Sun Java Web Start and Java Plug-in Multiple Privilege Escalation Vulnerabilities
BID:32620
Info
Sun Java Web Start and Java Plug-in Multiple Privilege Escalation Vulnerabilities
| Bugtraq ID: | 32620 |
| Class: | Unknown |
| CVE: |
CVE-2008-2086 CVE-2008-5339 CVE-2008-5340 CVE-2008-5341 CVE-2008-5342 CVE-2008-5344 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 03 2008 12:00AM |
| Updated: | Feb 15 2010 09:51AM |
| Credit: | Peter Csepely, Virtual Security Research (VSR), Peter Csepely, and John Heasman |
| Vulnerable: |
VMWare VirtualCenter 2.0.2 VMWare VirtualCenter 2.5 VMWare vCenter 4.0 VMWare ESXi Server 4.0 VMWare ESX Server 3.0.3 VMWare ESX Server 4.0 VMWare ESX Server 3.5 SuSE SUSE Linux Enterprise Server 11 DEBUGINFO SuSE SUSE Linux Enterprise Server 11 SuSE SUSE Linux Enterprise Server 10 SP2 SuSE SUSE Linux Enterprise SDK 10 SP2 SuSE SUSE Linux Enterprise Desktop 10 SP2 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 Sun SDK (Windows Production Release) 1.4.2 _15 Sun SDK (Windows Production Release) 1.4.2 _10 Sun SDK (Windows Production Release) 1.4.2 _09 Sun SDK (Windows Production Release) 1.4.2 _08 Sun SDK (Windows Production Release) 1.4.2 _05 Sun SDK (Windows Production Release) 1.4.2 _04 Sun SDK (Windows Production Release) 1.4.2 _03 Sun SDK (Windows Production Release) 1.3.1 _21 Sun SDK (Windows Production Release) 1.3.1 _20 Sun SDK (Windows Production Release) 1.3.1 _15 Sun SDK (Windows Production Release) 1.3.1 _14 Sun SDK (Windows Production Release) 1.3.1 _13 Sun SDK (Windows Production Release) 1.3.1 _12 Sun SDK (Windows Production Release) 1.3.1 _11 Sun SDK (Windows Production Release) 1.3.1 _10 Sun SDK (Windows Production Release) 1.3.1 _09 Sun SDK (Windows Production Release) 1.3.1 _08 Sun SDK (Windows Production Release) 1.3.1 _07 Sun SDK (Windows Production Release) 1.3.1 _06 Sun SDK (Windows Production Release) 1.3.1 _05 Sun SDK (Windows Production Release) 1.3.1 _04 Sun SDK (Windows Production Release) 1.3.1 _03 Sun SDK (Windows Production Release) 1.3.1 _02 Sun SDK (Windows Production Release) 1.3.1 _01a Sun SDK (Windows Production Release) 1.4.2_18 Sun SDK (Windows Production Release) 1.4.2_17 Sun SDK (Windows Production Release) 1.4.2_16 Sun SDK (Windows Production Release) 1.4.2_15 Sun SDK (Windows Production Release) 1.4.2_14 Sun SDK (Windows Production Release) 1.4.2_13 Sun SDK (Windows Production Release) 1.4.2_12 Sun SDK (Windows Production Release) 1.4.2_11 Sun SDK (Windows Production Release) 1.3.1_23 Sun SDK (Windows Production Release) 1.3.1_22 Sun SDK (Solaris Production Release) 1.4.2 _15 Sun SDK (Solaris Production Release) 1.4.2 _10 Sun SDK (Solaris Production Release) 1.4.2 _09 Sun SDK (Solaris Production Release) 1.4.2 _08 Sun SDK (Solaris Production Release) 1.4.2 _05 Sun SDK (Solaris Production Release) 1.4.2 _04 Sun SDK (Solaris Production Release) 1.4.2 _03 Sun SDK (Solaris Production Release) 1.3.1 _23 Sun SDK (Solaris Production Release) 1.3.1 _22 Sun SDK (Solaris Production Release) 1.3.1 _21 Sun SDK (Solaris Production Release) 1.3.1 _20 Sun SDK (Solaris Production Release) 1.3.1 _15 Sun SDK (Solaris Production Release) 1.3.1 _14 Sun SDK (Solaris Production Release) 1.3.1 _13 Sun SDK (Solaris Production Release) 1.3.1 _12 Sun SDK (Solaris Production Release) 1.3.1 _11 Sun SDK (Solaris Production Release) 1.3.1 _10 Sun SDK (Solaris Production Release) 1.3.1 _09 Sun SDK (Solaris Production Release) 1.3.1 _08 Sun SDK (Solaris Production Release) 1.3.1 _07 Sun SDK (Solaris Production Release) 1.3.1 _06 Sun SDK (Solaris Production Release) 1.3.1 _05 Sun SDK (Solaris Production Release) 1.3.1 _03 Sun SDK (Solaris Production Release) 1.3.1 _02 Sun SDK (Solaris Production Release) 1.3.1 _01 Sun SDK (Solaris Production Release) 1.4.2_18 Sun SDK (Solaris Production Release) 1.4.2_17 Sun SDK (Solaris Production Release) 1.4.2_16 Sun SDK (Solaris Production Release) 1.4.2_15 Sun SDK (Solaris Production Release) 1.4.2_14 Sun SDK (Solaris Production Release) 1.4.2_13 Sun SDK (Solaris Production Release) 1.4.2_12 Sun SDK (Solaris Production Release) 1.4.2_11 Sun SDK (Linux Production Release) 1.4.2 _15 Sun SDK (Linux Production Release) 1.4.2 _10 Sun SDK (Linux Production Release) 1.4.2 _09 Sun SDK (Linux Production Release) 1.4.2 _08 Sun SDK (Linux Production Release) 1.4.2 _05 Sun SDK (Linux Production Release) 1.4.2 _04 Sun SDK (Linux Production Release) 1.4.2 _03 Sun SDK (Linux Production Release) 1.4.2 _02 Sun SDK (Linux Production Release) 1.4.2 _01 Sun SDK (Linux Production Release) 1.3.1 _23 Sun SDK (Linux Production Release) 1.3.1 _22 Sun SDK (Linux Production Release) 1.3.1 _21 Sun SDK (Linux Production Release) 1.3.1 _20 Sun SDK (Linux Production Release) 1.3.1 _15 Sun SDK (Linux Production Release) 1.3.1 _14 Sun SDK (Linux Production Release) 1.3.1 _13 Sun SDK (Linux Production Release) 1.3.1 _12 Sun SDK (Linux Production Release) 1.3.1 _11 Sun SDK (Linux Production Release) 1.3.1 _10 Sun SDK (Linux Production Release) 1.3.1 _09 Sun SDK (Linux Production Release) 1.3.1 _08 Sun SDK (Linux Production Release) 1.3.1 _07 Sun SDK (Linux Production Release) 1.3.1 _06 Sun SDK (Linux Production Release) 1.3.1 _05 Sun SDK (Linux Production Release) 1.3.1 _03 Sun SDK (Linux Production Release) 1.3.1 _02 Sun SDK (Linux Production Release) 1.3.1 _01 Sun SDK (Linux Production Release) 1.4.2_18 Sun SDK (Linux Production Release) 1.4.2_17 Sun SDK (Linux Production Release) 1.4.2_16 Sun SDK (Linux Production Release) 1.4.2_15 Sun SDK (Linux Production Release) 1.4.2_14 Sun SDK (Linux Production Release) 1.4.2_13 Sun SDK (Linux Production Release) 1.4.2_12 Sun SDK (Linux Production Release) 1.4.2_11 Sun JRE (Linux Production Release) 1.6 _10 Sun JRE (Linux Production Release) 1.6 _07 Sun JRE (Linux Production Release) 1.6 _06 Sun JRE (Linux Production Release) 1.6 _05 Sun JRE (Linux Production Release) 1.6 _04 Sun JRE (Linux Production Release) 1.5 _16 Sun JRE (Linux Production Release) 1.5 _15 Sun JRE 6.0 Update 3 Sun JRE 6.0 Update 2 Sun JRE 6.0 Update 1 Sun JRE 5.0 Update 9 Sun JRE 5.0 Update 8 Sun JRE 5.0 Update 7 Sun JRE 5.0 Update 6 Sun JRE 5.0 Update 14 Sun JRE 5.0 Update 13 Sun JRE 5.0 Update 12 Sun JRE 5.0 Update 11 Sun JRE 5.0 