Sun Java Applet调用版本规范漏洞

漏洞信息详情

Sun Java Applet调用版本规范漏洞

• CNNVD编号：CNNVD-200608-357
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2006-4302
  
• 漏洞类型：
  
  
  权限许可和访问控制
  
• 发布时间：
  
  2006-08-22
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2006-08-28
  
• 厂        商：
  
  sun
• 漏洞来源：
  Peter Greenwood re…

Java Plug-in J2SE 1.3.0_02至5.0 Update 5，Java Web Start 1.0至1.2以及 J2SE 1.4.2至5.0 Update 5版本中，远程攻击者可通过指定包含漏洞的JRE版本来利用漏洞。

Sun JRE (Solaris Production Release) 1.3 _01aris Production Release) 1.3 _01

• Sun J2SE 5.0

  http://java.sun.com/j2se/1.5.0/download.jsp“>
  http://java.sun.com/j2se/1.5.0/download.jsp

Sun JRE (Solaris Production Release) 1.3.1

• Sun J2SE 5.0

  http://java.sun.com/j2se/1.5.0/download.jsp“>
  http://java.sun.com/j2se/1.5.0/download.jsp

Sun Java 2 Runtime Environment 1.3.1 _08

• Sun J2SE 5.0

  http://java.sun.com/j2se/1.5.0/download.jsp“>
  http://java.sun.com/j2se/1.5.0/download.jsp

Sun JRE (Linux Production Release) 1.3.1 _01a

• Sun J2SE 5.0

  http://java.sun.com/j2se/1.5.0/download.jsp“>
  http://java.sun.com/j2se/1.5.0/download.jsp

Sun JRE (Linux Production Release) 1.3.1 _15

• Sun J2SE 5.0

  http://java.sun.com/j2se/1.5.0/download.jsp“>
  http://java.sun.com/j2se/1.5.0/download.jsp

Sun JRE (Linux Production Release) 1.3.1 _16

• Sun J2SE 5.0

  http://java.sun.com/j2se/1.5.0/download.jsp“>
  http://java.sun.com/j2se/1.5.0/download.jsp

Sun Java 2 Runtime Environment 1.4.2 _03

• Sun J2SE 5.0

  http://java.sun.com/j2se/1.5.0/download.jsp“>
  http://java.sun.com/j2se/1.5.0/download.jsp

Sun Java 2 Runtime Environment 1.4.2 _09

• Sun J2SE 5.0

  http://java.sun.com/j2se/1.5.0/download.jsp“>
  http://java.sun.com/j2se/1.5.0/download.jsp

Sun Java 2 Runtime Environment 1.4.2 _08

• Sun J2SE 5.0

  http://java.sun.com/j2se/1.5.0/download.jsp“>
  http://java.sun.com/j2se/1.5.0/download.jsp

Sun Java 2 Runtime Environment 1.4.2

• Sun J2SE 5.0

  http://java.sun.com/j2se/1.5.0/download.jsp“>
  http://java.sun.com/j2se/1.5.0/download.jsp

Sun Java 2 Runtime Environment 1.4.2 _02

• Sun J2SE 5.0

  http://java.sun.com/j2se/1.5.0/download.jsp“>
  http://java.sun.com/j2se/1.5.0/download.jsp

Sun Java 2 Runtime Environment 1.4.2 _04

• Sun J2SE 5.0

  http://java.sun.com/j2se/1.5.0/download.jsp“>
  http://java.sun.com/j2se/1.5.0/download.jsp

Sun Java 2 Runtime Environment 1.5

• Sun J2SE 5.0

  http://java.sun.com/j2se/1.5.0/download.jsp“>
  http://java.sun.com/j2se/1.5.0/download.jsp

Sun JRE (Linux Production Release) 1.5 _03

• Sun J2SE 5.0

  http://java.sun.com/j2se/1.5.0/download.jsp“>
  http://java.sun.com/j2se/1.5.0/download.jsp

Sun JRE (Linux Production Release) 1.5 _02

• Sun J2SE 5.0

  http://java.sun.com/j2se/1.5.0/download.jsp“>
  http://java.sun.com/j2se/1.5.0/download.jsp

来源: SUNALERT

名称: 102557

链接:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102557-1

来源: SECUNIA

名称: 21570

链接:http://secunia.com/advisories/21570

来源: SECTRACK

名称: 1016733

链接:http://securitytracker.com/id?1016733

来源: SECTRACK

名称: 1016732

链接:http://securitytracker.com/id?1016732

来源: BID

名称: 8879

链接:http://www.securityfocus.com/bid/8879

来源: BID

名称: 11757

链接:http://www.securityfocus.com/bid/11757

来源: BUGTRAQ

名称: 20041126 Java version downgrading proof-of-concept

链接:http://www.securityfocus.com/archive/1/382413

来源: OSVDB

名称: 28109

链接:http://www.osvdb.org/28109

来源: VUPEN

名称: ADV-2006-3354

链接:http://www.frsirt.com/english/advisories/2006/3354

来源: support.avaya.com

链接:http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm