Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2014-1876
HistoryFeb 10, 2014 - 12:00 a.m.

CVE-2014-1876

2014-02-1000:00:00
ubuntu.com
ubuntu.com
18

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

9.4%

JSON

The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK
6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and
R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files
when a log file cannot be opened, which allows local users to overwrite
arbitrary files via a symlink attack on /tmp/unpack.log.

Notes

Author Note
mdeslaur in lucid+, NetX and the plugin moved to the icedtea-web package
jdstrand sun-java6 is not redistributable, no longer in the archive and no longer tracked sun-java5 is EOL upstream and no longer tracked
OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchopenjdk-6< 6b31-1.13.3-1ubuntu1~0.10.04.1UNKNOWN
ubuntu12.04noarchopenjdk-6< 6b31-1.13.3-1ubuntu1~0.12.04.2UNKNOWN
ubuntu12.10noarchopenjdk-6< 6b31-1.13.3-1ubuntu1~0.12.10.1UNKNOWN
ubuntu13.10noarchopenjdk-6< 6b31-1.13.3-1ubuntu1~0.13.10.1UNKNOWN
ubuntu12.04noarchopenjdk-7< 7u55-2.4.7-1ubuntu1~0.12.04.2UNKNOWN
ubuntu12.10noarchopenjdk-7< 7u55-2.4.7-1ubuntu1~0.12.10.1UNKNOWN
ubuntu13.10noarchopenjdk-7< 7u55-2.4.7-1ubuntu1~0.13.10.1UNKNOWN
ubuntu14.04noarchopenjdk-7< 7u55-2.4.7-1ubuntu1UNKNOWN

Related

openvas 45
prion 1
cve 1
ibm 10
nessus 47
redhat 13
oraclelinux 5
amazon 2
centos 3
osv 2
debian 2
ubuntu 2
veracode 30
mageia 1
suse 6
aix 1
kaspersky 1
thn 1
photon 1
oracle 1
securityvulns 1
gentoo 1
openvas
openvas
Oracle Java SE Privilege Escalation Vulnerability (Feb 2014) - Windows
2014-02-13 00:00:00
Oracle Java SE Privilege Escalation Vulnerability (Feb 2014) - Linux
2014-02-13 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:0732-1)
2021-06-09 00:00:00
prion
prion
Code injection
2014-02-10 23:55:00
cve
cve
CVE-2014-1876
2014-02-10 23:55:00
ibm
ibm
Security Bulletin: A security vulnerability has been identified in IBM SDK, Java Technology Edition bundled product shipped with Rational Asset Manager (CVE-2014-2421, CVE-2014-1876)
2018-06-17 04:55:08
Security Bulletin: Vulnerabilities in Rational Functional Tester due to IBM SDK, Java Technology Edition Version 1.6 and IBM SDK, Java Technology Edition Version 1.7
2018-09-29 20:06:32
Security Bulletin: SiteProtector System can be affected by several vulnerabilities in the IBM Java Runtime Environment (CVE-2013-6954, CVE-2013-6629, CVE-2014-2421, CVE-2014-0453, CVE-2014-1876, CVE-2014-4244, CVE-2014-4263) and in Tomcat (CVE-2014-0075)
2018-06-16 21:19:16
nessus
nessus
Oracle JRockit R27 < R27.8.2 / R28 < R28.3.2 Multiple Vulnerabilities (April 2014 CPU)
2014-04-18 00:00:00
RHEL 5 / 6 : java-1.5.0-ibm (RHSA-2014:0509)
2014-05-16 00:00:00
SUSE SLES10 Security Update : IBM Java 5 (SUSE-SU-2014:0732-1)
2015-05-20 00:00:00
redhat
redhat
(RHSA-2014:0509) Important: java-1.5.0-ibm security update
2014-05-15 00:00:00
(RHSA-2014:0408) Important: java-1.6.0-openjdk security and bug fix update
2014-04-16 00:00:00
(RHSA-2014:0685) Important: java-1.6.0-openjdk security update
2014-06-10 00:00:00
oraclelinux
oraclelinux
java-1.6.0-openjdk security update
2014-07-20 00:00:00
java-1.6.0-openjdk security and bug fix update
2014-04-16 00:00:00
java-1.7.0-openjdk security update
2014-04-16 00:00:00
amazon
amazon
Important: java-1.6.0-openjdk
2014-04-17 23:53:00
Critical: java-1.7.0-openjdk
2014-04-17 23:55:00
centos
centos
java security update
2014-04-16 13:16:06
java security update
2014-04-16 13:14:43
java security update
2014-04-16 13:38:30
osv
osv
openjdk-6 - security update
2014-04-24 00:00:00
openjdk-7 - security update
2014-05-05 00:00:00
debian
debian
[SECURITY] [DSA 2912-1] openjdk-6 security update
2014-04-24 21:38:29
[SECURITY] [DSA 2923-1] openjdk-7 security update
2014-05-05 14:37:53
ubuntu
ubuntu
OpenJDK 6 vulnerabilities
2014-05-01 00:00:00
OpenJDK 7 vulnerabilities
2014-04-30 00:00:00
veracode
veracode
Privilege Escalation
2019-05-02 04:58:06
Privilege Escalation
2019-05-02 04:58:06
Information Disclosure
2019-05-02 04:58:05
mageia
mageia
Updated java-1.7.0-openjdk packages fix multiple security vulnerabilities
2014-04-23 20:13:53
suse
suse
Security update for IBM Java 6 (important)
2014-06-03 01:04:17
Security update for IBM Java 6 (important)
2014-05-29 01:04:18
Security update for IBM Java 6 (important)
2014-05-30 02:04:33
aix
aix
Multiple vulnerabilities in current releases of the IBM SDK Java Technology Edition
2014-06-19 09:10:49
kaspersky
kaspersky
KLA10001 Multiple vulnerabilities in Oracle Java Runtime Environment & Java Development Kit
2014-04-30 00:00:00
thn
thn
Oracle releases Critical Update to Patch 104 Vulnerabilities
2014-04-16 07:48:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0413
2023-06-19 00:00:00
oracle
oracle
Oracle Critical Patch Update - April 2014
2014-04-15 00:00:00
securityvulns
securityvulns
Oracle / Sun / MySQL / PeopleSoft / OpenJDK applications multiple security vulnerabilities
2014-05-02 00:00:00
gentoo
gentoo
IcedTea JDK: Multiple vulnerabilities
2014-06-29 00:00:00

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

9.4%

JSON
Related for UB:CVE-2014-1876
openvas45prion1cve1ibm10nessus47redhat13oraclelinux5amazon2centos3osv2debian2ubuntu2veracode30mageia1suse6aix1kaspersky1thn1photon1oracle1securityvulns1gentoo1