Vulnerability Name:

CVE-2007-5237 (CCN-36945)

Assigned:2007-10-03
Published:2007-10-03
Updated:2017-09-29
Summary:Java Web Start in Sun JDK and JRE 6 Update 2 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to read and modify local files via an untrusted application, aka "two vulnerabilities."
CVSS v3 Severity:4.8 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): None
CVSS v2 Severity:7.1 High (CVSS v2 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:N)
5.2 Medium (Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:N/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): None
4.0 Medium (CCN CVSS v2 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:N)
3.0 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:N/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): None
Vulnerability Type:CWE-264
Vulnerability Consequences:File Manipulation
References:Source: MITRE
Type: CNA
CVE-2007-5237

Source: BEA
Type: UNKNOWN
BEA08-198.00

Source: CCN
Type: HP Security Bulletin HPSBUX02284 SSRT071483 rev.3
HP-UX Running Java JRE and JDK, Remote Unauthorized Access

Source: HP
Type: UNKNOWN
SSRT071483

Source: CCN
Type: SA27009
Sun Java JRE Multiple Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
27261

Source: SECUNIA
Type: UNKNOWN
27693

Source: CCN
Type: SA29042
BEA JRockit Multiple Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
29042

Source: SECUNIA
Type: UNKNOWN
29858

Source: CCN
Type: SA30676
VMware ESX Server update for Tomcat and Java JRE

Source: SECUNIA
Type: UNKNOWN
30676

Source: SECUNIA
Type: UNKNOWN
30780

Source: GENTOO
Type: UNKNOWN
GLSA-200804-28

Source: CCN
Type: SECTRACK ID: 1018770
Java Web Start Bugs Let Remote Users Read/Write Files on the Target User`s System

Source: CCN
Type: Sun Alert ID: 103073
Multiple Security Vulnerabilities in Java Web Start Relating to Local File Access

Source: SUNALERT
Type: Patch
103073

Source: CCN
Type: ASA-2007-422
Multiple Security Vulnerabilities in Java Web Start Relating to Local File Access (Sun 103073)

Source: CCN
Type: ASA-2008-049
HP-UX Running Java JRE and JDK Remote Unauthorized Access (HPSBUX02284)

Source: CCN
Type: GLSA 200804-28
JRockit: Multiple vulnerabilities

Source: CCN
Type: GLSA-200804-20
Sun JDK/JRE: Multiple vulnerabilities

Source: GENTOO
Type: UNKNOWN
GLSA-200804-20

Source: GENTOO
Type: UNKNOWN
GLSA-200806-11

Source: SUSE
Type: UNKNOWN
SUSE-SA:2007:055

Source: CCN
Type: OSVDB ID: 37763
Sun Java JDK / JRE Untrusted Application Arbitrary File Manipulation

Source: BID
Type: UNKNOWN
25920

Source: CCN
Type: BID-25920
Sun Java WebStart Multiple File Access And Information Disclosure Vulnerabilities

Source: SECTRACK
Type: UNKNOWN
1018770

Source: CCN
Type: VMSA-2008-0010
Updated Tomcat and Java JRE packages for VMware ESX 3.5

Source: CONFIRM
Type: UNKNOWN
http://www.vmware.com/security/advisories/VMSA-2008-0010.html

Source: VUPEN
Type: UNKNOWN
ADV-2007-3895

Source: VUPEN
Type: UNKNOWN
ADV-2008-0609

Source: VUPEN
Type: UNKNOWN
ADV-2008-1856

Source: XF
Type: UNKNOWN
javaweb-multiple-unspecified-file-access(36945)

Source: XF
Type: UNKNOWN
javaweb-cache-information-disclosure(36946)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:5899

Source: SUSE
Type: SUSE-SA:2007:055
Sun Java security problems

Vulnerable Configuration:Configuration 1:
  • cpe:/a:sun:jdk:*:update2:*:*:*:*:*:* (Version <= 1.6.0)
  • OR cpe:/a:sun:jre:*:update1:*:*:*:*:*:* (Version <= 1.6.0)
  • OR cpe:/a:sun:jre:*:update2:*:*:*:*:*:* (Version <= 1.6.0)

    • Configuration CCN 1:
  • cpe:/a:sun:jre:1.6.0:-:*:*:*:*:*:*
  • OR cpe:/a:sun:jdk:1.6.0:-:*:*:*:*:*:*
  • OR cpe:/a:sun:jdk:1.6.0:update1:*:*:*:*:*:*
  • OR cpe:/a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*
  • OR cpe:/a:sun:jdk:1.6.0:update2:*:*:*:*:*:*
  • AND
  • cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:b.11.11:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*
  • OR cpe:/o:novell:linux_desktop:9:*:*:*:*:*:*:*
  • OR cpe:/a:novell:open_enterprise_server:*:*:*:*:*:*:*:*
  • OR cpe:/o:suse:suse_linux:10.0:*:oss:*:*:*:*:*
  • OR cpe:/o:suse:suse_linux:10.1:*:personal:*:*:*:*:*
  • OR cpe:/o:novell:suse_linux_enterprise_server:10:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*
  • OR cpe:/a:novell:open_enterprise_server:*:*:*:*:*:*:*:*
  • OR cpe:/o:opensuse:opensuse:10.2:*:*:*:*:*:*:*
  • OR cpe:/o:opensuse:opensuse:10.3:*:*:*:*:*:*:*
  • OR cpe:/a:vmware:esx_server:3.5:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20075237
    V
    		CVE-2007-5237
    2015-11-16
    oval:org.mitre.oval:def:5899
    V
    		HP-UX Running Java JRE and JDK, Remote Unauthorized
    2015-04-20
    BACK
    sun jdk * update2
    sun jre * update1
    sun jre * update2
    sun jre 1.6.0
    sun jdk 1.6.0
    sun jdk 1.6.0 update1
    sun jdk 1.6.0 update1_b06
    sun jdk 1.6.0 update2
    gentoo linux *
    hp hp-ux b.11.11
    hp hp-ux b.11.23
    novell linux desktop 9
    novell open enterprise server *
    suse suse linux 10.0
    suse suse linux 10.1
    novell suse linux enterprise server 10
    hp hp-ux b.11.31
    novell open enterprise server *
    novell opensuse 10.2
    novell opensuse 10.3
    vmware esx server 3.5