Sun JavaDoc Tool Cross-Site Scripting Vulnerability

Bugtraq ID:	24690
Class:	Input Validation Error
CVE:	CVE-2007-3503
Remote:	Yes
Local:	No
Published:	Jun 28 2007 12:00AM
Updated:	Dec 18 2007 08:04PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Sun JDK (Windows Production Release) 1.5 .0_05 Sun JDK (Windows Production Release) 1.5 .0_04 Sun JDK (Windows Production Release) 1.5 .0_03 Sun JDK (Windows Production Release) 1.5.0_11-b03 Sun JDK (Windows Production Release) 1.5.0_07-b03 Sun JDK (Windows Production Release) 1.5.0.0_11 Sun JDK (Windows Production Release) 1.5.0.0_09 Sun JDK (Windows Production Release) 1.5.0.0_08 Sun JDK (Windows Production Release) 1.5.0.0_06 Sun JDK (Solaris Production Release) 1.5 _06 Sun JDK (Solaris Production Release) 1.5 .0_05 Sun JDK (Solaris Production Release) 1.5 .0_04 Sun JDK (Solaris Production Release) 1.5 .0_03 Sun JDK (Linux Production Release) 1.5 _11-b03 Sun JDK (Linux Production Release) 1.5 _07-b03 Sun JDK (Linux Production Release) 1.5 _07 Sun JDK (Linux Production Release) 1.5 _06 Sun JDK (Linux Production Release) 1.5 .0_05 Sun JDK (Linux Production Release) 1.5 Sun JDK (Linux Production Release) 1.5.0.0_11 Sun JDK (Linux Production Release) 1.5.0.0_09 Sun JDK (Linux Production Release) 1.5.0.0_08 Sun JDK (Linux Production Release) 1.5.0.0_04 Sun JDK (Linux Production Release) 1.5.0.0_03 Sun JDK 1.5 .0_05 Sun JDK 1.5 Slackware Linux 10.2 Slackware Linux 10.1 Slackware Linux 10.0 Slackware Linux 9.1 Slackware Linux 9.0 Slackware Linux 8.1 Slackware Linux 12.0 Slackware Linux 11.0 Redhat Enterprise Linux Supplementary 5 server Redhat Enterprise Linux Extras 4 Redhat Enterprise Linux Desktop Supplementary 5 client Gentoo Linux BEA Systems JRockit R27.3.1 BEA Systems JRockit 6 BEA Systems JRockit 5.0 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.10 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10
Not Vulnerable:	Sun SDK (Linux Production Release) 1.6 _1 Sun JDK (Windows Production Release) 1.4.2 _09 Sun JDK (Windows Production Release) 1.4.2 _08 Sun JDK (Windows Production Release) 1.4.2 _02 Sun JDK (Solaris Production Release) 1.4.2 _09 Sun JDK (Solaris Production Release) 1.4.2 _08 Sun JDK (Linux Production Release) 1.4.2 _11 Sun JDK (Linux Production Release) 1.4.2 _10 Sun JDK (Linux Production Release) 1.4.2 _09 Sun JDK (Linux Production Release) 1.4.2 _08 Sun JDK (Linux Production Release) 1.4.2 _06 Sun JDK (Linux Production Release) 1.4.2 + Apache Xalan-java 2.5.1 + Apache Xalan-java 2.5.1 Sun JDK (Linux Production Release) 1.4.1 _07 Sun JDK (Linux Production Release) 1.4.1 _01 Sun JDK (Linux Production Release) 1.4.1 + Apache Xalan-java 2.5.1 + Apache Xalan-java 2.5.1 Sun JDK 1.4.2 _09 Sun JDK 1.4.2 _08 Sun Java 2 Standard Edition SDK 5.0 Update 12 Sun Java 2 Runtime Environment 5.0.Update 12 Sun Java 2 Runtime Environment 1.6.0_01 Oracle JDK (Linux Production Release) 1.7

Sun JavaDoc Tool Cross-Site Scripting Vulnerability

Sun JavaDoc Tool is prone to a cross-site scripting vulnerability.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Sun JavaDoc Tool Cross-Site Scripting Vulnerability

An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.

Sun JavaDoc Tool Cross-Site Scripting Vulnerability

Solution:
The vendor has released upgrades to address this issue. Please contact the vendor for information on obtaining fixes.


Slackware Linux 12.0

• Slackware JDK: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
  ftp://ftp.slackware.com/pub/slackware/slackware-12.0/extra/jdk-6/jdk-6 u2-i586-1.tgz


• Slackware JRE: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
  ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/ jre-6u2-i586-1.tgz

Sun JDK (Windows Production Release) 1.5.0.0_11

• Sun 125139-01
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -125139-01-1

BEA Systems JRockit R27.3.1

• BEA Systems jrockit-jdk1.5.0_11-linux_ia32.tar.gz
  ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-linux_ia32.tar.gz


• BEA Systems jrockit-jdk1.5.0_11-linux_ia64.tar.gz
  ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-linux_ia64.tar.gz


• BEA Systems jrockit-jdk1.5.0_11-linux_x86_64.tar.gz
  ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-linux_x86_64.tar.gz


• BEA Systems jrockit-jdk1.5.0_11-solaris_sparcv9.tar.gz
  ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-solaris_sparcv9.tar.gz


• BEA Systems jrockit-jdk1.5.0_11-windows_ia32.zip
  ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-windows_ia32.zip


• BEA Systems jrockit-jdk1.5.0_11-windows_ia64.zip
  ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-windows_ia64.zip


• BEA Systems jrockit-jdk1.5.0_11-windows_x86_64.zip
  ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-windows_x86_64.zip


