmxOpsAccessControlFilter</filter-name> + <servlet-name>HtmlAdaptor</servlet-name> + </filter-mapping> + --> + <listener> + <listener-class>org.jboss.jmx.adaptor.html.JmxConsoleSessionListener</listener-class> + </listener> + <servlet> + <servlet-name>HtmlAdaptor</servlet-name> + <servlet-class>org.jboss.jmx.adaptor.html.HtmlAdaptorServlet</servlet-class> + </servlet> + <servlet> + <servlet-name>ClusteredConsoleServlet</servlet-name> + <servlet-class>org.jboss.jmx.adaptor.html.ClusteredConsoleServlet</servlet-class> + <init-param> + <description>The JGroups protocol stack config</description> + <param-name>jgProps</param-name> + <param-value>UDP(ip_mcast=true;ip_ttl=16;loopback=false;mcast_addr=${jboss.partition.udpGroup:228.1.2.3};mcast_port=${jboss.jmxconsolepartition.mcast_port:46666}): +org.jboss.jmx.adaptor.control.FindView + </param-value> + </init-param> + </servlet> + <servlet> + <servlet-name>DisplayMBeans</servlet-name> + <jsp-file>/displayMBeans.jsp</jsp-file> + </servlet> + <servlet> + <servlet-name>InspectMBean</servlet-name> + <jsp-file>/inspectMBean.jsp</jsp-file> + </servlet> + <servlet> + <servlet-name>DisplayOpResult</servlet-name> + <jsp-file>/displayOpResult.jsp</jsp-file> + </servlet> + <servlet> + <servlet-name>ClusterView</servlet-name> + <jsp-file>/cluster/clusterView.jsp</jsp-file> + </servlet> + <servlet> + <servlet-name>ProfileServiceDebugServlet</servlet-name> + <servlet-class>org.jboss.profileservice.web.DebugServlet</servlet-class> + </servlet> + + <servlet-mapping> + <servlet-name>HtmlAdaptor</servlet-name> + <url-pattern>/HtmlAdaptor</url-pattern> + </servlet-mapping> + <servlet-mapping> + <servlet-name>ClusteredConsoleServlet</servlet-name> + <url-pattern>/cluster/ClusteredConsole</url-pattern> + </servlet-mapping> + <servlet-mapping> + <servlet-name>DisplayMBeans</servlet-name> + <url-pattern>/DisplayMBeans</url-pattern> + </servlet-mapping> + <servlet-mapping> + <servlet-name>InspectMBean</servlet-name> + <url-pattern>/InspectMBean</url-pattern> + </servlet-mapping> + <servlet-mapping> + <servlet-name>DisplayOpResult</servlet-name> + <url-pattern>/DisplayOpResult</url-pattern> + </servlet-mapping> + <servlet-mapping> + <servlet-name>ProfileServiceDebugServlet</servlet-name> + <url-pattern>/ProfileServiceDebugServlet</url-pattern> + </servlet-mapping> + + <!-- Display a generic error page when HTTP Status 500 exceptions + occur. --> + <error-page> + <error-code>500</error-code> + <location>/genericError.jsp</location> + </error-page> + + <!-- A security constraint that restricts access to the HTML JMX console + to users with the role JBossAdmin. Edit the roles to what you want and + uncomment the WEB-INF/jboss-web.xml/security-domain element to enable + secured access to the HTML JMX console. + --> + <security-constraint> + <web-resource-collection> + <web-resource-name>HtmlAdaptor</web-resource-name> + <description>An example security config that only allows users with the + role JBossAdmin to access the HTML JMX console web application + </description> + <url-pattern>/*</url-pattern> + </web-resource-collection> + <auth-constraint> + <role-name>JBossAdmin</role-name> + </auth-constraint> + </security-constraint> + + <login-config> + <auth-method>BASIC</auth-method> + <realm-name>JBoss JMX Console</realm-name> + </login-config> + + <security-role> + <role-name>JBossAdmin</role-name> + </security-role> +</web-app> Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/cluster/bootstrap.html =================================================================== --- epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/cluster/bootstrap.html (rev 0) +++ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/cluster/bootstrap.html 2012-08-09 15:36:01 UTC (rev 8813) @@ -0,0 +1,70 @@ +<html> +<head> + <title>Cluster View Bootstrap</title> + <link rel="stylesheet" href="../style_master.css" type="text/css"> +</head> + + <table width="100%" cellspacing="0" cellpadding="0" border="0"> + <tr> + <td height="105" align="center"><h1>JBoss Cluster Bootstrap</h1></td> + <td height="105" align="center" width="300" nowrap><%= new java.util.Date() %></td> + </tr> + </table> + +<hr> +<body> +The cluster nodes to view need to be specified via some bootstrap mechanism. +This can be done using any of the following methods. + +<h1>Bootstrap Using Naming Discovery</h1> +This determines the cluster entry point by doing an HAJNDI naming service +discovery query. The query may be restricted to a given partition name by +specifying the name in the PartitionName field. +If not specified than the first partition to respond will be choosen. +<form action="ClusteredConsole?action=bootstrap" method="post" target="ClusterIndex"> + <input type="hidden" name="bootstrap" value="discovery"> + <table cellspacing="2" cellpadding="2" border="0" align="center"> + <tr> + <td>PartitionName:</td><td><input