Authorization Bypass

java is vulnerable to authorization bypass. The vulnerability exists as it was found that JNLPSecurityManager could silently return without throwing an exception when permission was denied. If the javaws command was used to launch a Java Web Start application that relies on this exception being...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2011:0057-1)

This update of java-160-openjdk improves the return value handling of JNLPSecurityManager. Prior to this update the JNLPSecurityManager silently returns in some cases when a permission was denied. CVE-2010-4351 Additionally the java path was fixed to make java work with firefox again. %NASLMINLEV...