Oval Definition:	oval:org.mitre.oval:def:26220
Revision Date: 2015-04-20 Version: 24 Title: HP-UX running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities Description: The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite arbitrary files via a symlink attack on /tmp/unpack.log. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2014-1876 Platform(s): HP-UX 11 Product(s): Definition Synopsis platforms HP-UX B.11.11 OR HP-UX B.11.23 OR HP-UX B.11.31 AND filesets test Jdk60.JDK60 version is less than 1.6.0.23.00 OR Jdk60.JDK60-COM version is less than 1.6.0.23.00 OR Jdk60.JDK60-IPF32 version is less than 1.6.0.23.00 OR Jdk60.JDK60-IPF64 version is less than 1.6.0.23.00 OR Jdk60.JDK60-PNV2 version is less than 1.6.0.23.00 OR Jdk60.JDK60-PWV2 version is less than 1.6.0.23.00 OR Jdk60.JDK60-PA20 version is less than 1.6.0.23.00 OR Jdk60.JDK60-PA20W version is less than 1.6.0.23.00 OR Jre60.JRE60-PNV2 version is less than 1.6.0.23.00 OR Jre60.JRE60-PNV2-H version is less than 1.6.0.23.00 OR Jre60.JRE60-PWV2 version is less than 1.6.0.23.00 OR Jre60.JRE60-PWV2-H version is less than 1.6.0.23.00 OR Jre60.JRE60-COM version is less than 1.6.0.23.00 OR Jre60.JRE60-COM-DOC version is less than 1.6.0.23.00 OR Jre60.JRE60-PA20 version is less than 1.6.0.23.00 OR Jre60.JRE60-PA20-HS version is less than 1.6.0.23.00 OR Jre60.JRE60-PA20W version is less than 1.6.0.23.00 OR Jre60.JRE60-PA20W-HS version is less than 1.6.0.23.00 OR Jre60.JRE60-IPF32 version is less than 1.6.0.23.00 OR Jre60.JRE60-IPF32-HS version is less than 1.6.0.23.00 OR Jre60.JRE60-IPF64 version is less than 1.6.0.23.00 OR Jre60.JRE60-IPF64-HS version is less than 1.6.0.23.00 OR Jdk70.JDK70-COM version is less than 1.7.0.10.00 OR Jdk70.JDK70-DEMO version is less than 1.7.0.10.00 OR Jdk70.JDK70-IPF32 version is less than 1.7.0.10.00 OR Jdk70.JDK70-IPF64 version is less than 1.7.0.10.00 OR Jre70.JRE70-COM version is less than 1.7.0.10.00 OR Jre70.JRE70-IPF32 version is less than 1.7.0.10.00 OR Jre70.JRE70-IPF32-HS version is less than 1.7.0.10.00 OR Jre70.JRE70-IPF64 version is less than 1.7.0.10.00 OR Jre70.JRE70-IPF64-HS version is less than 1.7.0.10.00
BACK