Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2005-1080

Published: 02/05/2005 Updated: 03/01/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Subscribe to Sun

Vulnerability Summary

Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote malicious users to create or overwrite arbitrary files via a .. (dot dot) in filenames in a .jar file.

Vulnerable Product Search on Vulmon Subscribe to Product

sun sdk 1.4.2

sun sdk 1.5

Vendor Advisories

Debian CVElist Bug Report Logs: jar(1): directory traversal
Debian Bug report logs - #774953 jar(1): directory traversal Package: openjdk-7-jdk; Maintainer for openjdk-7-jdk is OpenJDK Team <openjdk@listslaunchpadnet>; Source for openjdk-7-jdk is src:openjdk-7 (PTS, buildd, popcon) Reported by: Alexander Cherepanov <cherepan@mccmeru> Date: Fri, 9 Jan 2015 12:27:01 UTC Se ...
Amazon Linux AMI: ALAS-2015-515
An off-by-one flaw, leading to a buffer overflow, was found in the font parsing code in the 2D component in OpenJDK A specially crafted font file could possibly cause the Java Virtual Machine to execute arbitrary code, allowing an untrusted Java application or applet to bypass Java sandbox restrictions (CVE-2015-0469) A flaw was found in the way ...
Amazon Linux AMI: ALAS-2015-516
An off-by-one flaw, leading to a buffer overflow, was found in the font parsing code in the 2D component in OpenJDK A specially crafted font file could possibly cause the Java Virtual Machine to execute arbitrary code, allowing an untrusted Java application or applet to bypass Java sandbox restrictions (CVE-2015-0469) A flaw was found in the way ...
Amazon Linux AMI: ALAS-2015-517
An off-by-one flaw, leading to a buffer overflow, was found in the font parsing code in the 2D component in OpenJDK A specially crafted font file could possibly cause the Java Virtual Machine to execute arbitrary code, allowing an untrusted Java application or applet to bypass Java sandbox restrictions (CVE-2015-0469) A flaw was found in the way ...

References

NVD-CWE-Otherhttp://www.securiteam.com/securitynews/5IP0C0AFGW.htmlhttp://secunia.com/advisories/14902http://marc.info/?l=oss-security&m=127602564508766&w=2https://bugzilla.redhat.com/show_bug.cgi?id=594497https://bugzilla.redhat.com/show_bug.cgi?id=601823http://marc.info/?l=oss-security&m=127603032617644&w=2http://rhn.redhat.com/errata/RHSA-2015-0807.htmlhttp://rhn.redhat.com/errata/RHSA-2015-0809.htmlhttp://rhn.redhat.com/errata/RHSA-2015-0808.htmlhttp://rhn.redhat.com/errata/RHSA-2015-0806.htmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2015:212http://advisories.mageia.org/MGASA-2015-0158.htmlhttp://marc.info/?l=bugtraq&m=111331593310508&w=2http://rhn.redhat.com/errata/RHSA-2015-1091.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1021.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1020.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1007.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1006.htmlhttp://www.securityfocus.com/bid/13083http://rhn.redhat.com/errata/RHSA-2015-0858.htmlhttp://rhn.redhat.com/errata/RHSA-2015-0857.htmlhttp://rhn.redhat.com/errata/RHSA-2015-0854.htmlhttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774953https://nvd.nist.govhttps://alas.aws.amazon.com/ALAS-2015-515.html
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
man-in-the-middleCVE-2024-34558CVE-2024-32674CVE-2024-34351XPath injectionCVE-2023-45866CVE-2024-25528CVE-2024-25517path traversal
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook