Sun Java Runtime Environment Network Access Restriction Security Bypass Vulnerability
BID:25054
Info
Sun Java Runtime Environment Network Access Restriction Security Bypass Vulnerability
| Bugtraq ID: | 25054 |
| Class: | Access Validation Error |
| CVE: |
CVE-2007-3922 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 25 2007 12:00AM |
| Updated: | Mar 19 2015 09:14AM |
| Credit: | The vendor credits John Heasman of NGSSoftware with the discovery of this vulnerability. |
| Vulnerable: |
SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 8 SuSE SUSE Linux Enterprise Server 10 SP1 SuSE SUSE Linux Enterprise SDK 10.SP1 SuSE SUSE Linux Enterprise Desktop 10 SP1 Sun SDK (Linux Production Release) 1.6 _1 Sun JRE (Windows Production Release) 1.4.2 _10 Sun JRE (Windows Production Release) 1.4.2 _09 Sun JRE (Windows Production Release) 1.4.2 _08 Sun JRE (Windows Production Release) 1.4.2 _07 Sun JRE (Windows Production Release) 1.4.2 _06 Sun JRE (Windows Production Release) 1.4.2 _05 Sun JRE (Windows Production Release) 1.4.2 _04 Sun JRE (Windows Production Release) 1.4.2 _03 Sun JRE (Windows Production Release) 1.4.2 _02 Sun JRE (Windows Production Release) 1.4.2 _01 Sun JRE (Windows Production Release) 1.4.2 Sun JRE (Windows Production Release) 1.4.2_14 Sun JRE (Windows Production Release) 1.4.2_13 Sun JRE (Windows Production Release) 1.4.2_12 Sun JRE (Windows Production Release) 1.4.2_11 Sun JRE (Solaris Production Release) 1.4.2 _10 Sun JRE (Solaris Production Release) 1.4.2 _09 Sun JRE (Solaris Production Release) 1.4.2 _08 Sun JRE (Solaris Production Release) 1.4.2 _07 Sun JRE (Solaris Production Release) 1.4.2 _06 Sun JRE (Solaris Production Release) 1.4.2 _05 Sun JRE (Solaris Production Release) 1.4.2 _04 Sun JRE (Solaris Production Release) 1.4.2 _03 Sun JRE (Solaris Production Release) 1.4.2 _02 Sun JRE (Solaris Production Release) 1.4.2 _01 Sun JRE (Solaris Production Release) 1.4.2 Sun JRE (Solaris Production Release) 1.4.2_14 Sun JRE (Solaris Production Release) 1.4.2_13 Sun JRE (Solaris Production Release) 1.4.2_12 Sun JRE (Solaris Production Release) 1.4.2_11 Sun JRE (Linux Production Release) 1.4.2 _10 Sun JRE (Linux Production Release) 1.4.2 _09 Sun JRE (Linux Production Release) 1.4.2 _08 Sun JRE (Linux Production Release) 1.4.2 _07 Sun JRE (Linux Production Release) 1.4.2 _06 Sun JRE (Linux Production Release) 1.4.2 _05 Sun JRE (Linux Production Release) 1.4.2 _04 Sun JRE (Linux Production Release) 1.4.2 _03 Sun JRE (Linux Production Release) 1.4.2 _02 Sun JRE (Linux Production Release) 1.4.2 _01 Sun JRE (Linux Production Release) 1.4.2 Sun JRE (Linux Production Release) 1.4.2_14 Sun JRE (Linux Production Release) 1.4.2_13 Sun JRE (Linux Production Release) 1.4.2_12 Sun JRE (Linux Production Release) 1.4.2_11 Sun JDK (Windows Production Release) 1.5 .0_05 Sun JDK (Windows Production Release) 1.5 .0_04 Sun JDK (Windows Production Release) 1.5 .0_03 Sun JDK (Windows Production Release) 1.5.0_11-b03 Sun JDK (Windows Production Release) 1.5.0_07-b03 Sun JDK (Windows Production Release) 1.5.0.0_11 Sun JDK (Windows Production Release) 1.5.0.0_09 Sun JDK (Windows Production Release) 1.5.0.0_08 Sun JDK (Windows Production Release) 1.5.0.0_06 Sun JDK (Solaris Production Release) 1.6.0_01 Sun JDK (Linux Production Release) 1.5 0_10 Sun JDK (Linux Production Release) 1.5 _07 Sun JDK (Linux