Update 10 Sun JDK (Solaris Production Release) 1.5 _15 Sun JDK (Linux Production Release) 1.6 _10 Sun JDK (Linux Production Release) 1.6 _07 Sun JDK (Linux Production Release) 1.6 _06 Sun JDK (Linux Production Release) 1.6 _05 Sun JDK (Linux Production Release) 1.6 _04 Sun JDK (Linux Production Release) 1.5 _14 Sun JDK (Linux Production Release) 1.5 _02 Sun JDK (Linux Production Release) 1.5 _01 Sun JDK 6.0 Update 3 Sun JDK 6.0 Update 2 Sun JDK 6.0 Update 1 Sun JDK 5.0 Update 9 Sun JDK 5.0 Update 8 Sun JDK 5.0 Update 7 Sun JDK 5.0 Update 6 Sun JDK 5.0 Update 5 Sun JDK 5.0 Update 4 Sun JDK 5.0 Update 3 Sun JDK 5.0 Update 16 Sun JDK 5.0 Update 13 Sun JDK 5.0 Update 12 Sun JDK 5.0 Update 11 Sun JDK 5.0 Update 10 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Novell Linux POS 9 S.u.S.E. Novell Linux Desktop 9 S.u.S.E. Linux Enterprise Server 9 S.u.S.E. CORE 9 RedHat Red Hat Network Satellite (for RHEL 4) 5.1 RedHat Enterprise Linux WS Extras 4 RedHat Enterprise Linux WS Extras 3 RedHat Enterprise Linux Extras 4 RedHat Enterprise Linux Extras 3 RedHat Enterprise Linux ES Extras 4 RedHat Enterprise Linux ES Extras 3 RedHat Enterprise Linux AS Extras 4 RedHat Enterprise Linux AS Extras 3 RedHat Desktop Extras 4 RedHat Desktop Extras 3 Red Hat Enterprise Linux Supplementary 5 server Red Hat Enterprise Linux Desktop Supplementary 5 client Nortel Networks Self-Service WVADS 0 Nortel Networks Self-Service VoiceXML 0 Nortel Networks Self-Service Speech Server 0 Nortel Networks Self-Service Peri Application 0 Nortel Networks Self-Service MPS 500 0 Nortel Networks Self-Service MPS 1000 0 Nortel Networks Self-Service MPS 100 0 Nortel Networks Self-Service Media Processing Server 0 Nortel Networks Self-Service CCXML 0 Nortel Networks ENSM- Enterprise NMS 0 Nortel Networks Contact Center - CCT 0 HP OpenView Network Node Manager 7.53 HP OpenView Network Node Manager 7.51 HP HP-UX B.11.31 HP HP-UX B.11.23 HP HP-UX B.11.11 Gentoo Linux Avaya Proactive Contact 3.0.2 Apple Mac OS X Server 10.5.7 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.7 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10 Apple Mac OS X 10.4.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.5 |
| Not Vulnerable: |
Sun SDK (Windows Production Release) 1.4.2_19 Sun SDK (Windows Production Release) 1.3.1_24 Sun SDK (Solaris Production Release) 1.4.2_19 Sun SDK (Solaris Production Release) 1.3.1_24 Sun SDK (Linux Production Release) 1.4.2_19 Sun SDK (Linux Production Release) 1.3.1_24 Sun JRE 6.0 Update 11 Sun JRE 5.0 Update 17 Sun JDK (Linux Production Release) 1.6 _11 Sun JDK (Linux Production Release) 1.5 _17 |
Discussion
Sun Java Web Start and Java Plug-in Multiple Privilege Escalation Vulnerabilities
Sun Java Web Start and Java Plug-in are prone to multiple privilege-escalation vulnerabilities.
Successful exploits may allow attackers to violate the same-origin policy, obtain sensitive information, bypass security, or read, write, and execute arbitrary files in the context of the user running a vulnerable application. This may result in a compromise of the underlying system.
