Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Sun Java Web Start Arbitrary File Overwrite Privilege Escalation Vulnerability

Bugtraq ID: 24695
Class: Access Validation Error
CVE:
Remote: Yes
Local: No
Published: Jun 28 2007 12:00AM
Updated: Dec 18 2007 08:05PM
Credit: John Heasman of NGSSoftware Limited reported this issue.
Vulnerable: Sun JRE (Solaris Production Release) 1.3.1
Sun JRE (Solaris Production Release) 1.3 _04
Sun JRE (Solaris Production Release) 1.3 _03
Sun JRE (Solaris Production Release) 1.3 _01
Sun JRE (Linux Production Release) 1.3.1 _19
Sun JRE (Linux Production Release) 1.3.1 _18
Sun JRE (Linux Production Release) 1.3.1 _17
Sun JRE (Linux Production Release) 1.3.1 _16
Sun JRE (Linux Production Release) 1.3.1 _15
Sun JRE (Linux Production Release) 1.3.1 _04
Sun JRE (Linux Production Release) 1.3.1 _01a
Sun JRE (Linux Production Release) 1.5.0_11
Sun JRE (Linux Production Release) 1.3.1_20
Sun JDK 5.0 Update 9
Sun JDK 5.0 Update 8
Sun JDK 5.0 Update 7
Sun JDK 5.0 Update 6
Sun JDK 5.0 Update 5
Sun JDK 5.0 Update 4
Sun JDK 5.0 Update 3
Sun JDK 5.0 Update 2
Sun JDK 5.0 Update 11
Sun JDK 5.0 Update 10
Sun JDK 5.0 Update 1
Sun Java Web Start 0
+ Sun Java 2 Standard Edition SDK 1.3
Sun Java 2 Standard Edition SDK 1.4.2 _13
Sun Java 2 Standard Edition SDK 1.4.2 _12
Sun Java 2 Standard Edition SDK 1.4.2 _12
Sun Java 2 Standard Edition SDK 1.4.2 _11
Sun Java 2 Standard Edition SDK 1.4.2 _10
Sun Java 2 Standard Edition SDK 1.4.2 _09
Sun Java 2 Standard Edition SDK 1.4.2 _08
Sun Java 2 Standard Edition SDK 1.4.2 _07
Sun Java 2 Standard Edition SDK 1.4.2 _06
Sun Java 2 Standard Edition SDK 1.4.2 _05
Sun Java 2 Standard Edition SDK 1.4.2 _04
Sun Java 2 Standard Edition SDK 1.4.2 _03
Sun Java 2 Standard Edition SDK 1.4.2 _02
Sun Java 2 Standard Edition SDK 1.4.2 _01
Sun Java 2 Standard Edition SDK 1.4.2
Sun Java 2 Standard Edition SDK 1.4.1
Sun Java 2 Standard Edition SDK 1.4
Sun Java 2 Standard Edition SDK 1.3.1 _19
Sun Java 2 Standard Edition SDK 1.3.1 .x
Sun Java 2 Standard Edition SDK 1.3
Sun Java 2 Standard Edition SDK 5.0 Update 9
Sun Java 2 Standard Edition SDK 5.0 Update 8
Sun Java 2 Standard Edition SDK 5.0 Update 7
Sun Java 2 Standard Edition SDK 5.0 Update 6
Sun Java 2 Standard Edition SDK 5.0 Update 5
Sun Java 2 Standard Edition SDK 5.0 Update 4
Sun Java 2 Standard Edition SDK 5.0 Update 3
Sun Java 2 Standard Edition SDK 5.0 Update 2
Sun Java 2 Standard Edition SDK 5.0 Update 11
Sun Java 2 Standard Edition SDK 5.0 Update 10
Sun Java 2 Standard Edition SDK 5.0 Update 1
Sun Java 2 Standard Edition SDK 5.0
Sun Java 2 Runtime Environment 1.4.2 _13
Sun Java 2 Runtime Environment 1.4.2 _12
Sun Java 2 Runtime Environment 1.4.2 _11
Sun Java 2 Runtime Environment 1.4.2 _10
Sun Java 2 Runtime Environment 1.4.2 _09
Sun Java 2 Runtime Environment 1.4.2 _08
Sun Java 2 Runtime Environment 1.4.2 _07
Sun Java 2 Runtime Environment 1.4.2 _06
Sun Java 2 Runtime Environment 1.4.2 _05
Sun Java 2 Runtime Environment 1.4.2 _04
Sun Java 2 Runtime Environment 1.4.2 _03
+ Oracle Oracle10g Application Server 10.1 .0.2
+ Oracle Oracle10g Application Server 10.1 .0.2
+ Oracle Oracle10g Application Server 10.1 .0.2
+ Oracle Oracle10g Enterprise Edition 10.1 .0.2
+ Oracle Oracle10g Enterprise Edition 10.1 .0.2
+ Oracle Oracle10g Enterprise Edition 10.1 .0.2
+ Oracle Oracle10g Personal Edition 10.1 .0.2
+ Oracle Oracle10g Personal Edition 10.1 .0.2
+ Oracle Oracle10g Personal Edition 10.1 .0.2
+ Oracle Oracle10g Standard Edition 10.1 .0.2
Sun Java 2 Runtime Environment 1.4.2 _02
Sun Java 2 Runtime Environment 1.4.2 _01
Sun Java 2 Runtime Environment 1.4.2
Sun Java 2 Runtime Environment 1.4.1
Sun Java 2 Runtime Environment 1.3.1 _08
Sun Java 2 Runtime Environment 1.3.1 _01
Sun Java 2 Runtime Environment 1.3 _05
Sun Java 2 Runtime Environment 1.3 _02
Sun Java 2 Runtime Environment 1.3
Sun Java 2 Runtime Environment 5.0.Update 9
Sun Java 2 Runtime Environment 5.0.Update 10
Sun Java 2 Runtime Environment 5.0 Update 8
Sun Java 2 Runtime Environment 5.0 Update 7
Sun Java 2 Runtime Environment 5.0 Update 6
Sun Java 2 Runtime Environment 5.0 Update 5
Sun Java 2 Runtime Environment 5.0 Update 4
Sun Java 2 Runtime Environment 5.0 Update 3
Sun Java 2 Runtime Environment 5.0 Update 2
Sun Java 2 Runtime Environment 5.0 Update 11
Sun Java 2 Runtime Environment 5.0 Update 1
Sun Java 2 Runtime Environment 5.0
Apple Mac OS X Server 10.4.11
Apple Mac OS X Server 10.4.10
Apple Mac OS X 10.4.11
Apple Mac OS X 10.4.10
Not Vulnerable: Sun JDK 5.0 Update 12
Sun Java 2 Standard Edition SDK 1.4.2
Sun Java 2 Standard Edition SDK 5.0 Update 12
Sun Java 2 Runtime Environment 5.0.Update 12
Sun Java 2 Runtime Environment 1.4.2_14







 

Privacy Statement
Copyright 2008, SecurityFocus