Description
Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious JAR files via unknown vectors.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://marc.info/?l=bugtraq&m=126583436323697&w=2 ↗
- http://support.avaya.com/elmodocs2/security/ASA-2008-484.htm ↗
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html ↗
- http://secunia.com/advisories/34259 ↗
- http://www.vupen.com/english/advisories/2009/0672 ↗
- http://rhn.redhat.com/errata/RHSA-2008-1018.html ↗
- http://secunia.com/advisories/33015 ↗
- http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm ↗
- http://secunia.com/advisories/34889 ↗
- http://secunia.com/advisories/34233 ↗
- http://security.gentoo.org/glsa/glsa-200911-02.xml ↗
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-244986-1 ↗
- http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf ↗
- http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html ↗
- http://marc.info/?l=bugtraq&m=123678756409861&w=2 ↗
- http://secunia.com/advisories/38539 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6596 ↗
- http://secunia.com/advisories/34972 ↗
- https://rhn.redhat.com/errata/RHSA-2009-0466.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html ↗
- http://secunia.com/advisories/35065 ↗
- http://secunia.com/advisories/33528 ↗
- http://www.securitytracker.com/id?1021316 ↗
- http://rhn.redhat.com/errata/RHSA-2008-1025.html ↗
- http://www.vupen.com/english/advisories/2008/3339 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47045 ↗
- http://www.redhat.com/support/errata/RHSA-2009-0445.html ↗
- http://www.redhat.com/support/errata/RHSA-2009-0016.html ↗
- http://www.us-cert.gov/cas/techalerts/TA08-340A.html ↗
- http://secunia.com/advisories/33709 ↗
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid= ↗
- http://secunia.com/advisories/34605 ↗
- http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html ↗
- http://www.redhat.com/support/errata/RHSA-2009-0015.html ↗
- http://secunia.com/advisories/33187 ↗
- http://secunia.com/advisories/32991 ↗
- http://www.securityfocus.com/bid/32608 ↗
- http://secunia.com/advisories/37386 ↗
- http://secunia.com/advisories/33710 ↗