ByteOS Network

NVD Vulnerability Details :

CVE-2009-2671

Modified

Source-cve@mitre.org

Published At-05 Aug, 2009 | 19:30

Updated At-10 Oct, 2018 | 19:41

The SOCKS proxy implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover the username of the account that invoked an untrusted (1) applet or (2) Java Web Start application via unspecified vectors.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N

Hyperlink	Source	Resource
http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20	cve@mitre.org	N/A
http://java.sun.com/javase/6/webnotes/6u15.html	cve@mitre.org	N/A
http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html	cve@mitre.org	N/A
http://marc.info/?l=bugtraq&m=125787273209737&w=2	cve@mitre.org	N/A
http://secunia.com/advisories/36162	cve@mitre.org	N/A
http://secunia.com/advisories/36176	cve@mitre.org	N/A
http://secunia.com/advisories/36180	cve@mitre.org	N/A
http://secunia.com/advisories/36199	cve@mitre.org	N/A
http://secunia.com/advisories/36248	cve@mitre.org	N/A
http://secunia.com/advisories/37300	cve@mitre.org	N/A
http://secunia.com/advisories/37386	cve@mitre.org	N/A
http://secunia.com/advisories/37460	cve@mitre.org	N/A
http://security.gentoo.org/glsa/glsa-200911-02.xml	cve@mitre.org	N/A
http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1	cve@mitre.org	Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-263409-1	cve@mitre.org	Patch Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2009:209	cve@mitre.org	N/A
http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html	cve@mitre.org	N/A
http://www.securityfocus.com/archive/1/507985/100/0/threaded	cve@mitre.org	N/A
http://www.securityfocus.com/bid/35943	cve@mitre.org	N/A
http://www.securitytracker.com/id?1022659	cve@mitre.org	N/A
http://www.us-cert.gov/cas/techalerts/TA09-294A.html	cve@mitre.org	US Government Resource
http://www.vmware.com/security/advisories/VMSA-2009-0016.html	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2009/2543	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2009/3316	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/52336	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11115	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8259	cve@mitre.org	N/A
https://rhn.redhat.com/errata/RHSA-2009-1199.html	cve@mitre.org	N/A
https://rhn.redhat.com/errata/RHSA-2009-1200.html	cve@mitre.org	N/A
https://rhn.redhat.com/errata/RHSA-2009-1201.html	cve@mitre.org	N/A
https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html	cve@mitre.org	N/A
https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html	cve@mitre.org	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History