NVD

Id
9289  
Name
CVE-2011-2513  
Description
The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to obtain the username and full path of the home and cache directories by accessing properties of the ClassLoader.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2014-05-13  
Modified Date
2014-06-25  
Seq
2011-2513  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
53159 9289 CVE-2011-2513 http://icedtea.classpath.org/hg/release/icedtea-web-1.0/rev/b29fdd0f4d04  View
53160 9289 CVE-2011-2513 http://icedtea.classpath.org/hg/release/icedtea-web-1.1/rev/c7ce6c0e6227  View
53161 9289 CVE-2011-2513 [distro-pkg-dev] 20110720 [SECURITY] IcedTea6 1.8.9 & 1.9.9 Released!  View
53162 9289 CVE-2011-2513 [distro-pkg-dev] 20110720 IcedTea-Web 1.0.4 and 1.1.1 (security releases) released  View
53163 9289 CVE-2011-2513 RHSA-2011:1100  View
53164 9289 CVE-2011-2513 1025854  View
53165 9289 CVE-2011-2513 USN-1178-1  View
53166 9289 CVE-2011-2513 https://bugzilla.redhat.com/show_bug.cgi?id=718164  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35085 JVNDB-2011-005327 IcedTea6 および IcedTea-Web の Java Network Launching Protocol の実装におけるユーザ名などを取得される脆弱性 IcedTea6 および IcedTea-Web の Java Network Launching Protocol (JNLP) の実装には、ユーザ名および、ホームディレクトリおよびキャッシュディレクトリのフルパスを取得される脆弱性が存在します。 CVE-2011-2513 50420 CVE-2011-2513 9289 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005327.html 2011-07-27 2014-05-16 View