CVE-2005-2527

Java < 1.4.2 Release 2 - Arbitrary File Creation via Temporary Directory Race Condition

Title source: llm
STIX 2.1

Description

Race condition in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to corrupt files or create arbitrary files via unspecified attack vectors related to a temporary directory, possibly due to a symlink attack.

References (7)

Core 7
Core References
Third Party Advisory, US Government Resource third-party-advisory government-resource x_refsource_ciac
http://www.ciac.org/ciac/bulletins/p-306.shtml
Vendor Advisory x_refsource_confirm
http://docs.info.apple.com/article.html?artnum=302266
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/1734
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/22262
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/16808
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/14825
Mailing List vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2005/Sep/msg00001.html

Scores

EPSS 0.0004
EPSS Percentile 12.6%

Details

CWE
CWE-59
Status published
Products (1)
sun/java < 1.4.2_release1
Published Dec 31, 2005
Tracked Since Feb 18, 2026