ghsa-97jm-5rh5-84f8
Vulnerability from github
Published
2022-05-14 03:59
Modified
2022-05-14 03:59
Details
The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite arbitrary files via a symlink attack on /tmp/unpack.log.
{
"affected": [],
"aliases": [
"CVE-2014-1876"
],
"database_specific": {
"cwe_ids": [
"CWE-59"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2014-02-10T23:55:00Z",
"severity": "MODERATE"
},
"details": "The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite arbitrary files via a symlink attack on /tmp/unpack.log.",
"id": "GHSA-97jm-5rh5-84f8",
"modified": "2022-05-14T03:59:55Z",
"published": "2022-05-14T03:59:55Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1876"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2014:0413"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2014:0414"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1060907"
},
{
"type": "WEB",
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737562"
},
{
"type": "WEB",
"url": "http://marc.info/?l=bugtraq\u0026m=140852886808946\u0026w=2"
},
{
"type": "WEB",
"url": "http://marc.info/?l=bugtraq\u0026m=140852974709252\u0026w=2"
},
{
"type": "WEB",
"url": "http://osvdb.org/102808"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2014-0675.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2014-0685.html"
},
{
"type": "WEB",
"url": "http://seclists.org/oss-sec/2014/q1/242"
},
{
"type": "WEB",
"url": "http://seclists.org/oss-sec/2014/q1/285"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/58415"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/59058"
},
{
"type": "WEB",
"url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
},
{
"type": "WEB",
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21672080"
},
{
"type": "WEB",
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676746"
},
{
"type": "WEB",
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21679713"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2014/dsa-2912"
},
{
"type": "WEB",
"url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/65568"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/USN-2187-1"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/USN-2191-1"
}
],
"schema_version": "1.4.0",
"severity": []
}
Loading...
Loading...
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.