Bug 91025 (CVE-2005-1974)

Summary:	VUL-0: CVE-2005-1974: java untrusted applets can elevate privileges
Product:	[Novell Products] SUSE Security Incidents	Reporter:	Thomas Biege <thomas>
Component:	Incidents	Assignee:	Security Team bot <security-team>
Status:	RESOLVED FIXED	QA Contact:	Security Team bot <security-team>
Severity:	Normal
Priority:	P5 - None	CC:	security-team
Version:	unspecified
Target Milestone:	---
Hardware:	Other
OS:	All
URL:	http://sunsolve.sun.com/search/document.do?assetkey=1-26-101749-1
Whiteboard:	CVE-2005-1974: CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)
Found By:	Other	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description Thomas Biege 2005-06-15 10:48:22 UTC

Hello Sonja,
the fun never ends. :(

http://www.heise.de/newsticker/meldung/60615

Comment 1 Thomas Biege 2005-06-15 10:57:06 UTC

CAN-2005-1974

SM-Tracker-1576

Comment 2 Sonja Krause-Harder 2005-06-16 09:03:35 UTC

Preparing packages for 8.2, 9.0, 9.1, 9.2 and 9.3 (all i386 only) now. 
 
This will also fix bug #74219

Comment 3 Sonja Krause-Harder 2005-06-16 16:15:04 UTC

I have prepared packages for the following platforms: 
 
java2: 
sles8-slec-i386 
8.2-i386 
9.0-i386 
9.1-i386 (also good for sles9-i386) 
sles9-ia64 
 
java-1_4_2-sun: 
9.2-i386 
9.3-i386 
 
Ok to submit them?

Comment 4 Thomas Biege 2005-06-17 06:13:56 UTC

I think it's ok.

Does all packages fix the same bugs?

Comment 5 Sonja Krause-Harder 2005-06-17 07:03:36 UTC

The one for 9.3-i386 also fixes bug #79259. They all also fix the former java  
webstart problem (#74219).

Comment 6 Sonja Krause-Harder 2005-06-17 10:56:11 UTC

Packages submitted.

Comment 7 Thomas Biege 2005-06-17 10:57:00 UTC

`java-1_4_2-sun.patch.box' -> `/work/src/done/PATCHINFO/java-1_4_2-sun.patch.box'
`java2.patch.box' -> `/work/src/done/PATCHINFO/java2.patch.box'
`java2.patch.maintained' -> `/work/src/done/PATCHINFO/java2.patch.maintained'

Comment 8 Marcus Meissner 2005-06-22 12:14:50 UTC

updates released.

Comment 9 Thomas Biege 2009-10-13 21:28:18 UTC

CVE-2005-1974: CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)