Production Release) 1.5 _06 Sun JDK (Linux Production Release) 1.5 _02 Sun JDK (Linux Production Release) 1.5 _01 Sun JDK (Linux Production Release) 1.5 .0_05 Sun JDK (Linux Production Release) 1.5 Sun JDK (Linux Production Release) 1.4.2 _14 Sun JDK (Linux Production Release) 1.4.2 _11 Sun JDK (Linux Production Release) 1.4.2 _10 Sun JDK (Linux Production Release) 1.4.2 _09 Sun JDK (Linux Production Release) 1.4.2 _08 Sun JDK (Linux Production Release) 1.4.2 _06 Sun JDK (Linux Production Release) 1.4.2 Sun JDK (Linux Production Release) 1.5.0.0_11 Sun JDK (Linux Production Release) 1.5.0.0_09 Sun JDK (Linux Production Release) 1.5.0.0_08 Sun JDK (Linux Production Release) 1.5.0.0_04 Sun JDK (Linux Production Release) 1.5.0.0_03 S.u.S.E. UnitedLinux 1.0 S.u.S.E. SuSE Linux Standard Server 8.0 S.u.S.E. SuSE Linux School Server for i386 S.u.S.E. SUSE LINUX Retail Solution 8.0 S.u.S.E. SuSE Linux Openexchange Server 4.0 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Novell Linux POS 9 RedHat Enterprise Linux WS 2.1 RedHat Enterprise Linux Extras 4 RedHat Enterprise Linux ES 2.1 RedHat Enterprise Linux Desktop Workstation 5 client Red Hat Enterprise Linux Supplementary 5 server Red Hat Enterprise Linux AS 2.1 HP OpenView Operations 8.0 HP OpenView Operations 7.1 HP OpenView Network Node Manager 7.53 HP OpenView Network Node Manager 7.51 HP OpenView Network Node Manager 7.01 Gentoo Linux BEA Systems JRockit 1.4.2 BEA Systems JRockit R27.3.1 BEA Systems JRockit 7.0 BEA Systems JRockit 6 BEA Systems JRockit 5.0 Avaya Interactive Response 3.0 Avaya Interactive Response 2.0 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.10 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10 |
| Not Vulnerable: |
Sun SDK (Linux Production Release) 1.6 _02 Sun SDK (Linux Production Release) 1.4.2 _15 Sun JRE (Windows Production Release) 1.4.2_15 Sun JRE (Solaris Production Release) 1.4.2_15 Sun JRE (Linux Production Release) 1.4.2_15 Sun JDK (Windows Production Release) 1.5.0.0_12 Sun JDK (Solaris Production Release) 1.6.0_02 Sun JDK (Linux Production Release) 1.6.0_02 Sun JDK (Linux Production Release) 1.5.0.0_12 |
Discussion
Sun Java Runtime Environment Network Access Restriction Security Bypass Vulnerability
The Sun Java Runtime Environment is prone to a security-bypass vulnerability.
Successfully exploiting this issue will allow an attacker to connect to services on a remote user's computer without proper authorization. This may lead to other attacks.
The Sun Java Runtime Environment is prone to a security-bypass vulnerability.
Successfully exploiting this issue will allow an attacker to connect to services on a remote user's computer without proper authorization. This may lead to other attacks.
Exploit / POC
Sun Java Runtime Environment Network Access Restriction Security Bypass Vulnerability
Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Sun Java Runtime Environment Network Access Restriction Security Bypass Vulnerability
Solution:
The vendor released updates and an advisory to address this issue. Please see the references for more information.
BEA Systems JRockit R27.3.1
Apple Mac OS X 10.4.10
Apple Mac OS X Server 10.4.10
Apple Mac OS X 10.4.11
Apple Mac OS X Server 10.4.11
Solution:
The vendor released updates and an advisory to address this issue. Please see the references for more information.
