PT-2013-3785 · Openjdk+4 · Openjdk+5

Stefan Cornelius

·

Publicado

2013-06-18

·

Atualizado

2024-06-15

·

CVE-2013-2451

CVSS v2.0

3.7

Baixa

VetorAV:L/AC:H/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7 Update 21 and earlier Oracle Java SE versions 6 Update 45 and earlier OpenJDK 7
Description The issue affects the Java Runtime Environment component, allowing local users to impact confidentiality, integrity, and availability through unknown vectors related to Networking. There are claims that this issue may be related to improper enforcement of exclusive port binds when running on Windows, potentially allowing attackers to bind to ports that are already in use.
Recommendations For Oracle Java SE versions 7 Update 21 and earlier, update to a version later than Update 21. For Oracle Java SE versions 6 Update 45 and earlier, update to a version later than Update 45. For OpenJDK 7, consider restricting network access until a patch is available.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2013-2451
DSA-2722-1
DSA-2727-1
HPSBUX02908
MGASA-2013-0208
OPENSUSE-SU-2024:10534-1
RHSA-2013:0963
RHSA-2013:1059
RHSA-2013:1060
RHSA-2013:1455
RHSA-2013:1456
RHSA-2013_0963
RHSA-2013_1059
RHSA-2013_1060
RHSA-2014:0414
RHSA-2014_0414

Produtos afetados

Hp-Ux
Java Platform
Java Se
Openjdk
Red Hat
Suse