NVD

Id
38895  
Name
CVE-2013-3009  
Description
The com.ibm.CORBA.iiop.ClientDelegate class in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 improperly exposes the invoke method of the java.lang.reflect.Method class, which allows remote attackers to call setSecurityManager and bypass a sandbox protection mechanism via vectors related to the AccessController doPrivileged block.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-07-23  
Modified Date
2016-06-01  
Seq
2013-3009  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
199387 38895 CVE-2013-3009 SUSE-SU-2013:1255  View
199388 38895 CVE-2013-3009 SUSE-SU-2013:1256  View
199389 38895 CVE-2013-3009 SUSE-SU-2013:1257  View
199390 38895 CVE-2013-3009 SUSE-SU-2013:1293  View
199391 38895 CVE-2013-3009 SUSE-SU-2013:1305  View
199392 38895 CVE-2013-3009 RHSA-2013:1059  View
199393 38895 CVE-2013-3009 RHSA-2013:1060  View
199394 38895 CVE-2013-3009 RHSA-2013:1081  View
199395 38895 CVE-2013-3009 20160405 Re: [SE-2012-01] Broken security fix in IBM Java 7/8  View
199396 38895 CVE-2013-3009 20160404 [SE-2012-01] Broken security fix in IBM Java 7/8  View
199397 38895 CVE-2013-3009 IV44792  View
199398 38895 CVE-2013-3009 IX90118  View
199399 38895 CVE-2013-3009 PM91727  View
199400 38895 CVE-2013-3009 http://www-01.ibm.com/support/docview.wss?uid=swg21642336  View
199401 38895 CVE-2013-3009 http://www-01.ibm.com/support/docview.wss?uid=swg21644197  View
199402 38895 CVE-2013-3009 http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_July_2013  View
199403 38895 CVE-2013-3009 http://www.security-explorations.com/materials/SE-2012-01-IBM-2.pdf  View
199404 38895 CVE-2013-3009 http://www.security-explorations.com/materials/SE-2012-01-IBM-4.pdf  View
199405 38895 CVE-2013-3009 ibm-java-cve20133009(84150)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21926 JVNDB-2013-003501 IBM Java の Java Runtime Environment における脆弱性 IBM Java の Java Runtime Environment (JRE) には、機密性、可用性、および完全性に影響のある脆弱性が存在します。 CVE-2013-3009 62951 CVE-2013-3009 38895 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003501.html 2013-06-24 2015-08-10 View