| Vulnerability Name: | CVE-2005-2527 (CCN-22262) | ||||||||
| Assigned: | 2005-09-13 | ||||||||
| Published: | 2005-09-13 | ||||||||
| Updated: | 2017-07-11 | ||||||||
| Summary: | Race condition in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to corrupt files or create arbitrary files via unspecified attack vectors related to a temporary directory, possibly due to a symlink attack. | ||||||||
| CVSS v3 Severity: | 2.9 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)
| ||||||||
| CVSS v2 Severity: | 1.2 Low (CVSS v2 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N)
| ||||||||
| Vulnerability Type: | CWE-59 | ||||||||
| Vulnerability Consequences: | File Manipulation | ||||||||
| References: | Source: MITRE Type: CNA CVE-2005-2527 Source: CCN Type: AppleCare Knowledge Base Document 302266 About the security content of Java 1.3.1 and 1.4.2 Release 2 Source: CONFIRM Type: UNKNOWN http://docs.info.apple.com/article.html?artnum=302266 Source: APPLE Type: UNKNOWN APPLE-SA-2005-09-13 Source: SECUNIA Type: UNKNOWN 16808 Source: CCN Type: CIAC INFORMATION BULLETIN P-306 Apple Java Security Updates Source: CIAC Type: UNKNOWN P-306 Source: CCN Type: OSVDB ID: 19393 Java on Mac OS X Temporary Directory Handling Weakness Source: BID Type: UNKNOWN 14825 Source: CCN Type: BID-14825 Apple Mac OS X Java Insecure Temporary File Vulnerability Source: VUPEN Type: UNKNOWN ADV-2005-1734 Source: XF Type: UNKNOWN macos-temp-file-race-condition(22262) Source: XF Type: UNKNOWN macos-temp-file-race-condition(22262) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||