VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 31, 2003· Updated Apr 16, 2026

CVE-2003-1156

CVE-2003-1156

Description

Java Runtime Environment (JRE) and Software Development Kit (SDK) 1.4.2 through 1.4.2_02 allows local users to overwrite arbitrary files via a symlink attack on (1) unpack.log, as created by the unpack program, or (2) .mailcap1 and .mime.types1, as created by the RPM program.

Affected products

5
  • Sun Corporation/Jdk2 versions
    cpe:2.3:a:sun:jdk:1.4.2_02:*:linux:*:*:*:*:*+ 1 more
    • cpe:2.3:a:sun:jdk:1.4.2_02:*:linux:*:*:*:*:*
    • cpe:2.3:a:sun:jdk:1.4.2:*:linux:*:*:*:*:*
  • Sun Corporation/Jre2 versions
    cpe:2.3:a:sun:jre:1.4.2:*:linux:*:*:*:*:*+ 1 more
    • cpe:2.3:a:sun:jre:1.4.2:*:linux:*:*:*:*:*
    • cpe:2.3:a:sun:jre:1.4.2:update2:linux:*:*:*:*:*
  • Java/JRE / SDKllm-create
    Range: 1.4.2 through 1.4.2_02

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.