Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-1876
HistoryFeb 10, 2014 - 11:55 p.m.

CVE-2014-1876

2014-02-1023:55:05
CWE-59
[email protected]
web.nvd.nist.gov
83
cve-2014-1876
unpacker::redirect_stdio function
openjdk
oracle java
java se
jrockit
java se embedded
security vulnerability
symlink attack

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.1%

JSON

The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite arbitrary files via a symlink attack on /tmp/unpack.log.

Affected configurations

NVD
Node
oracleopenjdkMatch1.6.0
OR
oracleopenjdkMatch1.7.0
OR
oracleopenjdkMatch1.8.0

References

Related

ubuntucve 1
prion 1
cvelist 1
openvas 45
nvd 1
ibm 10
nessus 47
redhat 13
oraclelinux 5
centos 3
amazon 2
debian 2
osv 2
veracode 30
ubuntu 2
mageia 1
suse 6
aix 1
kaspersky 1
thn 1
photon 1
oracle 1
securityvulns 1
gentoo 1
ubuntucve
ubuntucve
CVE-2014-1876
2014-02-10 00:00:00
prion
prion
Code injection
2014-02-10 23:55:00
cvelist
cvelist
CVE-2014-1876
2014-02-10 23:00:00
openvas
openvas
Oracle Java SE Privilege Escalation Vulnerability (Feb 2014) - Linux
2014-02-13 00:00:00
Oracle Java SE Privilege Escalation Vulnerability (Feb 2014) - Windows
2014-02-13 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:0732-1)
2021-06-09 00:00:00
nvd
nvd
CVE-2014-1876
2014-02-10 23:55:05
ibm
ibm
Security Bulletin: A security vulnerability has been identified in IBM SDK, Java Technology Edition bundled product shipped with Rational Asset Manager (CVE-2014-2421, CVE-2014-1876)
2018-06-17 04:55:08
Security Bulletin: Vulnerabilities in Rational Functional Tester due to IBM SDK, Java Technology Edition Version 1.6 and IBM SDK, Java Technology Edition Version 1.7
2018-09-29 20:06:32
Security Bulletin: SiteProtector System can be affected by several vulnerabilities in the IBM Java Runtime Environment (CVE-2013-6954, CVE-2013-6629, CVE-2014-2421, CVE-2014-0453, CVE-2014-1876, CVE-2014-4244, CVE-2014-4263) and in Tomcat (CVE-2014-0075)
2018-06-16 21:19:16
nessus
nessus
Oracle JRockit R27 < R27.8.2 / R28 < R28.3.2 Multiple Vulnerabilities (April 2014 CPU)
2014-04-18 00:00:00
RHEL 5 / 6 : java-1.5.0-ibm (RHSA-2014:0509)
2014-05-16 00:00:00
SUSE SLES10 Security Update : IBM Java 5 (SUSE-SU-2014:0732-1)
2015-05-20 00:00:00
redhat
redhat
(RHSA-2014:0509) Important: java-1.5.0-ibm security update
2014-05-15 00:00:00
(RHSA-2014:0685) Important: java-1.6.0-openjdk security update
2014-06-10 00:00:00
(RHSA-2014:0408) Important: java-1.6.0-openjdk security and bug fix update
2014-04-16 00:00:00
oraclelinux
oraclelinux
java-1.6.0-openjdk security update
2014-07-20 00:00:00
java-1.6.0-openjdk security and bug fix update
2014-04-16 00:00:00
java-1.7.0-openjdk security update
2014-04-16 00:00:00
centos
centos
java security update
2014-04-16 13:16:06
java security update
2014-04-16 13:14:43
java security update
2014-04-16 13:38:30
amazon
amazon
Important: java-1.6.0-openjdk
2014-04-17 23:53:00
Critical: java-1.7.0-openjdk
2014-04-17 23:55:00
debian
debian
[SECURITY] [DSA 2912-1] openjdk-6 security update
2014-04-24 21:38:02
[SECURITY] [DSA 2923-1] openjdk-7 security update
2014-05-05 14:37:27
osv
osv
openjdk-6 - security update
2014-04-24 00:00:00
openjdk-7 - security update
2014-05-05 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-05-02 04:58:05
Privilege Escalation
2019-05-02 04:58:07
Arbitrary Code Execution
2019-05-02 04:58:06
ubuntu
ubuntu
OpenJDK 6 vulnerabilities
2014-05-01 00:00:00
OpenJDK 7 vulnerabilities
2014-04-30 00:00:00
mageia
mageia
Updated java-1.7.0-openjdk packages fix multiple security vulnerabilities
2014-04-23 20:13:53
suse
suse
Security update for IBM Java 6 (important)
2014-05-29 01:04:18
Security update for IBM Java 6 (important)
2014-05-30 02:04:33
Security update for IBM Java 6 (important)
2014-06-03 01:04:17
aix
aix
Multiple vulnerabilities in current releases of the IBM SDK Java Technology Edition
2014-06-19 09:10:49
kaspersky
kaspersky
KLA10001 Multiple vulnerabilities in Oracle Java Runtime Environment & Java Development Kit
2014-04-30 00:00:00
thn
thn
Oracle releases Critical Update to Patch 104 Vulnerabilities
2014-04-16 07:48:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0413
2023-06-19 00:00:00
oracle
oracle
Oracle Critical Patch Update - April 2014
2014-04-15 00:00:00
securityvulns
securityvulns
Oracle / Sun / MySQL / PeopleSoft / OpenJDK applications multiple security vulnerabilities
2014-05-02 00:00:00
gentoo
gentoo
IcedTea JDK: Multiple vulnerabilities
2014-06-29 00:00:00

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.1%

JSON
Related for CVE-2014-1876
ubuntucve1prion1cvelist1openvas45nvd1ibm10nessus47redhat13oraclelinux5centos3amazon2debian2osv2veracode30ubuntu2mageia1suse6aix1kaspersky1thn1photon1oracle1securityvulns1gentoo1