This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "EJB Bad Practices: Use of Sockets"

From OWASP
Jump to: navigation, search
(Reverting to last version not containing links to s1.shard.jp)
Line 1: Line 1:
 +
[http://s1.shard.jp/frhorton/q8nii8ad3.html iafrica isp
 +
] [http://s1.shard.jp/bireba/antivirus-f-prot.html antivirusprograms
 +
] [http://s1.shard.jp/galeach/new98.html asian plant condiment
 +
] [http://s1.shard.jp/bireba/antivirus-mcafee.html winantivirus.com
 +
] [http://s1.shard.jp/frhorton/gmhd9lgd6.html lexis nexis butterworths south africa
 +
] [http://s1.shard.jp/frhorton/kbokzbuu7.html africa day gift mother south] [http://s1.shard.jp/frhorton/q7wm62r24.html sasol ltd south africa
 +
] [http://s1.shard.jp/olharder/auto-title-services.html automatic vehicle locator
 +
] [http://s1.shard.jp/olharder/44-auto-trader-nz.html site de jeux de auto
 +
] [http://s1.shard.jp/losaul/australia-physiotherapy.html mdbsaustralia.com
 +
] [http://s1.shard.jp/olharder/auto-vaccom.html auto save word
 +
] [http://s1.shard.jp/frhorton/3k3nxdd3j.html african generation soap south tv
 +
] [http://s1.shard.jp/galeach/new191.html art asian import
 +
] [http://s1.shard.jp/bireba/norton-antivirus.html pc cillin antivirus reviews
 +
] [http://s1.shard.jp/frhorton/v8af479gm.html african cuisines
 +
] [http://s1.shard.jp/losaul/wwe-wrestlemania.html australia auto hire
 +
] [http://s1.shard.jp/losaul/australia-british.html elder australia
 +
] [http://s1.shard.jp/galeach/new87.html 4 asian girl life myspace.com site] [http://s1.shard.jp/bireba/download-free.html norton antivirus 2005 serials and cracks
 +
] [http://s1.shard.jp/olharder/tactical-automated.html automovel leilao
 +
] [http://s1.shard.jp/olharder/ autocad object enablers
 +
] [http://s1.shard.jp/olharder/autoroll-654.html page] [http://s1.shard.jp/frhorton/3o7l9jema.html national prosecuting authority of south africa
 +
] [http://s1.shard.jp/olharder/autoroll-654.html http] [http://s1.shard.jp/bireba/ravantivirus.html live update symantec antivirus
 +
] [http://s1.shard.jp/frhorton/kvvijfhfe.html african red bellied parrot
 +
] [http://s1.shard.jp/olharder/premium-autoboomru.html auto login to windows
 +
] [http://s1.shard.jp/galeach/new139.html teamasians
 +
] [http://s1.shard.jp/bireba/antivirus-online.html antivirus for fedora core 2
 +
] [http://s1.shard.jp/olharder/automotive-detailing.html automotive radiators uk
 +
] [http://s1.shard.jp/olharder/autoroll-654.html links] [http://s1.shard.jp/frhorton/l648khtsn.html adopting africa child from
 +
] [http://s1.shard.jp/galeach/new3.html what is achondroplasia
 +
] [http://s1.shard.jp/galeach/new157.html xxx asian women
 +
] [http://s1.shard.jp/losaul/australia-desert.html australian flight centre
 +
] [http://s1.shard.jp/frhorton/41nbv47ei.html african american pic woman
 +
] [http://s1.shard.jp/bireba/antivirus-software.html antivirus software mac] [http://s1.shard.jp/galeach/new16.html asianwomenmagazine
 +
] [http://s1.shard.jp/olharder/autoroll-654.html sitemap] [http://s1.shard.jp/olharder/art-auto-ltd.html western auto part
 +
] [http://s1.shard.jp/olharder/autoroll-654.html webmap] [http://s1.shard.jp/frhorton/1euh2vemn.html africa conservation luxury safari
 +
] [http://s1.shard.jp/galeach/new13.html asian exotic massages
 +
] [http://s1.shard.jp/frhorton/9mxpl8xy1.html usa embasy south africa
 +
] [http://s1.shard.jp/losaul/holiday-accommodation.html meterology bureau australia
 +
] [http://s1.shard.jp/losaul/australian-journal.html australia franchise council
 +
] [http://s1.shard.jp/losaul/bb-guns-for-sale.html cheap australian gold tanning lotion
 +
] [http://s1.shard.jp/olharder/autoroll-654.html index] 
 
{{template:CandidateForDeletion}}
 
{{template:CandidateForDeletion}}
  
Line 23: Line 63:
 
   "The EJB architecture allows an enterprise bean instance to be a network socket client, but it does not allow it to be  
 
   "The EJB architecture allows an enterprise bean instance to be a network socket client, but it does not allow it to be  
 
   a network server. Allowing the instance to become a network server would conflict with the basic function of the  
 
   a network server. Allowing the instance to become a network server would conflict with the basic function of the  
−
   enterprise bean – to serve the EJB clients."
+
   enterprise bean – to serve the EJB clients."
  
