PT-2005-2924 · Hewlett Packard+2 · Hp-Ux+2

Publicado 2005-06-14 · Atualizado 2016-10-18 · CVE-2005-1974

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Java 2 Platform, Standard Edition (J2SE) versions 1.4.2 up to 1.4.2 07 Java 2 Platform, Standard Edition (J2SE) version 5.0 Java 2 Platform, Standard Edition (J2SE) version 5.0 Update 1

Description The issue allows applications to assign permissions to themselves and gain privileges. This is an unspecified vulnerability in Java 2 Platform, Standard Edition (J2SE), which is used in multiple products and platforms, including HP-UX and APC PowerChute.

Recommendations For Java 2 Platform, Standard Edition (J2SE) versions 1.4.2 up to 1.4.2 07, update to a version later than 1.4.2 07. For Java 2 Platform, Standard Edition (J2SE) version 5.0, update to a version later than 5.0. For Java 2 Platform, Standard Edition (J2SE) version 5.0 Update 1, update to a version later than 5.0 Update 1.

Correção

Identificadores relacionados

CVE-2005-1974

HPSBUX01215

Produtos afetados

Apc Powerchute

Hp-Ux

Java 2 Platform

Referências · 15

• http://rpmfind.net/linux/RPM/suse/updates/9.3/i386/rpm/i586/java-1_4_2-sun-src-1.4.2.08-0.1.i586.html · Nota
• http://novell.com/linux/security/advisories/2005_32_java2.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-1974 · Nota de Segurança
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101749-1 · Aviso do Fabricante
• http://securityreason.com/securityalert/56 · Nota
• http://marc.info/?l=bugtraq&m=112992075412844&w=2 · Aviso do Fabricante
• http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/action.process/public/kb/docDisplay/?javax.portlet.action=true&spf_p.tpst=kbDocDisplay&javax.portlet.begCacheTok=com.vignette.cachetoken&spf_p.prp_kbDocDisplay=wsrp-interactionState%3DdocId%253DZW1yX25hLWMwMDg5MTE1OQ%2525253D%2525253DhPsCeNc%257CdocLocale%253Den_US%257CcalledBy%253D&javax.portlet.endCacheTok=com.vignette.cachetoken · Nota
• http://marc.info/?l=bugtraq&m=112861772130119&w=2 · Aviso do Fabricante
• http://securitytracker.com/id?1015643 · Nota
• http://securityfocus.com/bid/13958 · Nota
• http://vupen.com/english/advisories/2005/2150 · Aviso do Fabricante
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101799-1 · Aviso do Fabricante
• http://secunia.com/advisories/17272 · Aviso do Fabricante
• http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=7638 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1974 · Nota de Segurança