Sun JNLPAppletLauncher库任意文件创建漏洞

admin
admin
admin
0
文章
0
评论
2022-07-19 18:53:14 CNNVD漏洞 来源：ZONE.CI 全球网 0 阅读模式

漏洞信息详情

Sun JNLPCMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>AppletLauncher库任意文件创建漏洞

  • CNNVD编号：CNNVD-200908-012
  • 危害等级： 中危
  • CVE编号： CVE-2009-2676
  • 漏洞类型： 权限许可和访问控制
  • 发布时间： 2009-08-05
  • 威胁类型： 远程
  • 更新时间： 2009-11-10
  • 厂        商： sun
  • 漏洞来源： John Heasman※ nisr...

漏洞简介

JNLPCMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>AppletLauncher是一个基于JNLP的CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Applet启动器类，允许CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Applet使用Java 3D、JOGL、JOAL等扩展。 JNLPCMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>AppletLauncher中的安全漏洞可能影响Sun JDK和JRE用户。不可信任的Java CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Applet可能导致旧版的JNLPCMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>AppletLauncher向下载和运行不可信任的CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Applet用户的系统上写入任意文件。出现这个漏洞时用户会看到警告对话框说明数字签名已过期。

漏洞公告

目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：

S.u.S.E. openSUSE 10.3

S.u.S.E. java-1_5_0-sun-1.5.0_update20-0.1.i586.rpm

http://download.opensuse.org/update/11.0/rpm/i586/java-1_5_0-sun-1.5.0 _update20-0.1.i586.rpm

S.u.S.E. java-1_5_0-sun-1.5.0_update20-0.1.x86_64.rpm

http://download.opensuse.org/update/11.0/rpm/x86_64/java-1_5_0-sun-1.5 .0_update20-0.1.x86_64.rpm

S.u.S.E. java-1_5_0-sun-alsa-1.5.0_update20-0.1.i586.rpm

http://download.opensuse.org/update/11.0/rpm/i586/java-1_5_0-sun-alsa- 1.5.0_update20-0.1.i586.rpm

S.u.S.E. java-1_5_0-sun-alsa-1.5.0_update20-0.1.x86_64.rpm

http://download.opensuse.org/update/11.0/rpm/x86_64/java-1_5_0-sun-als a-1.5.0_update20-0.1.x86_64.rpm

S.u.S.E. java-1_5_0-sun-demo-1.5.0_update20-0.1.i586.rpm

http://download.opensuse.org/update/11.0/rpm/i586/java-1_5_0-sun-demo- 1.5.0_update20-0.1.i586.rpm

S.u.S.E. java-1_5_0-sun-demo-1.5.0_update20-0.1.x86_64.rpm

http://download.opensuse.org/update/11.0/rpm/x86_64/java-1_5_0-sun-dem o-1.5.0_update20-0.1.x86_64.rpm

S.u.S.E. java-1_5_0-sun-devel-1.5.0_update20-0.1.i586.rpm

http://download.opensuse.org/update/11.0/rpm/i586/java-1_5_0-sun-devel -1.5.0_update20-0.1.i586.rpm

S.u.S.E. java-1_5_0-sun-devel-1.5.0_update20-0.1.x86_64.rpm

http://download.opensuse.org/update/11.0/rpm/x86_64/java-1_5_0-sun-dev el-1.5.0_update20-0.1.x86_64.rpm

S.u.S.E. java-1_5_0-sun-jdbc-1.5.0_update20-0.1.i586.rpm

http://download.opensuse.org/update/11.0/rpm/i586/java-1_5_0-sun-jdbc- 1.5.0_update20-0.1.i586.rpm

S.u.S.E. java-1_5_0-sun-jdbc-1.5.0_update20-0.1.x86_64.rpm

http://download.opensuse.org/update/11.0/rpm/x86_64/java-1_5_0-sun-jdb c-1.5.0_update20-0.1.x86_64.rpm

S.u.S.E. java-1_5_0-sun-plugin-1.5.0_update20-0.1.i586.rpm

http://download.opensuse.org/update/11.0/rpm/i586/java-1_5_0-sun-plugi n-1.5.0_update20-0.1.i586.rpm

S.u.S.E. java-1_5_0-sun-src-1.5.0_update20-0.1.i586.rpm

http://download.opensuse.org/update/11.0/rpm/i586/java-1_5_0-sun-src-1 .5.0_update20-0.1.i586.rpm

S.u.S.E. java-1_5_0-sun-src-1.5.0_update20-0.1.x86_64.rpm

http://download.opensuse.org/update/11.0/rpm/x86_64/java-1_5_0-sun-src -1.5.0_update20-0.1.x86_64.rpm

S.u.S.E. java-1_6_0-sun-1.6.0.u15-0.1.i586.rpm

http://download.opensuse.org/update/11.0/rpm/i586/java-1_6_0-sun-1.6.0 .u15-0.1.i586.rpm

S.u.S.E. java-1_6_0-sun-1.6.0.u15-0.1.x86_64.rpm

http://download.opensuse.org/update/11.0/rpm/x86_64/java-1_6_0-sun-1.6 .0.u15-0.1.x86_64.rpm

S.u.S.E. java-1_6_0-sun-alsa-1.6.0.u15-0.1.i586.rpm

http://download.opensuse.org/update/11.0/rpm/i586/java-1_6_0-sun-alsa- 1.6.0.u15-0.1.i586.rpm