The following versions are affected:
JDK and JRE 6 Update 10 and earlier
JDK and JRE 5.0 Update 16 and earlier
SDK and JRE 1.4.2_18 and earlier
SDK and JRE 1.3.1_23 and earlier
Sun Java Web Start and Java Plug-in are prone to multiple privilege-escalation vulnerabilities.
Successful exploits may allow attackers to violate the same-origin policy, obtain sensitive information, bypass security, or read, write, and execute arbitrary files in the context of the user running a vulnerable application. This may result in a compromise of the underlying system.
The following versions are affected:
JDK and JRE 6 Update 10 and earlier
JDK and JRE 5.0 Update 16 and earlier
SDK and JRE 1.4.2_18 and earlier
SDK and JRE 1.3.1_23 and earlier
Exploit / POC
Sun Java Web Start and Java Plug-in Multiple Privilege Escalation Vulnerabilities
Currently we are not aware of any working exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Note that some of the issues may not require an exploit.
Currently we are not aware of any working exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Note that some of the issues may not require an exploit.
Solution / Fix
Sun Java Web Start and Java Plug-in Multiple Privilege Escalation Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
S.u.S.E. openSUSE 11.0
S.u.S.E. openSUSE 11.1
Apple Mac OS X 10.4.10
Apple Mac OS X 10.4.11
Apple Mac OS X Server 10.4.11
Apple Mac OS X 10.4.2
Apple Mac OS X 10.4.3
Apple Mac OS X 10.4.4
Apple Mac OS X Server 10.5.3
Apple Mac OS X Server 10.5.5
Solution:
Updates are available. Please see the references for more information.
S.u.S.E. openSUSE 11.0
-
S.u.S.E. java-1_5_0-sun-1.5.0_update17-0.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 5_0-sun-1.5.0_update17-0.1.i586.rpm -
S.u.S.E. java-1_5_0-sun-alsa-1.5.0_update17-0.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 5_0-sun-alsa-1.5.0_update17-0.1.i586.rpm -
S.u.S.E. java-1_5_0-sun-demo-1.5.0_update17-0.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 5_0-sun-demo-1.5.0_update17-0.1.i586.rpm -
S.u.S.E. java-1_5_0-sun-devel-1.5.0_update17-0.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 5_0-sun-devel-1.5.0_update17-0.1.i586.rpm -
S.u.S.E. java-1_5_0-sun-jdbc-1.5.0_update17-0.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 5_0-sun-jdbc-1.5.0_update17-0.1.i586.rpm -
S.u.S.E. java-1_5_0-sun-plugin-1.5.0_update17-0.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 5_0-sun-plugin-1.5.0_update17-0.1.i586.rpm -
S.u.S.E. java-1_5_0-sun-src-1.5.0_update17-0.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 5_0-sun-src-1.5.0_update17-0.1.i586.rpm -
S.u.S.E. java-1_6_0-sun-1.6.0.u11-0.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 6_0-sun-1.6.0.u11-0.1.i586.rpm -
S.u.S.E. java-1_6_0-sun-alsa-1.6.0.u11-0.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 6_0-sun-alsa-1.6.0.u11-0.1.i586.rpm -
S.u.S.E. java-1_6_0-sun-demo-1.6.0.u11-0.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 6_0-sun-demo-1.6.0.u11-0.1.i586.rpm -
S.u.S.E. java-1_6_0-sun-devel-1.6.0.u11-0.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 6_0-sun-devel-1.6.0.u11-0.1.i586.rpm -
S.u.S.E. java-1_6_0-sun-jdbc-1.6.0.u11-0.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 6_0-sun-jdbc-1.6.0.u11-0.1.i586.rpm -
S.u.S.E. java-1_6_0-sun-plugin-1.6.0.u11-0.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 6_0-sun-plugin-1.6.0.u11-0.1.i586.rpm
S.u.S.E. openSUSE 11.1
