Veracode Vulnerability DatabaseVERACODE:10811Code Execution Using A Race Condition
0.0004 Low
EPSS
Percentile
10.1%
Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp.
References
rhn.redhat.com/errata/RHSA-2013-1029.html
rhn.redhat.com/errata/RHSA-2013-1784.html
rhn.redhat.com/errata/RHSA-2013-1785.html
rhn.redhat.com/errata/RHSA-2013-1786.html
rhn.redhat.com/errata/RHSA-2014-0029.html
rhn.redhat.com/errata/RHSA-2014-0245.html
rhn.redhat.com/errata/RHSA-2014-0254.html
rhn.redhat.com/errata/RHSA-2014-0400.html
rhn.redhat.com/errata/RHSA-2015-0034.html
secunia.com/advisories/53415
secunia.com/advisories/54108
secunia.com/advisories/57915
www.osvdb.org/93411
www.securitytracker.com/id/1029431
access.redhat.com/security/updates/classification/#low
access.redhat.com/site/documentation/en-US/JBoss_Enterprise_Application_Platform/6.2/html/6.2.0_Release_Notes/index.html
bugzilla.redhat.com/show_bug.cgi?id=1025512
bugzilla.redhat.com/show_bug.cgi?id=1025514
bugzilla.redhat.com/show_bug.cgi?id=1025515
bugzilla.redhat.com/show_bug.cgi?id=1025516
bugzilla.redhat.com/show_bug.cgi?id=1025517
bugzilla.redhat.com/show_bug.cgi?id=1025518
bugzilla.redhat.com/show_bug.cgi?id=1025519
bugzilla.redhat.com/show_bug.cgi?id=1025520
bugzilla.redhat.com/show_bug.cgi?id=1025521
bugzilla.redhat.com/show_bug.cgi?id=1025522
bugzilla.redhat.com/show_bug.cgi?id=1025523
bugzilla.redhat.com/show_bug.cgi?id=1025524
bugzilla.redhat.com/show_bug.cgi?id=1025525
bugzilla.redhat.com/show_bug.cgi?id=1025526
bugzilla.redhat.com/show_bug.cgi?id=1025527
bugzilla.redhat.com/show_bug.cgi?id=1025528
bugzilla.redhat.com/show_bug.cgi?id=1025529
bugzilla.redhat.com/show_bug.cgi?id=1025530
bugzilla.redhat.com/show_bug.cgi?id=1025531
bugzilla.redhat.com/show_bug.cgi?id=1025532
bugzilla.redhat.com/show_bug.cgi?id=1025533
bugzilla.redhat.com/show_bug.cgi?id=1025534
bugzilla.redhat.com/show_bug.cgi?id=1025535
bugzilla.redhat.com/show_bug.cgi?id=1025536
bugzilla.redhat.com/show_bug.cgi?id=1025537
bugzilla.redhat.com/show_bug.cgi?id=1025538
bugzilla.redhat.com/show_bug.cgi?id=1025539
bugzilla.redhat.com/show_bug.cgi?id=1025540
bugzilla.redhat.com/show_bug.cgi?id=1025541
bugzilla.redhat.com/show_bug.cgi?id=1025542
bugzilla.redhat.com/show_bug.cgi?id=1025543
bugzilla.redhat.com/show_bug.cgi?id=1025545
bugzilla.redhat.com/show_bug.cgi?id=1025546
bugzilla.redhat.com/show_bug.cgi?id=1025547
bugzilla.redhat.com/show_bug.cgi?id=1025548
bugzilla.redhat.com/show_bug.cgi?id=1025549
bugzilla.redhat.com/show_bug.cgi?id=1025550
bugzilla.redhat.com/show_bug.cgi?id=1025551
bugzilla.redhat.com/show_bug.cgi?id=1025552
bugzilla.redhat.com/show_bug.cgi?id=1032135
bugzilla.redhat.com/show_bug.cgi?id=1032155
bugzilla.redhat.com/show_bug.cgi?id=1032858
bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2035
github.com/fusesource/hawtjni/commit/92c266170ce98edc200c656bd034a237098b8aa5
github.com/jline/jline2/issues/85
github.com/jruby/jruby/issues/732
rhn.redhat.com/errata/RHSA-2013-1785.html
Related
