Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2005-1080
HistoryMay 02, 2005 - 12:00 a.m.

CVE-2005-1080

2005-05-0200:00:00
ubuntu.com
ubuntu.com
27

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

75.8%

JSON

Directory traversal vulnerability in the Java Archive Tool (Jar) utility in
J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or
overwrite arbitrary files via a … (dot dot) in filenames in a .jar file.

Bugs

Notes

Author Note
sbeattie test script: https://bugzilla.redhat.com/attachment.cgi?id=415508 oracle re-issued a cve for this as CVE-2015-0480
OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchopenjdk-6< 6b35-1.13.7-1ubuntu0.10.04.2UNKNOWN
ubuntu12.04noarchopenjdk-6< 6b35-1.13.7-1ubuntu0.12.04.2UNKNOWN
ubuntu14.04noarchopenjdk-6< 6b35-1.13.7-1ubuntu0.14.04.1 UNKNOWN
ubuntu14.10noarchopenjdk-6< 6b35-1.13.7-1ubuntu0.14.10.1 UNKNOWN

Related

ubuntucve 3
freebsd 1
veracode 12
cve 3
openvas 50
nessus 55
f5 3
prion 2
debiancve 2
oraclelinux 4
mageia 1
centos 4
redhat 12
archlinux 6
amazon 3
securityvulns 2
ibm 13
ubuntu 2
debian 4
osv 4
suse 10
kaspersky 2
aix 1
ubuntucve
ubuntucve
CVE-2015-0480
2015-04-15 00:00:00
CVE-2010-0831
2010-05-25 00:00:00
CVE-2010-2322
2010-06-18 00:00:00
freebsd
freebsd
jdk -- jar directory traversal vulnerability
2005-04-11 00:00:00
veracode
veracode
Directory Traversal
2019-01-15 09:05:18
Sandbox Protection Bypass
2019-05-02 05:13:14
Denial Of Service (DoS)
2019-05-02 05:13:14
cve
cve
CVE-2005-1080
2005-05-02 04:00:00
CVE-2015-0480
2015-04-16 16:59:00
CVE-2010-0831
2010-06-18 18:30:00
openvas
openvas
FreeBSD Ports: jdk
2008-09-04 00:00:00
FreeBSD Ports: jdk
2008-09-04 00:00:00
Oracle: Security Advisory (ELSA-2015-0806)
2015-10-06 00:00:00
nessus
nessus
FreeBSD : jdk -- jar directory traversal vulnerability (18e5428f-ae7c-11d9-837d-000e0c2e438a)
2005-07-13 00:00:00
RHEL 5 : java-1.7.0-openjdk (RHSA-2015:0807)
2015-04-15 00:00:00
CentOS 5 : java-1.7.0-openjdk (CESA-2015:0807)
2015-04-16 00:00:00
f5
f5
K60565503 : OpenJDK vulnerability CVE-2005-1080
2017-10-04 00:00:00
K17125 : Multiple Java vulnerabilities
2015-08-12 00:00:00
SOL17125 - Multiple Java vulnerabilities
2015-08-12 00:00:00
prion
prion
Buffer overflow
2015-04-16 16:59:00
Directory traversal
2010-06-18 18:30:00
debiancve
debiancve
CVE-2015-0480
2015-04-16 16:59:00
CVE-2010-0831
2010-06-18 18:30:00
oraclelinux
oraclelinux
java-1.7.0-openjdk security update
2015-04-15 00:00:00
java-1.6.0-openjdk security update
2015-04-15 00:00:00
java-1.7.0-openjdk security update
2015-04-15 00:00:00
mageia
mageia
Updated java-1.7.0-openjdk packages fix security vulnerabilities
2015-04-15 20:22:53
centos
centos
java security update
2015-04-15 11:08:38
java security update
2015-04-15 11:47:27
java security update
2015-04-15 11:09:51
redhat
redhat
(RHSA-2015:0807) Important: java-1.7.0-openjdk security update
2015-04-14 00:00:00
(RHSA-2015:0808) Important: java-1.6.0-openjdk security update
2015-04-14 00:00:00
(RHSA-2015:0806) Critical: java-1.7.0-openjdk security update
2015-04-14 00:00:00
archlinux
archlinux
jdk7-openjdk: multiple issues
2015-04-17 00:00:00
jre7-openjdk: multiple issues
2015-04-17 00:00:00
jre7-openjdk-headless: multiple issues
2015-04-17 00:00:00
amazon
amazon
Important: java-1.7.0-openjdk
2015-04-23 00:44:00
Important: java-1.6.0-openjdk
2015-04-23 00:44:00
Important: java-1.8.0-openjdk
2015-05-05 15:44:00
securityvulns
securityvulns
fastjar archiver directory traversal
2010-06-23 00:00:00
[ MDVSA-2010:122 ] fastjar
2010-06-23 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in Java affect Power Hardware Management Console (CVE-2015-0480, CVE-2015-0486, CVE-2015-0488, CVE-2015-0478, CVE-2015-0477, CVE-2015-1916)
2021-09-23 01:31:39
Security Bulletin: Vulnerability in RC4 cipher stream (CVE-2015-2808) and multiple vulnerabilities in IBM SDK Java Technology Edition affects IBM Systems Director.
2019-01-31 02:10:01
Security Bulletin: Vulnerability in RC4 cipher stream and multiple vulnerabilities in IBM SDK Java Technology Edition affects IBM Systems Director
2019-01-31 02:10:01
ubuntu
ubuntu
OpenJDK 6 vulnerabilities
2015-04-21 00:00:00
OpenJDK 7 vulnerabilities
2015-04-21 00:00:00
debian
debian
[SECURITY] [DSA 3234-1] openjdk-6 security update
2015-04-24 18:39:47
[SECURITY] [DSA 3235-1] openjdk-7 security update
2015-04-24 18:41:20
[SECURITY] [DLA 213-1] openjdk-6 security update
2015-04-30 13:41:01
osv
osv
openjdk-6 - security update
2015-04-30 00:00:00
openjdk-6 - security update
2015-04-24 00:00:00
openjdk-7 - security update
2015-04-24 00:00:00
suse
suse
Security update for java-1_7_0-openjdk (critical)
2015-05-07 21:04:54
Security update for java-1_7_0-openjdk (important)
2015-04-27 13:05:55
Security update for IBM Java (important)
2015-06-18 16:05:20
kaspersky
kaspersky
KLA10548 Multiple vulnerabilities in Oracle products
2015-04-14 00:00:00
KLA10551 Code execution vulnerabilities in Microsoft Office
2015-04-14 00:00:00
aix
aix
Multiple vulnerabilities in IBM Java SDK affect AIX
2015-06-03 12:58:42

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

75.8%

JSON
Related for UB:CVE-2005-1080
ubuntucve3freebsd1veracode12cve3openvas50nessus55f53prion2debiancve2oraclelinux4mageia1centos4redhat12archlinux6amazon3securityvulns2ibm13ubuntu2debian4osv4suse10kaspersky2aix1