Vulnerability Note VU#931684

Sun Java Management Extensions privilege escalation vulnerability

Java Management Extensions (JMX) technology provides the tools for building distributed, Web-based, modular and dynamic solutions for managing and monitoring devices, applications, and service-driven networks.

Sun addressed this issue in the Java Development Kit (JDK) and the Java Runtime Environment (JRE) 5.0 Update 4.

Do not access Java Applets from untrusted sources

Attackers must deliver a malicious Java applet to a vulnerable system in order to take advantage of this vulnerability. By only accessing Java applets from known and trusted sources the chances of exploitation are reduced.

Disable Java in web browser

Java applets are commonly executed within a web browser. Disabling Java within the web browser may prevent an attacker from delivering a malicious applet to a vulnerable system.

Systems Affected

http://secunia.com/advisories/17748/
http://java.sun.com/products/JavaManagement/
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102017-1

Credit

This vulnerability was reported by Sun Microsystems. Sun credits Adam Gowdiak with providing information regarding this issue.

This document was written by Jeff Gennari.

Other Information

If you have feedback, comments, or additional information about this vulnerability, please send us email.