Sun Java Runtime Environment Multiple Privilege Escalation Vulnerabilities
BID:15615
Info
Sun Java Runtime Environment Multiple Privilege Escalation Vulnerabilities
| Bugtraq ID: | 15615 |
| Class: | Unknown |
| CVE: |
CVE-2005-3904 CVE-2005-3905 CVE-2005-3906 CVE-2006-0617 CVE-2006-0616 CVE-2006-0615 CVE-2006-0614 CVE-2005-3907 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 28 2005 12:00AM |
| Updated: | Jul 06 2016 02:40PM |
| Credit: | Discovery is credited to Adam Gowdiak. |
| Vulnerable: |
Turbolinux Turbolinux Server 10.0 x86 Turbolinux Turbolinux Server 10.0 Turbolinux Turbolinux Desktop 10.0 Turbolinux Turbolinux FUJI Turbolinux Turbolinux 10 F... TurboLinux Personal TurboLinux Multimedia Turbolinux Home Turbolinux Appliance Server Workgroup Edition 1.0 Turbolinux Appliance Server Hosting Edition 1.0 Turbolinux Appliance Server 1.0 Workgroup Edition Turbolinux Appliance Server 1.0 Hosting Edition SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 8 Sun SDK (Windows Production Release) 1.4.2 _08 Sun SDK (Windows Production Release) 1.4.2 _05 Sun SDK (Windows Production Release) 1.4.2 _04 Sun SDK (Windows Production Release) 1.4.2 _03 Sun SDK (Windows Production Release) 1.4.2 Sun SDK (Windows Production Release) 1.4.1 _03 Sun SDK (Windows Production Release) 1.4.1 _02 Sun SDK (Windows Production Release) 1.4.1 _01 Sun SDK (Windows Production Release) 1.4.1 Sun SDK (Windows Production Release) 1.4 .0_4 Sun SDK (Windows Production Release) 1.4 .0_03 Sun SDK (Windows Production Release) 1.4 .0_02 Sun SDK (Windows Production Release) 1.4 .0_01 Sun SDK (Windows Production Release) 1.4 Sun SDK (Windows Production Release) 1.3.1 _15 Sun SDK (Windows Production Release) 1.3.1 _14 Sun SDK (Windows Production Release) 1.3.1 _13 Sun SDK (Windows Production Release) 1.3.1 _12 Sun SDK (Windows Production Release) 1.3.1 _11 Sun SDK (Windows Production Release) 1.3.1 _10 Sun SDK (Windows Production Release) 1.3.1 _09 Sun SDK (Windows Production Release) 1.3.1 _08 Sun SDK (Windows Production Release) 1.3.1 _07 Sun SDK (Windows Production Release) 1.3.1 _06 Sun SDK (Windows Production Release) 1.3.1 _05 Sun SDK (Windows Production Release) 1.3.1 _04 Sun SDK (Windows Production Release) 1.3.1 _03 Sun SDK (Windows Production Release) 1.3.1 _02 Sun SDK (Windows Production Release) 1.3.1 _01a Sun SDK (Windows Production Release) 1.3 .0_05 Sun SDK (Windows Production Release) 1.3 .0_02 Sun SDK (Solaris Production Release) 1.4.2 _08 Sun SDK (Solaris Production Release) 1.4.2 _05 Sun SDK (Solaris Production Release) 1.4.2 _04 Sun SDK (Solaris Production Release) 1.4.2 _03 Sun SDK (Solaris Production Release) 1.4.2 Sun SDK (Solaris Production Release) 1.4.1 _03 Sun SDK (Solaris Production Release) 1.4.1 _02 Sun SDK (Solaris Production Release) 1.4.1 _01 Sun SDK (Solaris Production Release) 1.4.1 Sun SDK (Solaris Production Release) 1.4 .0_4 Sun SDK (Solaris Production Release) 1.4 .0_03 Sun SDK (Solaris Production Release) 1.4 .0_02 Sun SDK (Solaris Production Release) 1.4 Sun SDK (Solaris Production Release) 1.3.1 _15 Sun SDK (Solaris Production Release) 1.3.1 _14 Sun SDK (Solaris Production Release) 1.3.1 _13 Sun SDK (Solaris Production Release) 1.3.1 _12 Sun SDK (Solaris Production Release) 1.3.1 _11 Sun SDK (Solaris Production Release) 1.3.1 _10 Sun SDK (Solaris Production Release) 1.3.1 _09 Sun SDK (Solaris Production Release) 1.3.1 _08 Sun SDK (Solaris Production Release) 1.3.1 _07 Sun SDK (Solaris Production Release) 1.3.1 _06 Sun SDK (Solaris Production Release) 1.3.1 _05 Sun SDK (Solaris Production Release) 1.3.1 _03 Sun SDK (Solaris Production Release) 1.3.1 _02 Sun SDK (Solaris Production Release) 1.3.1 _01 Sun SDK (Solaris Production Release) 1.3 _05 Sun SDK (Solaris Production