NVD

Id
49721  
Name
CVE-2009-2476  
Description
The Java Management Extensions (JMX) implementation in Sun Java SE 6 before Update 15, and OpenJDK, does not properly enforce OpenType checks, which allows context-dependent attackers to bypass intended access restrictions by leveraging finalizer resurrection to obtain a reference to a privileged object.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-08-10  
Modified Date
2010-08-21  
Seq
2009-2476  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
251424 49721 CVE-2009-2476 http://java.sun.com/javase/6/webnotes/6u15.html  View
251425 49721 CVE-2009-2476 APPLE-SA-2009-09-03-1  View
251426 49721 CVE-2009-2476 SUSE-SR:2009:016  View
251427 49721 CVE-2009-2476 oval:org.mitre.oval:def:10381  View
251428 49721 CVE-2009-2476 GLSA-200911-02  View
251429 49721 CVE-2009-2476 http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-16-1  View
251430 49721 CVE-2009-2476 MDVSA-2009:209  View
251431 49721 CVE-2009-2476 ADV-2009-2543  View
251432 49721 CVE-2009-2476 https://bugzilla.redhat.com/show_bug.cgi?id=513220  View
251433 49721 CVE-2009-2476 RHSA-2009:1200  View
251434 49721 CVE-2009-2476 RHSA-2009:1201  View
251435 49721 CVE-2009-2476 FEDORA-2009-8329  View
251436 49721 CVE-2009-2476 FEDORA-2009-8337  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41002 JVNDB-2009-002008 Sun Java SE および OpenJDK の JMX におけるアクセス制限を回避される脆弱性 Sun Java SE および OpenJDK の Java Management Extensions (JMX) 実装には、OpenType チェックを適切に実施しないため、アクセス制限を回避される脆弱性が存在します。 CVE-2009-2476 39907 CVE-2009-2476 49721 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002008.html 2009-08-10 2009-09-16 View