Vulnerability in Sun Jdk

CVE-2003-1156

Java Runtime Environment (JRE) and Software Development Kit (SDK) 1.4.2 through 1.4.2_02 allows local users to overwrite arbitrary files via a symlink attack on (1) unpack.log, as created by the unpack program, or (2) .mailcap1 and .mime.types1, as created by the RPM program.

EPSS: 0.005 (39.7th percentile) — read the EPSS interpretation.

Affected products

  • Sun Jdk — versions 1.4.2, 1.4.2_02
  • Sun Jre — versions 1.4.2
  • N/a — versions n/a

References