SMB: Oracle Java Runtime Environment Insecure File Loading
This signature detects attempts to exploit a known vulnerability in Oracle Java Runtime Environment. It is due to a design weakness in loading configuration files. Remote attackers can exploit this by enticing target users to download a malicious dll file from an SMB share. A successful attack can result in loading the attacker-controlled library and execution of arbitrary code with the privileges of the logged-in user. If a user is logged-on with administrative user rights, an attacker can take complete control of the affected system.
Short Name
SMB:ORACLE-JRE-INSECURE-LOAD
Severity
Minor
Recommended
False
Recommended Action
Drop
Category
SMB
Keywords
Environment File Insecure Java Loading Oracle Runtime
Release Date
07/25/2011
Supported Platforms
mx-19.3
vmx-19.3
vsrx-19.2
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vmx-19.4
mx-19.4
srxevo-25.4
vsrx-26.2
srx-26.2
srx-branch-26.2
vsrx3bsd-26.2
mx-12.3
srx-12.3
srx-branch-12.3
vsrx-12.3
Sigpack Version
3708
False Positive
Unknown