Unscored severity · published May 2, 2005
CVE-2005-1080
Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via…
–
CVSS
5.8%
EPSS
No
On KEV
Description
Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in filenames in a .jar file.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.8% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SD
Sdk · Sun
1.4.2; 1.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1080
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1080
advisories.mageia.org
http://advisories.mageia.org/MGASA-2015-0158.html
marc.info
http://marc.info/?l=bugtraq&m=111331593310508&w=2
marc.info
http://marc.info/?l=oss-security&m=127602564508766&w=2
marc.info
http://marc.info/?l=oss-security&m=127603032617644&w=2
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2015-0806.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2015-0807.html
More from Sdk
–
CVE-2010-4447
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and…
–
CVE-2010-4476
The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and…
–
CVE-2010-4475
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and…
–
CVE-2010-4473
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and…
–
CVE-2010-4469
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and…