PT-2005-3427 · Oracle · Java

Dino Dai Zovi · Published 2005-12-31 · Updated 2017-07-11 · CVE-2005-2529

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Java version 1.4.2 before Release 2

Description The issue allows local users to gain privileges through unspecified attack vectors related to the utility used to update Java shared archives.

Recommendations For Java version 1.4.2 before Release 2, update to Release 2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2005-2529

Affected Products

Java

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2005-2529 · Security Note
• http://lists.apple.com/archives/Security-announce/2005/Sep/msg00000.html · Vendor Advisory
• http://ciac.org/ciac/bulletins/p-306.shtml · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22264 · Note
• http://docs.info.apple.com/article.html?artnum=302266 · Note
• http://vupen.com/english/advisories/2005/1734 · Note
• http://secunia.com/advisories/16808 · Note