Description
Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the writeManifest method in the CacheEntry class, aka CR 6703909.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html ↗
- http://marc.info/?l=bugtraq&m=122331139823057&w=2 ↗
- http://secunia.com/advisories/32436 ↗
- http://secunia.com/advisories/32826 ↗
- http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm ↗
- http://secunia.com/advisories/31600 ↗
- http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html ↗
- http://secunia.com/advisories/32018 ↗
- http://security.gentoo.org/glsa/glsa-200911-02.xml ↗
- http://secunia.com/advisories/32179 ↗
- http://secunia.com/advisories/33194 ↗
- http://www.vupen.com/english/advisories/2008/2740 ↗
- http://secunia.com/advisories/31320 ↗
- http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00000.html ↗
- http://www.zerodayinitiative.com/advisories/ZDI-08-042/ ↗
- http://www.vupen.com/english/advisories/2008/2056/references ↗
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-238905-1 ↗
- http://secunia.com/advisories/31055 ↗
- http://secunia.com/advisories/32180 ↗
- http://www.vmware.com/security/advisories/VMSA-2008-0016.html ↗
- http://secunia.com/advisories/31736 ↗
- http://secunia.com/advisories/35065 ↗
- http://support.apple.com/kb/HT3178 ↗
- http://www.securitytracker.com/id?1020452 ↗
- http://www.securityfocus.com/bid/30148 ↗
- http://www.redhat.com/support/errata/RHSA-2008-0594.html ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43666 ↗
- http://secunia.com/advisories/31497 ↗
- http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html ↗
- http://rhn.redhat.com/errata/RHSA-2008-0955.html ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11102 ↗
- http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html ↗
- http://www.securityfocus.com/archive/1/497041/100/0/threaded ↗
- http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00002.html ↗
- http://www.redhat.com/support/errata/RHSA-2008-0790.html ↗
- http://www.redhat.com/support/errata/RHSA-2008-0906.html ↗
- http://www.us-cert.gov/cas/techalerts/TA08-193A.html ↗
- http://secunia.com/advisories/37386 ↗
- http://support.apple.com/kb/HT3179 ↗
- http://www.redhat.com/support/errata/RHSA-2008-0595.html ↗
- http://secunia.com/advisories/31010 ↗