PT-2009-4883 · Oracle+1 · Sun Java Se 6+2
Marc Schoenefeld
·
Published
2009-08-06
·
Updated
2017-09-19
·
CVE-2009-2476
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Sun Java SE 6 versions prior to Update 15
OpenJDK (affected versions not specified)
Description
The issue is related to the Java Management Extensions (JMX) implementation, which does not properly enforce OpenType checks. This allows context-dependent attackers to bypass intended access restrictions by leveraging finalizer resurrection to obtain a reference to a privileged object.
Recommendations
For Sun Java SE 6 versions prior to Update 15, update to Update 15 or later to resolve the issue.
For OpenJDK, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Openjdk
Red Hat
Sun Java Se 6