Apple Mac OS X Java Insecure Temporary File Vulnerability
BID:14825
Info
Apple Mac OS X Java Insecure Temporary File Vulnerability
| Bugtraq ID: | 14825 |
| Class: | Access Validation Error |
| CVE: |
CVE-2005-2527 |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 14 2005 12:00AM |
| Updated: | Jul 12 2009 05:06PM |
| Credit: | Announced by the vendor. |
| Vulnerable: |
Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.3.9 Apple Mac OS X Server 10.3.8 Apple Mac OS X Server 10.3.7 Apple Mac OS X Server 10.3.6 Apple Mac OS X Server 10.3.5 Apple Mac OS X Server 10.3.4 Apple Mac OS X Server 10.3.3 Apple Mac OS X Server 10.3.2 Apple Mac OS X Server 10.3.1 Apple Mac OS X Server 10.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.3.9 Apple Mac OS X 10.3.8 Apple Mac OS X 10.3.7 Apple Mac OS X 10.3.6 Apple Mac OS X 10.3.5 Apple Mac OS X 10.3.4 Apple Mac OS X 10.3.3 Apple Mac OS X 10.3.2 Apple Mac OS X 10.3.1 Apple Mac OS X 10.3 |
| Not Vulnerable: | |
Discussion
Apple Mac OS X Java Insecure Temporary File Vulnerability
Sun Java running on Mac OS X is prone to an insecure temporary file creation vulnerability. Successful exploitation could allow corruption of files or creation of arbitrary files. It may also be possible for an attacker to escalate their privileges by exploiting this vulnerability, however, this is unconfirmed.
Sun Java running on Mac OS X is prone to an insecure temporary file creation vulnerability. Successful exploitation could allow corruption of files or creation of arbitrary files. It may also be possible for an attacker to escalate their privileges by exploiting this vulnerability, however, this is unconfirmed.
Exploit / POC
Apple Mac OS X Java Insecure Temporary File Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
Apple Mac OS X Java Insecure Temporary File Vulnerability
Solution:
Apple has released fixes for Mac OS X 10.3.9 and later:
Apple Mac OS X 10.3.9
Apple Mac OS X Server 10.3.9
Apple Mac OS X Server 10.4
Apple Mac OS X 10.4
Apple Mac OS X Server 10.4.1
Apple Mac OS X 10.4.1
Apple Mac OS X 10.4.2
Apple Mac OS X Server 10.4.2
Solution:
Apple has released fixes for Mac OS X 10.3.9 and later:
Apple Mac OS X 10.3.9
-
Apple JavaSecurityUpdate4.dmg
http://www.apple.com/support/downloads/javasecurityupdate.html
Apple Mac OS X Server 10.3.9
-
Apple JavaSecurityUpdate4.dmg
http://www.apple.com/support/downloads/javasecurityupdate.html
Apple Mac OS X Server 10.4
-
Apple JavaSecurityUpdate4.dmg
http://www.apple.com/support/downloads/javasecurityupdate.html
Apple Mac OS X 10.4
-
Apple JavaSecurityUpdate4.dmg
http://www.apple.com/support/downloads/javasecurityupdate.html
Apple Mac OS X Server 10.4.1
-
Apple JavaSecurityUpdate4.dmg
http://www.apple.com/support/downloads/javasecurityupdate.html
Apple Mac OS X 10.4.1
-
Apple JavaSecurityUpdate4.dmg
http://www.apple.com/support/downloads/javasecurityupdate.html
Apple Mac OS X 10.4.2
-
Apple JavaSecurityUpdate4.dmg
http://www.apple.com/support/downloads/javasecurityupdate.html
Apple Mac OS X Server 10.4.2
-
Apple JavaSecurityUpdate4.dmg
http://www.apple.com/support/downloads/javasecurityupdate.html
References
Apple Mac OS X Java Insecure Temporary File Vulnerability
References:
References: