Sun Java Web Start Untrusted Application Unauthorized Access Vulnerability
BID:16540
Info
Sun Java Web Start Untrusted Application Unauthorized Access Vulnerability
| Bugtraq ID: | 16540 |
| Class: | Access Validation Error |
| CVE: |
CVE-2006-0613 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 07 2006 12:00AM |
| Updated: | Apr 19 2006 08:26PM |
| Credit: | Reported by the vendor. |
| Vulnerable: |
Sun JRE (Windows Production Release) 1.5 Sun JRE (Solaris Production Release) 1.5 Sun JRE (Linux Production Release) 1.5 .0 beta Sun JRE (Linux Production Release) 1.5 Sun JDK (Windows Production Release) 1.5 .0_05 Sun JDK (Windows Production Release) 1.5 .0_04 Sun JDK (Windows Production Release) 1.5 .0_03 Sun JDK (Solaris Production Release) 1.5 .0_05 Sun JDK (Solaris Production Release) 1.5 .0_04 Sun JDK (Solaris Production Release) 1.5 .0_03 Sun JDK (Linux Production Release) 1.5 .0_05 Sun JDK (Linux Production Release) 1.5.0.0_04 Sun JDK (Linux Production Release) 1.5.0.0_03 Sun Java Web Start 1.2 Sun Java Web Start 1.0.1 _02 Sun Java Web Start 1.0.1 _01 Sun Java Web Start 1.0.1 Sun Java Web Start 1.0 Apple Mac OS X Server 10.4.5 Apple Mac OS X 10.4.5 |
| Not Vulnerable: |
Sun JRE (Windows Production Release) 1.5 _06 Sun JRE (Solaris Production Release) 1.5 _06 Sun JRE (Linux Production Release) 1.5 _06 Sun JDK (Windows Production Release) 1.5.0.0_06 Sun JDK (Solaris Production Release) 1.5 _06 Sun JDK (Linux Production Release) 1.5 _06 |
Discussion
Sun Java Web Start Untrusted Application Unauthorized Access Vulnerability
Sun Java Web Start is prone to a vulnerability that may allow remote attackers to gain unauthorized access to a vulnerable computer.
The vendor has reported that this vulnerability allows untrusted applications to gain read/write privileges to local files on a vulnerable computer.
Java Web Start in Java 2 Platform Standard Edition (J2SE) 5.0 Update 5 and earlier 5.0 releases for Windows, Solaris, and Linux are vulnerable.
Sun Java Web Start is prone to a vulnerability that may allow remote attackers to gain unauthorized access to a vulnerable computer.
The vendor has reported that this vulnerability allows untrusted applications to gain read/write privileges to local files on a vulnerable computer.
Java Web Start in Java 2 Platform Standard Edition (J2SE) 5.0 Update 5 and earlier 5.0 releases for Windows, Solaris, and Linux are vulnerable.
Exploit / POC
Sun Java Web Start Untrusted Application Unauthorized Access Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Solution / Fix
Sun Java Web Start Untrusted Application Unauthorized Access Vulnerability
Solution:
Fixes are available. Please see the referenced advisories for more information.
Apple Mac OS X Server 10.4.5
Apple Mac OS X 10.4.5
Solution:
Fixes are available. Please see the referenced advisories for more information.
Apple Mac OS X Server 10.4.5
-
Apple sa/J2SE50Release4.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=10261&cat= 1&platform=osx&method=sa/J2SE50Release4.dmg
Apple Mac OS X 10.4.5
References
Sun Java Web Start Untrusted Application Unauthorized Access Vulnerability
References:
References: