Lucene search
Ubuntu.comUB:CVE-2009-2476HistoryAug 10, 2009 - 12:00 a.m.
CVE-2009-2476
2009-08-1000:00:00
ubuntu.com
ubuntu.com
16
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.012 Low
EPSS
Percentile
85.3%
The Java Management Extensions (JMX) implementation in Sun Java SE 6 before
Update 15, and OpenJDK, does not properly enforce OpenType checks, which
allows context-dependent attackers to bypass intended access restrictions
by leveraging finalizer resurrection to obtain a reference to a privileged
object.
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 8.04 | noarch | openjdk-6 | < 6b18-1.8.2-4ubuntu1~8.04.1 | UNKNOWN |
| ubuntu | 8.10 | noarch | openjdk-6 | < 6b12-0ubuntu6.5 | UNKNOWN |
| ubuntu | 9.04 | noarch | openjdk-6 | < 6b14-1.4.1-0ubuntu11 | UNKNOWN |
| ubuntu | 8.04 | noarch | sun-java6 | < 6.20dlj-0ubuntu1.8.04 | UNKNOWN |
| ubuntu | 9.04 | noarch | sun-java6 | < 6.20dlj-0ubuntu1.9.04 | UNKNOWN |
| ubuntu | 9.10 | noarch | sun-java6 | < 6-15-1 | UNKNOWN |
| ubuntu | 10.04 | noarch | sun-java6 | < 6-15-1 | UNKNOWN |
Related
veracode
veracode
Authorization Bypass
2020-04-10 00:35:28
prion
prion
Design/Logic Flaw
2009-08-10 18:30:00
cve
cve
CVE-2009-2476
2009-08-10 18:30:00
nessus
nessus
Solaris 10 (x86) : 125139-71
2018-03-12 00:00:00
Solaris 10 (x86) : 125139-75
2018-03-12 00:00:00
openSUSE Security Update : java-1_6_0-openjdk (java-1_6_0-openjdk-1330)
2009-09-25 00:00:00
openvas
openvas
Sun Java JDK/JRE JPEG Images Integer Overflow Vulnerability - Aug09
2009-08-20 00:00:00
Sun Java JDK/JRE JPEG Images Integer Overflow Vulnerability (Aug 2009)
2009-08-20 00:00:00
Oracle: Security Advisory (ELSA-2009-1201)
2015-10-08 00:00:00
centos
centos
java security update
2009-08-09 04:11:10
redhat
redhat
(RHSA-2009:1201) Important: java-1.6.0-openjdk security and bug fix update
2009-08-06 00:00:00
(RHSA-2009:1200) Critical: java-1.6.0-sun security update
2009-08-06 00:00:00
securityvulns
securityvulns
OpenJDK multiple security vulnerabilities
2009-08-11 00:00:00
[USN-814-1] openjdk-6 vulnerabilities
2009-08-11 00:00:00
oraclelinux
oraclelinux
java-1.6.0-openjdk security and bug fix update
2009-08-06 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: java-1.6.0-openjdk-1.6.0.0-27.b16.fc11
2009-08-07 04:59:49
[SECURITY] Fedora 10 Update: java-1.6.0-openjdk-1.6.0.0-20.b16.fc10
2009-08-07 05:02:36
ubuntu
ubuntu
OpenJDK vulnerabilities
2009-08-11 00:00:00
gentoo
gentoo
Sun JDK/JRE: Multiple vulnerabilities
2009-11-17 00:00:00
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.012 Low
EPSS
Percentile
85.3%
Related for UB:CVE-2009-2476