Sun Java Virtual Machine Illegal Access To Object Methods Vulnerability

BID:6681

Info

Sun Java Virtual Machine Illegal Access To Object Methods Vulnerability

Bugtraq ID: 6681
Class: Unknown
CVE:
Remote: Yes
Local: No
Published: Jan 24 2003 12:00AM
Updated: Jan 24 2003 12:00AM
Credit: This vulnerability credited to Alessandro Coglio.
Vulnerable: Sun SDK (Windows Production Release) 1.4 .0_02
Sun SDK (Windows Production Release) 1.4
Sun SDK (Windows Production Release) 1.3.1 _05
Sun SDK (Windows Production Release) 1.3.1 _03
Sun SDK (Windows Production Release) 1.3.1 _01a
Sun SDK (Windows Production Release) 1.3 .0_05
Sun SDK (Windows Production Release) 1.3 .0_02
Sun SDK (Windows Production Release) 1.2.2 _013
Sun SDK (Windows Production Release) 1.2.2 _011
Sun SDK (Windows Production Release) 1.2.2 _010
Sun SDK (Solaris Reference Release) 1.2.2 _013
Sun SDK (Solaris Reference Release) 1.2.2 _011
Sun SDK (Solaris Reference Release) 1.2.2 _010
Sun SDK (Solaris Production Release) 1.4 .0_02
Sun SDK (Solaris Production Release) 1.4
Sun SDK (Solaris Production Release) 1.3.1 _05
Sun SDK (Solaris Production Release) 1.3.1 _03
Sun SDK (Solaris Production Release) 1.3.1 _01
Sun SDK (Solaris Production Release) 1.3 _05
Sun SDK (Solaris Production Release) 1.3 _02
Sun SDK (Solaris Production Release) 1.2.2 _13
Sun SDK (Solaris Production Release) 1.2.2 _10
Sun SDK (Solaris Production Release) 1.2.2 _07a
Sun SDK (Solaris Production Release) 1.2.2 _011
Sun SDK (Solaris Production Release) 1.2.2
Sun SDK (Linux Production Release) 1.4 .0_02
Sun SDK (Linux Production Release) 1.4
Sun SDK (Linux Production Release) 1.3.1 _05
Sun SDK (Linux Production Release) 1.3.1 _03
Sun SDK (Linux Production Release) 1.3.1 _01
Sun SDK (Linux Production Release) 1.3 _05
Sun SDK (Linux Production Release) 1.3 _02
Sun SDK (Linux Production Release) 1.2.2 _13
Sun SDK (Linux Production Release) 1.2.2 _011
Sun SDK (Linux Production Release) 1.2.2 _010
Sun JRE (Windows Production Release) 1.4 .0_02
Sun JRE (Windows Production Release) 1.4
Sun JRE (Windows Production Release) 1.3.1 _05
Sun JRE (Windows Production Release) 1.3.1 _03
+ Macromedia ColdFusion Server MX Professional
 + Macromedia ColdFusion Server MX Enterprise
 + Macromedia ColdFusion Server MX Developer
 Sun JRE (Windows Production Release) 1.3.1 _01a
Sun JRE (Windows Production Release) 1.3 .0_05
Sun JRE (Windows Production Release) 1.3 .0_02
Sun JRE (Windows Production Release) 1.3
Sun JRE (Windows Production Release) 1.2.2 _013
Sun JRE (Windows Production Release) 1.2.2 _011
Sun JRE (Windows Production Release) 1.2.2 _010
Sun JRE (Windows Production Release) 1.2.2
Sun JRE (Solaris Reference Release) 1.2.2 _013
Sun JRE (Solaris Reference Release) 1.2.2 _011
Sun JRE (Solaris Reference Release) 1.2.2 _010
Sun JRE (Solaris Reference Release) 1.2.2
Sun JRE (Solaris Production Release) 1.4 .0_02
Sun JRE (Solaris Production Release) 1.4
Sun JRE (Solaris Production Release) 1.3.1 _05
