|
|
| |
|
| |
sun-java: arbitrary code execution
| Package(s): | sun-jdk sun-jre |
CVE #(s): | |
| Created: | February 15, 2010 |
Updated: | February 17, 2010 |
| Description: |
From the Pardus advisory:
The vulnerability is caused from package.py, postInstall script of
sun-java package. It tries to create /opt/sun-jdk/jre/.systemPrefs
directory with "os.makedirs()" function, however default permission of
the directories created by os.makedirs() is 0777. This allows anyone to
replace sun java binaries, which can be used to execute arbitrary code.
NOTE: This vulnerability is Pardus specific.
|
| Alerts: |
|
( Log in to post comments)
|
|
|