PRIOn knowledge basePRION:CVE-2007-3504Directory traversal
Directory traversal vulnerability in the PersistenceService in Sun Java Web Start in JDK and JRE 5.0 Update 11 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, for Windows allows remote attackers to perform unauthorized actions via an application that grants file overwrite privileges to itself. NOTE: this can be leveraged to execute arbitrary code by overwriting a .java.policy file.
References
docs.info.apple.com/article.html?artnum=307177
lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html
osvdb.org/37755
secunia.com/advisories/25823
secunia.com/advisories/28115
sunsolve.sun.com/search/document.do?assetkey=1-26-102957-1
www.securityfocus.com/archive/1/472673/100/0/threaded
www.securityfocus.com/bid/24695
www.securitytracker.com/id?1018328
www.vupen.com/english/advisories/2007/2384
www.vupen.com/english/advisories/2007/4224
exchange.xforce.ibmcloud.com/vulnerabilities/35169
Related
