CVE-2005-0471: Medium severity Sun Java Runtime Environment (JRE) vulnerability
Sun Java JRE 1.1.x through 1.4.x writes temporary files with long filenames that become predictable on a file system that uses 8.3 style short names, which allows remote attackers to write arbitrary files to known locations and facilitates the exploitation of vulnerabilities in applications that rely on unpredictable file names.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0471?
CVE-2005-0471 is considered a medium severity vulnerability due to its potential for arbitrary file writes.
How do I fix CVE-2005-0471?
To fix CVE-2005-0471, update the Java Runtime Environment to a version that is no longer affected by this vulnerability.
Which versions of Sun JRE are impacted by CVE-2005-0471?
CVE-2005-0471 affects Sun JRE versions 1.1.x through 1.4.x.
Can CVE-2005-0471 be exploited remotely?
Yes, CVE-2005-0471 can be exploited remotely by attackers to write files to predictable locations.
What applications are affected by CVE-2005-0471?
CVE-2005-0471 can facilitate the exploitation of vulnerabilities in applications that rely on the affected versions of Sun JRE or JDK.