CVE-2003-1156: Medium severity Java Development Kit (JDK) vulnerability

Published Dec 31, 2003

Updated

Java Runtime Environment (JRE) and Software Development Kit (SDK) 1.4.2 through 1.4.202 allows local users to overwrite arbitrary files via a symlink attack on (1) unpack.log, as created by the unpack program, or (2) .mailcap1 and .mime.types1, as created by the RPM program.

Affected Software

4 affected components

Java Development Kit (JDK)=1.4.2

Sun Java Runtime Environment (JRE)=1.4.2

Sun Java Runtime Environment (JRE)=1.4.2-update2

Java Development Kit (JDK)=1.4.2_02

Event History

Dec 31, 2003

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

DescriptionSeverityAffected Software

May 10, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2003-1156?

CVE-2003-1156 is considered a high severity vulnerability due to its potential for local file overwriting.

How do I fix CVE-2003-1156?

To fix CVE-2003-1156, it is recommended to upgrade to a patched version of the Java Runtime Environment or Software Development Kit.

Which versions are affected by CVE-2003-1156?

CVE-2003-1156 affects Java Runtime Environment and Software Development Kit versions 1.4.2 through 1.4.2_02.

What type of attack is involved in CVE-2003-1156?

CVE-2003-1156 involves a symlink attack allowing local users to overwrite arbitrary files.

Can CVE-2003-1156 be exploited remotely?

CVE-2003-1156 cannot be exploited remotely as it requires local user access.