type="text" name="partition" size="40"></td> + </tr> + <tr> + <td>DiscoveryName:</td><td><input type="text" name="discoveryGroup" size="40" value="230.0.0.4"></td> + </tr> + <tr> + <td>DiscoveryPort:</td><td><input type="text" name="discoveryPort" size="40" value="1102"></td> + </tr> + <tr> + <td>DiscoveryTimeout:</td><td><input type="text" name="discoveryTimeout" size="40" value="5000"></td> + </tr> + <tr> + <td><input type="reset" name="reset" value="Clear"></td> + <td><input type="submit" name="submit" value="Bootstrap"></td> + </tr> + </table> +</form> + +<h1>Bootstrap Using a Hostname</h1> +This determines the cluster entry point(s) by querying the JNDI service +on the indicated server for the available cluster paritition services. +Any cluster to which the server belongs will serve as an entry point for +determining the members of the cluster. To query the server hosting the +jmx-console application use "locahost" for the hostname. +<form action="ClusteredConsole" method="post" target="ClusterIndex"> + <input type="hidden" name="bootstrap" value="byhost"> + <table cellspacing="2" cellpadding="2" border="0" align="center"> + <tr> + <td>Hostname:</td><td><input type="text" name="hostname" value="localhost" size="40"></td> + </tr> + <tr> + <td>Port:</td><td><input type="text" name="port" value="1099" size="40"></td> + </tr> + <tr> + <td><input type="reset" name="reset" value="Clear"></td> + <td><input type="submit" name="submit" value="Bootstrap"></td> + </tr> + </table> +</form> + +</body> +</html> + Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/cluster/clusterView.jsp =================================================================== --- epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/cluster/clusterView.jsp (rev 0) +++ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/cluster/clusterView.jsp 2012-08-09 15:36:01 UTC (rev 8813) @@ -0,0 +1,85 @@ +<%@page contentType="text/html" import="java.net.*,java.io.*,java.util.*,org.jboss.jmx.adaptor.control.*,org.jboss.jmx.adaptor.model.*" %> +<html> +<head><title>Clustered JBoss Management Console</title> +<link rel="stylesheet" href="../style_master.css" type="text/css"> +</head> + +<body> + +<table width="235" cellspacing="0" cellpadding="0" border="0"> +<tr> +<td align="center" width="235" height="105"><img src="../images/logo.gif" border="0" alt="JBoss"/></td> +</tr> +</table> + +&nbsp; + +<table width="235" cellspacing="0" cellpadding="0" border="0"> +<tr><td><h2>Cluster View Bootstrap</h2></td></tr> +<tr><td><h3><a href="bootstrap.html" target="ClusterNodeView">Reinvoke Bootstrap</a></h3></td></tr> +</table> + +&nbsp; + +<table width="235" cellspacing="0" cellpadding="0" border="0"> +<tr><td><h2>Loaded Clusters</h2></td></tr> +<tr><td><h3><%= request.getAttribute("partition") %></h3></td></tr> +</table> + +<table width="235" cellspacing="0" cellpadding="0" border="0"> + <ul> +<% + String[] partitionHosts = (String[]) request.getAttribute("partitionHosts"); + int port = request.getServerPort(); + + for(int h = 0; h < partitionHosts.length; h ++) + { + String host = partitionHosts[h]; + String hostname = ""; + + try + { + hostname = InetAddress.getByName(host).getHostName(); + } + catch(IOException e) {} + + String hostURL = "http://"+host+":"+port+"/jmx-console/HtmlAdaptor?action=displayMBeans&filter="; +%> + <tr><td><li><a href="<%= hostURL%>" target="ClusterNodeView"><%= hostname %></a></li></td></tr> +<% + } +%> + </ul> + +</table> + +&nbsp; + +<table width="235" cellspacing="0" cellpadding="0" border="0"> +<tr> +<td> +<h2>Object Name Filter</h2> +</td> +</tr> +<tr> +<td> +<h3><a href="../HtmlAdaptor?action=displayMBeans&filter=" target="ClusterNodeView">Remove Object Name Filter</a></h3> +</td> +</tr> +<% + Iterator mbeans = (Iterator) Server.getDomainData(""); + int i=0; + while( mbeans.hasNext() ) + { + DomainData domainData = (DomainData) mbeans.next(); + out.println(" <tr>"); + out.println(" <td>"); + out.println(" <li><a href=\"../HtmlAdaptor?action=displayMBeans&filter="+domainData.getDomainName()+"\" target=\"ClusterNodeView\">"+domainData.getDomainName()+"</a></li>"); + out.println(" </td>"); + out.println(" </tr>"); + } +%> +</table> + +</body> +</html> Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/cluster/index.html =================================================================== --- epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/cluster/index.html (rev 0) +++ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/cluster/index.html 2012-08-09 15:36:01 UTC (rev 8813) @@ -0,0 +1,6 @@ +<!-- frames --> +<frameset cols="255, *"> + <frame name="ClusterIndex" src="ClusteredConsole?action=index" marginwidth="10" marginheight="10" scrolling="auto" frameborder="0"> + <frame name="ClusterNodeView" src="bootstrap.html" marginwidth="10" marginheight="10" scrolling="auto" frameborder="0"> + <noframes>A frames enabled browser is required for the cluster view</noframes> +</frameset> Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/displayMBeans.jsp =================================================================== --- epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/displayMBeans.jsp (rev 0) +++ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/displayMBeans.jsp 2012-08-09 15:36:01 UTC (rev 8813) @@ -0,0 +1,108 @@ +<?xml version="1.0"?> +<%@page contentType="text/html" import="java.net.*,java.util.*,org.jboss.jmx.adaptor.model.*,java.io.*"%> + +<%! + + /** + * Translate HTML tags and single and double quotes. + */ + public String translateMetaCharacters(Object value) + { + if(value == null) + return null; + + String s = String.valueOf(value); + String sanitizedName = s.replace("<", "&lt;"); + sanitizedName = sanitizedName.replace(">", "&gt;"); + sanitizedName = sanitizedName.replace("\"", "&quot;"); + sanitizedName = sanitizedName.replace("\'", "&apos;"); + return sanitizedName; + } +%> + +<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> +<% + String bindAddress = ""; + String serverName = ""; + try + { + bindAddress = System.getProperty("jboss.bind.address", ""); + serverName = System.getProperty("jboss.server.name", ""); + } + catch (SecurityException se) {} + + String hostname = ""; + try + { + hostname = InetAddress.getLocalHost().getHostName(); + } + catch(IOException e) {} + + String hostInfo = hostname; + if (!bindAddress.equals("")) + { + hostInfo = hostInfo + " (" + bindAddress + ")"; + } +%> +<html> +<head> + <title>JBoss JMX Management Console - <%= hostInfo %></title> + <link rel="stylesheet" href="style_master.css" type="text/css"/> + <meta http-equiv="cache-control" content="no-cache"/> +</head> + +<body> + + <table width='100%' cellspacing="0" cellpadding="0" border="0"> + <tr> + <td height="105" align="center"><h1>JMX Agent View</h1><h3><%= hostInfo%> - <%= serverName %></h3></td> + <td height="105" align="center" width="300" nowrap> + <form action="HtmlAdaptor?action=displayMBeans" method="post" name="applyFilter" id="applyFilter"> + ObjectName Filter (e.g.: "jboss:*", "*:service=invoker,*"):<br/> + <input type="text" name="filter" size="20" value="<%= translateMetaCharacters(request.getAttribute("filter"))%>" /> + <input type="submit" name="apply" value="Apply Filter" /> + <input type="button" onClick="javascript:location='HtmlAdaptor?filter='" value="Clear Filter" /> +<% + if (request.getAttribute("filterError") != null) { + out.println("<br/><span class='error'>"+request.getAttribute("filterError")+"</span>"); + } +%> + </form> + <%= new java.util.Date() %> + </td> + </tr> + </table> + + &nbsp; + +<% + out.println("<table width='100%' cellspacing='1' cellpadding='1' border='1'>"); + Iterator mbeans = (Iterator) request.getAttribute("mbeans"); + int i=0; + while( mbeans.hasNext() ) + { + DomainData domainData = (DomainData) mbeans.next(); + out.println(" <tr>"); + out.println(" <th style='text-align: left'>"); + out.println(" <h2><a href=\"javascript:document.applyFilter.filter.value='"+domainData.getDomainName()+":*';document.applyFilter.submit()\">"+domainData.getDomainName()+"</a></h2>"); + out.println(" </th>"); + out.println(" </tr>"); + out.println(" <tr>"); + out.println(" <td bgcolor='#D0D0D0'>"); + out.println(" <ul>"); + MBeanData[] data = domainData.getData(); + for(int d = 0; d < data.length; d ++) + { + String name = data[d].getObjectName().toString(); + String properties = translateMetaCharacters(data[d].getNameProperties()); + out.println(" <li><a href=\"HtmlAdaptor?action=inspectMBean&amp;name="+URLEncoder.encode(name,"UTF-8")+"\">"+URLDecoder.decode(properties,"UTF-8")+"</a></li>"); + } + out.println(" </ul>"); + out.println(" </td>"); + out.println(" </tr>"); + } + out.println("</table>"); +%> + +</body> +</html> Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/displayOpResult.jsp =================================================================== --- epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/displayOpResult.jsp (rev 0) +++ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/displayOpResult.jsp 2012-08-09 15:36:01 UTC (rev 8813) @@ -0,0 +1,95 @@ +<?xml version="1.0"?> +<%@page contentType="text/html" + import="java.net.*, + java.io.