Release) 1.3 _02 Sun SDK (Solaris Production Release) 1.3 .0_02 Sun SDK (Solaris Production Release) 1.3 Sun SDK (Linux Production Release) 1.4.2 _08 Sun SDK (Linux Production Release) 1.4.2 _05 Sun SDK (Linux Production Release) 1.4.2 _04 Sun SDK (Linux Production Release) 1.4.2 _03 Sun SDK (Linux Production Release) 1.4.2 _02 Sun SDK (Linux Production Release) 1.4.2 _01 Sun SDK (Linux Production Release) 1.4.2 Sun SDK (Linux Production Release) 1.4.1 _03 Sun SDK (Linux Production Release) 1.4.1 _02 Sun SDK (Linux Production Release) 1.4.1 _01 Sun SDK (Linux Production Release) 1.4.1 Sun SDK (Linux Production Release) 1.4 .0_4 Sun SDK (Linux Production Release) 1.4 .0_03 Sun SDK (Linux Production Release) 1.4 .0_02 Sun SDK (Linux Production Release) 1.4 Sun SDK (Linux Production Release) 1.3.1 _15 Sun SDK (Linux Production Release) 1.3.1 _14 Sun SDK (Linux Production Release) 1.3.1 _13 Sun SDK (Linux Production Release) 1.3.1 _12 Sun SDK (Linux Production Release) 1.3.1 _11 Sun SDK (Linux Production Release) 1.3.1 _10 Sun SDK (Linux Production Release) 1.3.1 _09 Sun SDK (Linux Production Release) 1.3.1 _08 Sun SDK (Linux Production Release) 1.3.1 _07 Sun SDK (Linux Production Release) 1.3.1 _06 Sun SDK (Linux Production Release) 1.3.1 _05 Sun SDK (Linux Production Release) 1.3.1 _03 Sun SDK (Linux Production Release) 1.3.1 _02 Sun SDK (Linux Production Release) 1.3.1 _01 Sun SDK (Linux Production Release) 1.3 _05 Sun SDK (Linux Production Release) 1.3 .0_02 Sun JRE (Solaris Production Release) 1.3.1 Sun JRE (Solaris Production Release) 1.3 _04 Sun JRE (Solaris Production Release) 1.3 _03 Sun JRE (Solaris Production Release) 1.3 _01 Sun JRE (Linux Production Release) 1.5 _05 Sun JRE (Linux Production Release) 1.5 _04 Sun JRE (Linux Production Release) 1.5 _03 Sun JRE (Linux Production Release) 1.5 _02 Sun JRE (Linux Production Release) 1.5 _01 Sun JRE (Linux Production Release) 1.5 Sun JRE (Linux Production Release) 1.4.2 _09 Sun JRE (Linux Production Release) 1.4.2 _08 Sun JRE (Linux Production Release) 1.4.2 _07 Sun JRE (Linux Production Release) 1.4.2 _06 Sun JRE (Linux Production Release) 1.4.2 _05 Sun JRE (Linux Production Release) 1.4.2 _04 Sun JRE (Linux Production Release) 1.4.2 _03 Sun JRE (Linux Production Release) 1.4.2 _02 Sun JRE (Linux Production Release) 1.4.2 _01 Sun JRE (Linux Production Release) 1.4.2 Sun JRE (Linux Production Release) 1.4.1 Sun JRE (Linux Production Release) 1.3.1 _16 Sun JRE (Linux Production Release) 1.3.1 _15 Sun JRE (Linux Production Release) 1.3.1 _08 Sun JRE (Linux Production Release) 1.3.1 _04 Sun JRE (Linux Production Release) 1.3.1 _01a Sun JRE (Linux Production Release) 1.3.1 _01 Sun JRE (Linux Production Release) 1.3 .0_05 Sun JRE (Linux Production Release) 1.3 .0_02 Sun JRE (Linux Production Release) 1.3 .0 Sun JDK (Windows Production Release) 1.5 .0_03 Sun JDK (Solaris Production Release) 1.5 .0_03 Sun JDK (Linux Production Release) 1.5.0.0_03 S.u.S.E. SuSE Linux Standard Server 8.0 S.u.S.E. SuSE Linux School Server for i386 S.u.S.E. SUSE LINUX Retail Solution 8.0 S.u.S.E. SuSE Linux Openexchange Server 4.0 S.u.S.E. Open-Enterprise-Server 9.0 S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 9.3 x86_64 S.u.S.E. Linux Professional 9.3 S.u.S.E. Linux Professional 9.2 x86_64 S.u.S.E. Linux Professional 9.2 S.u.S.E. Linux Professional 9.1 x86_64 S.u.S.E. Linux Professional 9.1 S.u.S.E. Linux Professional 9.0 x86_64 S.u.S.E. Linux Professional 9.0 S.u.S.E. Linux Personal 10.0 OSS S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 x86_64 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 S.u.S.E. Linux Desktop 1.0 IBM Websphere Application Server 6.0.2 IBM Websphere Application Server 5.1.1 .9 IBM Websphere Application Server 