9.3 - CVE-2009-2724

Executive Summary

Informations
Name	CVE-2009-2724	First vendor Publication	2009-08-10
Vendor	Cve	Last vendor Modification	2018-10-10

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Race condition in the java.lang package in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, related to a "3Y Race condition in reflection checks."

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2724

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-362	Race Condition

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:22878

Oval ID:	oval:org.mitre.oval:def:22878
Title:	ELSA-2009:1199: java-1.5.0-sun security update (Critical)
Description:	Race condition in the java.lang package in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, related to a "3Y Race condition in reflection checks."
Family:	unix	Class:	patch
Reference(s):	ELSA-2009:1199-01 CVE-2009-2475 CVE-2009-2625 CVE-2009-2670 CVE-2009-2671 CVE-2009-2672 CVE-2009-2673 CVE-2009-2675 CVE-2009-2676 CVE-2009-2689 CVE-2009-2720 CVE-2009-2721 CVE-2009-2722 CVE-2009-2723 CVE-2009-2724	Version:	61
Platform(s):	Oracle Linux 5	Product(s):	java-1.5.0-sun
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.5.0-sun-plugin is earlier than 0:1.5.0.20-1jpp.1.el5 AND java-1.5.0-sun is earlier than 0:1.5.0.20-1jpp.1.el5 AND java-1.5.0-sun-jdbc is earlier than 0:1.5.0.20-1jpp.1.el5 AND java-1.5.0-sun-demo is earlier than 0:1.5.0.20-1jpp.1.el5 AND java-1.5.0-sun-devel is earlier than 0:1.5.0.20-1jpp.1.el5 AND java-1.5.0-sun-src is earlier than 0:1.5.0.20-1jpp.1.el5

CPE : Common Platform Enumeration

Type	Description	Count
Application	Sun Java Se cpe:2.3:a:sun:java_se:5.0:20:::::: cpe:2.3:a:sun:java_se:5.0:19:::::: cpe:2.3:a:sun:java_se:::::::: cpe:2.3:a:sun:java_se:::business:::::*	4

OpenVAS Exploits

Date	Description
2009-11-23	Name : Gentoo Security Advisory GLSA 200911-02 (sun-jre-bin sun-jdk emul-linux-x86-j... File : nvt/glsa_200911_02.nasl
2009-08-24	Name : Sun Java SE Multiple Unspecified Vulnerabilities File : nvt/secpod_sun_java_se_mult_unspecified_vuln.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
56955	Sun Java SE java.lang Package Reflection Check Race Condition

Nessus® Vulnerability Scanner

Date	Description
2016-03-08	Name : The remote VMware ESX host is missing a security-related patch. File : vmware_VMSA-2010-0002_remote.nasl - Type : ACT_GATHER_INFO
2016-03-03	Name : The remote host is missing a security-related patch. File : vmware_VMSA-2009-0016_remote.nasl - Type : ACT_GATHER_INFO
2010-03-31	Name : The remote VMware ESX host is missing a security-related patch. File : vmware_VMSA-2010-0002.nasl - Type : ACT_GATHER_INFO
2009-11-23	Name : The remote VMware ESXi / ESX host is missing one or more security-related pat... File : vmware_VMSA-2009-0016.nasl - Type : ACT_GATHER_INFO
2009-11-18	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200911-02.nasl - Type : ACT_GATHER_INFO
2009-08-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1199.nasl - Type : ACT_GATHER_INFO
2005-08-18	Name : The remote host is missing Sun Security Patch number 118667-86 File : solaris10_118667.nasl - Type : ACT_GATHER_INFO
2005-08-18	Name : The remote host is missing Sun Security Patch number 118667-86 File : solaris8_118667.nasl - Type : ACT_GATHER_INFO
2005-08-18	Name : The remote host is missing Sun Security Patch number 118667-86 File : solaris9_118667.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source	Url
BUGTRAQ	http://www.securityfocus.com/archive/1/507985/100/0/threaded
CONFIRM	http://java.sun.com/j2se/1.5.0/ReleaseNotes.html http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1 http://www.vmware.com/security/advisories/VMSA-2009-0016.html
GENTOO	http://security.gentoo.org/glsa/glsa-200911-02.xml
SECUNIA	http://secunia.com/advisories/37386 http://secunia.com/advisories/37460
VUPEN	http://www.vupen.com/english/advisories/2009/3316

Alert History

If you want to see full details history, please login or register.

Date	Informations
2021-05-04 12:09:55	Multiple Updates
2021-04-22 01:10:17	Multiple Updates
2020-05-23 01:40:43	Multiple Updates
2020-05-23 00:24:08	Multiple Updates
2018-10-11 00:19:40	Multiple Updates
2016-04-26 19:01:24	Multiple Updates
2016-03-09 13:25:54	Multiple Updates
2016-03-04 13:26:24	Multiple Updates
2014-02-17 10:51:06	Multiple Updates
2013-05-10 23:55:17	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	1
CPE ID(s)	4
Sources(s)	8
osvdb(s)	1
Openvas Exploit(s)	2
Nessus® Exploit(s)	9

	Related
10	VMSA-2010-0002
10	VMSA-2009-0016
10	GLSA-200911-02
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 3 more Alert(s)

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0419s

Facebook rss twitter linkedin mail