NVD

Id
38150  
Name
CVE-2013-2035  
Description
Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-08-28  
Modified Date
2015-01-17  
Seq
2013-2035  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
195059 38150 CVE-2013-2035 RHSA-2013:1029  View
195060 38150 CVE-2013-2035 RHSA-2013:1784  View
195061 38150 CVE-2013-2035 RHSA-2013:1785  View
195062 38150 CVE-2013-2035 RHSA-2013:1786  View
195063 38150 CVE-2013-2035 RHSA-2014:0029  View
195064 38150 CVE-2013-2035 RHSA-2014:0245  View
195065 38150 CVE-2013-2035 RHSA-2014:0254  View
195066 38150 CVE-2013-2035 RHSA-2014:0400  View
195067 38150 CVE-2013-2035 RHSA-2015:0034  View
195068 38150 CVE-2013-2035 1029431  View
195069 38150 CVE-2013-2035 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2035  View
195070 38150 CVE-2013-2035 https://github.com/fusesource/hawtjni/commit/92c266170ce98edc200c656bd034a237098b8aa5  View
195071 38150 CVE-2013-2035 https://github.com/jline/jline2/issues/85  View
195072 38150 CVE-2013-2035 https://github.com/jruby/jruby/issues/732  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22337 JVNDB-2013-003912 HawtJNI における任意の Java コードを実行される脆弱性 HawtJNI の hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java には、任意の Java コードを実行される脆弱性が存在します。 CVE-2013-2035 61977 CVE-2013-2035 38150 4.4 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003912.html 2013-07-09 2015-08-10 View