TITLE:
Sun Java JRE Large Temporary File Creation Vulnerability

SECUNIA ADVISORY ID:
SA20132

VERIFY ADVISORY:
http://secunia.com/advisories/20132/

CRITICAL:
Not critical

IMPACT:
DoS

WHERE:
>From remote

SOFTWARE:
Sun Java SDK 1.4.x
http://secunia.com/product/1661/
Sun Java JRE 1.5.x / 5.x
http://secunia.com/product/4228/
Sun Java JRE 1.4.x
http://secunia.com/product/784/
Sun Java JDK 1.5.x
http://secunia.com/product/4621/

DESCRIPTION:
Marc Schoenefeld has discovered a vulnerability in Sun Java JRE (Java
Runtime Environment), which can be exploited by malicious people to
cause a DoS (Denial of Service).

The vulnerability is caused due to missing restrictions on temporary
file creation. This can be exploited by a malicious applet to create
large files in the temporary folder via e.g. the "Font.createFont()"
method.

Successful exploitation causes a vulnerable system to run out of disk
space.

The vulnerability has been confirmed in JDK 5.0 Update 6 and has also
been reported in SDK 1.4.2_11 on the Microsoft Windows platform.

SOLUTION:
Remove files created by malicious applets in the temporary folder
"%temp%" when running out of disk space after an attack.

PROVIDED AND/OR DISCOVERED BY:
Marc Schoenefeld

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------