Published: 10/02/2014 Updated: 05/01/2018

CVSS v2 Base Score: 4.4 | Impact Score: 6.4 | Exploitability Score: 3.4

VMScore: 392

Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P

The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite arbitrary files via a symlink attack on /tmp/unpack.log.

Vulnerable Product	Search on Vulmon	Subscribe to Product
oracle openjdk 1.8.0
oracle openjdk 1.6.0
oracle openjdk 1.7.0

Debian Bug report logs - #737562 unpack200: CVE-2014-1876: insecure use of /tmp Package: openjdk-7-jre-headless; Maintainer for openjdk-7-jre-headless is OpenJDK Team <openjdk@listslaunchpadnet>; Source for openjdk-7-jre-headless is src:openjdk-7 (PTS, buildd, popcon) Reported by: Jakub Wilk <jwilk@debianorg> Date ...

Several security issues were fixed in OpenJDK 7 ...

Several security issues were fixed in OpenJDK 6 ...

An input validation flaw was discovered in the medialib library in the 2D component A specially crafted image could trigger Java Virtual Machine memory corruption when processed A remote attacker, or an untrusted Java application or applet, could possibly use this flaw to execute arbitrary code with the privileges of the user running the Java Vir ...

The unpacker::redirect_stdio function in unpackcpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 50u61, 6u71, 7u51, and 8; JRockit R2781 and R2831; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite arbitrary files via a symlink attack on /tmp/unpack ...

CWE-59 https://bugzilla.redhat.com/show_bug.cgi?id=1060907 http://seclists.org/oss-sec/2014/q1/285 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737562 http://osvdb.org/102808 http://seclists.org/oss-sec/2014/q1/242 http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html http://www.debian.org/security/2014/dsa-2912 http://www.ubuntu.com/usn/USN-2191-1 http://secunia.com/advisories/58415 http://www.ubuntu.com/usn/USN-2187-1 http://www.securityfocus.com/bid/65568 http://www-01.ibm.com/support/docview.wss?uid=swg21672080 http://secunia.com/advisories/59058 http://www-01.ibm.com/support/docview.wss?uid=swg21676746 http://www-01.ibm.com/support/docview.wss?uid=swg21679713 http://security.gentoo.org/glsa/glsa-201406-32.xml http://marc.info/?l=bugtraq&m=140852974709252&w=2 http://marc.info/?l=bugtraq&m=140852886808946&w=2 http://rhn.redhat.com/errata/RHSA-2014-0685.html http://rhn.redhat.com/errata/RHSA-2014-0675.html https://access.redhat.com/errata/RHSA-2014:0414 https://access.redhat.com/errata/RHSA-2014:0413 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737562 https://nvd.nist.gov https://usn.ubuntu.com/2187-1/https://access.redhat.com/security/cve/cve-2014-1876

CVE-2014-1876

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect