CVE-2006-0615

MediumCVSS 4.0/10Last modified Jun 16, 2026

Description

Multiple unspecified vulnerabilities in Sun Java JDK and JRE 5.0 Update 4 and earlier, SDK and JRE 1.4.x through 1.4.2_09 allow remote attackers to bypass Java sandbox security and obtain privileges via unspecified vectors involving the reflection APIs, aka the "second and third issues."

Metrics

CVSS 2.0 4.0/10AV:N/AC:H/Au:N/C:P/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://docs.info.apple.com/article.html?artnum=303658Broken Link
http://secunia.com/advisories/18760Patch, Third Party Advisory
http://secunia.com/advisories/18884Third Party Advisory
http://securitytracker.com/id?1015596Third Party Advisory, VDB Entry
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102171-1Broken Link, Patch
http://www.gentoo.org/security/en/glsa/glsa-200602-07.xmlThird Party Advisory
http://www.kb.cert.org/vuls/id/759996Third Party Advisory, US Government Resource
http://www.vupen.com/english/advisories/2006/0467Permissions Required
http://www.vupen.com/english/advisories/2006/0828Permissions Required
http://www.vupen.com/english/advisories/2006/1398Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/24561Third Party Advisory, VDB Entry
http://docs.info.apple.com/article.html?artnum=303658Broken Link
http://secunia.com/advisories/18760Patch, Third Party Advisory
http://secunia.com/advisories/18884Third Party Advisory
http://securitytracker.com/id?1015596Third Party Advisory, VDB Entry
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102171-1Broken Link, Patch
http://www.gentoo.org/security/en/glsa/glsa-200602-07.xmlThird Party Advisory
http://www.kb.cert.org/vuls/id/759996Third Party Advisory, US Government Resource
http://www.vupen.com/english/advisories/2006/0467Permissions Required
http://www.vupen.com/english/advisories/2006/0828Permissions Required
http://www.vupen.com/english/advisories/2006/1398Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/24561Third Party Advisory, VDB Entry

Timeline

Published: Feb 9, 2006
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-06164.0Unspecified vulnerability in Sun Java JDK and JRE 5.0 Update 4 and earlier allows remote attackers to bypass Java sandbox security and obtai CVE-2006-06174.0Multiple unspecified vulnerabilities in Sun Java JDK and JRE 5.0 Update 5 and earlier allow remote attackers to bypass Java sandbox security CVE-2006-06184.6Format string vulnerability in fontsleuth in QNX Neutrino RTOS 6.3.0 allows local users to execute arbitrary code via format string specifie CVE-2006-06194.6Multiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0 allow local users to execute arbitrary code via long (1) ABLPATH or (2) ABL CVE-2006-06206.2Race condition in phfont in QNX Neutrino RTOS 6.2.1 allows local users to execute arbitrary code via unspecified manipulations of the PHFONT CVE-2006-06217.2Multiple buffer overflows in QNX Neutrino RTOS 6.2.0 allow local users to execute arbitrary code via a long first argument to the (1) su or CVE-2006-06224.9QNX Neutrino RTOS 6.3.0 allows local users to cause a denial of service (hang) by supplying a "break *0xb032d59f" command to gdb.CVE-2006-06237.2QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the file and execute ar CVE-2006-06247.5SQL injection vulnerability in check.asp in Whomp Real Estate Manager XP 2005 allows remote attackers to execute arbitrary SQL commands via CVE-2006-06256.4Directory traversal vulnerability in Spip_RSS.PHP in SPIP 1.8.2g and earlier allows remote attackers to read or include arbitrary files via CVE-2006-06267.5SQL injection vulnerability in spip_acces_doc.php3 in SPIP 1.8.2g and earlier allows remote attackers to execute arbitrary SQL commands via CVE-2006-06274.3Cross-site scripting (XSS) vulnerability in Clever Copy 2.0, 2.0a, and 3.0 allows remote attackers to inject arbitrary web script or HTML vi