S.u.S.E. java-1_6_0-sun-alsa-1.6.0.u15-0.1.x86_64.rpm

http://download.opensuse.org/update/11.0/rpm/x86_64/java-1_6_0-sun-als a-1.6.0.u15-0.1.x86_64.rpm

S.u.S.E. java-1_6_0-sun-debuginfo-1.6.0.u15-0.1.i586.rpm

http://download.opensuse.org/update/10.3/rpm/i586/java-1_6_0-sun-debug info-1.6.0.u15-0.1.i586.rpm

S.u.S.E. java-1_6_0-sun-debuginfo-1.6.0.u15-0.1.x86_64.rpm

http://download.opensuse.org/update/10.3/rpm/x86_64/java-1_6_0-sun-deb uginfo-1.6.0.u15-0.1.x86_64.rpm

S.u.S.E. java-1_6_0-sun-demo-1.6.0.u15-0.1.i586.rpm

http://download.opensuse.org/update/11.0/rpm/i586/java-1_6_0-sun-demo- 1.6.0.u15-0.1.i586.rpm

S.u.S.E. java-1_6_0-sun-demo-1.6.0.u15-0.1.x86_64.rpm

http://download.opensuse.org/update/11.0/rpm/x86_64/java-1_6_0-sun-dem o-1.6.0.u15-0.1.x86_64.rpm

S.u.S.E. java-1_6_0-sun-devel-1.6.0.u15-0.1.i586.rpm

http://download.opensuse.org/update/11.0/rpm/i586/java-1_6_0-sun-devel -1.6.0.u15-0.1.i586.rpm

S.u.S.E. java-1_6_0-sun-devel-1.6.0.u15-0.1.x86_64.rpm

http://download.opensuse.org/update/11.0/rpm/x86_64/java-1_6_0-sun-dev el-1.6.0.u15-0.1.x86_64.rpm

S.u.S.E. java-1_6_0-sun-jdbc-1.6.0.u15-0.1.i586.rpm

http://download.opensuse.org/update/11.0/rpm/i586/java-1_6_0-sun-jdbc- 1.6.0.u15-0.1.i586.rpm

S.u.S.E. java-1_6_0-sun-jdbc-1.6.0.u15-0.1.x86_64.rpm

http://download.opensuse.org/update/11.0/rpm/x86_64/java-1_6_0-sun-jdb c-1.6.0.u15-0.1.x86_64.rpm

S.u.S.E. java-1_6_0-sun-plugin-1.6.0.u15-0.1.i586.rpm

http://download.opensuse.org/update/11.0/

参考网址

US-CERT Technical Alert: TA09-294A

名称: TA09-294A

链接:http://www.us-cert.gov/cas/techalerts/TA09-294A.HTML

来源: SUNALERT

名称: 263490

链接:http://sunsolve.sun.com/search/document.do?assetkey=1-66-263490-1

来源: sunsolve.sun.com

链接:http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1

来源: REDHAT

名称: RHSA-2009:1200

链接:https://rhn.redhat.com/errata/RHSA-2009-1200.HTML

来源: REDHAT

名称: RHSA-2009:1199

链接:https://rhn.redhat.com/errata/RHSA-2009-1199.HTML

来源: SECTRACK

名称: 1022657

链接:http://www.securitytracker.com/id?1022657

来源: BID

名称: 35946

链接:http://www.securityfocus.com/bid/35946

来源: www.oracle.com

链接:http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2009.HTML

来源: GENTOO

名称: GLSA-200911-02

链接:http://security.gentoo.org/glsa/glsa-200911-02.xml

来源: SECUNIA

名称: 37300

链接:http://secunia.com/advisories/37300

来源: SECUNIA

名称: 36248

链接:http://secunia.com/advisories/36248

来源: SECUNIA

名称: 36199

链接:http://secunia.com/advisories/36199

来源: SECUNIA

名称: 36176

链接:http://secunia.com/advisories/36176

来源: OSVDB

名称: 56789

链接:http://osvdb.org/56789

来源: HP

名称: SSRT090250

链接:http://marc.info/?l=bugtraq&m=125787273209737&w=2

来源: HP

名称: SSRT090250

链接:http://marc.info/?l=bugtraq&m=125787273209737&w=2

来源: SUSE

名称: SUSE-SA:2009:053

链接:http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.HTML

来源: SUSE

名称: SUSE-SA:2009:043

链接:http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.HTML

受影响实体

  • Sun Java_se:Business  
  • Sun Java_se  
  • Sun Java_se:Business  

补丁

    暂无

weinxin
特别声明
本站(ZONE.CI)所有文章仅供技术研究，若将其信息做其他用途，由用户承担全部法律及连带责任，本站不承担任何法律及连带责任，请遵守中华人民共和国安全法.
ZONE.CI 全球网 | 安全领域涉猎者-乌云独行地带
咨询加Q：999999999
ZONE.CI 全球网 | 安全领域涉猎者-乌云独行地带
ZONE.CI 全球网 安全领域涉猎者-乌云独行地带
获取本源码
售前咨询加Q：120433200
站媒体网仿《知更鸟》模板
获取本源码 zmt6.com
评论：0   参与：  0