NVD

Id
73984  
Name
CVE-2003-0896  
Description
The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine (JVM) in Sun SDK and JRE 1.4.1_03 and earlier allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a loaded class name that contains "/" (slash) instead of "." (dot) characters, which bypasses a call to the Security Manager"s checkPackageAccess method.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2003-11-17  
Modified Date
2016-10-17  
Seq
2003-0896  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
380369 73984 CVE-2003-0896 http://lsd-pl.net/code/JVM/jre.tar.gz  View
380370 73984 CVE-2003-0896 20021023 [LSD] Security vulnerability in SUN"s Java Virtual Machine implementation  View
380371 73984 CVE-2003-0896 57221  View
380372 73984 CVE-2003-0896 200356  View
380373 73984 CVE-2003-0896 HPSBUX0311-295  View
380374 73984 CVE-2003-0896 20031027 Re: [LSD] Security vulnerability in SUN"s Java Virtual Machine implementation  View
380375 73984 CVE-2003-0896 20031027 Re: [LSD] Security vulnerability in SUN"s Java Virtual Machineimplementation  View
380376 73984 CVE-2003-0896 8879  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63590 JVNDB-2003-000316 Sun JRE の loadClass メソッドにおける権限昇格の脆弱性 Sun Java 2 Runtime Environment (JRE) には、クラスをロードする際に使用される AppletClassLoader クラスの loadClass メソッドの実装の不備のため、パッケージ名に特定の文字を使用した場合、 checkPackageAccess メソッドを呼び出さず、結果として JVM に任意のクラスをロード可能な脆弱性が存在します。 CVE-2003-0896 7719 CVE-2003-0896 73984 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000316.html 2003-10-21 2007-04-01 View