CVE-2013-2035

Published: Aug 28, 2013Modified: Apr 29, 2026

4.4

Vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 3.4 / Impact: 6.4

Source: NVD

Description

Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp.

Affected (8)

Products: Redhat: Hawtjni

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Redhat Hawtjni	Up to 1.7
Redhat Hawtjni	Version 1.0
Redhat Hawtjni	Version 1.1
Redhat Hawtjni	Version 1.2
Redhat Hawtjni	Version 1.3
Redhat Hawtjni	Version 1.4
Redhat Hawtjni	Version 1.5
Redhat Hawtjni	Version 1.6

Related CWEs

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (36)

http://rhn.redhat.com/errata/RHSA-2013-1029.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-1784.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-1785.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-1786.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2014-0029.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2014-0245.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2014-0254.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2014-0400.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0034.html

Source: secalert@redhat.com

http://secunia.com/advisories/53415

Source: secalert@redhat.com

http://secunia.com/advisories/54108

Source: secalert@redhat.com

http://secunia.com/advisories/57915

Source: secalert@redhat.com

http://www.osvdb.org/93411

Source: secalert@redhat.com

http://www.securitytracker.com/id/1029431

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2035

Source: secalert@redhat.com

https://github.com/fusesource/hawtjni/commit/92c266170ce98edc200c656bd034a237098b8aa5

Source: secalert@redhat.com

ExploitPatch

https://github.com/jline/jline2/issues/85

Source: secalert@redhat.com

https://github.com/jruby/jruby/issues/732

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-1029.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-1784.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-1785.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-1786.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-0029.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-0245.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-0254.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-0400.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-0034.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/53415

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/54108

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/57915

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/93411

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1029431

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2035

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/fusesource/hawtjni/commit/92c266170ce98edc200c656bd034a237098b8aa5

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

https://github.com/jline/jline2/issues/85

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/jruby/jruby/issues/732

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.