*, + java.beans.PropertyEditor, + org.jboss.util.propertyeditor.PropertyEditors" +%> +<% +String hostname = ""; +try +{ + hostname = InetAddress.getLocalHost().getHostName(); +} +catch(IOException e){} +%> + +<!DOCTYPE html + PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" + "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> + +<html> +<head> + <title>Operation Results</title> + <link rel="stylesheet" href="style_master.css" type="text/css" /> + <meta http-equiv="cache-control" content="no-cache" /> +</head> + +<jsp:useBean id='opResultInfo' class='org.jboss.jmx.adaptor.control.OpResultInfo' type='org.jboss.jmx.adaptor.control.OpResultInfo' scope='request'/> +<% + if(opResultInfo.name == null) + { +%> + <jsp:forward page="/" /> + +<% + } +%> +<body leftmargin="10" rightmargin="10" topmargin="10"> + +<table width="100%" cellspacing="0" cellpadding="0" border="0" align="center"> + <tr> + <td height="105" align="center"><h1>JMX MBean Operation View</h1><%= hostname %></td> + <td height="105" align="center" width="300"> + <p> + <input type="button" value="Back to Agent" onClick="javascript:location='HtmlAdaptor?action=displayMBeans'"/> + <input type="button" value="Back to MBean" onClick="javascript:location='HtmlAdaptor?action=inspectMBean&amp;name=<%= request.getParameter("name") %>'"/> + </p> + <p> + <% + out.print("<input type='button' onClick=\"location='HtmlAdaptor?action=invokeOpByName"); + out.print("&amp;" + org.jboss.jmx.adaptor.html.CSRFUtil.CSRF_TOKEN + "=" + org.jboss.jmx.adaptor.html.CSRFUtil.getCSRFToken(request.getSession())); + out.print("&amp;name=" + request.getParameter("name")); + out.print("&amp;methodName=" + opResultInfo.name ); + + for (int i=0; i<opResultInfo.args.length; i++) + { + out.print("&amp;argType=" + opResultInfo.signature[i]); + out.print("&amp;arg" + i + "=" + opResultInfo.args[i]); + } + + out.println("'\" value='Reinvoke MBean Operation'/>"); + %> + </p> + </td> + </tr> +</table> + +<% + if( opResultInfo.result == null ) + { + out.println("Operation completed successfully without a return value!"); + } + else + { + String opResultString = null; + + PropertyEditor propertyEditor = PropertyEditors.findEditor(opResultInfo.result.getClass()); + if(propertyEditor != null) + { + propertyEditor.setValue(opResultInfo.result); + opResultString = propertyEditor.getAsText(); + } + else + { + opResultString = opResultInfo.result.toString(); + } + + boolean hasPreTag = opResultString.startsWith("<pre>"); + if( hasPreTag == false ) out.println("<pre>"); + out.println(opResultString); + if( hasPreTag == false ) out.println("</pre>"); + } +%> +</body> +</html> Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/filterView.jsp =================================================================== --- epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/filterView.jsp (rev 0) +++ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/filterView.jsp 2012-08-09 15:36:01 UTC (rev 8813) @@ -0,0 +1,38 @@ +<%@page contentType="text/html" import="java.util.*,org.jboss.jmx.adaptor.control.*,org.jboss.jmx.adaptor.model.*,java.io.*" %> +<html> +<head> + <title>JBoss Object Index</title> + <link rel="stylesheet" href="style_master.css" type="text/css"> + <meta http-equiv="cache-control" content="no-cache"/> +</head> + +<body leftmargin="10" rightmargin="10" topmargin="10"> + +<table width="235" cellspacing="0" cellpadding="0" border="0"> +<tr> +<td align="center" width="235" height="105"><img src="images/logo.gif" border="0" alt="JBoss"/></td> +</tr> +</table> + +&nbsp; + +<table width="235" cellspacing="0" cellpadding="0" border="0"> +<tr><td><h2>Object Name Filter</h2></td></tr> +<tr><td><h3><a href="HtmlAdaptor?action=displayMBeans&filter=" target="ObjectNodeView">Remove Object Name Filter</a></h3></td></tr> +<% + Iterator mbeans = (Iterator) Server.getDomainData(""); + int i=0; + while( mbeans.hasNext() ) + { + DomainData domainData = (DomainData) mbeans.next(); + out.println(" <tr>"); + out.println(" <td>"); + out.println(" <li><a href=\"HtmlAdaptor?action=displayMBeans&filter="+domainData.getDomainName()+"\" target=\"ObjectNodeView\">"+domainData.getDomainName()+"</a></li>"); + out.println(" </td>"); + out.println(" </tr>"); + } +%> +</table> + +</body> +</html> Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/genericError.jsp =================================================================== --- epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/genericError.jsp (rev 0) +++ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/genericError.jsp 2012-08-09 15:36:01 UTC (rev 8813) @@ -0,0 +1,39 @@ +<%-- A simple error page. --%> + +<%@ page import="org.apache.catalina.util.ServerInfo, + org.apache.catalina.valves.Constants, + org.apache.catalina.util.StringManager" %> +<%@ page isErrorPage="true" %> + +<html> + <head> + <style> + <!--H1 {font-family:Tahoma, Arial, sans-serif; color:white; + background-color:#525D76; font-size:22px;} + H3 {font-family:Tahoma, Arial, sans-serif; color:white; + background-color:#525D76; font-size:14px;} + HR {color:#525D76;} + .errorText {font-family:Tahoma, Arial, sans-serif; font-size:16px; } --> + </style> + <title> + <% + StringManager sm = StringManager.getManager(Constants.Package); + out.println(ServerInfo.getServerInfo() + " - " + + sm.getString("errorReportValve.errorReport")); + %> + </title> + </head> + <body> + <h1> + <% + out.println(sm.getString("errorReportValve.statusHeader", + "" + pageContext.getErrorData().getStatusCode(), "")); + %> + </h1> + <hr size=\"1\" noshade=\"noshade\"> + <span class="errorText">An error has occurred.</span> + <hr size=\"1\" noshade=\"noshade\"> + <h3><%= ServerInfo.getServerInfo() %></h3> + </body> +</html> + Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/images/logo.gif =================================================================== (Binary files differ) Property changes on: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/images/logo.gif ___________________________________________________________________ Added: svn:mime-type + application/octet-stream Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/index.jsp =================================================================== --- epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/index.jsp (rev 0) +++ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/index.jsp 2012-08-09 15:36:01 UTC (rev 8813) @@ -0,0 +1,41 @@ +<?xml version="1.0"?> +<%@page contentType="text/html" + import="java.net.*,java.util.*,org.jboss.jmx.adaptor.model.*,java.io.*" +%> +<!DOCTYPE html + PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" + "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> +<% + String bindAddress = ""; + String serverName = ""; + try + { + bindAddress = System.getProperty("jboss.bind.address", ""); + serverName = System.getProperty("jboss.server.name", ""); + } + catch (SecurityException se) {} + + String hostname = ""; + try + { + hostname = InetAddress.getLocalHost().getHostName(); + } + catch(IOException e) {} + + String hostInfo = hostname; + if (!bindAddress.equals("")) + { + hostInfo = hostInfo + " (" + bindAddress + ")"; + } + %> +<html> +<head> +<title>JBoss JMX Management Console - <%= hostInfo %></title> +</head> +<!-- frames --> +<frameset cols="255,*"> + <frame name="ObjectFilterView" src="filterView.jsp" marginwidth="10" marginheight="10" scrolling="auto" frameborder="0"> + <frame name="ObjectNodeView" src="HtmlAdaptor?action=displayMBeans" marginwidth="10" marginheight="10" scrolling="auto" frameborder="0"> + <noframes>A frames enabled browser is required for the main view</noframes> +</frameset> +</html> Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/inspectMBean.jsp =================================================================== --- epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/inspectMBean.jsp (rev 0) +++ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/inspectMBean.jsp 2012-08-09 15:36:01 UTC (rev 8813) @@ -0,0 +1,401 @@ +<?xml version="1.0"?> +<%@page contentType="text/html" + import="java.net.*,java.io.*,java.util.*,javax.management.*,javax.management.modelmbean.*, + org.jboss.jmx.adaptor.control.Server, + org.jboss.jmx.adaptor.control.AttrResultInfo, + org.jboss.jmx.adaptor.model.*, + org.dom4j.io.HTMLWriter, + org.dom4j.tree.FlyweightCDATA, + java.lang.reflect.Array, + java.io.StringWriter, + java.beans.PropertyEditor, + org.jboss.util.propertyeditor.PropertyEditors" +%> + +<% +String hostname = ""; +try +{ + hostname = InetAddress.getLocalHost().getHostName(); +} +catch(IOException e){} +%> + +<%! + private static final Comparator MBEAN_FEATURE_INFO_COMPARATOR = new Comparator() + { + public int compare(Object value1, Object value2) + { + MBeanFeatureInfo featureInfo1 = (MBeanFeatureInfo) value1; + MBeanFeatureInfo featureInfo2 = (MBeanFeatureInfo) value2; + + String name1 = featureInfo1.getName(); + String name2 = featureInfo2.getName(); + + return name1.compareTo(name2); + } + + public boolean equals(Object other) + { + return this == other; + } + }; + + String sep = System.getProperty("line.separator","\n"); + + public String fixDescription(String desc) + { + if (desc == null || desc.equals("")) + { + return "(no description)"; + } + return desc; + } + + public String fixValue(Object value) + { + if (value == null) + return null; + String s = String.valueOf(value); + StringWriter sw = new StringWriter(); + HTMLWriter hw = new HTMLWriter(sw); + try + { + // hw.write(s); // strips whitespace + hw.write(new FlyweightCDATA(s)); + s = sw.toString(); + } + catch(Exception e) + { + } + return s; + } + + public String fixValueForAttribute(Object value) + { + if (value == null) + return null; + String s = String.valueOf(value); + StringWriter sw = new StringWriter(); + HTMLWriter hw = new HTMLWriter(sw); + try + { + hw.write(s); + s = sw.toString(); + } + catch(Exception e) + { + } + return s; + } + + /** + * Translate HTML tags and single and double quotes. + */ + public String translateMetaCharacters(Object value) + { + if(value == null) + return null; + + String s = String.valueOf(value); + String sanitizedName = s.replace("<", "&lt;"); + sanitizedName = sanitizedName.replace(">", "&gt;"); + sanitizedName = sanitizedName.replace("\"", "&quot;"); + sanitizedName = sanitizedName.replace("\'", "&apos;"); + return sanitizedName; + } + +%> + +<!DOCTYPE html + PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" + "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> + +<html> + +<head> + <title>MBean Inspector</title> + <link rel="stylesheet" href="style_master.css" type="text/css" /> + <meta http-equiv="cache-control" content="no-cache" /> +</head> + +<jsp:useBean id='mbeanData' class='org.jboss.jmx.adaptor.model.MBeanData' scope='request'/> +<% + if(mbeanData.getObjectName() == null) + { +%> +<jsp:forward page="/" /> +<% + } + ObjectName objectName = mbeanData.getObjectName(); + String objectNameString = mbeanData.getName(); + String quotedObjectNameString = URLEncoder.encode(mbeanData.getName(), "UTF-8"); + MBeanInfo mbeanInfo = mbeanData.getMetaData(); + MBeanAttributeInfo[] attributeInfo = mbeanInfo.getAttributes(); + MBeanOperationInfo[] operationInfo = mbeanInfo.getOperations(); + + //FIXME: Seems to create ArrayIndexOutofBoundsException when uncommented + /*Arrays.sort(attributeInfo, MBEAN_FEATURE_INFO_COMPARATOR); + + HashMap operationInfoIndexMap = new HashMap(); + for (int a = 0; a < operationInfo.length; a++) + { + MBeanOperationInfo opInfo = operationInfo[a]; + operationInfoIndexMap.put(opInfo, String.valueOf(a)); + } + + Arrays.sort(operationInfo, MBEAN_FEATURE_INFO_COMPARATOR); + */ +%> + +<body leftmargin="10" rightmargin="10" topmargin="10"> + +<table width="100%" cellspacing="0" cellpadding="0" border="0" align="center"> + <tr> + <td height="105" align="center"><h1>JMX MBean View</h1><%= hostname %></td> + <td height="105" align="center" width="300" nowrap> + <p> + <input type="button" value="Back to Agent" onClick="javascript:location='HtmlAdaptor?action=displayMBeans'"/> + <input type="button" value="Refresh MBean View" onClick="javascript:location='HtmlAdaptor?action=inspectMBean&amp;name=<%= URLEncoder.encode(request.getParameter("name"),"UTF-8") %>'"/> + </p> + <%= new java.util.Date() %> + </td> + </tr> +</table> + +&nbsp; + +<% + Hashtable properties = objectName.getKeyPropertyList(); + int size = properties.keySet().size(); +%> + +<!-- 1 --> + +<table width="100%" cellspacing="1" cellpadding="1" border="1" align="center"> + <tr><th rowspan="<%= size + 1 %>">Name</th><td><b>Domain</b></td><td><%= objectName.getDomain() %></td></tr> +<% + Iterator it = properties.keySet().iterator(); + while( it.hasNext() ) + { + String key=(String)it.next(); + String val=translateMetaCharacters((String)properties.get(key)); + out.println(" <tr><td><b>"+key+"</b></td><td>"+val+"</td></tr>"); + } +%> + <tr><th>Java Class</th><td colspan="2"><jsp:getProperty name='mbeanData' property='className'/></td></tr> + <tr><th>Description</th><td colspan="2"><%= fixDescription(mbeanInfo.getDescription())%></td></tr> +</table> + +<!-- 2 --> +<br/> +<form method="post" action="HtmlAdaptor"> + <input type="hidden" name="action" value="updateAttributes" /> + <input type="hidden" name="name" value="<%= quotedObjectNameString %>" /> + <input type="hidden" name="<%= org.jboss.jmx.adaptor.html.CSRFUtil.CSRF_TOKEN %>" value="<%= org.jboss.jmx.adaptor.html.CSRFUtil.getCSRFToken(request.getSession()) %>" /> + <table width="100%" cellspacing="1" cellpadding="1" border="1" align="center"> + <tr> + <th>Attribute Name</th> + <th>Access</th> + <th>Type</th> + <th>Description</th> + <th>Attribute Value</th> + </tr> +<% + boolean hasWriteableAttribute=false; + for(int a = 0; a < attributeInfo.length; a ++) + { + MBeanAttributeInfo attrInfo = attributeInfo[a]; + String attrName = attrInfo.getName(); + String attrType = attrInfo.getType(); + AttrResultInfo attrResult = Server.getMBeanAttributeResultInfo(objectNameString, attrInfo); + String attrValue = attrResult.getAsText(); + String access = ""; + if( attrInfo.isReadable() ) access += "R"; + if( attrInfo.isWritable() ) + { + access += "W"; + hasWriteableAttribute=true; + } + String attrDescription = fixDescription(attrInfo.getDescription()); + out.println(" <tr>"); + out.println(" <td class='param'>"+attrName+"</td>"); + out.println(" <td align='center'>"+access+"</td>"); + out.println(" <td>"+attrType+"</td>"); + out.println(" <td>"+attrDescription+"</td>"); + out.println(" <td>"); + out.println(" <pre>"); + + if( attrInfo.isWritable() ) + { + String readonly = attrResult.editor == null ? "class='readonly' readonly" : "class='writable'"; + if( attrType.equals("boolean") || attrType.equals("java.lang.Boolean") ) + { + Boolean value = attrValue == null || "".equals( attrValue ) ? null : Boolean.valueOf(attrValue); + String trueChecked = (value == Boolean.TRUE ? "checked" : ""); + String falseChecked = (value == Boolean.FALSE ? "checked" : ""); + String