Sun Java Runtime Environment Remote XSLT Privilege Escalation Vulnerability

BID:10844

Info

Sun Java Runtime Environment Remote XSLT Privilege Escalation Vulnerability

Bugtraq ID: 10844
Class: Access Validation Error
CVE:
Remote: Yes
Local: No
Published: Aug 03 2004 12:00AM
Updated: Aug 03 2004 12:00AM
Credit: Discovery of this issue is credited to Marc Schoenefeld.
Vulnerable: Sun SDK (Windows Production Release) 1.4.2 _04
Sun SDK (Windows Production Release) 1.4.2 _03
Sun SDK (Windows Production Release) 1.4.2
Sun SDK (Windows Production Release) 1.4.1 _03
Sun SDK (Windows Production Release) 1.4.1 _02
Sun SDK (Windows Production Release) 1.4.1 _01
Sun SDK (Windows Production Release) 1.4.1
Sun SDK (Windows Production Release) 1.4 .0_4
Sun SDK (Windows Production Release) 1.4 .0_03
Sun SDK (Windows Production Release) 1.4 .0_02
Sun SDK (Windows Production Release) 1.4 .0_01
Sun SDK (Windows Production Release) 1.4
Sun SDK (Solaris Production Release) 1.4.2 _04
Sun SDK (Solaris Production Release) 1.4.2 _03
Sun SDK (Solaris Production Release) 1.4.2
Sun SDK (Solaris Production Release) 1.4.1 _03
Sun SDK (Solaris Production Release) 1.4.1 _02
Sun SDK (Solaris Production Release) 1.4.1 _01
Sun SDK (Solaris Production Release) 1.4.1
Sun SDK (Solaris Production Release) 1.4 .0_4
Sun SDK (Solaris Production Release) 1.4 .0_03
Sun SDK (Solaris Production Release) 1.4 .0_02
Sun SDK (Solaris Production Release) 1.4
Sun SDK (Linux Production Release) 1.4.2 _04
Sun SDK (Linux Production Release) 1.4.2 _03
Sun SDK (Linux Production Release) 1.4.2 _02
Sun SDK (Linux Production Release) 1.4.2 _01
Sun SDK (Linux Production Release) 1.4.2
Sun SDK (Linux Production Release) 1.4.1 _03
Sun SDK (Linux Production Release) 1.4.1 _02
Sun SDK (Linux Production Release) 1.4.1 _01
Sun SDK (Linux Production Release) 1.4.1
Sun SDK (Linux Production Release) 1.4 .0_4
Sun SDK (Linux Production Release) 1.4 .0_03
Sun SDK (Linux Production Release) 1.4 .0_02
Sun SDK (Linux Production Release) 1.4
Sun JRE (Windows Production Release) 1.4.2 _04
Sun JRE (Windows Production Release) 1.4.2 _03
Sun JRE (Windows Production Release) 1.4.2 _02
Sun JRE (Windows Production Release) 1.4.2 _01
Sun JRE (Windows Production Release) 1.4.2
Sun JRE (Windows Production Release) 1.4.1 _07
Sun JRE (Windows Production Release) 1.4.1 _03
Sun JRE (Windows Production Release) 1.4.1 _02
Sun JRE (Windows Production Release) 1.4.1 _01
+ Opera Software Opera Web Browser 7.11 j
 + Opera Software Opera Web Browser 7.11
Sun JRE (Windows Production Release) 1.4.1
Sun JRE (Windows Production Release) 1.4 .0_04
+ Opera Software Opera Web Browser 7.54
Sun JRE (Windows Production Release) 1.4 .0_03
Sun JRE (Windows Production Release) 1.4 .0_02
Sun JRE (Windows Production Release) 1.4 .0_01
Sun JRE (Windows Production Release) 1.4
Sun JRE (Solaris Production Release) 1.4.2 _04
+ Opera Software Opera Web Browser 7.54
Sun JRE (Solaris Production Release) 1.4.2 _03
Sun JRE (Solaris Production Release) 1.4.2 _02
Sun JRE (Solaris Production Release) 1.4.2 _01
Sun JRE (Solaris Production Release) 1.4.2
Sun JRE (Solaris Production Release) 1.4.1 _03
Sun JRE (Solaris Production Release) 1.4.1 _02
Sun JRE (Solaris Production Release) 1.4.1 _01
+ Opera Software Opera Web Browser 7.11
Sun JRE (Solaris Production Release) 1.4.1
Sun JRE (Solaris Production Release) 1.4 .0_04
Sun JRE (Solaris Production Release) 1.4 .0_04
Sun JRE (Solaris Production Release) 1.4 .0_03
Sun JRE (Solaris Production Release) 1.4 .0_02
Sun JRE (Solaris Production Release) 1.4 .0_01
Sun JRE (Solaris Production Release) 1.4
Sun JRE (Linux Production Release) 1.4.2 _04
+ Opera Software Opera Web Browser 7.54
Sun JRE (Linux Production Release) 1.4.2 _03
Sun JRE (Linux Production Release) 1.4.2 _02
Sun JRE (Linux Production Release) 1.4.2 _01
Sun JRE (Linux Production Release) 1.4.2
Sun JRE (Linux Production Release) 1.4.1 _03
Sun JRE (Linux Production Release) 1.4.1 _02
Sun JRE (Linux Production Release) 1.4.1 _01
+ Opera Software Opera Web Browser 7.11
Sun JRE (Linux Production Release) 1.4.1
Sun JRE (Linux Production Release) 1.4 .0_04
Sun JRE (Linux Production Release) 1.4 .0_03
Sun JRE (Linux Production Release) 1.4 .0_02
Sun JRE (Linux Production Release) 1.4
Sun Java 2 Runtime Environment 1.4.2 _03
+ Oracle Oracle10g Application Server 10.1 .0.2
 + Oracle Oracle10g Application Server 10.1 .0.2
 + Oracle Oracle10g Application Server 10.1 .0.2
 + Oracle Oracle10g Enterprise Edition 10.1 .0.2
 + Oracle Oracle10g Enterprise Edition 10.1 .0.2
 + Oracle Oracle10g Enterprise Edition 10.1 .0.2
 + Oracle Oracle10g Personal Edition 10.1 .0.2
 + Oracle Oracle10g Personal Edition 10.1 .0.2
 + Oracle Oracle10g Personal Edition 10.1 .0.2
 + Oracle Oracle10g Standard Edition 10.1 .0.2
 HP HP-UX B.11.23
HP HP-UX B.11.22
HP HP-UX B.11.11
HP HP-UX B.11.04
HP HP-UX B.11.00
Not Vulnerable: Sun SDK (Windows Production Release) 1.4.2 _05
Sun SDK (Solaris Production Release) 1.4.2 _05
Sun SDK (Linux Production Release) 1.4.2 _05
Sun JRE (Windows Production Release) 1.4.2 _05
Sun JRE (Solaris Production Release) 1.4.2 _05
Sun JRE (Linux Production Release) 1.4.2 _05

