CVE-2013-2035

2013-08-2823:55:00

CWE-94

[email protected]

web.nvd.nist.gov

cve-2013-2035

race condition

hawtjni

java code

security vulnerability

5.5 Medium

AI Score

Confidence

High

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

9.3%

JSON

Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp.

CPENameOperatorVersion
redhat:hawtjniredhat hawtjnieq1.2
redhat:hawtjniredhat hawtjnieq1.6
redhat:hawtjniredhat hawtjnieq1.1
redhat:hawtjniredhat hawtjnieq1.4
redhat:hawtjniredhat hawtjnieq1.0
redhat:hawtjniredhat hawtjnieq1.5
redhat:hawtjniredhat hawtjnieq1.3
redhat:hawtjniredhat hawtjnile1.7

CPE	Name	Operator	Version
redhat:hawtjni	redhat hawtjni	eq	1.2
redhat:hawtjni	redhat hawtjni	eq	1.6
redhat:hawtjni	redhat hawtjni	eq	1.1
redhat:hawtjni	redhat hawtjni	eq	1.4
redhat:hawtjni	redhat hawtjni	eq	1.0
redhat:hawtjni	redhat hawtjni	eq	1.5
redhat:hawtjni	redhat hawtjni	eq	1.3
redhat:hawtjni	redhat hawtjni	le	1.7