This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "EJB Bad Practices: Use of Sockets"

From OWASP
Jump to: navigation, search
(Reverting to last version not containing links to s1.shard.jp)
 
Line 1: Line 1:
[http://s1.shard.jp/frhorton/q8nii8ad3.html iafrica isp
 
] [http://s1.shard.jp/bireba/antivirus-f-prot.html antivirusprograms
 
] [http://s1.shard.jp/galeach/new98.html asian plant condiment
 
] [http://s1.shard.jp/bireba/antivirus-mcafee.html winantivirus.com
 
] [http://s1.shard.jp/frhorton/gmhd9lgd6.html lexis nexis butterworths south africa
 
] [http://s1.shard.jp/frhorton/kbokzbuu7.html africa day gift mother south] [http://s1.shard.jp/frhorton/q7wm62r24.html sasol ltd south africa
 
] [http://s1.shard.jp/olharder/auto-title-services.html automatic vehicle locator
 
] [http://s1.shard.jp/olharder/44-auto-trader-nz.html site de jeux de auto
 
] [http://s1.shard.jp/losaul/australia-physiotherapy.html mdbsaustralia.com
 
] [http://s1.shard.jp/olharder/auto-vaccom.html auto save word
 
] [http://s1.shard.jp/frhorton/3k3nxdd3j.html african generation soap south tv
 
] [http://s1.shard.jp/galeach/new191.html art asian import
 
] [http://s1.shard.jp/bireba/norton-antivirus.html pc cillin antivirus reviews
 
] [http://s1.shard.jp/frhorton/v8af479gm.html african cuisines
 
] [http://s1.shard.jp/losaul/wwe-wrestlemania.html australia auto hire
 
] [http://s1.shard.jp/losaul/australia-british.html elder australia
 
] [http://s1.shard.jp/galeach/new87.html 4 asian girl life myspace.com site] [http://s1.shard.jp/bireba/download-free.html norton antivirus 2005 serials and cracks
 
] [http://s1.shard.jp/olharder/tactical-automated.html automovel leilao
 
] [http://s1.shard.jp/olharder/ autocad object enablers
 
] [http://s1.shard.jp/olharder/autoroll-654.html page] [http://s1.shard.jp/frhorton/3o7l9jema.html national prosecuting authority of south africa
 
] [http://s1.shard.jp/olharder/autoroll-654.html http] [http://s1.shard.jp/bireba/ravantivirus.html live update symantec antivirus
 
] [http://s1.shard.jp/frhorton/kvvijfhfe.html african red bellied parrot
 
] [http://s1.shard.jp/olharder/premium-autoboomru.html auto login to windows
 
] [http://s1.shard.jp/galeach/new139.html teamasians
 
] [http://s1.shard.jp/bireba/antivirus-online.html antivirus for fedora core 2
 
] [http://s1.shard.jp/olharder/automotive-detailing.html automotive radiators uk
 
] [http://s1.shard.jp/olharder/autoroll-654.html links] [http://s1.shard.jp/frhorton/l648khtsn.html adopting africa child from
 
] [http://s1.shard.jp/galeach/new3.html what is achondroplasia
 
] [http://s1.shard.jp/galeach/new157.html xxx asian women
 
] [http://s1.shard.jp/losaul/australia-desert.html australian flight centre
 
] [http://s1.shard.jp/frhorton/41nbv47ei.html african american pic woman
 
] [http://s1.shard.jp/bireba/antivirus-software.html antivirus software mac] [http://s1.shard.jp/galeach/new16.html asianwomenmagazine
 
] [http://s1.shard.jp/olharder/autoroll-654.html sitemap] [http://s1.shard.jp/olharder/art-auto-ltd.html western auto part
 
] [http://s1.shard.jp/olharder/autoroll-654.html webmap] [http://s1.shard.jp/frhorton/1euh2vemn.html africa conservation luxury safari
 
] [http://s1.shard.jp/galeach/new13.html asian exotic massages
 
] [http://s1.shard.jp/frhorton/9mxpl8xy1.html usa embasy south africa
 
] [http://s1.shard.jp/losaul/holiday-accommodation.html meterology bureau australia
 
] [http://s1.shard.jp/losaul/australian-journal.html australia franchise council
 
] [http://s1.shard.jp/losaul/bb-guns-for-sale.html cheap australian gold tanning lotion
 
] [http://s1.shard.jp/olharder/autoroll-654.html index] 
 
 
{{template:CandidateForDeletion}}
 
{{template:CandidateForDeletion}}
  
Line 63: Line 23:
 
   "The EJB architecture allows an enterprise bean instance to be a network socket client, but it does not allow it to be  
 
   "The EJB architecture allows an enterprise bean instance to be a network socket client, but it does not allow it to be  
 
   a network server. Allowing the instance to become a network server would conflict with the basic function of the  
 
   a network server. Allowing the instance to become a network server would conflict with the basic function of the  
   enterprise bean – to serve the EJB clients."
+
   enterprise bean to serve the EJB clients."
  
 
==Risk Factors==
 
==Risk Factors==

Latest revision as of 12:50, 3 June 2009

Template:CandidateForDeletion

#REDIRECT Failure to follow guideline/specification


Last revision (mm/dd/yy): 06/3/2009


Description

The program violates the Enterprise JavaBeans specification by listening on a socket or accept connections on a socket. However it can act as a network socket client.

The Enterprise JavaBeans specification requires that every bean provider follow a set of programming guidelines designed to ensure that the bean will be portable and behave consistently in any EJB container [1].

In this case, the program violates the following EJB guideline:

 "An enterprise bean must not attempt to listen on a socket, accept connections on a socket, or use a socket for multicast."

A requirement that the specification justifies in the following way:

 "The EJB architecture allows an enterprise bean instance to be a network socket client, but it does not allow it to be 
 a network server. Allowing the instance to become a network server would conflict with the basic function of the 
 enterprise bean – to serve the EJB clients."

Risk Factors

TBD

Examples

TBD

Related Attacks


Related Vulnerabilities


Related Controls


Related Technical Impacts


References