Sun JRE (Solaris Production Release) 1.3.1 _03
+ Macromedia ColdFusion Server MX Professional
 + Macromedia ColdFusion Server MX Enterprise
 + Macromedia ColdFusion Server MX Developer
 Sun JRE (Solaris Production Release) 1.3.1 _01
Sun JRE (Solaris Production Release) 1.3 .0_05
Sun JRE (Solaris Production Release) 1.3 .0_02
Sun JRE (Solaris Production Release) 1.3
Sun JRE (Solaris Production Release) 1.2.2 _013
Sun JRE (Solaris Production Release) 1.2.2 _011
Sun JRE (Solaris Production Release) 1.2.2 _010
Sun JRE (Solaris Production Release) 1.2.2
Sun JRE (Linux Production Release) 1.4 .0_02
Sun JRE (Linux Production Release) 1.4
Sun JRE (Linux Production Release) 1.3.1 _05
Sun JRE (Linux Production Release) 1.3.1 _03
+ Macromedia ColdFusion Server MX Professional
 + Macromedia ColdFusion Server MX Enterprise
 + Macromedia ColdFusion Server MX Developer
 Sun JRE (Linux Production Release) 1.3.1 _01
Sun JRE (Linux Production Release) 1.3.1
Sun JRE (Linux Production Release) 1.3 .0_05
Sun JRE (Linux Production Release) 1.3 .0_02
Sun JRE (Linux Production Release) 1.3 .0_01
Sun JRE (Linux Production Release) 1.2.2 _013
Sun JRE (Linux Production Release) 1.2.2 _011
Sun JRE (Linux Production Release) 1.2.2 _010
Sun JRE (Linux Production Release) 1.2.2 _003
SGI IRIX 6.5.19
SGI IRIX 6.5.18
SGI IRIX 6.5.17
SGI IRIX 6.5.16
SGI IRIX 6.5.15
SGI IRIX 6.5.14
SGI IRIX 6.5.13
SGI IRIX 6.5.12
SGI IRIX 6.5.11
SGI IRIX 6.5.10
SGI IRIX 6.5.9
SGI IRIX 6.5.8
SGI IRIX 6.5.7
SGI IRIX 6.5.6
SGI IRIX 6.5.5
SGI IRIX 6.5.4
SGI IRIX 6.5.3
SGI IRIX 6.5.2
SGI IRIX 6.5.1
SGI IRIX 6.5
HP Java Web Start 1.0.1 .01
- HP HP-UX 11.20
- HP HP-UX 11.11
- HP HP-UX 11.0 4
 - HP HP-UX 11.0
- HP HP-UX 11i v1
 HP Java Web Start 1.0.1 .00
- HP HP-UX 11.20
- HP HP-UX 11.11
- HP HP-UX 11.0 4
 - HP HP-UX 11.0
- HP HP-UX 11i v1
 HP Java Web Start 1.0 .00
- HP HP-UX 11.20
- HP HP-UX 11.11
- HP HP-UX 11.0 4
 - HP HP-UX 11.0
- HP HP-UX 11i v1
 HP HP-UX (VVOS) 11.0 4
HP HP-UX 11.22
HP HP-UX 11.11
HP HP-UX 11.0
Not Vulnerable: Sun SDK (Windows Production Release) 1.4 .0_03
Sun SDK (Windows Production Release) 1.3.1 _06
Sun SDK (Windows Production Release) 1.2.2 _014
Sun SDK (Solaris Reference Release) 1.2.2 _014
Sun SDK (Solaris Production Release) 1.4 .0_03
Sun SDK (Solaris Production Release) 1.3.1 _06
Sun SDK (Solaris Production Release) 1.2.2 _14
Sun SDK (Linux Production Release) 1.4 .0_03
Sun SDK (Linux Production Release) 1.3.1 _06
Sun SDK (Linux Production Release) 1.2.2 _014
Sun JRE (Windows Production Release) 1.4 .0_03
Sun JRE (Windows Production Release) 1.3.1 _06
Sun JRE (Windows Production Release) 1.2.2 _014
Sun JRE (Solaris Reference Release) 1.2.2 _014
Sun JRE (Solaris Production Release) 1.4 .0_03
Sun JRE (Solaris Production Release) 1.3.1 _06
Sun JRE (Solaris Production Release) 1.2.2 _014
Sun JRE (Linux Production Release) 1.4 .0_03
Sun JRE (Linux Production Release) 1.3.1 _06
Sun JRE (Linux Production Release) 1.2.2 _014
HP Java Web Start 1.0.1 .02

Discussion

Sun Java Virtual Machine Illegal Access To Object Methods Vulnerability

A vulnerability has been reported in the Sun Java Virtual Machine that may allow illegal access to protected fields or methods of an object.

Precise technical details of this vulnerability are not currently known however this vulnerability may have security implications.

It may be possible to execute commands on target systems if this vulnerability is exploited in conjunction with others.

Exploit / POC

Sun Java Virtual Machine Illegal Access To Object Methods Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

Sun Java Virtual Machine Illegal Access To Object Methods Vulnerability

Solution:
HP has released an advisory (HPSBUX0301-239) which addresses this issue. The advisory details manual upgrade steps for various Java releases on HP-UX platforms, in addition to other fix information. Please see the attached advisory for specific details on how to obtain and apply vendor fixes.

SGI has released an advisory (20030303-01-I) which contains fixes. Please see the attached advisory for details on applying fixes.

Sun has released fixes which address this vulnerability. Further information on obtaining fixes may be found in the attached Sun Alert Notification reference (Sun Alert ID: 50083).


Sun JRE (Linux Production Release) 1.2.2 _013

Sun JRE (Solaris Reference Release) 1.2.2 _010

Sun JRE (Solaris Reference Release) 1.2.2

Sun JRE (Solaris Reference Release) 1.2.2 _013

Sun JRE (Linux Production Release) 1.2.2 _011

Sun JRE (Solaris Production Release) 1.2.2 _013

Sun JRE (Windows Production Release) 1.2.2 _011

Sun SDK (Solaris Production Release) 1.2.2 _011

Sun JRE (Linux Production Release) 1.2.2 _010

Sun JRE (Solaris Production Release) 1.2.2

Sun SDK (Solaris Production Release) 1.2.2 _13

Sun JRE (Solaris Production Release) 1.2.2 _010

Sun JRE (Linux Production Release) 1.2.2 _003

Sun SDK (Linux Production Release) 1.2.2 _011

Sun SDK (Solaris Production Release) 1.2.2 _07a

Sun JRE (Solaris Reference Release) 1.2.2 _011

Sun SDK (Linux Production Release) 1.2.2 _13

Sun JRE (Solaris Production Release) 1.2.2 _011

Sun JRE (Windows Production Release) 1.2.2

Sun SDK (Windows Production Release) 1.2.2 _010

Sun JRE (Windows Production Release) 1.2.2 _010

Sun SDK (Solaris Reference Release) 1.2.2 _013

Sun SDK (Linux Production Release) 1.2.2 _010

Sun SDK (Solaris Production Release) 1.2.2 _10

Sun SDK (Solaris Production Release) 1.2.2

Sun SDK (Windows Production Release) 1.2.2 _013

Sun JRE (Windows Production Release) 1.2.2 _013

Sun JRE (Windows Production Release) 1.3 .0_02

Sun JRE (Linux Production Release) 1.3 .0_02

Sun JRE (Windows Production Release) 1.3

Sun SDK (Linux Production Release) 1.3 _05

Sun SDK (Windows Production Release) 1.3 .0_02

Sun JRE (Solaris Production Release) 1.3 .0_05

Sun SDK (Solaris Production Release) 1.3 _05

Sun JRE (Windows Production Release) 1.3 .0_05

Sun JRE (Linux Production Release) 1.3 .0_05

Sun SDK (Windows Production Release) 1.3 .0_05

Sun JRE (Solaris Production Release) 1.3

Sun SDK (Linux Production Release) 1.3 _02

Sun SDK (Solaris Production Release) 1.3 _02

Sun JRE (Windows Production Release) 1.3.1 _03

Sun SDK (Linux Production Release) 1.3.1 _01

Sun SDK (Windows Production Release) 1.3.1 _05

Sun JRE (Linux Production Release) 1.3.1 _03

Sun SDK (Solaris Production Release) 1.3.1 _01

Sun JRE (Solaris Production Release) 1.3.1 _03

Sun JRE (Solaris Production Release) 1.3.1 _01

Sun SDK (Linux Production Release) 1.3.1 _03

Sun JRE (Solaris Production Release) 1.3.1 _05

Sun JRE (Windows Production Release) 1.3.1 _05

Sun JRE (Linux Production Release) 1.3.1 _01

Sun JRE (Windows Production Release) 1.3.1 _01a

Sun JRE (Linux Production Release) 1.3.1 _05

Sun SDK (Solaris Production Release) 1.3.1 _05

Sun SDK (Windows Production Release) 1.3.1 _01a

Sun JRE (Windows Production Release) 1.4

Sun JRE (Linux Production Release) 1.4

Sun SDK (Solaris Production Release) 1.4

Sun SDK (Linux Production Release) 1.4

Sun SDK (Windows Production Release) 1.4

Sun JRE (Solaris Production Release) 1.4 .0_02

Sun JRE (Solaris Production Release) 1.4

Sun JRE (Windows Production Release) 1.4 .0_02

Sun SDK (Solaris Production Release) 1.4 .0_02

Sun JRE (Linux Production Release) 1.4 .0_02

Sun SDK (Linux Production Release) 1.4 .0_02

HP HP-UX (VVOS) 11.0 4

SGI IRIX 6.5

SGI IRIX 6.5.1

SGI IRIX 6.5.10

SGI IRIX 6.5.11

SGI IRIX 6.5.14

SGI IRIX 6.5.15

SGI IRIX 6.5.16

SGI IRIX 6.5.17

SGI IRIX 6.5.18

SGI IRIX 6.5.19

SGI IRIX 6.5.2

SGI IRIX 6.5.3

SGI IRIX 6.5.4

SGI IRIX 6.5.5

SGI IRIX 6.5.6

SGI IRIX 6.5.7

SGI IRIX 6.5.8

References

Sun Java Virtual Machine Illegal Access To Object Methods Vulnerability

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report