java: sandbox restriction bypass [LWN.net]

Package(s):

java

CVE #(s):

CVE-2013-1486

Created:

February 20, 2013

Updated:

March 19, 2013

Description:

From the Red Hat advisory:

An improper permission check issue was discovered in the JMX component in OpenJDK. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.

Alerts:

Red Hat	RHSA-2013:0273-01	2013-02-20
Red Hat	RHSA-2013:0274-01	2013-02-20
Red Hat	RHSA-2013:0275-01	2013-02-20
Red Hat	RHSA-2013:0531-01	2013-02-20
Red Hat	RHSA-2013:0532-01	2013-02-20
Scientific Linux	SL-java-20130220	2013-02-20
Scientific Linux	SL-java-20130220	2013-02-20
Scientific Linux	SL-java-20130220	2013-02-20
CentOS	CESA-2013:0273	2013-02-20
CentOS	CESA-2013:0274	2013-02-20
CentOS	CESA-2013:0275	2013-02-20
CentOS	CESA-2013:0275	2013-02-20
Oracle	ELSA-2013-0273	2013-02-20
Oracle	ELSA-2013-0275	2013-02-20
Oracle	ELSA-2013-0275	2013-02-21
Fedora	FEDORA-2013-2764	2013-02-21
Fedora	FEDORA-2013-2813	2013-02-21
Mageia	MGASA-2013-0062	2013-02-21
Oracle	ELSA-2013-0274	2013-02-21
Ubuntu	USN-1735-1	2013-02-21
Mandriva	MDVSA-2013:014	2013-02-22
SUSE	SUSE-SU-2013:0328-1	2013-02-22
Scientific Linux	SL-java-20130227	2013-02-27
openSUSE	openSUSE-SU-2013:0375-1	2013-03-01
openSUSE	openSUSE-SU-2013:0378-1	2013-03-01
Mageia	MGASA-2013-0084	2013-03-03
Red Hat	RHSA-2013:0624-01	2013-03-11
Red Hat	RHSA-2013:0625-01	2013-03-11
Red Hat	RHSA-2013:0626-01	2013-03-11
SUSE	SUSE-SU-2013:0440-1	2013-03-13
SUSE	SUSE-SU-2013:0456-2	2013-03-14
SUSE	SUSE-SU-2013:0456-1	2013-03-14
SUSE	SUSE-SU-2013:0456-3	2013-03-15
SUSE	SUSE-SU-2013:0440-4	2013-03-15
SUSE	SUSE-SU-2013:0440-5	2013-03-16
SUSE	SUSE-SU-2013:0440-6	2013-03-18
SUSE	SUSE-SU-2013:0456-4	2013-03-15

(Log in to post comments)