Vulnerability CVE-2004-2764 - CERT Civis.Net

Vulnerability Name:

CVE-2004-2764 (CCN-16864)

Assigned:

2004-08-02

Published:

2004-08-02

Updated:

2018-10-30

Summary:

Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1.4.0 through 1.4.0_04 allows untrusted applets and unprivileged servlets to gain privileges and read data from other applets via unspecified vectors related to classes in the XSLT processor, aka "XML sniffing."

CVSS v3 Severity:

5.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

6.5 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Gain Privileges

References:

Source: SUNALERT
Type: UNKNOWN
57613

Source: CCN
Type: Illegalaccess.org Security Advisory Addendum August 9, 2004
Java XSLT security advisory addendum

Source: CCN
Type: BugTraq Mailing List, Fri Nov 19 2004 - 11:04:35 CST
Java Vulnerabilities in Opera 7.54

Source: MITRE
Type: CNA
CVE-2004-2764

Source: HP
Type: UNKNOWN
SSRT4806

Source: CCN
Type: SA12206
Sun Java JRE/SDK XSLT Processor Vulnerability

Source: SECUNIA
Type: Vendor Advisory
12206

Source: CCN
Type: SECTRACK ID: 1011661
Sun JRE XSLT Processor Error Lets Remote Applets Gain Elevated Privileges

Source: SECTRACK
Type: UNKNOWN
1011661

Source: CCN
Type: Sun Alert ID: 57613
Java Runtime Environment May Allow Untrusted Applets to Escalate Privileges

Source: OSVDB
Type: UNKNOWN
8288

Source: CCN
Type: OSVDB ID: 10988
Gaim MSN File Transfer Overflow DoS

Source: CCN
Type: OSVDB ID: 8288
Sun Java JRE / SDK XSLT Processor Applet Privilege Escalation

Source: BUGTRAQ
Type: UNKNOWN
20040808 Java XSLT security advisory addendum

Source: BID
Type: UNKNOWN
10844

Source: CCN
Type: BID-10844
Sun Java Runtime Environment Remote XSLT Privilege Escalation Vulnerability

Source: XF
Type: UNKNOWN
sun-xslt-applet-gain-privileges(16864)

Source: XF
Type: UNKNOWN
sun-xslt-applet-gain-privileges(16864)

Vulnerable Configuration:

Configuration 1:

cpe:/a:sun:jre:1.4.0:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.0_01:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.0_01:*:linux:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.0_01:*:solaris:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.0_01:*:windows:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.0_02:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.0_02:*:linux:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.0_02:*:solaris:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.0_02:*:windows:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.0_03:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.0_03:*:linux:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.0_03:*:solaris:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.0_03:*:windows:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.0_04:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.0_04:*:linux:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.0_04:*:solaris:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.0_04:*:windows:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1:-:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1:*:linux:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1:*:solaris:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1:*:windows:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1:update1:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1:update2:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1:update3:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1:update3:linux:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1:update3:solaris:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1:update3:windows:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1:update4:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1:update7:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_01:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_01:*:linux:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_01:*:solaris:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_01:*:windows:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_02:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_02:*:linux:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_02:*:solaris:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_02:*:windows:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_03:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_03:*:linux:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_03:*:solaris:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_03:*:windows:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_04:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_04:*:linux:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_04:*:solaris:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_04:*:windows:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_05:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_05:*:linux:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_05:*:solaris:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_05:*:windows:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_06:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_06:*:linux:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_06:*:solaris:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_06:*:windows:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_07:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_07:*:linux:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_07:*:solaris:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1_07:*:windows:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2:-:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2:*:linux:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2:*:solaris:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2:*:windows:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2:update1:linux:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2:update1:solaris:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2:update1:windows:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2:update2:linux:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2:update2:solaris:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2:update2:windows:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2:update3:linux:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2:update3:solaris:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2:update3:windows:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2:update4:linux:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2:update4:solaris:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2:update4:windows:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2:update5:linux:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2:update5:solaris:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2:update5:windows:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_01:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_1:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_02:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_2:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_03:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_3:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_04:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_4:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_5:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_6:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_7:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_8:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_9:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_10:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_11:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_12:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_13:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_14:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_15:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_21:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.0:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.0_01:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.0_02:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.0_03:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.0_04:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.1:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.1_01:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.1_02:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.1_03:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.1_04:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.1_05:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.1_06:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.1_07:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:sun:sdk:1.4.0:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.0:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.1:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1:-:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2:-:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.1:update3:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2:update1:linux:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2:update2:linux:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2:update3:linux:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2:update4:linux:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.0_01:*:*:*:*:*:*:*

AND

cpe:/a:opera:opera_browser:7.54:*:*:*:*:*:*:*

Denotes that component is vulnerable