CVE-2013-2035

HawtJNI: predictable temporary file name leading to local arbitrary code execution

Published Aug 28, 2013 CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed
Description
Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-2345 Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp.
Github GHSA Github GHSA GHSA-49j7-qghp-5wj8 Improper Control of Generation of Code in HawtJNI
History

No history.