NetSight
IP …
critical9.3Public exploit code

CVE-2004-1029

The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using the reflection API to access private Java packages.

Affected products

VendorProductAffected versions
HpJava Sdk-Rte
Versions 1.3, 1.4
SunJdk
Versions 1.3.1_01, 1.3.1_01a, 1.3.1_02, 1.3.1_03, 1.3.1_04, 1.3.1_05
SunJre
Versions 1.3.0, 1.3.1, 1.3.1_02, 1.3.1_03, 1.3.1_05, 1.3.1_06
SymantecEnterprise Firewall
Version 8.0
ConectivaLinux
Version 10.0
GentooLinux
All versions
HpHp-Ux
Versions 11.00, 11.11, 11.22, 11.23
SymantecGateway Security 5400
Versions 2.0, 2.0.1

Weakness classification

CWE-264

References