Vulnerability in Conectiva Linux
CVE-2004-1029
The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers…
EPSS: 0.170 (96.7th percentile) — read the EPSS interpretation.
Affected products
- Conectiva Linux — versions 10.0
- Gentoo Linux
- Hp Hp-ux — versions 11.00, 11.11, 11.22
- Hp Java_sdk-rte — versions 1.3, 1.4
- Sun Jdk — versions 1.3.1_01, 1.3.1_01a, 1.3.1_02
- Sun Jre — versions 1.3.0, 1.3.1, 1.3.1_02
- Symantec Enterprise_firewall — versions 8.0
- Symantec Gateway_security_5400 — versions 2.0, 2.0.1
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_IDEFENSE, third-party-advisory)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (vendor-advisory, x_refsource_APPLE)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
Frequently asked questions
- What is CVE-2004-1029?
- CVE-2004-1029 is a vulnerability in Conectiva Linux, classified under CWE-264. Published 2005-03-01.
- Is CVE-2004-1029 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.