Gentoo: GLSA 200411-38 Normal: Java Applet Escalation Threat
gentoo
November 29, 2004
The Java plug-in security in Sun and Blackdown Java environments can be bypassed to access arbitrary packages, allowing untrusted Java applets to perform unrestricted actions on th...
Summary
Gentoo Linux Security Advisory GLSA 200411-38
https://security.gentoo.org/
Severity: Normal
Title: Sun and Blackdown Java: Applet privilege escalation
Date: November 29, 2004
Bugs: #72172, #72221
ID: 200411-38
Synopsis
=======
The Java plug-in security in Sun and Blackdown Java environments can be
bypassed to access arbitrary packages, allowing untrusted Java applets
to perform unrestricted actions on the host system.
Background
=========
Sun and Blackdown both provide implementations of Java Development Kits
(JDK) and Java Runtime Environments (JRE). All these implementations
provide a Java plug-in that can be used to execute Java applets in a
restricted environment for web browsers.
Affected packages
================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
------------------------...
Topics Covered
Resolution
References
Availability
style>.gentoo_availability{display:block;}
Concerns
PREVIOUS
NEXT
Warning: Undefined array key "advisory_info" in /var/www/www.linuxsecurity.com-443/html/tmp/regularlabs/custom_php/4093836_4c9dbbdde36eef04251a4ced7eac4df9 on line 11
Topics Covered
Background
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Affected Packages
Impact
Workaround
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!