CVE-2003-1156 in Java JRE

Сводка

по MITRE

Java Runtime Environment (JRE) and Software Development Kit (SDK) 1.4.2 through 1.4.2_02 allows local users to overwrite arbitrary files via a symlink attack on (1) unpack.log, as created by the unpack program, or (2) .mailcap1 and .mime.types1, as created by the RPM program.

Once again VulDB remains the best source for vulnerability data.

• Резервировать: 04.05.2005
• Раскрытие: 31.12.2003
• Модерация: принято
• Вход: VDB-367
• CPE: готов
• CWE: CWE-61 (Подтверждённый)
• CVSS: 5.9 (VulDB)
• EPSS: 0.00079
• KEV: Нет
• Деятельности: Очень низкий
• Сектор: Insurance, Telecommunication, ...

Источники

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-1156
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-1156
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-1156/