CVE-2009-2672

2009-08-0500:00:00

ubuntu.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.037 Low

EPSS

Percentile

91.6%

JSON

The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in
JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does
not prevent access to browser cookies by untrusted (1) applets and (2) Java
Web Start applications, which allows remote attackers to hijack web
sessions via unspecified vectors.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchopenjdk-6< 6b18-1.8.2-4ubuntu1~8.04.1UNKNOWN
ubuntu8.10noarchopenjdk-6< 6b12-0ubuntu6.5UNKNOWN
ubuntu9.04noarchopenjdk-6< 6b14-1.4.1-0ubuntu11UNKNOWN
ubuntu8.04noarchsun-java6< 6.20dlj-0ubuntu1.8.04UNKNOWN
ubuntu9.04noarchsun-java6< 6.20dlj-0ubuntu1.9.04UNKNOWN
ubuntu9.10noarchsun-java6< 6-15-1UNKNOWN
ubuntu10.04noarchsun-java6< 6-15-1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	openjdk-6	< 6b18-1.8.2-4ubuntu1~8.04.1	UNKNOWN
ubuntu	8.10	noarch	openjdk-6	< 6b12-0ubuntu6.5	UNKNOWN
ubuntu	9.04	noarch	openjdk-6	< 6b14-1.4.1-0ubuntu11	UNKNOWN
ubuntu	8.04	noarch	sun-java6	< 6.20dlj-0ubuntu1.8.04	UNKNOWN
ubuntu	9.04	noarch	sun-java6	< 6.20dlj-0ubuntu1.9.04	UNKNOWN
ubuntu	9.10	noarch	sun-java6	< 6-15-1	UNKNOWN
ubuntu	10.04	noarch	sun-java6	< 6-15-1	UNKNOWN