naChecked = value == null ? "checked" : ""; + out.print("<input type='radio' name='"+attrName+"' value='True' "+trueChecked+"/>True"); + out.print("<input type='radio' name='"+attrName+"' value='False' "+falseChecked+"/>False"); + // For wrappers, enable a 'null' selection + if ( attrType.equals( "java.lang.Boolean" ) && PropertyEditors.isNullHandlingEnabled() ) + { + out.print("<input type='radio' name='"+attrName+"' value='' "+naChecked+"/>True"); + } + + } + else if( attrInfo.isReadable() ) + { + attrValue = fixValueForAttribute(attrValue); + if (String.valueOf(attrValue).indexOf(sep) == -1) + { + out.print("<input type='text' size='80' name='"+attrName+"' value='"+translateMetaCharacters(attrValue)+"' "+readonly+"/>"); + } + else + { + out.print("<textarea cols='80' rows='10' type='text' name='"+attrName+"' "+readonly+">"+attrValue+"</textarea>"); + } + } + else + { + out.print("<input type='text' name='"+attrName+"' "+readonly+"/>"); + } + } + else + { + if( attrType.equals("[Ljavax.management.ObjectName;") ) + { + ObjectName[] names = (ObjectName[]) Server.getMBeanAttributeObject(objectNameString, attrName); + if( names != null ) + { + for( int i = 0; i < names.length; i++ ) + { + out.print("<p align='center'><a href='HtmlAdaptor?action=inspectMBean&name="+URLEncoder.encode(names[i]+"","UTF-8")+">"+names[i]+"</a></p>"); + } + } + } + else if( attrType.startsWith("[")) + { + Object arrayObject = Server.getMBeanAttributeObject(objectNameString, attrName); + if (arrayObject != null) + { + for (int i = 0; i < Array.getLength(arrayObject); ++i) + { + out.println(fixValue(Array.get(arrayObject,i))); + } + } + } + else + { + out.print(fixValue(attrValue)); + } + } + + if( attrType.equals("javax.management.ObjectName") ) + { + if( attrValue != null ) + { + out.print("<p align='center'><a href='HtmlAdaptor?action=inspectMBean&name="+URLEncoder.encode(attrValue,"UTF-8")+"'>View MBean</a></p>"); + } + } + out.println(" </pre>"); + out.println(" </td>"); + out.println(" </tr>"); + } + + if(hasWriteableAttribute) + { + out.println(" <tr><td colspan='4'></td><td class='arg'><p align='center'><input type='submit' value='Apply Changes'/></p></td></tr>"); + } +%> + </table> +</form> + +<!-- 3 --> +<br/> +<% +if (operationInfo.length > 0) +{ + out.println(" <table width='100%' cellspacing='1' cellpadding='1' border='1' align='center'>"); + out.println(" <tr>"); + out.println(" <th>Operation</th>"); + out.println(" <th>Return Type</th>"); + out.println(" <th>Description</th>"); + out.println(" <th>Parameters</th>"); + out.println(" </tr>"); + + for(int a = 0; a < operationInfo.length; a ++) + { + MBeanOperationInfo opInfo = operationInfo[a]; + boolean accept = true; + if (opInfo instanceof ModelMBeanOperationInfo) + { + Descriptor desc = ((ModelMBeanOperationInfo)opInfo).getDescriptor(); + String role = (String)desc.getFieldValue("role"); + if ("getter".equals(role) || "setter".equals(role)) + { + accept = false; + } + } + if (accept) + { + MBeanParameterInfo[] sig = opInfo.getSignature(); + out.println(" <tr>"); + out.println(" <td class='param'>"+opInfo.getName()+"</td>"); + out.println(" <td>"+opInfo.getReturnType()+"</td>"); + out.println(" <td>"+fixDescription(opInfo.getDescription())+"</td>"); + out.println(" <td align='center'>"); + out.println(" <form method='post' action='HtmlAdaptor'>"); + out.println(" <input type='hidden' name='action' value='invokeOp'/>"); + out.println(" <input type='hidden' name='name' value='"+quotedObjectNameString+"'/>"); + out.println(" <input type='hidden' name='methodIndex' value='"+a+"'/>"); + out.println(" <input type='hidden' name='" + org.jboss.jmx.adaptor.html.CSRFUtil.CSRF_TOKEN + "' value='"+org.jboss.jmx.adaptor.html.CSRFUtil.getCSRFToken(request.getSession())+"'/>"); + + if( sig.length > 0 ) + { + out.println(" <table width='100%' cellspacing='1' cellpadding='1' border='0'>"); + for(int p = 0; p < sig.length; p ++) + { + MBeanParameterInfo paramInfo = sig[p]; + String pname = paramInfo.getName(); + String ptype = paramInfo.getType(); + if( pname == null || pname.length() == 0 || pname.equals(ptype) ) + { + pname = "arg"+p; + } + String pdesc = fixDescription(paramInfo.getDescription()); + out.println(" <tr>"); + out.println(" <td class='arg'>"+pname+"</td>"); + out.println(" <td class='arg'>"+ptype+"</td>"); + out.println(" <td class='arg'>"+pdesc+"</td>"); + out.print(" <td class='arg' width='50'>"); + if(ptype.equals("boolean")||ptype.equals("java.lang.Boolean")) + { + out.print("<input type='radio' name='arg"+p+"' value='True' checked/>True"); + out.print("<input type='radio' name='arg"+p+"' value='False'/>False"); + } + else + { + out.print("<input type='text' class='writable' name='arg"+p+"'/>"); + } + out.println("</td>"); + out.println(" </tr>"); + } + out.println(" </table>"); + } + else + { + out.println(" [no parameters]<BR>"); + } + out.println(" <input type='submit' value='Invoke'/>"); + out.println(" </form>"); + out.println(" </td>"); + out.println(" </tr>"); + } + } + out.println(" </table>"); +} +%> + +</body> +</html> Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/jboss.css =================================================================== --- epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/jboss.css (rev 0) +++ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/jboss.css 2012-08-09 15:36:01 UTC (rev 8813) @@ -0,0 +1,146 @@ +body { + margin: 13px 0px 10px 0px; + background-color: #ffffff; + font-size: 12px; + font-family: verdana, arial, "sans-serif"; + color: #606060; + } +td { + font-size: 12px; + font-family: verdana, arial, "sans-serif"; + color: #606060; + } +input { + font-size: 13px; + font-family: verdana, arial, "sans-serif"; + color: #FF5906; + background-color: #f0f0f0; + border: 1px solid #cccccc; + } +img { + border: 0px; + } +p { + margin: 10px 30px 10px 20px + } +h3 { + color: #FF5906; + font-size: 13px; + font-family: verdana, arial, "sans-serif"; + margin: 10px 30px 10px 20px; + } +h4 { + color: #999999; + font-size: 13px; + font-family: verdana, arial, "sans-serif"; + margin: 10px 30px 10px 20px; + } +table { + border: 0px #999999; + } +a { + text-decoration : none; + } +a:link { + color: #FF5906; + } +a:visited { + color: #FF5906; + } +a:active { + background-color:transparent; + } +a:hover { + text-decoration : underline; + } +a.soft, a.soft:visited, a.soft:link { + TEXT-DECORATION: none; + COLOR: #000000; + } +a.soft:hover { + TEXT-DECORATION: underline; + BACKGROUND-COLOR: transparent; + COLOR: #000000 + } +#header { + background-color: #FF7A22; + background-image: url("header_bg.jpg"); + background-repeat: no-repeat; + background-position: 226px 0px; + width: 100%; + height: 80px; + } +#header #banner { + float: right; + margin: 8px 5px 0px 0px; + } +#logo { + position: absolute; + top: 4px; + left: 4px; + z-index: 200; +} +#services { + position: absolute; + top: 16px; + right: 10px; + z-index: 200; +} +#filter { + position: absolute; + top: 65px; + right: 30px; + z-index: 220; +} +#filter_label { + position: absolute; + top: 61px; + right: 215px; + z-index: 220; +} +#apply { + position: absolute; + top: -5px; + right: -30px; + z-index: 220; + border: none; +} +#navigation_bar { + background-color: #f0f0f0; + border-bottom: 1px dotted #999999; + height: 20px; + } +#separator_bar { + background-color: #ffffff; + border-bottom: 1px dotted #999999; + height: 20px; + } +#footer { + clear: both; + border-top: 1px dotted #999999; + } +#footer_bar { + height: 20px; + width: 100%; + background-color: #FF7A22; + } +.attribute_link a { + color: #606060; + text-decoration: none; + } +.attribute_link a:hover { + color: #606060; + border-bottom: 1px dotted #999999; + } +.hide { + display: none; + } +.spacer { + clear: both; + } +.spacer hr { + display: none; + } +.center { + text-align: center; + } Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/style_master.css =================================================================== --- epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/style_master.css (rev 0) +++ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-2908/jmx-console.war/style_master.css 2012-08-09 15:36:01 UTC (rev 8813) @@ -0,0 +1,92 @@ +A{ +text-decoration:underline +} +A:LINK{ +color:#000099 +} +A:VISITED{ +color:#880088 +} +A:HOVER{ +color:#FF6600 +} +A:ACTIVE{ +color:#FF0000 +} +BODY{ +background-color:#FFFFFF; +font-family:Tahoma,Verdana,sans-serif; +font-size:8pt +} +H1{ +color:#000099; +font-size:16pt; +font-weight:bold +} +H2{ +margin:2px; +padding:2px; +font-size:12pt; +font-weight:bold +} +H3{ +margin:2px; +padding:2px; +font-size:10pt; +font-weight:normal +} +IMG{ +border:0 +} +INPUT{ +font-family:Tahoma,Verdana,sans-serif; +font-size:8pt +} +INPUT.readonly{ +border:1px solid #999999; +background-color:#C0C0C0 +} +INPUT.writable{ +border:1px solid #999999; +background-color:#FFFFFF +} +TD{ +background-color:#E0E0E0; +font-family:Tahoma,Verdana,sans-serif; +font-size:8pt +} +TD.arg{ +background-color:#BBBBBB; +font-family:Tahoma,Verdana,sans-serif; +font-size:8pt +} +TD.param{ +color:#880000; +font-size:8pt; +font-weight:bold; +font-family:Tahoma,Verdana,sans-serif +} +TH{ +cellspacing:2px; +padding-bottom:1px; +padding-left:4px; +padding-right:4px; +padding-top:1px; +background-color:#999999; +color:#000000; +font-family:Tahoma,Verdana,sans-serif; +font-size:8pt; +font-weight:bold +} +pre { + white-space: pre-wrap; /* css-3 */ + white-space: -moz-pre-wrap; /* Mozilla, since 1999 */ + white-space: -pre-wrap; /* Opera 4-6 */ + white-space: -o-pre-wrap; /* Opera 7 */ + word-wrap: break-word; /* Internet Explorer 5.5+ */ +} +* .error { + font-size: 8pt; + color: red; +} +