(Vendor Issues Fix for Sun Java Desktop System) Java Runtime Environment Internal Classes Lets Remote Users Access and Execute Files on the Target User's System
|
|
SecurityTracker Alert ID: 1014362 |
|
SecurityTracker URL: http://securitytracker.com/id/1014362
|
|
CVE Reference:
CVE-2005-1974
(Links to External Site)
|
Updated: Aug 30 2005
|
Original Entry Date: Jul 2 2005
|
Impact:
Disclosure of system information, Disclosure of user information, Execution of arbitrary code via network, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 2003
|
Description:
A vulnerability was reported in Java Runtime Environment. A remote user may be able to gain privileges on the target system.
A remote user can create a specially crafted Java application that, when loaded by the target user, will gain elevated privileges. The application may be able to read and write files or execute applications on the target user's system.
The flaw is related to the accessibility of certain internal classes.
No further details were provided.
The vendor credits Adam Gowdiak with reporting this vulnerability.
|
Impact:
A remote user may be able to read and write files or execute applications on the target user's system with the privileges of the target user.
|
Solution:
Sun has issued a fix for Sun Java Desktop System (JDS) Release 2 (patch 118752-02).
To download and install the updated RPMs from the update servers, select the following sequence from the "launch" menu:
Launch >> Applications >> System Tools >> Online Update
Additional information on obtaining updates is available at:
http://wwws.sun.com/software/javadesktopsystem/faq.html#5q5
http://wwws.sun.com/software/javadesktopsystem/faq.html#5q7
|
Vendor URL: sunsolve.sun.com/search/document.do?assetkey=1-26-101799-1 (Links to External Site)
|
Cause:
Access control error
|
Underlying OS:
Linux (Any)
|
|
Message History:
This archive entry is a follow-up to the message listed below.
|
Source Message Contents
|
Date: Sat, 2 Jul 2005 11:40:53 -0400
Subject: http://sunsolve.sun.com/search/document.do?assetkey=1-26-101799-1
|
# Sun Alert ID: 101799
# Synopsis: Security Vulnerability in JRE Plug-in affects the Sun Java Desktop System for Linux
# Category: Security
#
Product: Sun Java Desktop System 2003
# BugIDs: 6291747
# Avoidance: Patch
# State: Resolved
# Date Released: 01-Jul-2005
# Date Closed: 01-Jul-2005
# Date Modified:
|
|
