Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-6493
HistoryMar 03, 2014 - 12:00 a.m.

CVE-2013-6493

2014-03-0300:00:00
ubuntu.com
ubuntu.com
4

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

EPSS

0

Percentile

5.1%

The LiveConnect implementation in plugin/icedteanp/IcedTeaNPPlugin.cc in
IcedTea-Web before 1.4.2 allows local users to read the messages between a
Java applet and a web browser by pre-creating a temporary socket file with
a predictable name in /tmp.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchicedtea-web< 1.2.3-0ubuntu0.12.04.4UNKNOWN
ubuntu12.10noarchicedtea-web< 1.3.2-1ubuntu0.12.10.3UNKNOWN
ubuntu13.10noarchicedtea-web< 1.4-3ubuntu2.1UNKNOWN

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

EPSS

0

Percentile

5.1%