Sun Microsystems不可信Applet Java安全模型冲突漏洞

漏洞信息详情

Sun Microsystems不可信Applet Java安全模型冲突漏洞

• CNNVD编号：CNNVD-200312-467
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2003-1123
  
• 漏洞类型：
  
  
  设计错误
  
• 发布时间：
  
  2003-06-05
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  sun
• 漏洞来源：
  RecipeXperience

Solaris系统的Java Runtime Environment (JRE)为JAVA应用程序提供可靠的运行环境。
Java Runtime Environment (JRE)允许不可Applet从可信Applet中访问信息，远程攻击者可以利用这个漏洞绕过Java安全模型访问受限资源。
目前没有详细漏洞细节。

厂商补丁：
Sun
—
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：

Sun SDK (Solaris Production Release) 1.2.2 _10:

Sun Upgrade SDK and JRE (Solaris Production Release) 1.2.2_13

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun JRE (Solaris Reference Release) 1.2.2 _012:

Sun Upgrade SDK and JRE (Solaris OE Reference Release) 1.2.2_013

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun SDK (Windows Production Release) 1.2.2 _012:

Sun Upgrade SDK and JRE (Windows Production Release) 1.2.2_013

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun JRE (Solaris Production Release) 1.2.2 _012:

Sun Upgrade SDK and JRE (Solaris Production Release) 1.2.2_13

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun SDK (Solaris Production Release) 1.2.2 _011:

Sun Upgrade SDK and JRE (Solaris Production Release) 1.2.2_13

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun JRE (Linux Production Release) 1.2.2 _011:

Sun Upgrade SDK and JRE (Linux Production Release) 1.2.2_013

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun JRE (Solaris Reference Release) 1.2.2 _011:

Sun Upgrade SDK and JRE (Solaris OE Reference Release) 1.2.2_013

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun JRE (Solaris Production Release) 1.2.2 _011:

Sun Upgrade SDK and JRE (Solaris Production Release) 1.2.2_13

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun JRE (Windows Production Release) 1.2.2 _011:

Sun Upgrade SDK and JRE (Windows Production Release) 1.2.2_013

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun SDK (Linux Production Release) 1.2.2 _011:

Sun Upgrade SDK and JRE (Linux Production Release) 1.2.2_013

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun SDK (Windows Production Release) 1.2.2 _011:

Sun Upgrade SDK and JRE (Windows Production Release) 1.2.2_013

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun SDK (Windows Production Release) 1.2.2 _010:

Sun Upgrade SDK and JRE (Windows Production Release) 1.2.2_013

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun SDK (Linux Production Release) 1.2.2 _010:

Sun Upgrade SDK and JRE (Linux Production Release) 1.2.2_013

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun JRE (Windows Production Release) 1.2.2 _010:

Sun Upgrade SDK and JRE (Windows Production Release) 1.2.2_013

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun JRE (Solaris Production Release) 1.2.2 _010:

Sun Upgrade SDK and JRE (Solaris Production Release) 1.2.2_13

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun JRE (Linux Production Release) 1.2.2 _010:

Sun Upgrade SDK and JRE (Linux Production Release) 1.2.2_013

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun JRE (Linux Production Release) 1.2.2 _003:

Sun Upgrade SDK and JRE (Linux Production Release) 1.2.2_013

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun JRE (Windows Production Release) 1.2.2:

Sun Upgrade SDK and JRE (Windows Production Release) 1.2.2_013

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun JRE (Solaris Production Release) 1.2.2:

Sun Upgrade SDK and JRE (Solaris Production Release) 1.2.2_13

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun JRE (Solaris Reference Release) 1.2.2:

Sun Upgrade SDK and JRE (Solaris OE Reference Release) 1.2.2_013

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun SDK (Solaris Production Release) 1.2.2:

Sun Upgrade SDK and JRE (Solaris Production Release) 1.2.2_13

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun SDK (Windows Production Release) 1.3.1 _04:

Sun Upgrade SDK and JRE (Windows Production Release) 1.3.1_05

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun JRE (Solaris Production Release) 1.3.1 _04:

Sun Upgrade SDK and JRE (Solaris Production Release) 1.3.1_05

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun JRE (Windows Production Release) 1.3.1 _04:

Sun Upgrade SDK and JRE (Windows Production Release) 1.3.1_05

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun SDK (Solaris Production Release) 1.3.1 _03:

Sun Upgrade SDK and JRE (Solaris Production Release) 1.3.1_05

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun JRE (Linux Production Release) 1.3.1 _03:

Sun Upgrade SDK and JRE (Linux Production Release) 1.3.1_05

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun SDK (Windows Production Release) 1.3.1 _03:

Sun Upgrade SDK and JRE (Windows Production Release) 1.3.1_05

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun SDK (Linux Production Release) 1.3.1 _03:

Sun Upgrade SDK and JRE (Linux Production Release) 1.3.1_05

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun JRE (Windows Production Release) 1.3.1 _03:

Sun Upgrade SDK and JRE (Windows Production Release) 1.3.1_05

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun JRE (Solaris Production Release) 1.3.1 _03:

Sun Upgrade SDK and JRE (Solaris Production Release) 1.3.1_05

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun SDK (Windows Production Release) 1.3.1 _01a:

Sun Upgrade SDK and JRE (Windows Production Release) 1.3.1_05

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun JRE (Windows Production Release) 1.3.1 _01:

Sun Upgrade SDK and JRE (Windows Production Release) 1.3.1_05

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun JRE (Solaris Production Release) 1.3.1 _01:

Sun Upgrade SDK and JRE (Solaris Production Release) 1.3.1_05

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun SDK (Solaris Production Release) 1.3.1 _01:

Sun Upgrade SDK and JRE (Solaris Production Release) 1.3.1_05

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun SDK (Linux Production Release) 1.3.1 _01:

Sun Upgrade SDK and JRE (Linux Production Release) 1.3.1_05

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun JRE (Linux Production Release) 1.3.1 _01:

Sun Upgrade SDK and JRE (Linux Production Release) 1.3.1_05

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun JRE (Linux Production Release) 1.3.1:

Sun Upgrade SDK and JRE (Linux Production Release) 1.3.1_05

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun SDK (Windows Production Release) 1.4 .0_01:

Sun Upgrade SDK and JRE (Windows Production Release) 1.4.0_02

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun JRE (Windows Production Release) 1.4 .0_01:

Sun Upgrade SDK and JRE (Windows Production Release) 1.4.0_02

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun JRE (Solaris Production Release) 1.4 .0_01:

Sun Upgrade SDK and JRE (Solaris Production Release) 1.4.0_02

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun JRE (Linux Production Release) 1.4:

Sun Upgrade SDK and JRE (Linux Production Release) 1.4.0_02

http://java.sun.com/j2se/” target=”_blank”>
http://java.sun.com/j2se/

Sun SDK (Linux Pr

来源:US-CERT Vulnerability Note: VU#393292
名称: VU#393292
链接:http://www.kb.cert.org/vuls/id/393292

来源: BID
名称: 7824
链接:http://www.securityfocus.com/bid/7824

来源: SUNALERT
名称: 55100
链接:http://sunsolve.sun.com/search/document.do?assetkey=1-26-55100-1

来源: XF
名称: sun-applet-access-information(12189)
链接:http://xforce.iss.net/xforce/xfdb/12189

来源: SECTRACK
名称: 1006935
链接:http://securitytracker.com/id?1006935

来源: SECUNIA
名称: 8958
链接:http://secunia.com/advisories/8958

来源：NSFOCUS
名称：4934
链接：http://www.nsfocus.net/vulndb/4934