« Volver al listado

CVE-2005-0471

Estado: ModificadaMedia (5)—

Sun Java JRE de la 1.1.x a la 1.4.x escribe archivos temporales con nombres largos que se vuelven predecibles en un sistema de archivos que utiliza nombres cortos de estilo 8.3, lo que permite a atacantes remotos escribir archivos arbitrarios en ubicaciones conocidas y facilita la explotación de vulnerabilidades en aplicaciones que dependen de nombres de archivo impredecibles.

Traducción automática del texto original de NVD (en inglés).

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

SUN — JDKSUN — JRE

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2005-0471",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2005-03-14T05:00:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/11070/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/secunia_research/2004-7/advisory/",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/544392",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/19285",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/11070/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/secunia_research/2004-7/advisory/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/544392",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/19285",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Sun Java JRE 1.1.x through 1.4.x writes temporary files with long filenames that become predictable on a file system that uses 8.3 style short names, which allows remote attackers to write arbitrary files to known locations and facilitates the exploitation of vulnerabilities in applications that rely on unpredictable file names."
    }
  ],
  "lastModified": "2026-06-16T22:11:10.297",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sun:jdk:1.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C4C1D605-1FE9-4F1A-A374-CC342CD7310C"
            },
            {
              "criteria": "cpe:2.3:a:sun:jdk:1.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FF39BD92-7733-4408-A907-D292D973D9CA"
            },
            {
              "criteria": "cpe:2.3:a:sun:jdk:1.3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1AA4DE59-4CF5-49F4-8625-0F3DA2DB7020"
            },
            {
              "criteria": "cpe:2.3:a:sun:jdk:1.4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "20C9C594-3DBC-4706-BA88-A662CD28C830"
            },
            {
              "criteria": "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A02CF738-1B4F-44D0-A618-3D3E4EF1C9B8"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FC23BB12-3C36-46D9-9FB8-47D6DDB3D956"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3144D692-96E3-477A-9383-D1880DCEDB2E"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AAB87D43-2860-43DD-94EE-886D7D75A351"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D73559DD-54B4-4DF2-81BC-9109DB29DCCB"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}