PT-2009-5068 · Sun+3 · Sun Java Runtime Environment+3

Published 2009-08-05 · Updated 2018-10-10 · CVE-2009-2673

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sun Java Runtime Environment (JRE) versions 5.0 through 5.0 Update 19 Sun Java Runtime Environment (JRE) versions 6 through 6 Update 14

Description The issue allows remote attackers to bypass intended access restrictions and connect to arbitrary sites. This is related to a declaration that lacks the final keyword in the proxy mechanism implementation.

Recommendations For versions 5.0 through 5.0 Update 19, update to Update 20 or later. For versions 6 through 6 Update 14, update to Update 15 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-2673

HPSBUX02476

RHSA-2009:1199

RHSA-2009:1200

RHSA-2009:1201

RHSA-2009:1236

RHSA-2009:1582

RHSA-2009:1662

RHSA-2009_1201

RHSA-2010:0043

Affected Products

Hp-Ux

Java Platform

Red Hat

Sun Java Runtime Environment

References · 69

• https://bdu.fstec.ru/vul/2015-02870 · Security Note
• https://bdu.fstec.ru/vul/2015-04032 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2009-2673 · Security Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1 · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2009-1201.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2671 · Security Note
• https://redhat.com/archives/fedora-package-announce/2009-August/msg00325.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02869 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2672 · Security Note
• https://rhn.redhat.com/errata/RHSA-2009-1200.html · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2009-August/msg00310.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2625 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2675 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2673 · Security Note