New Search

The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17 and OpenJDK allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files aka Bug Id 6824265.

oval:org.mitre.oval:def:11686

The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17 and OpenJDK allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files aka Bug Id 6824265.

Family:
unix
Status:
ACCEPTED
Platform(s):
  • Red Hat Enterprise Linux 5
  • Oracle Linux 5
  • CentOS Linux 5
Class:
vulnerability
Reference(s):
  • CVE-2009-3884
Product(s):