PT-2007-2813 · Oracle · Java Dynamic Management Kit

Publicado 2007-03-12 · Atualizado 2011-03-08 · CVE-2007-1419

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:L/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Java Dynamic Management Kit version 5.1 before 20070309

Description The issue concerns the Java Management Extensions Remote API Remote Method Invocation over Internet Inter-ORB Protocol (JMX RMI-IIOP) API, which does not properly enforce the java.policy. This allows local users to obtain certain MBeans data access by operating a server application accessed by a privileged remote authenticated user.

Recommendations For Java Dynamic Management Kit version 5.1 before 20070309, update to a version released after 20070309 to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-1419

Produtos afetados

Java Dynamic Management Kit

Referências · 7

• http://securityfocus.com/bid/22907 · Nota
• http://vupen.com/english/advisories/2007/0906 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1419 · Nota de Segurança
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102835-1 · Correção, Aviso do Fabricante
• http://securitytracker.com/id?1017745 · Nota
• http://osvdb.org/34018 · Nota
• http://secunia.com/advisories/24497 · Nota