NVD

Id
49930  
Name
CVE-2009-2689  
Description
JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of unspecified object types, which allows context-dependent attackers to bypass intended access restrictions via an untrusted (1) applet or (2) application.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-08-10  
Modified Date
2010-08-21  
Seq
2009-2689  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
252557 49930 CVE-2009-2689 http://java.sun.com/j2se/1.5.0/ReleaseNotes.html  View
252558 49930 CVE-2009-2689 http://java.sun.com/javase/6/webnotes/6u15.html  View
252559 49930 CVE-2009-2689 APPLE-SA-2009-09-03-1  View
252560 49930 CVE-2009-2689 SUSE-SR:2009:016  View
252561 49930 CVE-2009-2689 oval:org.mitre.oval:def:9603  View
252562 49930 CVE-2009-2689 GLSA-200911-02  View
252563 49930 CVE-2009-2689 http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1  View
252564 49930 CVE-2009-2689 http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-16-1  View
252565 49930 CVE-2009-2689 MDVSA-2009:209  View
252566 49930 CVE-2009-2689 ADV-2009-2543  View
252567 49930 CVE-2009-2689 https://bugzilla.redhat.com/show_bug.cgi?id=513222  View
252568 49930 CVE-2009-2689 RHSA-2009:1199  View
252569 49930 CVE-2009-2689 RHSA-2009:1201  View
252570 49930 CVE-2009-2689 FEDORA-2009-8329  View
252571 49930 CVE-2009-2689 FEDORA-2009-8337  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41004 JVNDB-2009-002010 Sun Java SE および OpenJDK の JDK13Services.getProviders におけるアクセス制限を回避される脆弱性 Sun Java SE および OpenJDK の JDK13Services.getProviders には、オブジェクトのインスタンスにすべての権限を付与してしまうため、アクセス制限を回避される脆弱性が存在します。 CVE-2009-2689 40120 CVE-2009-2689 49930 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002010.html 2009-08-10 2009-09-16 View