Sun Microsystems JRE Plug-In Unauthorized Access Vulnerability
BID:7852
Info
Sun Microsystems JRE Plug-In Unauthorized Access Vulnerability
| Bugtraq ID: | 7852 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 06 2003 12:00AM |
| Updated: | Jun 06 2003 12:00AM |
| Credit: | The discovery of this vulnerability has been credited to Harmen van der Wal. |
| Vulnerable: |
Sun SDK (Windows Production Release) 1.4.1 _01 Sun SDK (Windows Production Release) 1.4.1 Sun SDK (Windows Production Release) 1.4 .0_03 Sun SDK (Windows Production Release) 1.4 .0_02 Sun SDK (Windows Production Release) 1.4 .0_01 Sun SDK (Windows Production Release) 1.4 Sun SDK (Windows Production Release) 1.3.1 _06 Sun SDK (Windows Production Release) 1.3.1 _05 Sun SDK (Windows Production Release) 1.3.1 _04 Sun SDK (Windows Production Release) 1.3.1 _03 Sun SDK (Windows Production Release) 1.3.1 _02 Sun SDK (Windows Production Release) 1.3.1 _01a Sun SDK (Windows Production Release) 1.2.2 _014 Sun SDK (Windows Production Release) 1.2.2 _013 Sun SDK (Windows Production Release) 1.2.2 _012 Sun SDK (Windows Production Release) 1.2.2 _012 Sun SDK (Windows Production Release) 1.2.2 _011 Sun SDK (Windows Production Release) 1.2.2 _010 Sun SDK (Windows Production Release) 1.2.2 _007 Sun SDK (Solaris Reference Release) 1.2.2 _014 Sun SDK (Solaris Reference Release) 1.2.2 _013 Sun SDK (Solaris Reference Release) 1.2.2 _012 Sun SDK (Solaris Reference Release) 1.2.2 _011 Sun SDK (Solaris Reference Release) 1.2.2 _010 Sun SDK (Solaris Reference Release) 1.2.2 _007 Sun SDK (Solaris Production Release) 1.4.1 _01 Sun SDK (Solaris Production Release) 1.4.1 Sun SDK (Solaris Production Release) 1.4 .0_03 Sun SDK (Solaris Production Release) 1.4 .0_02 Sun SDK (Solaris Production Release) 1.4 Sun SDK (Solaris Production Release) 1.3.1 _06 Sun SDK (Solaris Production Release) 1.3.1 _05 Sun SDK (Solaris Production Release) 1.3.1 _03 Sun SDK (Solaris Production Release) 1.3.1 _02 Sun SDK (Solaris Production Release) 1.3.1 _01 Sun SDK (Solaris Production Release) 1.2.2 _14 Sun SDK (Solaris Production Release) 1.2.2 _13 Sun SDK (Solaris Production Release) 1.2.2 _10 Sun SDK (Solaris Production Release) 1.2.2 _07 Sun SDK (Solaris Production Release) 1.2.2 _011 Sun SDK (Solaris Production Release) 1.2.2 Sun SDK (Linux Production Release) 1.4.1 _01 Sun SDK (Linux Production Release) 1.4.1 Sun SDK (Linux Production Release) 1.4 .0_03 Sun SDK (Linux Production Release) 1.4 .0_02 Sun SDK (Linux Production Release) 1.4 Sun SDK (Linux Production Release) 1.3.1 _06 Sun SDK (Linux Production Release) 1.3.1 _05 Sun SDK (Linux Production Release) 1.3.1 _03 Sun SDK (Linux Production Release) 1.3.1 _02 Sun SDK (Linux Production Release) 1.3.1 _01 Sun SDK (Linux Production Release) 1.2.2 _13 Sun SDK (Linux Production Release) 1.2.2 _014 Sun SDK (Linux Production Release) 1.2.2 _011 Sun SDK (Linux Production Release) 1.2.2 _010 Sun SDK (Linux Production Release) 1.2.2 _007 Sun JRE (Windows Production Release) 1.4.1 _01 Sun JRE (Windows Production Release) 1.4.1 Sun JRE (Windows Production Release) 1.4 .0_03 Sun JRE (Windows Production Release) 1.4 .0_02 Sun JRE (Windows Production Release) 1.4 .0_01 Sun JRE (Windows Production Release) 1.4 Sun JRE (Windows Production Release) 1.3.1 _06 Sun JRE (Windows Production Release) 1.3.1 _05 Sun JRE (Windows Production Release) 1.3.1 _04 Sun JRE (Windows Production Release) 1.3.1 _03 Sun JRE (Windows Production Release) 1.3.1 _02 Sun JRE (Windows Production Release) 1.3.1 _01 Sun JRE (Windows Production Release) 1.2.2 _12 Sun JRE (Windows Production Release) 1.2.2 _014 Sun JRE (Windows Production Release) 1.2.2 _013 Sun JRE (Windows Production Release) 1.2.2 _011 Sun JRE (Windows Production Release) 1.2.2 _010 Sun JRE (Windows Production Release) 1.2.2 _007 Sun JRE (Windows Production Release) 1.2.2 Sun JRE (Solaris Reference Release) 1.2.2 _014 Sun JRE (Solaris Reference Release) 1.2.2 _013 Sun JRE (Solaris Reference Release) 1.2.2 _012 Sun JRE (Solaris Reference Release) 1.2.2 _011 Sun JRE (Solaris Reference Release) 1.2.2 _010 Sun JRE (Solaris Reference Release) 1.2.2 _007 Sun JRE (Solaris Reference Release) 1.2.2 Sun JRE (Solaris Production Release) 1.4.1 _01 Sun JRE (Solaris Production Release) 1.4.1 Sun JRE (Solaris Production Release) 1.4 .0_03 Sun JRE (Solaris Production Release) 1.4 .0_02 Sun JRE (Solaris Production Release) 1.4 .0_01 Sun JRE (Solaris Production Release) 1.4 Sun JRE (Solaris Production Release) 1.3.1 _06 Sun JRE (Solaris Production Release) 1.3.1 _05 Sun JRE (Solaris Production Release) 1.3.1 _04 Sun JRE (Solaris Production Release) 1.3.1 _03 Sun JRE (Solaris Production Release) 1.3.1 _02 Sun JRE (Solaris Production Release) 1.3.1 _01 Sun JRE (Solaris Production Release) 1.2.2 _07 Sun JRE (Solaris Production Release) 1.2.2 _014 Sun JRE (Solaris Production Release) 1.2.2 _013 Sun JRE (Solaris Production Release) 1.2.2 _012 Sun JRE (Solaris Production Release) 1.2.2 _011 Sun JRE (Solaris Production Release) 1.2.2 _010 Sun JRE (Solaris Production Release) 1.2.2 Sun JRE (Linux Production Release) 1.4.1 _01 Sun JRE (Linux Production Release) 1.4.1 Sun JRE (Linux Production Release) 1.4 .0_03 Sun JRE (Linux Production Release) 1.4 .0_02 Sun JRE (Linux Production Release) 1.4 Sun JRE (Linux Production Release) 1.3.1 _06 Sun JRE (Linux Production Release) 1.3.1 _05 Sun JRE (Linux Production Release) 1.3.1 _03 Sun JRE (Linux Production Release) 1.3.1 _02 Sun JRE (Linux Production Release) 1.3.1 _01 Sun JRE (Linux Production Release) 1.3.1 Sun JRE (Linux Production Release) 1.2.2 _014 Sun JRE (Linux Production Release) 1.2.2 _013 Sun JRE (Linux Production Release) 1.2.2 _011 Sun JRE (Linux Production Release) 1.2.2 _010 Sun JRE (Linux Production Release) 1.2.2 _007 Sun JRE (Linux Production Release) 1.2.2 _006 Sun JRE (Linux Production Release) 1.2.2 _005 Sun JRE (Linux Production Release) 1.2.2 _004 Sun JRE (Linux Production Release) 1.2.2 _003 Sun JRE (Linux Production Release) 1.2.2 |
| Not Vulnerable: |
Sun SDK (Windows Production Release) 1.4.1 _02 Sun SDK (Windows Production Release) 1.4 .0_4 Sun SDK (Windows Production Release) 1.3.1 _07 Sun SDK (Windows Production Release) 1.2.2 _015 Sun SDK (Solaris Reference Release) 1.2.2 _015 Sun SDK (Solaris Production Release) 1.4.1 _02 Sun SDK (Solaris Production Release) 1.4 .0_4 Sun SDK (Solaris Production Release) 1.3.1 _07 Sun SDK (Linux Production Release) 1.4.1 _02 Sun SDK (Linux Production Release) 1.4 .0_4 Sun SDK (Linux Production Release) 1.3.1 _07 Sun SDK (Linux Production Release) 1.2.2 _015 Sun JRE (Windows Production Release) 1.4.1 _02 Sun JRE (Windows Production Release) 1.4 .0_04 Sun JRE (Windows Production Release) 1.3.1 _07 Sun JRE (Windows Production Release) 1.2.2 _015 Sun JRE (Solaris Reference Release) 1.2.2 _015 Sun JRE (Solaris Production Release) 1.4.1 _02 Sun JRE (Solaris Production Release) 1.4 .0_04 Sun JRE (Solaris Production Release) 1.3.1 _07 Sun JRE (Linux Production Release) 1.4.1 _02 Sun JRE (Linux Production Release) 1.4 .0_04 Sun JRE (Linux Production Release) 1.3.1 _07 Sun JRE (Linux Production Release) 1.2.2 _015 |
