Описание
Sun Java JRE 1.1.x through 1.4.x writes temporary files with long filenames that become predictable on a file system that uses 8.3 style short names, which allows remote attackers to write arbitrary files to known locations and facilitates the exploitation of vulnerabilities in applications that rely on unpredictable file names.
Ссылки
- Vendor Advisory
- Third Party AdvisoryUS Government Resource
- Vendor Advisory
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:sun:jdk:1.1.0:*:*:*:*:*:*:*
cpe:2.3:a:sun:jdk:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:sun:jdk:1.3.0:*:*:*:*:*:*:*
cpe:2.3:a:sun:jdk:1.4.0:*:*:*:*:*:*:*
cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*
cpe:2.3:a:sun:jre:1.1:*:*:*:*:*:*:*
cpe:2.3:a:sun:jre:1.2:*:*:*:*:*:*:*
cpe:2.3:a:sun:jre:1.3.0:*:*:*:*:*:*:*
cpe:2.3:a:sun:jre:1.4:*:*:*:*:*:*:*
cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*
EPSS
Процентиль: 80%
0.01395
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Sun Java JRE 1.1.x through 1.4.x writes temporary files with long filenames that become predictable on a file system that uses 8.3 style short names, which allows remote attackers to write arbitrary files to known locations and facilitates the exploitation of vulnerabilities in applications that rely on unpredictable file names.
EPSS
Процентиль: 80%
0.01395
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other