OpenJDK 'IcedTea' Multiple Signers Privilege Escalation Vulnerability

Bugtraq ID:	46439
Class:	Access Validation Error
CVE:	CVE-2011-0706
Remote:	Yes
Local:	No
Published:	Feb 17 2011 12:00AM
Updated:	Apr 13 2015 09:17PM
Credit:	Jiri Vanek
Vulnerable:	Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 ARM Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 OpenJDK OpenJDK 1.6 OpenJDK OpenJDK 6 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 IcedTea IcedTea 1.7 IcedTea IcedTea 1.9.5 IcedTea IcedTea 1.9.4 IcedTea IcedTea 1.8.5 IcedTea IcedTea 1.8.4 IcedTea IcedTea 1.7.8 IcedTea IcedTea 1.7.7 Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0
Not Vulnerable:

OpenJDK 'IcedTea' Multiple Signers Privilege Escalation Vulnerability

OpenJDK 'IcedTea' plugin is prone to a privilege-escalation vulnerability.

Successful exploits will allow attackers to bypass certain security protections and execute arbitrary code with elevated privileges.

OpenJDK 'IcedTea' Multiple Signers Privilege Escalation Vulnerability

References:

• OpenJDK Homepage (Oracle)