BID:4313

Multiple Vendor Java Virtual Machine Bytecode Verifier Vulnerability

Info

Multiple Vendor Java Virtual Machine Bytecode Verifier Vulnerability

Bugtraq ID:	4313
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 19 2002 12:00AM
Updated:	Mar 19 2002 12:00AM
Credit:	Published in Microsoft Security Bulletin MS02-013 and Sun Microsystems, Inc. Security Bulletin #00218.
Vulnerable:	Sun SDK (Windows Production Release) 1.3.1 _01a Sun SDK (Windows Production Release) 1.3 .0_05 Sun SDK (Windows Production Release) 1.2.2 _010 Sun SDK (Solaris Reference Release) 1.2.2 _010 Sun SDK (Solaris Production Release) 1.3.1 _01 Sun SDK (Solaris Production Release) 1.3 _05 Sun SDK (Solaris Production Release) 1.2.2 _10 Sun SDK (Linux Production Release) 1.3.1 _01 Sun SDK (Linux Production Release) 1.3 _05 Sun SDK (Linux Production Release) 1.2.2 _010 Sun JRE (Windows Production Release) 1.3.1 _01a Sun JRE (Windows Production Release) 1.3 .0_04 Sun JRE (Windows Production Release) 1.2.2 _010 Sun JRE (Windows Production Release) 1.1.8 _008 Sun JRE (Solaris Reference Release) 1.2.2 _010 Sun JRE (Solaris Reference Release) 1.1.8 _008 Sun JRE (Solaris Production Release) 1.3.1 _01 Sun JRE (Solaris Production Release) 1.3 .0_05 Sun JRE (Solaris Production Release) 1.2.2 _010 Sun JRE (Solaris Production Release) 1.1.8 _14 Sun JRE (Linux Production Release) 1.3.1 _01 Sun JRE (Linux Production Release) 1.3 .0_05 Sun JRE (Linux Production Release) 1.2.2 _011 Sun JDK (Windows Production Release) 1.1.8 _008 Sun JDK (Solaris Reference Release) 1.1.8 _008 Sun JDK (Solaris Production Release) 1.1.8 _14 Microsoft Virtual Machine 3802 Series + Microsoft Internet Explorer 5.0.1 + Microsoft Internet Explorer 4.0.1 + Microsoft Internet Explorer 5.5 + Microsoft Internet Explorer 5.0 + Microsoft Internet Explorer 4.0 HP Java SDK/RTE for HP-UX PA-RISC 1.3 + HP HP-UX 11.20 + HP HP-UX 11.11 + HP HP-UX 11.0 + HP HP-UX (VVOS) 11.0 4 HP Java SDK/RTE for HP-UX PA-RISC 1.2.2 + HP HP-UX 11.20 + HP HP-UX 11.11 + HP HP-UX 11.0 + HP HP-UX (VVOS) 11.0 4 HP Java JRE/JDK for HP-UX 1.1.8 + HP HP-UX 10.20 Compaq Tru64 5.1 Compaq Tru64 5.0 a Compaq Tru64 4.0 g Compaq Tru64 4.0 f Compaq Remote Insight Lights-Out Edition Compaq OpenVMS 7.3 Alpha Compaq OpenVMS 7.2.1 Alpha Compaq OpenVMS 7.2 -2 Alpha Compaq OpenVMS 7.2 -1H2 Alpha Compaq OpenVMS 7.2 -1H1 Alpha Compaq OpenVMS 7.2 Alpha Compaq Management Agents 4.37 E Compaq Management Agents 4.36 j Compaq Management Agents 4.36 E Compaq Management Agents 4.35 j Compaq Management Agents 4.30 j Compaq Integrated Lights-Out on ProLiant DL360 G2 Compaq Insight Manager XE 2.2 Compaq Insight Manager XE 2.1 c Compaq Insight Manager XE 2.1 b Compaq Insight Manager XE 2.1 Compaq Insight Manager XE 1.21 Compaq Insight Manager XE 1.0 Compaq Insight Manager 7.0

Not Vulnerable:	Sun SDK (Windows Production Release) 1.4 Sun SDK (Solaris Production Release) 1.4 Sun SDK (Linux Production Release) 1.4 Sun JRE (Windows Production Release) 1.4 Sun JRE (Solaris Production Release) 1.4 Sun JRE (Linux Production Release) 1.4 Microsoft Virtual Machine 3805 Series - Microsoft Internet Explorer 5.0.1 SP2 - Microsoft Internet Explorer 5.0.1 SP1 - Microsoft Internet Explorer 5.0.1 - Microsoft Internet Explorer 6.0 - Microsoft Internet Explorer 5.5 SP2 - Microsoft Internet Explorer 5.5 SP1 - Microsoft Internet Explorer 5.5 - Microsoft Internet Explorer 5.0 HP Java SDK/RTE for HP-UX PA-RISC 1.3.1 .00 + HP HP-UX 11.20 + HP HP-UX 11.11 + HP HP-UX 11.0 + HP HP-UX (VVOS) 11.0 4 HP Java SDK/RTE for HP-UX PA-RISC 1.2.2 .12 + HP HP-UX 11.20 + HP HP-UX 11.11 + HP HP-UX 11.0 + HP HP-UX (VVOS) 11.0 4 HP Java JRE/JDK for HP-UX 1.1.8 .06 + HP HP-UX 10.20 Compaq Insight Manager 7.0 SP1

Exploit / POC

Multiple Vendor Java Virtual Machine Bytecode Verifier Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.