NVD

Id
49912  
Name
CVE-2009-2671  
Description
The SOCKS proxy implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover the username of the account that invoked an untrusted (1) applet or (2) Java Web Start application via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-08-05  
Modified Date
2012-10-22  
Seq
2009-2671  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
252358 49912 CVE-2009-2671 http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20  View
252359 49912 CVE-2009-2671 http://java.sun.com/javase/6/webnotes/6u15.html  View
252360 49912 CVE-2009-2671 APPLE-SA-2009-09-03-1  View
252361 49912 CVE-2009-2671 SUSE-SA:2009:043  View
252362 49912 CVE-2009-2671 SUSE-SR:2009:016  View
252363 49912 CVE-2009-2671 SUSE-SA:2009:053  View
252364 49912 CVE-2009-2671 SSRT090250  View
252365 49912 CVE-2009-2671 oval:org.mitre.oval:def:11115  View
252366 49912 CVE-2009-2671 oval:org.mitre.oval:def:8259  View
252367 49912 CVE-2009-2671 GLSA-200911-02  View
252368 49912 CVE-2009-2671 http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1  View
252369 49912 CVE-2009-2671 263409  View
252370 49912 CVE-2009-2671 MDVSA-2009:209  View
252371 49912 CVE-2009-2671 http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html  View
252372 49912 CVE-2009-2671 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
252373 49912 CVE-2009-2671 35943  View
252374 49912 CVE-2009-2671 1022659  View
252375 49912 CVE-2009-2671 TA09-294A  View
252376 49912 CVE-2009-2671 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
252377 49912 CVE-2009-2671 ADV-2009-2543  View
252378 49912 CVE-2009-2671 ADV-2009-3316  View
252379 49912 CVE-2009-2671 sun-jre-socks-info-disclosure(52336)  View
252380 49912 CVE-2009-2671 RHSA-2009:1199  View
252381 49912 CVE-2009-2671 RHSA-2009:1200  View
252382 49912 CVE-2009-2671 RHSA-2009:1201  View
252383 49912 CVE-2009-2671 FEDORA-2009-8329  View
252384 49912 CVE-2009-2671 FEDORA-2009-8337  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40977 JVNDB-2009-001983 Sun JRE の SOCKS プロキシ実装における重要な情報を取得される脆弱性 Sun Java Runtime Environment (JRE) の SOCKS プロキシ実装には、信頼されていないアプレットおよび Java Web Start アプリケーションの処理に不備があるため、アカウントのユーザ名を取得される脆弱性が存在します。 CVE-2009-2671 40102 CVE-2009-2671 49912 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001983.html 2009-08-04 2009-12-21 View