PT-2014-2123 · Icedtea+1 · Icedtea6+2

Omair Majid · Publicado 2011-07-27 · Atualizado 2014-06-25 · CVE-2011-2513

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IcedTea6 versions 1.9.x before 1.9.9 IcedTea6 versions 1.8.x before 1.8.9 IcedTea-Web versions 1.1.x before 1.1.1 IcedTea-Web versions 1.0.x before 1.0.4

Description The Java Network Launching Protocol (JNLP) implementation allows remote attackers to obtain the username and full path of the home and cache directories by accessing properties of the ClassLoader.

Recommendations For IcedTea6 versions 1.9.x before 1.9.9, update to version 1.9.9 or later. For IcedTea6 versions 1.8.x before 1.8.9, update to version 1.8.9 or later. For IcedTea-Web versions 1.1.x before 1.1.1, update to version 1.1.1 or later. For IcedTea-Web versions 1.0.x before 1.0.4, update to version 1.0.4 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2011-2513

OPENSUSE-SU-2024:10316-1

RHSA-2011:1100

RHSA-2011_1100

Produtos afetados

Icedtea-Web

Icedtea6

Red Hat

Referências · 16

• https://bugzilla.redhat.com/show_bug.cgi?id=718164 · Nota
• http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2011-July/015170.html · Aviso do Fabricante
• http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2011-July/015171.html · Correção
• https://access.redhat.com/security/cve/CVE-2011-2513 · Nota
• http://icedtea.classpath.org/hg/release/icedtea-web-1.0/rev/b29fdd0f4d04 · Nota
• http://rhn.redhat.com/errata/RHSA-2011-1100.html · Aviso do Fabricante
• http://ubuntu.com/usn/usn-1178-1 · Aviso do Fabricante
• http://icedtea.classpath.org/hg/release/icedtea-web-1.1/rev/c7ce6c0e6227 · Nota
• https://security-tracker.debian.org/tracker/CVE-2011-2513 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2011-2513 · Aviso do Fabricante
• http://securitytracker.com/id?1025854 · Nota
• https://access.redhat.com/security/cve/CVE-2011-2514 · Nota
• https://access.redhat.com/errata/RHSA-2011:1100 · Nota
• https://linux.oracle.com/errata/ELSA-2011-1100.html · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-2513 · Aviso do Fabricante