• BEA Systems jrockit-jdk1.6.0_01-linux_ia32.tar.gz
  ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.6.0_01-linux_ia32.tar.gz


• BEA Systems jrockit-jdk1.6.0_01-linux_x86_64.tar.gz
  ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.6.0_01-linux_x86_64.tar.gz


• BEA Systems jrockit-jdk1.6.0_01-windows_ia32.zip
  ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.6.0_01-windows_ia32.zip


• BEA Systems jrockit-jdk1.6.0_01-windows_x86_64.zip
  ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.6.0_01-windows_x86_64.zip

BEA Systems JRockit 6

• BEA Systems jrockit-jdk1.6.0_01-linux_ia32.tar.gz
  ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.6.0_01-linux_ia32.tar.gz


• BEA Systems jrockit-jdk1.6.0_01-linux_x86_64.tar.gz
  ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.6.0_01-linux_x86_64.tar.gz


• BEA Systems jrockit-jdk1.6.0_01-windows_ia32.zip
  ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.6.0_01-windows_ia32.zip


• BEA Systems jrockit-jdk1.6.0_01-windows_x86_64.zip
  ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.6.0_01-windows_x86_64.zip

BEA Systems JRockit 5.0

• BEA Systems jrockit-jdk1.5.0_11-linux_ia32.tar.gz
  ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-linux_ia32.tar.gz


• BEA Systems jrockit-jdk1.5.0_11-linux_ia64.tar.gz
  ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-linux_ia64.tar.gz


• BEA Systems jrockit-jdk1.5.0_11-linux_x86_64.tar.gz
  ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-linux_x86_64.tar.gz


• BEA Systems jrockit-jdk1.5.0_11-solaris_sparcv9.tar.gz
  ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-solaris_sparcv9.tar.gz


• BEA Systems jrockit-jdk1.5.0_11-windows_ia32.zip
  ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-windows_ia32.zip


• BEA Systems jrockit-jdk1.5.0_11-windows_ia64.zip
  ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-windows_ia64.zip


• BEA Systems jrockit-jdk1.5.0_11-windows_x86_64.zip
  ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-windows_x86_64.zip

Slackware Linux 11.0

• Slackware JDK: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
  ftp://ftp.slackware.com/pub/slackware/slackware-12.0/extra/jdk-6/jdk-6 u2-i586-1.tgz


• Slackware JRE: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
  ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/ jre-6u2-i586-1.tgz

Slackware Linux 10.0

• Slackware JDK: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
  ftp://ftp.slackware.com/pub/slackware/slackware-12.0/extra/jdk-6/jdk-6 u2-i586-1.tgz


• Slackware JRE: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
  ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/ jre-6u2-i586-1.tgz

Slackware Linux 10.1

• Slackware JDK: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
  ftp://ftp.slackware.com/pub/slackware/slackware-12.0/extra/jdk-6/jdk-6 u2-i586-1.tgz


• Slackware JRE: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
  ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/ jre-6u2-i586-1.tgz

Slackware Linux 10.2

• Slackware JDK: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
  ftp://ftp.slackware.com/pub/slackware/slackware-12.0/extra/jdk-6/jdk-6 u2-i586-1.tgz


• Slackware JRE: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
  ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/ jre-6u2-i586-1.tgz

Apple Mac OS X 10.4.10

• Apple Java for Mac OS X 10.4, Release 6
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16540&cat= 1&platform=osx&method=sa/JavaForMacOSX10.4Release6.dmg

Apple Mac OS X Server 10.4.10

• Apple Java for Mac OS X 10.4, Release 6
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16540&cat= 1&platform=osx&method=sa/JavaForMacOSX10.4Release6.dmg

Apple Mac OS X Server 10.4.11

• Apple Java for Mac OS X 10.4, Release 6
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16540&cat= 1&platform=osx&method=sa/JavaForMacOSX10.4Release6.dmg

Apple Mac OS X 10.4.11

• Apple Java for Mac OS X 10.4, Release 6
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16540&cat= 1&platform=osx&method=sa/JavaForMacOSX10.4Release6.dmg

Slackware Linux 8.1

• Slackware JDK: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
  ftp://ftp.slackware.com/pub/slackware/slackware-12.0/extra/jdk-6/jdk-6 u2-i586-1.tgz


• Slackware JRE: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
  ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/ jre-6u2-i586-1.tgz

Slackware Linux 9.0

• Slackware JDK: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
  ftp://ftp.slackware.com/pub/slackware/slackware-12.0/extra/jdk-6/jdk-6 u2-i586-1.tgz


• Slackware JRE: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
  ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/ jre-6u2-i586-1.tgz

Slackware Linux 9.1

• Slackware JDK: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
  ftp://ftp.slackware.com/pub/slackware/slackware-12.0/extra/jdk-6/jdk-6 u2-i586-1.tgz


• Slackware JRE: Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0
  ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/ jre-6u2-i586-1.tgz

Sun JavaDoc Tool Cross-Site Scripting Vulnerability

References:

• CVE Request: python-rsa signature forgery (Filippo Valsorda )
  
• Java SE Downloads (Sun Microsystems)
  
• RHSA-2007:0818-2 - Critical: java-1.5.0-sun security update (RedHat)
  
• RHSA-2007:0829-2 - Critical: java-1.5.0-ibm security update (RedHat)
  
• RHSA-2007:0956-3 - java-1.5.0-bea security update (RedHat)
  
• Sun Java Homepage (Sun Microsystems)
  
• BEA07-177.00 Multiple Security Vulnerabilities in the Java Runtime Environment (BEA Systems)
  
• Sun Alert ID: 102958 (Sun)