CVE-2005-1973

Java Web Start in Java 2 Platform Standard Edition (J2SE) 5.0 and 5.0 Update 1 allows applications to assign permissions to themselves and gain privileges.

Published Bycve@mitre.org

Published DateJun 16, 2005, 04:00

Weakness Type (CWE):NVD-CWE-Other

CVSS Metrics

Base Score

5.1

Vector String

AV:N/AC:H/Au:N/C:P/I:P/A:P

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

PARTIAL

Integrity (I)

PARTIAL

Availability (A)

PARTIAL

References

http://marc.info/?l=bugtraq&m=112870351003598&w=2
http://securityreason.com/securityalert/61
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101748-1
http://www.securityfocus.com/bid/13945
http://www.securityfocus.com/bid/13958

Weakness Type (CWE):NVD-CWE-Other

CVSS Metrics

Base Score

5.1

Vector String

AV:N/AC:H/Au:N/C:P/I:P/A:P

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

PARTIAL

Integrity (I)

PARTIAL

Availability (A)

PARTIAL