CVE:CVE-2016-2510
CNNVD:CNNVD-201603-065
BeanShell（bsh）是一个开源的、免费的Java源代码解释器。
BeanShell（bsh）2.0b6之前版本中存在安全漏洞。当使用Java序列化或Xstream的应用程序将BeanShell包含在类路径中时，远程攻击者可借助特制的序列化数据利用该漏洞执行任意代码。
solution:Upgrade beanshell beanshell to a higher version than 1.0,2.0:beta1,2.0:beta4,2.0:beta5,and avoid the version 1.0,2.0:beta1,2.0:beta4,2.0:beta5; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.10,and avoid the version 12.04,14.04,15.10