CVE-2004-1029: conectiva linux

CVSS: 9.3v2.0HighModified

Published 24-11-2004Last modified 08-08-2024

Vulnerability summary

CVE-2004-1029 is a high (CVSS 9.3) vulnerability in conectiva linux. EPSS estimates a 17.02% chance of exploitation in the next 30 days, higher than 97% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

17.02%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1exploit-database

Timeline

24-11-2004
PublishedVulnerability first disclosed.
08-08-2024
Last modifiedVulnerability information updated.

Description

The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using the reflection API to access private Java packages.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

17.02%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 17.02% on 18-09-2026

18-09-202618-10-2026

EPSS score

17.02%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databasedosmultipleVerified
Sun Java Runtime Environment 1.x Java Plugin - JavaScript Security Restriction Bypass
Maturity: poc

Weaknesses

CWE · root cause

CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Affected systems

Hp2 products

hp-ux11.00 | 11.11 | 11.22 | 11.23
java_sdk-rte1.3 | 1.4

Sun2 products

jdk1.3.1_01 | 1.3.1_01a | 1.3.1_02 | 1.3.1_03 | 1.3.1_04 | 1.3.1_05 | 1.3.1_06 | 1.3.1_07 | 1.4 | 1.4.0_01 | 1.4.0_02 | 1.4.0_03 | 1.4.0_4 | 1.4.1 | 1.4.1_01 | 1.4.1_02 | 1.4.1_03 | 1.4.2 | 1.4.2_01 | 1.4.2_02 | 1.4.2_03 | 1.4.2_04 | 1.4.2_05
jre1.3.0 | 1.3.0:update1 | 1.3.0:update2 | 1.3.0:update3 | 1.3.0:update4 | 1.3.0:update5 | 1.3.1 | 1.3.1:update1 | 1.3.1:update1a | 1.3.1:update4 | 1.3.1:update8 | 1.3.1_02 | 1.3.1_03 | 1.3.1_05 | 1.3.1_06 | 1.3.1_07 | 1.3.1_09 | 1.4 | 1.4.0_01 | 1.4.0_02 | 1.4.0_03 | 1.4.0_04 | 1.4.1 | 1.4.1:update3 | 1.4.1_01 | 1.4.1_02 | 1.4.1_07 | 1.4.2 | 1.4.2:update1 | 1.4.2:update2 | 1.4.2:update3 | 1.4.2:update4 | 1.4.2:update5

Symantec2 products