CVE

Id
50425  
CVE No.
CVE-2011-2513  
Status
Candidate  
Description
The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to obtain the username and full path of the home and cache directories by accessing properties of the ClassLoader.  
Phase
Assigned (20110615)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
545189 50425 CVE-2011-2513 MLIST:[distro-pkg-dev] 20110720 IcedTea-Web 1.0.4 and 1.1.1 (security releases) released  View
545190 50425 CVE-2011-2513 URL:http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2011-July/015171.html  View
545191 50425 CVE-2011-2513 MLIST:[distro-pkg-dev] 20110720 [SECURITY] IcedTea6 1.8.9 & 1.9.9 Released!  View
545192 50425 CVE-2011-2513 URL:http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2011-July/015170.html  View
545193 50425 CVE-2011-2513 MISC:http://icedtea.classpath.org/hg/release/icedtea-web-1.0/rev/b29fdd0f4d04  View
545194 50425 CVE-2011-2513 MISC:http://icedtea.classpath.org/hg/release/icedtea-web-1.1/rev/c7ce6c0e6227  View
545195 50425 CVE-2011-2513 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=718164  View
545196 50425 CVE-2011-2513 REDHAT:RHSA-2011:1100  View
545197 50425 CVE-2011-2513 URL:http://rhn.redhat.com/errata/RHSA-2011-1100.html  View
545198 50425 CVE-2011-2513 UBUNTU:USN-1178-1  View
545199 50425 CVE-2011-2513 URL:http://ubuntu.com/usn/usn-1178-1  View
545200 50425 CVE-2011-2513 SECTRACK:1025854  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
26829 JVNDB-2012-002536 Linux Kernel の tomoyo_mount_acl 関数におけるサービス運用妨害 (OOPS) の脆弱性 Linux Kernel の security/tomoyo/mount.c 内の tomoyo_mount_acl 関数は、mount システムコールから直接受け取った引数を持つ kern_path 関数を呼び出すため、サービス運用妨害 (OOPS) 状態となる、またはその他の詳細不明な影響を受ける脆弱性が存在します。 CVE-2011-2518 50425 4.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002536.html  View