Unspecified vulnerability in Java 2 Platform, Standard Edition (J2SE) 5.0 and 5.0 Update 1 and J2SE 1.4.2 up to 1.4.2_07, as used in multiple products and platforms including (1) HP-UX and (2) APC PowerChute, allows applications to assign permissions to themselves and gain privileges.

The remote host is using an unmanaged version of Sun Java Runtime Environment that has vulnerabilities in its Java Runtime Plug-in, a web browser add-on used to display Java applets.

The JRE Plug-in security can be bypassed by tricking a user into viewing a maliciously crafted web page.

Additionally, a denial of service vulnerability is present in this version of the JVM.  This issue is triggered by viewing an applet that misuses the serialization API.

s700_800 11.00 OV ITO6.0X OVO JavaGUI client A.07.20.1 : 

A potential security vulnerability has been identified with the HP OpenView Operations and OpenView VantagePoint Java Runtime Environment (JRE). This vulnerability may allow an untrusted remote applet to elevate its privileges.

s700_800 11.X OV OVO8.1X PARISC JavaGUI client A.08.14 : 

A potential security vulnerability has been identified with the HP OpenView Operations and OpenView VantagePoint Java Runtime Environment (JRE). This vulnerability may allow an untrusted remote applet to elevate its privileges.

s700_800 11.X OV ITO7.1X JavaGUI client A.07.20.1 : 

A potential security vulnerability has been identified with the HP OpenView Operations and OpenView VantagePoint Java Runtime Environment (JRE). This vulnerability may allow an untrusted remote applet to elevate its privileges.

The remote host is using a vulnerable version of Sun Java Runtime Plug-in, an web browser addon used to display Java applets.

It has been reported that the JRE Plug-in Security can be bypassed.
A remote attacker could exploit this by tricking a user into viewing a maliciously crafted web page.

Additionally, a denial of service vulnerability is present in this version of the JVM.  This issue is triggered by viewing an applet that misuses the serialization API.

ID	Name	Product	Family	Type	Severity
64836	Sun Java JRE / Web Start Java Plug-in Untrusted Applet Privilege Escalation (Unix)	Nessus	Misc.	Local	medium
20086	HP-UX PHSS_33866 : HP OpenView Operations and OpenView VantagePoint Java Runtime Environment (JRE), Remote Privileged Access (HPSBMA01234 SSRT051052 rev.2)	Nessus	HP-UX Local Security Checks	Local	medium
20085	HP-UX PHSS_33627 : HP OpenView Operations and OpenView VantagePoint Java Runtime Environment (JRE), Remote Privileged Access (HPSBMA01234 SSRT051052 rev.2)	Nessus	HP-UX Local Security Checks	Local	medium
20084	HP-UX PHSS_32406 : HP OpenView Operations and OpenView VantagePoint Java Runtime Environment (JRE), Remote Privileged Access (HPSBMA01234 SSRT051052 rev.2)	Nessus	HP-UX Local Security Checks	Local	medium
18480	Sun Java JRE / Web Start Java Plug-in Untrusted Applet Privilege Escalation	Nessus	Windows	Local	high

Detections

Analytics

CVE-2005-1974

critical

Tenable Plugins

medium

medium

medium

medium

high