Ubuntu 11.10 / 12.04 LTS : icedtea-web regression (USN-1804-2)

Ubuntu Security Notice (C) 2013 Canonical, Inc. / NASL script (C) 2013 Tenable Network Security, Inc.


Synopsis :

The remote Ubuntu host is missing one or more security-related patches.

Description :

USN-1804-1 fixed vulnerabilities in IcedTea-Web. This update
introduced a regression with the Java Network Launching Protocol
(JNLP) when fetching content over SSL under certain configurations,
such as when using the community-supported IcedTead 7 browser plugin.
This update fixes the problem.

We apologize for the inconvenience.

Jiri Vanek discovered that IcedTea-Web would use the same classloader
for applets from different domains. A remote attacker could exploit
this to expose sensitive information or potentially manipulate applets
from other domains. (CVE-2013-1926)

It was discovered that IcedTea-Web did not properly verify
JAR files and was susceptible to the GIFAR attack. If a user
were tricked into opening a malicious website, a remote
attacker could potentially exploit this to execute code
under certain circumstances. (CVE-2013-1927).

Solution :

Update the affected icedtea-7-plugin and / or icedtea-netx packages.

Risk factor :

Medium / CVSS Base Score : 6.8
(CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS Temporal Score : 5.0
(CVSS2#E:U/RL:OF/RC:C)
Public Exploit Available : false

Family: Ubuntu Local Security Checks

Nessus Plugin ID: 66199 ()

Bugtraq ID: 59281
59286

CVE ID: CVE-2013-1926
CVE-2013-1927