Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

Gentoo: GLSA 200411-38 Normal: Java Applet Escalation Threat

gentoo
Calendar Grey November 29, 2004
Scroller Gentoo
Gentoo Linux Advisory GLSA 202311-45 addresses vulnerabilities in web applications that could lead to unauthorized access and data exposure. Immediate action is advised.
The Java plug-in security in Sun and Blackdown Java environments can be bypassed to access arbitrary packages, allowing untrusted Java applets to perform unrestricted actions on th...

Summary

Gentoo Linux Security Advisory GLSA 200411-38 https://security.gentoo.org/ Severity: Normal Title: Sun and Blackdown Java: Applet privilege escalation Date: November 29, 2004 Bugs: #72172, #72221 ID: 200411-38

Synopsis ======= The Java plug-in security in Sun and Blackdown Java environments can be bypassed to access arbitrary packages, allowing untrusted Java applets to perform unrestricted actions on the host system.
Background ========= Sun and Blackdown both provide implementations of Java Development Kits (JDK) and Java Runtime Environments (JRE). All these implementations provide a Java plug-in that can be used to execute Java applets in a restricted environment for web browsers.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory Gentoo privilege escalation Java applet normal threat

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory Gentoo privilege escalation Java applet normal threat

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround