NVD

Id
57349  
Name
CVE-2007-5273  
Description
Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when an HTTP proxy server is used, allows remote attackers to violate the security model for an applet"s outbound connections via a multi-pin DNS rebinding attack in which the applet download relies on DNS resolution on the proxy server, but the applet"s socket operations rely on DNS resolution on the local machine, a different issue than CVE-2007-5274. NOTE: this is similar to CVE-2007-5232.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-10-08  
Modified Date
2011-07-28  
Seq
2007-5273  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
293018 57349 CVE-2007-5273 http://crypto.stanford.edu/dns/dns-rebinding.pdf  View
293019 57349 CVE-2007-5273 BEA08-198.00  View
293020 57349 CVE-2007-5273 SSRT071483  View
293021 57349 CVE-2007-5273 SUSE-SA:2008:025  View
293022 57349 CVE-2007-5273 oval:org.mitre.oval:def:10340  View
293023 57349 CVE-2007-5273 20070709 Anti-DNS Pinning and Java Applets  View
293024 57349 CVE-2007-5273 GLSA-200804-28  View
293025 57349 CVE-2007-5273 1018771  View
293026 57349 CVE-2007-5273 103078  View
293027 57349 CVE-2007-5273 200041  View
293028 57349 CVE-2007-5273 http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html  View
293029 57349 CVE-2007-5273 GLSA-200804-20  View
293030 57349 CVE-2007-5273 GLSA-200806-11  View
293031 57349 CVE-2007-5273 SUSE-SA:2007:055  View
293032 57349 CVE-2007-5273 RHSA-2007:0963  View
293033 57349 CVE-2007-5273 RHSA-2007:1041  View
293034 57349 CVE-2007-5273 RHSA-2008:0100  View
293035 57349 CVE-2007-5273 RHSA-2008:0132  View
293036 57349 CVE-2007-5273 RHSA-2008:0156  View
293037 57349 CVE-2007-5273 20071029 FLEA-2007-0061-1 sun-jre sun-jdk  View
293038 57349 CVE-2007-5273 25918  View
293039 57349 CVE-2007-5273 ADV-2007-3895  View
293040 57349 CVE-2007-5273 ADV-2008-0609  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52083 JVNDB-2007-000746 Sun JRE におけるアプレットの DNS 名前解決方法に関する脆弱性 Sun JRE には、HTTP プロキシサーバを使用している場合、アプレットを利用した multi-pin DNS rebinding 攻撃を受け、セキュリティモデルを侵害する脆弱性が存在します。 CVE-2007-5273 28628 CVE-2007-5273 57349 4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000746.html 2007-10-03 2008-03-18 View