Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2009-3866
HistoryNov 05, 2009 - 12:00 a.m.

CVE-2009-3866

2009-11-0500:00:00
ubuntu.com
ubuntu.com
15

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.103 Low

EPSS

Percentile

94.9%

JSON

The Java Web Start Installer in Sun Java SE in JDK and JRE 6 before Update
17 does not properly use security model permissions when removing installer
extensions, which allows remote attackers to execute arbitrary code by
modifying a certain JNLP file to have a URL field that points to an
unintended trusted application, aka Bug Id 6872824.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchsun-java6< 6.20dlj-0ubuntu1.8.04UNKNOWN
ubuntu9.04noarchsun-java6< 6.20dlj-0ubuntu1.9.04UNKNOWN
ubuntu9.10noarchsun-java6< 6.20dlj-0ubuntu1.9.10UNKNOWN
ubuntu10.04noarchsun-java6< 6.20dlj-1ubuntu3UNKNOWN

Related

prion 1
cve 1
veracode 1
zdi 1
openvas 14
nessus 16
suse 2
packetstorm 1
redhat 3
vmware 2
gentoo 1
prion
prion
Code injection
2009-11-05 16:30:00
cve
cve
CVE-2009-3866
2009-11-05 16:30:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:40:36
zdi
zdi
Sun Java Web Start Arbitrary Command Execution Vulnerability
2009-11-04 00:00:00
openvas
openvas
Sun Java JRE Remote Code Execution Vulnerability (Linux)
2009-11-13 00:00:00
Sun Java JRE < 6 Update 17 RCE Vulnerability - Linux
2009-11-13 00:00:00
Sun Java JRE < 6 Update 17 RCE Vulnerability - Windows
2009-11-13 00:00:00
nessus
nessus
openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-1541)
2009-11-19 00:00:00
openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-1541)
2009-11-19 00:00:00
openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-1541)
2009-11-19 00:00:00
suse
suse
remote code execution in java-1_6_0-ibm
2010-01-12 17:47:21
remote code execution in java-1_6_0-sun
2009-11-19 17:02:05
packetstorm
packetstorm
Netragard Security Advisory 2009-12-19
2009-12-30 00:00:00
redhat
redhat
(RHSA-2009:1694) Critical: java-1.6.0-ibm security update
2009-12-23 00:00:00
(RHSA-2009:1560) Critical: java-1.6.0-sun security update
2009-11-09 00:00:00
(RHSA-2010:0043) Low: Red Hat Network Satellite Server IBM Java Runtime security update
2010-01-14 00:00:00
vmware
vmware
VMware vCenter update release addresses multiple security issues in Java JRE
2010-01-29 00:00:00
VMware vCenter update release addresses multiple security issues in Java JRE
2010-01-29 00:00:00
gentoo
gentoo
Sun JDK/JRE: Multiple vulnerabilities
2009-11-17 00:00:00

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.103 Low

EPSS

Percentile

94.9%

JSON
Related for UB:CVE-2009-3866
prion1cve1veracode1zdi1openvas14nessus16suse2packetstorm1redhat3vmware2gentoo1