• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Sun Java Web Start and Java Plug-in Multiple Privilege Escalation Vulnerabilities

References:

• [Security-announce] VMSA-2009-0014 VMware ESX patches for DHCP, Service Console (VMware)
  
• Java Web Start Homepage (Sun Microsystems)
  
• CVE-2008-2086: Java Web Start File Inclusion via System Properties Override (VSR Advisories )
  
• ASA-2009-084 HPSBUX02411 SSRT080111 rev.1 - HP-UX Running Java, Remote Execution (Avaya)
  
• Multiple Security Vulnerabilities in Java Web Start and Java Plug-in May Allow P (Sun)
  
• Nortel Response to Sun Java Runtime Environment and Java Development Kit Multipl (Nortel Networks)
  
• RHSA-2008:1018-4 java-1.6.0-sun security update (Red Hat)
  
• RHSA-2008:1025-4 java-1.5.0-sun security update (Red Hat)
  
• Sun Java Web Start and Applet Multiple Sandbox Bypass Vulnerabilities (ZDI)