PT-2003-2108 · Oracle+1 · Software Development Kit+2

Published 2003-12-31 · Updated 2017-07-11 · CVE-2003-1156

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Java Runtime Environment (JRE) and Software Development Kit (SDK) versions 1.4.2 through 1.4.2 02

Description The issue allows local users to overwrite arbitrary files via a symlink attack on certain files created by the unpack program or the RPM program.

Recommendations For Java Runtime Environment (JRE) and Software Development Kit (SDK) versions 1.4.2 through 1.4.2 02, consider updating to a version outside of this range to mitigate the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2003-1156

Affected Products

Java Runtime Environment

Rpm

Software Development Kit

References · 5

• 🔥 http://securityfocus.com/archive/1/343038 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1156 · Security Note
• http://securityfocus.com/bid/8937 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13570 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1156 · Note