CVE-2003-1156

MEDIUM 4.6CVE-2003-1156 · Published 31/12/2003 · updated 16/06/2026

In short

CVE-2003-1156 is a MEDIUM (CVSS 4.6) vulnerability affecting jdk (sun), jre (sun).
Chance of exploitation in the next 30 days (EPSS): 0.50%, higher than 42.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
jdk sun	`= 1.4.2= 1.4.2_02`	No fix yet
jre sun	`= 1.4.2`	No fix yet

Description

Java Runtime Environment (JRE) and Software Development Kit (SDK) 1.4.2 through 1.4.2_02 allows local users to overwrite arbitrary files via a symlink attack on (1) unpack.log, as created by the unpack program, or (2) .mailcap1 and .mime.types1, as created by the RPM program.

References

securityfocus.com/archive/1/343038 · Exploit
securityfocus.com/bid/8937
exchange.xforce.ibmcloud.com/vulnerabilities/13570

More vulnerabilities in jdk

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free