BEA Systems JRockit R27.3.1
-
BEA Systems jrockit-jdk1.4.2_14-linux_ia32.tar.gz
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.4.2_14-linux_ia32.tar.gz -
BEA Systems jrockit-jdk1.4.2_14-linux_ia64.tar.gz
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.4.2_14-linux_ia64.tar.gz -
BEA Systems jrockit-jdk1.4.2_14-solaris_sparcv9.tar.gz
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.4.2_14-solaris_sparcv9.tar.gz -
BEA Systems jrockit-jdk1.4.2_14-windows_ia32.zip
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.4.2_14-windows_ia32.zip -
BEA Systems jrockit-jdk1.4.2_14-windows_ia64.zip
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.4.2_14-windows_ia64.zip -
BEA Systems jrockit-jdk1.5.0_11-linux_ia32.tar.gz
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-linux_ia32.tar.gz -
BEA Systems jrockit-jdk1.5.0_11-linux_ia64.tar.gz
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-linux_ia64.tar.gz -
BEA Systems jrockit-jdk1.5.0_11-linux_x86_64.tar.gz
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-linux_x86_64.tar.gz -
BEA Systems jrockit-jdk1.5.0_11-solaris_sparcv9.tar.gz
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-solaris_sparcv9.tar.gz -
BEA Systems jrockit-jdk1.5.0_11-windows_ia32.zip
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-windows_ia32.zip -
BEA Systems jrockit-jdk1.5.0_11-windows_ia64.zip
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-windows_ia64.zip -
BEA Systems jrockit-jdk1.5.0_11-windows_x86_64.zip
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.5.0_11-windows_x86_64.zip -
BEA Systems jrockit-jdk1.6.0_01-linux_ia32.tar.gz
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.6.0_01-linux_ia32.tar.gz -
BEA Systems jrockit-jdk1.6.0_01-linux_x86_64.tar.gz
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.6.0_01-linux_x86_64.tar.gz -
BEA Systems jrockit-jdk1.6.0_01-windows_ia32.zip
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.6.0_01-windows_ia32.zip -
BEA Systems jrockit-jdk1.6.0_01-windows_x86_64.zip
ftp://anonymous:dev2dev%[email protected]/pub/releases/security/ jrockit-jdk1.6.0_01-windows_x86_64.zip
Apple Mac OS X 10.4.10
-
Apple Java for Mac OS X 10.4, Release 6
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16540&cat= 1&platform=osx&method=sa/JavaForMacOSX10.4Release6.dmg
Apple Mac OS X Server 10.4.10
-
Apple Java for Mac OS X 10.4, Release 6
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16540&cat= 1&platform=osx&method=sa/JavaForMacOSX10.4Release6.dmg
Apple Mac OS X 10.4.11
-
Apple Java for Mac OS X 10.4, Release 6
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16540&cat= 1&platform=osx&method=sa/JavaForMacOSX10.4Release6.dmg
Apple Mac OS X Server 10.4.11
-
Apple Java for Mac OS X 10.4, Release 6
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16540&cat= 1&platform=osx&method=sa/JavaForMacOSX10.4Release6.dmg
References
Sun Java Runtime Environment Network Access Restriction Security Bypass Vulnerability
References:
References:
- Java 2 Homepage (Sun)
- RHSA-2007:0818-2 - Critical: java-1.5.0-sun security update (RedHat)
- RHSA-2007:0829-2 - Critical: java-1.5.0-ibm security update (RedHat)
- Untrusted Java applet can connect to localhost (NGSSoftware Insight Security Research [email protected])
- About the security content of Java Release 6 for Mac OS X 10.4 (Apple)
- Avaya Security Advisory ASA-2007-322: A Security Vulnerability in the Java Runti (Avaya )
- BEA07-177.00 Multiple Security Vulnerabilities in the Java Runtime Environment (BEA Systems)
- RHSA-2008:0133-6 - Moderate: IBMJava2 security update (Red Hat)
- Sun Alert ID 102995: A Security Vulnerability in the Java Runtime Environment M (Sun Microsystems)