CVE-2005-0471
First published: Sat Feb 19 2005(Updated: )
Sun Java JRE 1.1.x through 1.4.x writes temporary files with long filenames that become predictable on a file system that uses 8.3 style short names, which allows remote attackers to write arbitrary files to known locations and facilitates the exploitation of vulnerabilities in applications that rely on unpredictable file names.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sun Java Runtime Environment (JRE) | =1.5.0 | |
| Java Development Kit (JDK) | =1.1.0 | |
| Sun Java Runtime Environment (JRE) | =1.1 | |
| Sun Java Runtime Environment (JRE) | =1.3.0 | |
| Java Development Kit (JDK) | =1.3.0 | |
| Sun Java Runtime Environment (JRE) | =1.4 | |
| Sun Java Runtime Environment (JRE) | =1.2 | |
| Java Development Kit (JDK) | =1.5.0 | |
| Java Development Kit (JDK) | =1.4.0 | |
| Java Development Kit (JDK) | =1.2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2005-0471?
CVE-2005-0471 is considered a medium severity vulnerability due to its potential for arbitrary file writes.
How do I fix CVE-2005-0471?
To fix CVE-2005-0471, update the Java Runtime Environment to a version that is no longer affected by this vulnerability.
Which versions of Sun JRE are impacted by CVE-2005-0471?
CVE-2005-0471 affects Sun JRE versions 1.1.x through 1.4.x.
Can CVE-2005-0471 be exploited remotely?
Yes, CVE-2005-0471 can be exploited remotely by attackers to write files to predictable locations.
What applications are affected by CVE-2005-0471?
CVE-2005-0471 can facilitate the exploitation of vulnerabilities in applications that rely on the affected versions of Sun JRE or JDK.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/sun
- canonical/sun java runtime environment (jre)
- version/sun java runtime environment (jre)/1.5.0
- canonical/java development kit (jdk)
- version/java development kit (jdk)/1.1.0
- version/sun java runtime environment (jre)/1.1
- version/sun java runtime environment (jre)/1.3.0
- version/java development kit (jdk)/1.3.0
- version/sun java runtime environment (jre)/1.4
- version/sun java runtime environment (jre)/1.2
- version/java development kit (jdk)/1.5.0
- version/java development kit (jdk)/1.4.0
- version/java development kit (jdk)/1.2.0