Discussion

Sun Java Runtime Environment Remote XSLT Privilege Escalation Vulnerability

It has been reported that the Sun Java Runtime Environment is affected by an access validation vulnerability within the XSLT processor.

An attacker might exploit this issue to allow an untrusted applet or application to read data from a trusted applet or application that is running within the same virtual machine. It has also been reported that this issue may facilitate privilege escalation.

NOTE: It has been rpeorted that Opera Web Browser is affected by this issue as it includes a vulnerable version of the affected software.

Reports from Harry Johnston indicate the OraClient 10g component of Oracle Database Server 10g incorporates a vulnerable version of the Java Runtime Environment and is therefore vulnerable to this issue.

Exploit / POC

Sun Java Runtime Environment Remote XSLT Privilege Escalation Vulnerability

The researcher who discovered this vulnerability has developed working exploit code that is not publicly available or known to be circulating in the wild.

Solution / Fix

Sun Java Runtime Environment Remote XSLT Privilege Escalation Vulnerability

Solution:
It is reported that these issues have been resolved in the Opera Web Browser version 7.60 beta of the affected software. This is currently unconfirmed at the moment. Please contact the vendor for more information.

HP has released advisory SSRT4806 along with update instructions resolving this issue. Please see the referenced advisory for more information.

Sun has released an upgrade dealing with this issue.