-
S.u.S.E. java-1_5_0-sun-1.5.0_update17-1.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_ 5_0-sun-1.5.0_update17-1.1.i586.rpm -
S.u.S.E. java-1_5_0-sun-alsa-1.5.0_update17-1.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_ 5_0-sun-alsa-1.5.0_update17-1.1.i586.rpm -
S.u.S.E. java-1_5_0-sun-devel-1.5.0_update17-1.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_ 5_0-sun-devel-1.5.0_update17-1.1.i586.rpm -
S.u.S.E. java-1_5_0-sun-jdbc-1.5.0_update17-1.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_ 5_0-sun-jdbc-1.5.0_update17-1.1.i586.rpm -
S.u.S.E. java-1_5_0-sun-plugin-1.5.0_update17-1.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_ 5_0-sun-plugin-1.5.0_update17-1.1.i586.rpm -
S.u.S.E. java-1_6_0-sun-1.6.0.u11-1.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_ 6_0-sun-1.6.0.u11-1.1.i586.rpm -
S.u.S.E. java-1_6_0-sun-alsa-1.6.0.u11-1.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_ 6_0-sun-alsa-1.6.0.u11-1.1.i586.rpm -
S.u.S.E. java-1_6_0-sun-devel-1.6.0.u11-1.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_ 6_0-sun-devel-1.6.0.u11-1.1.i586.rpm -
S.u.S.E. java-1_6_0-sun-jdbc-1.6.0.u11-1.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_ 6_0-sun-jdbc-1.6.0.u11-1.1.i586.rpm -
S.u.S.E. java-1_6_0-sun-plugin-1.6.0.u11-1.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_ 6_0-sun-plugin-1.6.0.u11-1.1.i586.rpm
Apple Mac OS X 10.4.10
-
Apple Java_for_Mac_OS_X_10_4__Release_8
http://support.apple.com/downloads/_Java_for_Mac_OS_X_10_4__Release_8
Apple Mac OS X 10.4.11
-
Apple Java_for_Mac_OS_X_10_4__Release_8
http://support.apple.com/downloads/_Java_for_Mac_OS_X_10_4__Release_8 -
Apple JavaForMacOSX10.4Release9.dmg
http://support.apple.com/downloads/DL847/en_US/JavaForMacOSX10.4Releas e9.dmg
Apple Mac OS X Server 10.4.11
-
Apple JavaForMacOSX10.4Release9.dmg
http://support.apple.com/downloads/DL847/en_US/JavaForMacOSX10.4Releas e9.dmg
Apple Mac OS X 10.4.2
-
Apple Java_for_Mac_OS_X_10_4__Release_8
http://support.apple.com/downloads/_Java_for_Mac_OS_X_10_4__Release_8
Apple Mac OS X 10.4.3
-
Apple Java_for_Mac_OS_X_10_4__Release_8
http://support.apple.com/downloads/_Java_for_Mac_OS_X_10_4__Release_8
Apple Mac OS X 10.4.4
-
Apple Java_for_Mac_OS_X_10_4__Release_8
http://support.apple.com/downloads/_Java_for_Mac_OS_X_10_4__Release_8
Apple Mac OS X Server 10.5.3
-
Apple Java_for_Mac_OS_X_10_5_Update_3_
http://support.apple.com/downloads/Java_for_Mac_OS_X_10_5_Update_3_
Apple Mac OS X Server 10.5.5
-
Apple Java_for_Mac_OS_X_10_5_Update_3_
http://support.apple.com/downloads/Java_for_Mac_OS_X_10_5_Update_3_
References
Sun Java Web Start and Java Plug-in Multiple Privilege Escalation Vulnerabilities
References:
References:
- [Security-announce] VMSA-2009-0014 VMware ESX patches for DHCP, Service Console (VMware)
- Java Web Start Homepage (Sun Microsystems)
- CVE-2008-2086: Java Web Start File Inclusion via System Properties Override (VSR Advisories
- ASA-2009-084 HPSBUX02411 SSRT080111 rev.1 - HP-UX Running Java, Remote Execution (Avaya)
- Multiple Security Vulnerabilities in Java Web Start and Java Plug-in May Allow P (Sun)
- Nortel Response to Sun Java Runtime Environment and Java Development Kit Multipl (Nortel Networks)
- RHSA-2008:1018-4 java-1.6.0-sun security update (Red Hat)
- RHSA-2008:1025-4 java-1.5.0-sun security update (Red Hat)
- Sun Java Web Start and Applet Multiple Sandbox Bypass Vulnerabilities (ZDI)