ID de Prueba:	1.3.6.1.4.1.25623.1.0.804313
Categoría:	Privilege escalation
Título:	Oracle Java SE Privilege Escalation Vulnerability (Feb 2014) - Windows
Resumen:	Oracle Java SE is prone to a privilege escalation vulnerability.
Descripción:	Summary: Oracle Java SE is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw is due to some error in the 'unpacker::redirect_stdio' function within 'unpack.cpp'. Vulnerability Impact: Successful exploitation will allow a local attacker to use a symlink attack against the '/tmp/unpack.log' file to overwrite arbitrary files. Affected Software/OS: Oracle Java SE 7 update 51 and prior on Windows Solution: Upgrade to version 8 update 5 or 7 update 55, or later. CVSS Score: 4.4 CVSS Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-1876 BugTraq ID: 65568 http://www.securityfocus.com/bid/65568 Debian Security Information: DSA-2912 (Google Search) http://www.debian.org/security/2014/dsa-2912 http://security.gentoo.org/glsa/glsa-201406-32.xml HPdes Security Advisory: HPSBUX03091 http://marc.info/?l=bugtraq&m=140852886808946&w=2 HPdes Security Advisory: HPSBUX03092 http://marc.info/?l=bugtraq&m=140852974709252&w=2 HPdes Security Advisory: SSRT101667 HPdes Security Advisory: SSRT101668 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737562 https://bugzilla.redhat.com/show_bug.cgi?id=1060907 http://seclists.org/oss-sec/2014/q1/242 http://seclists.org/oss-sec/2014/q1/285 http://osvdb.org/102808 RedHat Security Advisories: RHSA-2014:0413 https://access.redhat.com/errata/RHSA-2014:0413 RedHat Security Advisories: RHSA-2014:0414 https://access.redhat.com/errata/RHSA-2014:0414 RedHat Security Advisories: RHSA-2014:0675 http://rhn.redhat.com/errata/RHSA-2014-0675.html RedHat Security Advisories: RHSA-2014:0685 http://rhn.redhat.com/errata/RHSA-2014-0685.html http://secunia.com/advisories/58415 http://secunia.com/advisories/59058 http://www.ubuntu.com/usn/USN-2187-1 http://www.ubuntu.com/usn/USN-2191-1
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.