CVE-2013-2035

HawtJNI < 1.8 - Local Code Execution via Temporary JAR File Overwrite

Title source: llm
STIX 2.1

Description

Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp.

References (18)

Core 18
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2015-0034.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-0254.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-0400.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-0245.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-0029.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1029.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/53415
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/93411
Issue Tracking x_refsource_confirm
https://github.com/jline/jline2/issues/85
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1785.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1029431
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1784.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1786.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/57915
Issue Tracking x_refsource_confirm
https://github.com/jruby/jruby/issues/732
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/54108

Scores

EPSS 0.0059
EPSS Percentile 44.0%

Details

CWE
CWE-94
Status published
Products (9)
org.fusesource.hawtjni/hawtjni-runtime 0 - 1.8Maven
redhat/hawtjni 1.0
redhat/hawtjni 1.1
redhat/hawtjni 1.2
redhat/hawtjni 1.3
redhat/hawtjni 1.4
redhat/hawtjni 1.5
redhat/hawtjni 1.6
redhat/hawtjni < 1.7
Published Aug 28, 2013
Tracked Since Feb 18, 2026