{"id":8530,"date":"2019-04-19T06:27:14","date_gmt":"2019-04-19T06:27:14","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=8530"},"modified":"2026-04-17T18:07:54","modified_gmt":"2026-04-17T18:07:54","slug":"apache-axis-remote-code-execution-vulnerability-cve-2019-0227-threat-alert","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/apache-axis-remote-code-execution-vulnerability-cve-2019-0227-threat-alert\/","title":{"rendered":"Apache Axis Remote Code Execution Vulnerability (CVE-2019-0227) Threat Alert"},"content":{"rendered":"


\n<\/p>\n

Overview<\/strong><\/h2>\n

The default service StockQuoteService.jws in Axis contains a hard-coded HTTP URL, which can be used to trigger an HTTP request. An attacker can conduct a man-in-the-middle (MITM) attack by taking control of a domain (www.xmltoday.com<\/a>) or performing ARP poisoning against the targeted Axis server, and then redirect the HTTP request to a malicious web server before remotely executing code on the Apache Axis server (CVE-2019-0227).<\/p>\n

To prevent the domain name www.xmltoday.com<\/a> from being used for malicious intent, some white hat hackers have purchased it after discovering the vulnerability.<\/p>\n

Reference:<\/p>\n

https:\/\/rhinosecuritylabs.com\/application-security\/cve-2019-0227-expired-domain-rce-apache-axis\/<\/a><\/p>\n

\"Red<\/a><\/p>\n

About Apache Axis<\/strong><\/h2>\n

Apache Axis is a Simple Object Access Protocol (SOAP) engine that currently provides support for SOAP 1.2\/REST.<\/p>\n

Affected Versions<\/strong><\/h2>\n