Unrated severityNVD Advisory· Published Dec 31, 2003· Updated Jun 16, 2026

CVE-2003-1156

Description

Java Runtime Environment (JRE) and Software Development Kit (SDK) 1.4.2 through 1.4.2_02 allows local users to overwrite arbitrary files via a symlink attack on (1) unpack.log, as created by the unpack program, or (2) .mailcap1 and .mime.types1, as created by the RPM program.

Affected products

Sun Corporation/Jdk2 versions
cpe:2.3:a:sun:jdk:1.4.2:*:linux:*:*:*:*:*+ 1 more
- cpe:2.3:a:sun:jdk:1.4.2:*:linux:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_02:*:linux:*:*:*:*:*
Sun Corporation/Jre2 versions
cpe:2.3:a:sun:jre:1.4.2:*:linux:*:*:*:*:*+ 1 more
- cpe:2.3:a:sun:jre:1.4.2:*:linux:*:*:*:*:*
- cpe:2.3:a:sun:jre:1.4.2:update2:linux:*:*:*:*:*
Java/Runtime Environment (JRE)llm-create
Range: 1.4.2 through 1.4.2_02
Java/Software Development Kit (SDK)llm-create
Range: 1.4.2 through 1.4.2_02

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2003-1156

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions