CVE-2005-1974 - OpenCVE

Unspecified vulnerability in Java 2 Platform, Standard Edition (J2SE) 5.0 and 5.0 Update 1 and J2SE 1.4.2 up to 1.4.2_07, as used in multiple products and platforms including (1) HP-UX and (2) APC PowerChute, allows applications to assign permissions to themselves and gain privileges.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity High

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

AV:N/AC:H/Au:N/C:P/I:P/A:P

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Sun	J2se

Configuration 1 [-]

OR	cpe:2.3:a:sun:j2se:1.4.2::sdk:::::
	cpe:2.3:a:sun:j2se:1.4.2_01::sdk:::::
	cpe:2.3:a:sun:j2se:1.4.2_02::sdk:::::
	cpe:2.3:a:sun:j2se:1.4.2_03::sdk:::::
	cpe:2.3:a:sun:j2se:1.4.2_04::sdk:::::
	cpe:2.3:a:sun:j2se:1.4.2_05::sdk:::::
	cpe:2.3:a:sun:j2se:1.4.2_06::sdk:::::
	cpe:2.3:a:sun:j2se:1.4.2_07::sdk:::::
	cpe:2.3:a:sun:j2se:5.0::sdk:::::
	cpe:2.3:a:sun:j2se:5.0_update1::sdk:::::

No data.

References

Link	Providers
http://marc.info/?l=bugtraq&m=112861772130119&w=2
http://marc.info/?l=bugtraq&m=112992075412844&w=2
http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=7638
http://rpmfind.net/linux/RPM/suse/updates/9.3/i386/rpm/i586/java-1_4_2-sun-src-1.4.2.08-0.1.i586.html
http://secunia.com/advisories/17272
http://securityreason.com/securityalert/56
http://securitytracker.com/id?1015643
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101749-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101799-1
http://www.novell.com/linux/security/advisories/2005_32_java2.html
http://www.securityfocus.com/bid/13958
http://www.vupen.com/english/advisories/2005/2150

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-06-14T04:00:00

Updated: 2024-08-07T22:06:57.814Z

Reserved: 2005-06-14T00:00:00

Link: CVE-2005-1974

Vulnrichment

No data.

NVD

Status : Modified

Published: 2005-06-16T04:00:00.000

Modified: 2016-10-18T03:23:42.907

Link: CVE-2005-1974

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2005-06-13T00:00:00", "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in Java 2 Platform, Standard Edition (J2SE) 5.0 and 5.0 Update 1 and J2SE 1.4.2 up to 1.4.2_07, as used in multiple products and platforms including (1) HP-UX and (2) APC PowerChute, allows applications to assign permissions to themselves and gain privileges."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2016-10-17T13:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "17272", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/17272"}, {"name": "ADV-2005-2150", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2005/2150"}, {"name": "HPSBUX01215", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://marc.info/?l=bugtraq&m=112861772130119&w=2"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=7638"}, {"name": "1015643", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1015643"}, {"name": "HPSBMA01234", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://marc.info/?l=bugtraq&m=112992075412844&w=2"}, {"name": "SSRT051052", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://marc.info/?l=bugtraq&m=112992075412844&w=2"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://rpmfind.net/linux/RPM/suse/updates/9.3/i386/rpm/i586/java-1_4_2-sun-src-1.4.2.08-0.1.i586.html"}, {"name": "101799", "tags": ["vendor-advisory", "x_refsource_SUNALERT"], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101799-1"}, {"name": "13958", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/13958"}, {"name": "SSRT051004", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://marc.info/?l=bugtraq&m=112861772130119&w=2"}, {"name": "56", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/56"}, {"name": "SUSE-SA:2005:032", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://www.novell.com/linux/security/advisories/2005_32_java2.html"}, {"name": "101749", "tags": ["vendor-advisory", "x_refsource_SUNALERT"], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101749-1"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2005-1974", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Unspecified vulnerability in Java 2 Platform, Standard Edition (J2SE) 5.0 and 5.0 Update 1 and J2SE 1.4.2 up to 1.4.2_07, as used in multiple products and platforms including (1) HP-UX and (2) APC PowerChute, allows applications to assign permissions to themselves and gain privileges."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "17272", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/17272"}, {"name": "ADV-2005-2150", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2005/2150"}, {"name": "HPSBUX01215", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=112861772130119&w=2"}, {"name": "http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=7638", "refsource": "CONFIRM", "url": "http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=7638"}, {"name": "1015643", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1015643"}, {"name": "HPSBMA01234", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=112992075412844&w=2"}, {"name": "SSRT051052", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=112992075412844&w=2"}, {"name": "http://rpmfind.net/linux/RPM/suse/updates/9.3/i386/rpm/i586/java-1_4_2-sun-src-1.4.2.08-0.1.i586.html", "refsource": "CONFIRM", "url": "http://rpmfind.net/linux/RPM/suse/updates/9.3/i386/rpm/i586/java-1_4_2-sun-src-1.4.2.08-0.1.i586.html"}, {"name": "101799", "refsource": "SUNALERT", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101799-1"}, {"name": "13958", "refsource": "BID", "url": "http://www.securityfocus.com/bid/13958"}, {"name": "SSRT051004", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=112861772130119&w=2"}, {"name": "56", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/56"}, {"name": "SUSE-SA:2005:032", "refsource": "SUSE", "url": "http://www.novell.com/linux/security/advisories/2005_32_java2.html"}, {"name": "101749", "refsource": "SUNALERT", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101749-1"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T22:06:57.814Z"}, "title": "CVE Program Container", "references": [{"name": "17272", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/17272"}, {"name": "ADV-2005-2150", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2005/2150"}, {"name": "HPSBUX01215", "tags": ["vendor-advisory", "x_refsource_HP", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=112861772130119&w=2"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=7638"}, {"name": "1015643", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1015643"}, {"name": "HPSBMA01234", "tags": ["vendor-advisory", "x_refsource_HP", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=112992075412844&w=2"}, {"name": "SSRT051052", "tags": ["vendor-advisory", "x_refsource_HP", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=112992075412844&w=2"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://rpmfind.net/linux/RPM/suse/updates/9.3/i386/rpm/i586/java-1_4_2-sun-src-1.4.2.08-0.1.i586.html"}, {"name": "101799", "tags": ["vendor-advisory", "x_refsource_SUNALERT", "x_transferred"], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101799-1"}, {"name": "13958", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/13958"}, {"name": "SSRT051004", "tags": ["vendor-advisory", "x_refsource_HP", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=112861772130119&w=2"}, {"name": "56", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/56"}, {"name": "SUSE-SA:2005:032", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://www.novell.com/linux/security/advisories/2005_32_java2.html"}, {"name": "101749", "tags": ["vendor-advisory", "x_refsource_SUNALERT", "x_transferred"], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101749-1"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2005-1974", "datePublished": "2005-06-14T04:00:00", "dateReserved": "2005-06-14T00:00:00", "dateUpdated": "2024-08-07T22:06:57.814Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sun:j2se:1.4.2:*:sdk:*:*:*:*:*", "matchCriteriaId": "E2D500E0-A80D-4C9E-94F0-6B59AFEB186A", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:j2se:1.4.2_01:*:sdk:*:*:*:*:*", "matchCriteriaId": "BA17272A-FCA5-420D-8724-35F15190C1AD", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:j2se:1.4.2_02:*:sdk:*:*:*:*:*", "matchCriteriaId": "6D6E25CB-6C06-43D0-949E-BB3FEE886CCD", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:j2se:1.4.2_03:*:sdk:*:*:*:*:*", "matchCriteriaId": "B1DD35E9-9FED-49D3-8343-B9EF2C8A9C35", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:j2se:1.4.2_04:*:sdk:*:*:*:*:*", "matchCriteriaId": "23F6CB66-75D5-472C-A6CD-8598376A065A", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:j2se:1.4.2_05:*:sdk:*:*:*:*:*", "matchCriteriaId": "641FA125-3979-4F12-9764-ADF06E243248", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:j2se:1.4.2_06:*:sdk:*:*:*:*:*", "matchCriteriaId": "9F5D9D33-F7D9-4A82-BA32-800A265B16CC", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:j2se:1.4.2_07:*:sdk:*:*:*:*:*", "matchCriteriaId": "BB7658E7-5BDE-4C2A-93FF-CC78C562BF7E", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:j2se:5.0:*:sdk:*:*:*:*:*", "matchCriteriaId": "AB323619-76BA-4DCF-9613-4C963C235D09", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:j2se:5.0_update1:*:sdk:*:*:*:*:*", "matchCriteriaId": "90A293D3-9A69-4B33-82CE-22A7515819E3", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in Java 2 Platform, Standard Edition (J2SE) 5.0 and 5.0 Update 1 and J2SE 1.4.2 up to 1.4.2_07, as used in multiple products and platforms including (1) HP-UX and (2) APC PowerChute, allows applications to assign permissions to themselves and gain privileges."}], "id": "CVE-2005-1974", "lastModified": "2016-10-18T03:23:42.907", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 4.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": true, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2005-06-16T04:00:00.000", "references": [{"source": "cve@mitre.org", "url": "http://marc.info/?l=bugtraq&m=112861772130119&w=2"}, {"source": "cve@mitre.org", "url": "http://marc.info/?l=bugtraq&m=112992075412844&w=2"}, {"source": "cve@mitre.org", "url": "http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=7638"}, {"source": "cve@mitre.org", "url": "http://rpmfind.net/linux/RPM/suse/updates/9.3/i386/rpm/i586/java-1_4_2-sun-src-1.4.2.08-0.1.i586.html"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/17272"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/56"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1015643"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101749-1"}, {"source": "cve@mitre.org", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101799-1"}, {"source": "cve@mitre.org", "url": "http://www.novell.com/linux/security/advisories/2005_32_java2.html"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/13958"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2005/2150"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}