CVE-2003-0896

N/A

Description

The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine (JVM) in Sun SDK and JRE 1.4.1_03 and earlier allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a loaded class name that contains "/" (slash) instead of "." (dot) characters, which bypasses a call to the Security Manager's checkPackageAccess method.

CVE Details

CVSS v3.1 ScoreN/A

Published11/17/2003

Last Modified4/16/2026

Sourcenvd

Honeypot Sightings0

Affected Products

sun:jre

References

http://lsd-pl.net/code/JVM/jre.tar.gz(cve@mitre.org)

http://marc.info/?l=bugtraq&m=106692334503819&w=2(cve@mitre.org)

http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57221(cve@mitre.org)

http://sunsolve.sun.com/search/document.do?assetkey=1-66-200356-1(cve@mitre.org)

http://www.securityfocus.com/advisories/6028(cve@mitre.org)

http://www.securityfocus.com/archive/1/342580(cve@mitre.org)

http://www.securityfocus.com/archive/1/342583(cve@mitre.org)

http://www.securityfocus.com/bid/8879(cve@mitre.org)

http://lsd-pl.net/code/JVM/jre.tar.gz(af854a3a-2127-422b-91ae-364da2661108)

http://marc.info/?l=bugtraq&m=106692334503819&w=2(af854a3a-2127-422b-91ae-364da2661108)

http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57221(af854a3a-2127-422b-91ae-364da2661108)

http://sunsolve.sun.com/search/document.do?assetkey=1-66-200356-1(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/advisories/6028(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/archive/1/342580(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/archive/1/342583(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/8879(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.