CVE Vulnerabilities

CVE-2013-3009

Published: Jul 23, 2013 | Modified: Apr 11, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
6.8 IMPORTANT
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V3
Ubuntu
root.io minimus.io echohq.com

The com.ibm.CORBA.iiop.ClientDelegate class in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 improperly exposes the invoke method of the java.lang.reflect.Method class, which allows remote attackers to call setSecurityManager and bypass a sandbox protection mechanism via vectors related to the AccessController doPrivileged block.

Affected Software

Name Vendor Start Version End Version
Java Ibm 1.4.2 (including) 1.4.2 (including)
Java Ibm 1.4.2.13 (including) 1.4.2.13 (including)
Java Ibm 1.4.2.13.1 (including) 1.4.2.13.1 (including)
Java Ibm 1.4.2.13.2 (including) 1.4.2.13.2 (including)
Java Ibm 1.4.2.13.3 (including) 1.4.2.13.3 (including)
Java Ibm 1.4.2.13.4 (including) 1.4.2.13.4 (including)
Java Ibm 1.4.2.13.5 (including) 1.4.2.13.5 (including)
Java Ibm 1.4.2.13.6 (including) 1.4.2.13.6 (including)
Java Ibm 1.4.2.13.7 (including) 1.4.2.13.7 (including)
Java Ibm 1.4.2.13.8 (including) 1.4.2.13.8 (including)
Java Ibm 1.4.2.13.9 (including) 1.4.2.13.9 (including)
Java Ibm 1.4.2.13.10 (including) 1.4.2.13.10 (including)
Java Ibm 1.4.2.13.11 (including) 1.4.2.13.11 (including)
Java Ibm 1.4.2.13.12 (including) 1.4.2.13.12 (including)
Java Ibm 1.4.2.13.13 (including) 1.4.2.13.13 (including)
Java Ibm 1.4.2.13.14 (including) 1.4.2.13.14 (including)
Java Ibm 1.4.2.13.15 (including) 1.4.2.13.15 (including)
Java Ibm 1.4.2.13.16 (including) 1.4.2.13.16 (including)
Java Ibm 1.4.2.13.17 (including) 1.4.2.13.17 (including)
Supplementary for Red Hat Enterprise Linux 5 RedHat java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9 *
Supplementary for Red Hat Enterprise Linux 5 RedHat java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el5_9 *
Supplementary for Red Hat Enterprise Linux 5 RedHat java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el5_9 *
Supplementary for Red Hat Enterprise Linux 6 RedHat java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4 *
Supplementary for Red Hat Enterprise Linux 6 RedHat java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4 *
Supplementary for Red Hat Enterprise Linux 6 RedHat java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4 *

References