« Volver al listado

CVE-2003-1156

Estado: ModificadaMedia (4.6)—

El Entorno de ejecución de Java (JRE) y el Kit de desarrollo de software (SDK) 1.4.2 hasta 1.4.2_02 permiten a usuarios locales sobrescribir archivos arbitrarios mediante un ataque de enlace simbólico sobre (1) unpack.log, creado por el programa unpack, o (2) .mailcap1 y .mime.types1, creados por el programa RPM.

Traducción automática del texto original de NVD (en inglés).

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

SUN — JDKSUN — JRE

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2003-1156",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2003-12-31T05:00:00.000",
  "references": [
    {
      "url": "http://www.securityfocus.com/archive/1/343038",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/8937",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/13570",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/343038",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/8937",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/13570",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Java Runtime Environment (JRE) and Software Development Kit (SDK) 1.4.2 through 1.4.2_02 allows local users to overwrite arbitrary files via a symlink attack on (1) unpack.log, as created by the unpack program, or (2) .mailcap1 and .mime.types1, as created by the RPM program."
    }
  ],
  "lastModified": "2026-06-16T22:03:37.550",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sun:jdk:1.4.2:*:linux:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "37F8AA83-3B27-4EB5-BC5E-E541248F61F1"
            },
            {
              "criteria": "cpe:2.3:a:sun:jdk:1.4.2_02:*:linux:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3AF426F2-93EF-4F2C-AD0C-8AB40AD72364"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.4.2:*:linux:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1D1C4B12-6949-4399-BC8D-3B018213FF0B"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.4.2:update2:linux:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CF77B446-426C-4480-9B9A-DD98F7ED82AE"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}