5.1.1 .8 IBM Websphere Application Server 5.1.1 .7 IBM Websphere Application Server 5.1.1 .6 IBM Websphere Application Server 5.1.1 .5 IBM Websphere Application Server 5.1.1 .4 IBM Websphere Application Server 5.1.1 .3 IBM Websphere Application Server 5.1.1 .2 IBM Websphere Application Server 5.1.1 .10 IBM Websphere Application Server 5.1.1 .1 IBM Websphere Application Server 5.1.1 IBM Websphere Application Server 5.0.2 .9 IBM Websphere Application Server 5.0.2 .8 IBM Websphere Application Server 5.0.2 .7 IBM Websphere Application Server 5.0.2 .6 IBM Websphere Application Server 5.0.2 .5 IBM Websphere Application Server 5.0.2 .4 IBM Websphere Application Server 5.0.2 .3 IBM Websphere Application Server 5.0.2 .2 IBM Websphere Application Server 5.0.2 .16 IBM Websphere Application Server 5.0.2 .15 IBM Websphere Application Server 5.0.2 .14 IBM Websphere Application Server 5.0.2 .13 IBM Websphere Application Server 5.0.2 .12 IBM Websphere Application Server 5.0.2 .11 IBM Websphere Application Server 5.0.2 .10 IBM Websphere Application Server 5.0.2 .1 IBM Websphere Application Server 5.0.2 IBM Java SDK 1.4.2 IBM Java SDK 1.3.1 Gentoo Linux Blackdown Java 2 Standard Edition SDK 1.4.2 -02 Blackdown Java 2 Standard Edition SDK 1.4.2 -01 Blackdown Java 2 Standard Edition SDK 1.4.2 Blackdown Java 2 Standard Edition SDK 1.4.1 Blackdown Java 2 Runtime Environment 1.4.2 -02 Blackdown Java 2 Runtime Environment 1.4.2 -01 Blackdown Java 2 Runtime Environment 1.4.2 Blackdown Java 2 Runtime Environment 1.4.1 Apple Mac OS X Server 10.4.5 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.3.9 Apple Mac OS X 10.3.8 Apple Mac OS X 10.3.7 Apple Mac OS X 10.3.6 Apple Mac OS X 10.3.5 Apple Mac OS X 10.3.4 Apple Mac OS X 10.3.3 Apple Mac OS X 10.3.2 Apple Mac OS X 10.3.1 Apple Mac OS X 10.3 |
| Not Vulnerable: |
Sun JRE (Linux Production Release) 1.5 _06 Sun JRE (Linux Production Release) 1.4.2 _10-b03 Sun JRE (Linux Production Release) 1.3.1 _17 IBM Java SDK 1.4.2 SR3 IBM Java SDK 1.3.1 SR9 |
Discussion
Sun Java Runtime Environment Multiple Privilege Escalation Vulnerabilities
Sun JRE is susceptible to various privilege-escalation vulnerabilities.
These issues can allow remote Java applications to read/write local files and execute arbitrary applications in the context of an affected user.
Further details are not available at this time. This BID will be updated as more information is disclosed.
Sun JRE is susceptible to various privilege-escalation vulnerabilities.
These issues can allow remote Java applications to read/write local files and execute arbitrary applications in the context of an affected user.
Further details are not available at this time. This BID will be updated as more information is disclosed.
Exploit / POC
Sun Java Runtime Environment Multiple Privilege Escalation Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Solution / Fix
Sun Java Runtime Environment Multiple Privilege Escalation Vulnerabilities
Solution:
Fixes are available. Please see the referenced advisories for further information.
Apple Mac OS X Server 10.4.5
Solution:
Fixes are available. Please see the referenced advisories for further information.
Apple Mac OS X Server 10.4.5
References
Sun Java Runtime Environment Multiple Privilege Escalation Vulnerabilities
References:
References:
- OpenOffice Document Handling Multiple Client-Side Command Execution Vulnerabili (FrSirt)
- Java Reflection API privilege escalation vulnerability (IBM)
- PK19792: SHIP JDK 1.3.1 SR9-1 (IBM)
- PK19794: SHIP JDK 1.4.2 SR4-1 (IBM)
- PK19795: SHIP JDK 1.4.2 SR4-1 (IBM)
- Recommended fixes for WebSphere Application Server (IBM)
- Sun Alert ID: 102003 (Sun)
- Sun Alert ID: 102017 (Sun)
- Sun Alert ID: 102050 (Sun)
- Sun Alert ID: 102171 (Sun)