Sun JRE (Windows Production Release) 1.4

Sun JRE (Linux Production Release) 1.4

Sun JRE (Solaris Production Release) 1.4 .0_01

Sun SDK (Solaris Production Release) 1.4

Sun SDK (Linux Production Release) 1.4

Sun JRE (Windows Production Release) 1.4 .0_03

Sun JRE (Windows Production Release) 1.4 .0_01

Sun JRE (Linux Production Release) 1.4 .0_03

Sun JRE (Solaris Production Release) 1.4 .0_04

Sun SDK (Windows Production Release) 1.4

Sun SDK (Solaris Production Release) 1.4 .0_03

Sun SDK (Windows Production Release) 1.4 .0_4

Sun SDK (Windows Production Release) 1.4 .0_03

Sun JRE (Solaris Production Release) 1.4 .0_02

Sun JRE (Solaris Production Release) 1.4 .0_04

Sun JRE (Solaris Production Release) 1.4

Sun SDK (Windows Production Release) 1.4 .0_01

Sun SDK (Linux Production Release) 1.4 .0_03

Sun JRE (Solaris Production Release) 1.4 .0_03

Sun JRE (Windows Production Release) 1.4 .0_02

Sun SDK (Solaris Production Release) 1.4 .0_02

Sun SDK (Solaris Production Release) 1.4 .0_4

Sun JRE (Linux Production Release) 1.4 .0_02

Sun SDK (Linux Production Release) 1.4 .0_4

Sun SDK (Linux Production Release) 1.4 .0_02

Sun JRE (Windows Production Release) 1.4 .0_04

Sun SDK (Windows Production Release) 1.4 .0_02

Sun JRE (Linux Production Release) 1.4 .0_04

Sun SDK (Solaris Production Release) 1.4.1

Sun JRE (Solaris Production Release) 1.4.1 _02

Sun JRE (Solaris Production Release) 1.4.1

Sun JRE (Linux Production Release) 1.4.1 _02

Sun SDK (Linux Production Release) 1.4.1 _03

Sun SDK (Solaris Production Release) 1.4.1 _01

Sun SDK (Windows Production Release) 1.4.1

Sun JRE (Solaris Production Release) 1.4.1 _01

Sun JRE (Linux Production Release) 1.4.1 _03

Sun SDK (Windows Production Release) 1.4.1 _02

Sun JRE (Windows Production Release) 1.4.1

Sun JRE (Windows Production Release) 1.4.1 _02

Sun SDK (Linux Production Release) 1.4.1

Sun JRE (Linux Production Release) 1.4.1 _01

Sun SDK (Solaris Production Release) 1.4.1 _02

Sun JRE (Solaris Production Release) 1.4.1 _03

Sun SDK (Windows Production Release) 1.4.1 _01

Sun JRE (Windows Production Release) 1.4.1 _03

Sun SDK (Linux Production Release) 1.4.1 _02

Sun SDK (Solaris Production Release) 1.4.1 _03

Sun JRE (Windows Production Release) 1.4.1 _01

Sun SDK (Windows Production Release) 1.4.1 _03

Sun JRE (Linux Production Release) 1.4.1

Sun SDK (Linux Production Release) 1.4.1 _01

Sun JRE (Linux Production Release) 1.4.2 _02

Sun JRE (Solaris Production Release) 1.4.2 _03

Sun JRE (Solaris Production Release) 1.4.2

Sun SDK (Linux Production Release) 1.4.2

Sun JRE (Linux Production Release) 1.4.2 _01

Sun SDK (Windows Production Release) 1.4.2

Sun JRE (Solaris Production Release) 1.4.2 _01

Sun JRE (Windows Production Release) 1.4.2 _03

Sun SDK (Windows Production Release) 1.4.2 _03

Sun SDK (Linux Production Release) 1.4.2 _02

Sun JRE (Windows Production Release) 1.4.2 _01

Sun JRE (Windows Production Release) 1.4.2 _02

Sun JRE (Linux Production Release) 1.4.2 _03

Sun SDK (Windows Production Release) 1.4.2 _04

Sun SDK (Solaris Production Release) 1.4.2 _03

Sun JRE (Linux Production Release) 1.4.2 _04

Sun SDK (Solaris Production Release) 1.4.2 _04

Sun SDK (Linux Production Release) 1.4.2 _03

Sun SDK (Linux Production Release) 1.4.2 _04

Sun SDK (Solaris Production Release) 1.4.2

Sun JRE (Windows Production Release) 1.4.2 _04

Sun JRE (Linux Production Release) 1.4.2

Sun JRE (Solaris Production Release) 1.4.2 _04

Sun JRE (Windows Production Release) 1.4.2

Sun SDK (Linux Production Release) 1.4.2 _01

References

Sun Java Runtime Environment Remote XSLT Privilege Escalation Vulnerability

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report