CVE-2005-2738 Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X does not prevent multiple programs from opening the same port as a Java ServerSocket, which allows local users to operate a Java program that interc...
MediumCVSS 5.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X does not prevent multiple programs from opening the same port as a Java ServerSocket, which allows local users to operate a Java program that intercepts network data intended for the ServerSocket of a different Java program.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun java | = 1.4.2 | No fix listed |
References
- docs.info.apple.com
- APPLE-SA-2005-09-13 vendor-advisory
- 16808 third-party-advisory
- P-306 government-resource third-party-advisory
- 19397 vdb-entry
- 14827 vdb-entry
- ADV-2005-1734 vdb-entry
- macos-serversocket-obtain-information(22269) vdb-entry