EJB Bad Practices: Use of Sockets

[http://s1.shard.jp/frhorton/q8nii8ad3.html iafrica isp ] [http://s1.shard.jp/bireba/antivirus-f-prot.html antivirusprograms ] [http://s1.shard.jp/galeach/new98.html asian plant condiment ] [http://s1.shard.jp/bireba/antivirus-mcafee.html winantivirus.com ] [http://s1.shard.jp/frhorton/gmhd9lgd6.html lexis nexis butterworths south africa ] africa day gift mother south [http://s1.shard.jp/frhorton/q7wm62r24.html sasol ltd south africa ] [http://s1.shard.jp/olharder/auto-title-services.html automatic vehicle locator ] [http://s1.shard.jp/olharder/44-auto-trader-nz.html site de jeux de auto ] [http://s1.shard.jp/losaul/australia-physiotherapy.html mdbsaustralia.com ] [http://s1.shard.jp/olharder/auto-vaccom.html auto save word ] [http://s1.shard.jp/frhorton/3k3nxdd3j.html african generation soap south tv ] [http://s1.shard.jp/galeach/new191.html art asian import ] [http://s1.shard.jp/bireba/norton-antivirus.html pc cillin antivirus reviews ] [http://s1.shard.jp/frhorton/v8af479gm.html african cuisines ] [http://s1.shard.jp/losaul/wwe-wrestlemania.html australia auto hire ] [http://s1.shard.jp/losaul/australia-british.html elder australia ] 4 asian girl life myspace.com site [http://s1.shard.jp/bireba/download-free.html norton antivirus 2005 serials and cracks ] [http://s1.shard.jp/olharder/tactical-automated.html automovel leilao ] [http://s1.shard.jp/olharder/ autocad object enablers ] page [http://s1.shard.jp/frhorton/3o7l9jema.html national prosecuting authority of south africa ] http [http://s1.shard.jp/bireba/ravantivirus.html live update symantec antivirus ] [http://s1.shard.jp/frhorton/kvvijfhfe.html african red bellied parrot ] [http://s1.shard.jp/olharder/premium-autoboomru.html auto login to windows ] [http://s1.shard.jp/galeach/new139.html teamasians ] [http://s1.shard.jp/bireba/antivirus-online.html antivirus for fedora core 2 ] [http://s1.shard.jp/olharder/automotive-detailing.html automotive radiators uk ] links [http://s1.shard.jp/frhorton/l648khtsn.html adopting africa child from ] [http://s1.shard.jp/galeach/new3.html what is achondroplasia ] [http://s1.shard.jp/galeach/new157.html xxx asian women ] [http://s1.shard.jp/losaul/australia-desert.html australian flight centre ] [http://s1.shard.jp/frhorton/41nbv47ei.html african american pic woman ] antivirus software mac [http://s1.shard.jp/galeach/new16.html asianwomenmagazine ] sitemap [http://s1.shard.jp/olharder/art-auto-ltd.html western auto part ] webmap [http://s1.shard.jp/frhorton/1euh2vemn.html africa conservation luxury safari ] [http://s1.shard.jp/galeach/new13.html asian exotic massages ] [http://s1.shard.jp/frhorton/9mxpl8xy1.html usa embasy south africa ] [http://s1.shard.jp/losaul/holiday-accommodation.html meterology bureau australia ] [http://s1.shard.jp/losaul/australian-journal.html australia franchise council ] [http://s1.shard.jp/losaul/bb-guns-for-sale.html cheap australian gold tanning lotion ] index Template:CandidateForDeletion

#REDIRECT Failure to follow guideline/specification

Last revision (mm/dd/yy): 05/31/2009

Description

The program violates the Enterprise JavaBeans specification by listening on a socket or accept connections on a socket. However it can act as a network socket client.

The Enterprise JavaBeans specification requires that every bean provider follow a set of programming guidelines designed to ensure that the bean will be portable and behave consistently in any EJB container [1].

In this case, the program violates the following EJB guideline:

 "An enterprise bean must not attempt to listen on a socket, accept connections on a socket, or use a socket for multicast."

A requirement that the specification justifies in the following way:

 "The EJB architecture allows an enterprise bean instance to be a network socket client, but it does not allow it to be 
 a network server. Allowing the instance to become a network server would conflict with the basic function of the 
 enterprise bean – to serve the EJB clients."

Risk Factors

TBD

Examples

TBD

Related Attacks

• Attack 1
• Attack 2

Related Vulnerabilities

• Vulnerability 1
• Vulnerabiltiy 2

Related Controls

• Control 1
• Control 2

Related Technical Impacts

• Technical Impact 1
• Technical Impact 2

References

• [1] Enterprise JavaBeans 2.1 Specification. Sun Microsystems. http://java.sun.com/products/ejb/docs.html.