« Volver al listado

CVE-2000-1099

Estado: ModificadaMedia (5.1)—

El entorno de ejecución de Java (Java Runtime Environment) del Java Development Kit (JDK) 1.2.2_05 y anteriores puede permitir que una clase de Java no fiable invoque una clase no permitida, lo que podría permitir a un atacante escapar del sandbox de Java y llevar a cabo actividades no autorizadas.

Traducción automática del texto original de NVD (en inglés).

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

SUN — JDK

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2000-1099",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5.1,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "HIGH",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 4.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2001-01-09T05:00:00.000",
  "references": [
    {
      "url": "http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/199&type=0&nav=sec.sba",
      "tags": [
        "Broken Link"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/7255",
      "tags": [
        "Broken Link"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0011-132",
      "tags": [
        "Broken Link"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/5605",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/199&type=0&nav=sec.sba",
      "tags": [
        "Broken Link"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/7255",
      "tags": [
        "Broken Link"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0011-132",
      "tags": [
        "Broken Link"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/5605",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Java Runtime Environment in Java Development Kit (JDK) 1.2.2_05 and earlier can allow an untrusted Java class to call into a disallowed class, which could allow an attacker to escape the Java sandbox and conduct unauthorized activities."
    }
  ],
  "lastModified": "2026-06-16T21:53:08.667",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sun:jdk:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FBCDE0DF-29CB-4C41-84F5-664A9845F4CA",
              "versionEndIncluding": "1.2.1"
            },
            {
              "criteria": "cpe:2.3:a:sun:jdk:1.2.1:update3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "38A647E6-2BC2-4E71-96FB-7CA457484CB4"
            },
            {
              "criteria": "cpe:2.3:a:sun:jdk:1.2.2:update4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5B791B1F-D6AA-451D-A415-C2C9BE44865A"
            },
            {
              "criteria": "cpe:2.3:a:sun:jdk:1.2.2:update5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A4D34197-1500-47C7-848D-676F7592BCD4"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}