CVEvulnerability

CVE-2013-2035

4.4 MEDIUM Published 2013-08-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-08-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-94

Description

Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp.

Affected configurations

• redhat hawtjni (<= 1.7) • redhat hawtjni 1.0 • redhat hawtjni 1.1 • redhat hawtjni 1.2 • redhat hawtjni 1.3 • redhat hawtjni 1.4 • redhat hawtjni 1.5 • redhat hawtjni 1.6

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References