Sun Java Plug-in Sandbox Security Bypass Vulnerability

Article View: be.comp.security

Article #667

#667

From: Filbert
Date: Tue, 23 Nov 2004 17:31

31 lines
1811 bytes

Critical:       
Highly critical
Impact: System access
Where:  From remote
Solution Status:        Vendor Patch

Software:       Sun Java JRE 1.3.x
Sun Java JRE 1.4.x
Sun Java SDK 1.3.x
Sun Java SDK 1.4.x

        Select a product and view a complete list of all Patched/Unpatched Secunia
advisories affecting it.

CVE reference:  CAN-2004-1029

Description:
Jouko Pynnonen has reported a vulnerability in Sun Java Plug-in, which can
be exploited by malicious people to compromise a user's system.

http://secunia.com/advisories/13271/



��ntje om niet te laten passeen.


-- 
echo "+++ATH0filb+++ATH0@linuxmail.org" | sed 's/+++ATH0//g'
 "Remotely-exploitable vulnerability in W2K. Reported: 2/8/2004"
 http://www.eeye.com/html/research/upcoming/20040802-C.html

Technical Details

Message-ID: <1377989.eL22n1J9X7@127.0.0.1>

Path:

arc1-ca.pugleaf.net!g2news1.google.com!news4.google.com!news.glorb.com!border1.nntp.dca.giganews.com!nntp.giganews.com!newshosting.com!nx01.iad01.newshosting.com!newsfeed.icl.net!newsfeed.fjserv.net!newsfeed.arcor.de!feed1.news.be.easynet.net!ossa.telenet-ops.be!phobos.telenet-ops.be.POSTED!not-for-mail

Show Full Headers

Complete Article Headers

X-Google-Thread: 113446,aca7bb04dc0f3992,start
X-Google-Attributes: gid113446,public
X-Google-Language: ENGLISH,ASCII
Path: arc1-ca.pugleaf.net!g2news1.google.com!news4.google.com!news.glorb.com!border1.nntp.dca.giganews.com!nntp.giganews.com!newshosting.com!nx01.iad01.newshosting.com!newsfeed.icl.net!newsfeed.fjserv.net!newsfeed.arcor.de!feed1.news.be.easynet.net!ossa.telenet-ops.be!phobos.telenet-ops.be.POSTED!not-for-mail
Message-ID: <1377989.eL22n1J9X7@127.0.0.1>
From: Filbert <filb@spam.la>
Subject: Sun Java Plug-in Sandbox Security Bypass Vulnerability
Newsgroups: be.comp.security
Reply-To: +++ATH0filb@+++ATH0linuxmail.org
Lines: 32
Organization: /dev/null
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8Bit
Date: Tue, 23 Nov 2004 17:31:08 GMT
NNTP-Posting-Host: 213.118.231.106
X-Complaints-To: abuse@telenet.be
X-Trace: phobos.telenet-ops.be 1101231068 213.118.231.106 (Tue, 23 Nov 2004 18:31:08 MET)
NNTP-Posting-Date: Tue, 23 Nov 2004 18:31:08 MET