CVE - CVE-2011-0706

CVE-ID
CVE-2011-0706	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attackers to gain privileges via unknown vectors related to multiple signers and the assignment of "an inappropriate security descriptor."
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://bugzilla.redhat.com/show_bug.cgi?id=677332 CONFIRM:http://dbhole.wordpress.com/2011/02/15/icedtea-web-1-0-1-released/ DEBIAN:DSA-2224 URL:http://www.debian.org/security/2011/dsa-2224 FEDORA:FEDORA-2011-1631 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054115.html FEDORA:FEDORA-2011-1645 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054134.html GENTOO:GLSA-201406-32 URL:http://security.gentoo.org/glsa/glsa-201406-32.xml MANDRIVA:MDVSA-2011:054 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:054 BID:46439 URL:http://www.securityfocus.com/bid/46439 OVAL:oval:org.mitre.oval:def:14117 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14117 SECUNIA:43350 URL:http://secunia.com/advisories/43350 XF:icedtea-jnlpclassloader-priv-esc(65534) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/65534
Assigning CNA
N/A
Date Entry Created
20110131	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20110131)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org