Unauthorized access via Java Web Start

2002-03-1900:00:00

BUGTRAQ

vulners.com

It's possible to pass <property name="NAME" value="VALUE"/> with names different from jnlp. and javaws., it allows to leave sandbox.

CPENameOperatorVersion
java web starteq1.0

CPE	Name	Operator	Version
	java web start	eq	1.0

References

vulners.com/securityvulns/securityvulns:doc:2642