Java Management Extensions Vulnerability in Sun Java SE 6 and OpenJDK
CVE-2009-2476

Currently unrated

Key Information:

Vendor
Oracle
Status
Openjdk
Java Se
Vendor
CVE Published:
10 August 2009

Summary

The Java Management Extensions (JMX) component in Sun Java SE 6 prior to Update 15 and OpenJDK fails to adequately enforce OpenType checks. This inadequacy enables context-dependent attackers to exploit finalizer resurrection, gaining unauthorized references to privileged objects and thus bypassing intended access restrictions.

References

https://bugzilla.redhat.com/show_bug.cgi?id=513220
x_refsource_CONFIRM
https://rhn.redhat.com/errata/RHSA-2009-1200.html
vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/36162
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.