CVE-2009-2673 Security feature bypass in n/a
Remote attackers can bypass access restrictions in the Java Runtime Environment proxy mechanism to connect to arbitrary sites.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2009-2673?
CVE-2009-2673 is a high-severity vulnerability in Sun Jdk, published on 5 Aug 2009. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lacks the final keyword.
Weakness: CWE-264
Which versions are affected by CVE-2009-2673?
It affects 2 products.
How do I fix CVE-2009-2673?
Upgrade to a fixed version.
Is CVE-2009-2673 being exploited?
There is no known exploitation of CVE-2009-2673 in the wild and no public exploit code.
Other vulnerabilities in Sun Jdk
Sources
Also known as GHSA-4rjf-p9gv-749h.