Vulnerability in Sun Java

CVE-2005-2738

Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X does not prevent multiple programs from opening the same port as a Java ServerSocket, which allows local users to operate a Java program that intercepts network data intended for the ServerSocket of a different Java program.

EPSS: 0.017 (75.3th percentile) — read the EPSS interpretation.

Affected products

  • Sun Java — versions 1.4.2
  • N/a — versions n/a

References