← Back to CVEs
CVE-2009-2671
N/ADescription
The SOCKS proxy implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover the username of the account that invoked an untrusted (1) applet or (2) Java Web Start application via unspecified vectors.
CVE Details
CVSS v3.1 ScoreN/A
Published8/5/2009
Last Modified4/23/2026
Sourcenvd
Honeypot Sightings0
Affected Products
sun:jdksun:jre
References
http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20(cve@mitre.org)
http://java.sun.com/javase/6/webnotes/6u15.html(cve@mitre.org)
http://marc.info/?l=bugtraq&m=125787273209737&w=2(cve@mitre.org)
http://secunia.com/advisories/36162(cve@mitre.org)
http://secunia.com/advisories/36176(cve@mitre.org)
http://secunia.com/advisories/36180(cve@mitre.org)
http://secunia.com/advisories/36199(cve@mitre.org)
http://secunia.com/advisories/36248(cve@mitre.org)
http://secunia.com/advisories/37300(cve@mitre.org)
http://secunia.com/advisories/37386(cve@mitre.org)
http://secunia.com/advisories/37460(cve@mitre.org)
http://security.gentoo.org/glsa/glsa-200911-02.xml(cve@mitre.org)
http://www.securityfocus.com/archive/1/507985/100/0/threaded(cve@mitre.org)
http://www.securityfocus.com/bid/35943(cve@mitre.org)
http://www.securitytracker.com/id?1022659(cve@mitre.org)
http://www.us-cert.gov/cas/techalerts/TA09-294A.html(cve@mitre.org)
http://www.vupen.com/english/advisories/2009/2543(cve@mitre.org)
http://www.vupen.com/english/advisories/2009/3316(cve@mitre.org)
https://exchange.xforce.ibmcloud.com/vulnerabilities/52336(cve@mitre.org)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11115(cve@mitre.org)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8259(cve@mitre.org)
https://rhn.redhat.com/errata/RHSA-2009-1199.html(cve@mitre.org)
https://rhn.redhat.com/errata/RHSA-2009-1200.html(cve@mitre.org)
https://rhn.redhat.com/errata/RHSA-2009-1201.html(cve@mitre.org)
http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20(af854a3a-2127-422b-91ae-364da2661108)
http://java.sun.com/javase/6/webnotes/6u15.html(af854a3a-2127-422b-91ae-364da2661108)
http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html(af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html(af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html(af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html(af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=125787273209737&w=2(af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/36162(af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/36176(af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/36180(af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/36199(af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/36248(af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/37300(af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/37386(af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/37460(af854a3a-2127-422b-91ae-364da2661108)
http://security.gentoo.org/glsa/glsa-200911-02.xml(af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1(af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-66-263409-1(af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDVSA-2009:209(af854a3a-2127-422b-91ae-364da2661108)
http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/507985/100/0/threaded(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/35943(af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1022659(af854a3a-2127-422b-91ae-364da2661108)
http://www.us-cert.gov/cas/techalerts/TA09-294A.html(af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/security/advisories/VMSA-2009-0016.html(af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2009/2543(af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2009/3316(af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/52336(af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11115(af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8259(af854a3a-2127-422b-91ae-364da2661108)
https://rhn.redhat.com/errata/RHSA-2009-1199.html(af854a3a-2127-422b-91ae-364da2661108)
https://rhn.redhat.com/errata/RHSA-2009-1200.html(af854a3a-2127-422b-91ae-364da2661108)
https://rhn.redhat.com/errata/RHSA-2009-1201.html(af854a3a-2127-422b-91ae-364da2661108)
https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html(af854a3a-2127-422b-91ae-364da2661108)
https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.