CVE-2005-2527

Published: Dec 31, 2005Modified: Apr 16, 2026

1.2

Vector

AV:L/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 1.9 / Impact: 2.9

Source: NVD

Description

Race condition in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to corrupt files or create arbitrary files via unspecified attack vectors related to a temporary directory, possibly due to a symlink attack.

Affected (1)

Products: Sun: Java

Sun

1 product

Java

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Sun Java	Up to 1.4.2_release1

Related CWEs

CWE-59

Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References (14)

http://docs.info.apple.com/article.html?artnum=302266

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2005/Sep/msg00001.html

Source: cve@mitre.org

http://secunia.com/advisories/16808

Source: cve@mitre.org

http://www.ciac.org/ciac/bulletins/p-306.shtml

Source: cve@mitre.org

http://www.securityfocus.com/bid/14825

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/1734

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/22262

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=302266