CVE-2005-0471

Sun Java JRE 1.1.x through 1.4.x writes temporary files with long filenames that become predictable on a file system that uses 8.3 style short names, which allows remote attackers to write arbitrary files to known locations and facilitates the exploitation of vulnerabilities in applications that rely on unpredictable file names.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://secunia.com/advisories/11070/	Vendor Advisory
http://secunia.com/secunia_research/2004-7/advisory/
http://www.kb.cert.org/vuls/id/544392	Third Party Advisory US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/19285

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:sun:jdk:1.1.0:::::::*
	cpe:2.3:a:sun:jdk:1.2.0:::::::*
	cpe:2.3:a:sun:jdk:1.3.0:::::::*
	cpe:2.3:a:sun:jdk:1.4.0:::::::*
	cpe:2.3:a:sun:jdk:1.5.0:::::::*
	cpe:2.3:a:sun:jre:1.1:::::::*
	cpe:2.3:a:sun:jre:1.2:::::::*
	cpe:2.3:a:sun:jre:1.3.0:::::::*
	cpe:2.3:a:sun:jre:1.4:::::::*
	cpe:2.3:a:sun:jre:1.5.0:::::::*

History

No history.

Information

Published : 2005-03-14 05:00

Updated : 2024-02-28 10:42

NVD link : CVE-2005-0471

Mitre link : CVE-2005-0471

CVE.ORG link : CVE-2005-0471

JSON object : View

Products Affected

sun

jre
jdk

CWE

NVD-CWE-Other

{"id": "CVE-2005-0471", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-03-14T05:00:00.000", "references": [{"url": "http://secunia.com/advisories/11070/", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/secunia_research/2004-7/advisory/", "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/544392", "tags": ["Third Party Advisory", "US Government Resource"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/19285", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Sun Java JRE 1.1.x through 1.4.x writes temporary files with long filenames that become predictable on a file system that uses 8.3 style short names, which allows remote attackers to write arbitrary files to known locations and facilitates the exploitation of vulnerabilities in applications that rely on unpredictable file names."}], "lastModified": "2017-07-11T01:32:18.517", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sun:jdk:1.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C4C1D605-1FE9-4F1A-A374-CC342CD7310C"}, {"criteria": "cpe:2.3:a:sun:jdk:1.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF39BD92-7733-4408-A907-D292D973D9CA"}, {"criteria": "cpe:2.3:a:sun:jdk:1.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1AA4DE59-4CF5-49F4-8625-0F3DA2DB7020"}, {"criteria": "cpe:2.3:a:sun:jdk:1.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "20C9C594-3DBC-4706-BA88-A662CD28C830"}, {"criteria": "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A02CF738-1B4F-44D0-A618-3D3E4EF1C9B8"}, {"criteria": "cpe:2.3:a:sun:jre:1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FC23BB12-3C36-46D9-9FB8-47D6DDB3D956"}, {"criteria": "cpe:2.3:a:sun:jre:1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3144D692-96E3-477A-9383-D1880DCEDB2E"}, {"criteria": "cpe:2.3:a:sun:jre:1.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AAB87D43-2860-43DD-94EE-886D7D75A351"}, {"criteria": "cpe:2.3:a:sun:jre:1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D73559DD-54B4-4DF2-81BC-9109DB29DCCB"}, {"criteria": "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}