Discussion
Sun Microsystems JRE Plug-In Unauthorized Access Vulnerability
A vulnerability has been discovered in the Sun Java Runtime Environment which could result in unauthorized access. It is said that through the use of a malicious Java Plug-In it may be possible to gain access to sensitive user authentication information.
Access to this information may lead to further attacks on resources.
A vulnerability has been discovered in the Sun Java Runtime Environment which could result in unauthorized access. It is said that through the use of a malicious Java Plug-In it may be possible to gain access to sensitive user authentication information.
Access to this information may lead to further attacks on resources.
Exploit / POC
Sun Microsystems JRE Plug-In Unauthorized Access Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Sun Microsystems JRE Plug-In Unauthorized Access Vulnerability
Solution:
Sun Microsystems has released updated versions of JRE for Linux, Solaris, and Windows to address this issue. It should be noted that users of the JRE 1.2.2 tree for Solaris are advised to upgrade to a later version.
This issue has been addressed in the following releases:
Windows Production Releases
SDK and JRE 1.4.1_02 and later
SDK and JRE 1.4.0_04 and later
SDK and JRE 1.3.1_07 and later
SDK and JRE 1.2.2_015 and later
Solaris Operating Environment (OE) Reference Releases
SDK and JRE 1.2.2_015 and later
Solaris OE Production Releases
SDK and JRE 1.4.1_02 and later
SDK and JRE 1.4.0_04 and later
SDK and JRE 1.3.1_07 and later
Note: Users of 1.2.2 releases should upgrade to a later release.
Linux Production Releases
SDK and JRE 1.4.1_02 and later
SDK and JRE 1.4.0_04 and later
SDK and JRE 1.3.1_07 and later
SDK and JRE 1.2.2_015 and later
These upgrades are available at:
http://java.sun.com/j2se/
Solution:
Sun Microsystems has released updated versions of JRE for Linux, Solaris, and Windows to address this issue. It should be noted that users of the JRE 1.2.2 tree for Solaris are advised to upgrade to a later version.
This issue has been addressed in the following releases:
Windows Production Releases
SDK and JRE 1.4.1_02 and later
SDK and JRE 1.4.0_04 and later
SDK and JRE 1.3.1_07 and later
SDK and JRE 1.2.2_015 and later
Solaris Operating Environment (OE) Reference Releases
SDK and JRE 1.2.2_015 and later
Solaris OE Production Releases
SDK and JRE 1.4.1_02 and later
SDK and JRE 1.4.0_04 and later
SDK and JRE 1.3.1_07 and later
Note: Users of 1.2.2 releases should upgrade to a later release.
Linux Production Releases
SDK and JRE 1.4.1_02 and later
SDK and JRE 1.4.0_04 and later
SDK and JRE 1.3.1_07 and later
SDK and JRE 1.2.2_015 and later
These upgrades are available at:
http://java.sun.com/j2se/
References
Sun Microsystems JRE Plug-In Unauthorized Access Vulnerability
References:
References:
- Sun Alert ID: 55101 (Sun)