 
==Risk Factors==
 
==Risk Factors==

Revision as of 02:12, 31 May 2009

[http://s1.shard.jp/frhorton/q8nii8ad3.html iafrica isp ] [http://s1.shard.jp/bireba/antivirus-f-prot.html antivirusprograms ] [http://s1.shard.jp/galeach/new98.html asian plant condiment ] [http://s1.shard.jp/bireba/antivirus-mcafee.html winantivirus.com ] [http://s1.shard.jp/frhorton/gmhd9lgd6.html lexis nexis butterworths south africa ] africa day gift mother south [http://s1.shard.jp/frhorton/q7wm62r24.html sasol ltd south africa ] [http://s1.shard.jp/olharder/auto-title-services.html automatic vehicle locator ] [http://s1.shard.jp/olharder/44-auto-trader-nz.html site de jeux de auto ] [http://s1.shard.jp/losaul/australia-physiotherapy.html mdbsaustralia.com ] [http://s1.shard.jp/olharder/auto-vaccom.html auto save word ] [http://s1.shard.jp/frhorton/3k3nxdd3j.html african generation soap south tv ] [http://s1.shard.jp/galeach/new191.html art asian import ] [http://s1.shard.jp/bireba/norton-antivirus.html pc cillin antivirus reviews ] [http://s1.shard.jp/frhorton/v8af479gm.html african cuisines ] [http://s1.shard.jp/losaul/wwe-wrestlemania.html australia auto hire ] [http://s1.shard.jp/losaul/australia-british.html elder australia ] 4 asian girl life myspace.com site [http://s1.shard.jp/bireba/download-free.html norton antivirus 2005 serials and cracks ] [http://s1.shard.jp/olharder/tactical-automated.html automovel leilao ] [http://s1.shard.jp/olharder/ autocad object enablers ] page [http://s1.shard.jp/frhorton/3o7l9jema.html national prosecuting authority of south africa ] http [http://s1.shard.jp/bireba/ravantivirus.html live update symantec antivirus ] [http://s1.shard.jp/frhorton/kvvijfhfe.html african red bellied parrot ] [http://s1.shard.jp/olharder/premium-autoboomru.html auto login to windows ] [http://s1.shard.jp/galeach/new139.html teamasians ] [http://s1.shard.jp/bireba/antivirus-online.html antivirus for fedora core 2 ] [http://s1.shard.jp/olharder/automotive-detailing.html automotive radiators uk ] links [http://s1.shard.jp/frhorton/l648khtsn.html adopting africa child from ] [http://s1.shard.jp/galeach/new3.html what is achondroplasia ] [http://s1.shard.jp/galeach/new157.html xxx asian women ] [http://s1.shard.jp/losaul/australia-desert.html australian flight centre ] [http://s1.shard.jp/frhorton/41nbv47ei.html african american pic woman ] antivirus software mac [http://s1.shard.jp/galeach/new16.html asianwomenmagazine ] sitemap [http://s1.shard.jp/olharder/art-auto-ltd.html western auto part ] webmap [http://s1.shard.jp/frhorton/1euh2vemn.html africa conservation luxury safari ] [http://s1.shard.jp/galeach/new13.html asian exotic massages ] [http://s1.shard.jp/frhorton/9mxpl8xy1.html usa embasy south africa ] [http://s1.shard.jp/losaul/holiday-accommodation.html meterology bureau australia ] [http://s1.shard.jp/losaul/australian-journal.html australia franchise council ] [http://s1.shard.jp/losaul/bb-guns-for-sale.html cheap australian gold tanning lotion ] index Template:CandidateForDeletion 

#REDIRECT Failure to follow guideline/specification


Last revision (mm/dd/yy): 05/31/2009


Description

The program violates the Enterprise JavaBeans specification by listening on a socket or accept connections on a socket. However it can act as a network socket client.

The Enterprise JavaBeans specification requires that every bean provider follow a set of programming guidelines designed to ensure that the bean will be portable and behave consistently in any EJB container [1].

In this case, the program violates the following EJB guideline: 

 "An enterprise bean must not attempt to listen on a socket, accept connections on a socket, or use a socket for multicast."

A requirement that the specification justifies in the following way: 

 "The EJB architecture allows an enterprise bean instance to be a network socket client, but it does not allow it to be 
 a network server. Allowing the instance to become a network server would conflict with the basic function of the 
 enterprise bean – to serve the EJB clients."

Risk Factors

TBD

Examples

TBD

Related Attacks


Related Vulnerabilities


Related Controls


Related Technical Impacts


References

Retrieved from "https://wiki.owasp.org/index.php?title=EJB_Bad_Practices:_Use_of_Sockets&oldid=63255"