CVE-2004-2764
Last modified
CVE-2004-2764 is a vulnerability of currently unknown severity. Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1.4.0 through 1.4.0_04 allows untrusted applets and unprivileged servlets to gain privileges and read data from other applets via unspecified vectors related to classes in the XSLT processor, aka "XML sniffing.". EPSS estimates a 2.36% chance of exploitation in the next 30 days.
Description
Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1.4.0 through 1.4.0_04 allows untrusted applets and unprivileged servlets to gain privileges and read data from other applets via unspecified vectors related to classes in the XSLT processor, aka "XML sniffing."
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sun | Jre | 1.4.0 |
| Sun | Jre | 1.4.0_01 |
| Sun | Jre | 1.4.0_02 |
| Sun | Jre | 1.4.0_03 |
| Sun | Jre | 1.4.0_04 |
| Sun | Jre | 1.4.1 |
| Sun | Jre | 1.4.1_01 |
| Sun | Jre | 1.4.1_02 |
| Sun | Jre | 1.4.1_03 |
| Sun | Jre | 1.4.1_04 |
| Sun | Jre | 1.4.1_05 |
| Sun | Jre | 1.4.1_06 |
| Sun | Jre | 1.4.1_07 |
| Sun | Jre | 1.4.2 |
| Sun | Jre | 1.4.2_01 |
| Sun | Jre | 1.4.2_1 |
| Sun | Jre | 1.4.2_2 |
| Sun | Jre | 1.4.2_02 |
| Sun | Jre | 1.4.2_03 |
| Sun | Jre | 1.4.2_3 |
| Sun | Jre | 1.4.2_4 |
| Sun | Jre | 1.4.2_04 |
| Sun | Jre | 1.4.2_5 |
| Sun | Jre | 1.4.2_6 |
| Sun | Jre | 1.4.2_7 |
| Sun | Jre | 1.4.2_8 |
| Sun | Jre | 1.4.2_9 |
| Sun | Jre | 1.4.2_10 |
| Sun | Jre | 1.4.2_11 |
| Sun | Jre | 1.4.2_12 |
| Sun | Jre | 1.4.2_13 |
| Sun | Jre | 1.4.2_14 |
| Sun | Jre | 1.4.2_15 |
| Sun | Jre | 1.4.2_21 |
| Sun | Sdk | 1.4.0 |
| Sun | Sdk | 1.4.0_01 |
| Sun | Sdk | 1.4.0_02 |
| Sun | Sdk | 1.4.0_03 |
| Sun | Sdk | 1.4.0_04 |
| Sun | Sdk | 1.4.1 |
| Sun | Sdk | 1.4.1_01 |
| Sun | Sdk | 1.4.1_02 |
| Sun | Sdk | 1.4.1_03 |
| Sun | Sdk | 1.4.1_04 |
| Sun | Sdk | 1.4.1_05 |
| Sun | Sdk | 1.4.1_06 |
| Sun | Sdk | 1.4.1_07 |
| Sun | Sdk | 1.4.2 |
| Sun | Sdk | 1.4.2_01 |
| Sun | Sdk | 1.4.2_02 |
Showing 50 of 52 affected configurations. See NVD for the full list.
References
- http://secunia.com/advisories/12206Vendor Advisory
- http://secunia.com/advisories/12206Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2004-2764?
How severe is CVE-2004-2764?
How do I fix CVE-2004-2764?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2004
- CVE-2004-2758Multiple unspecified vulnerabilities in the H.323 protocol i…
- CVE-2004-2759Shared Sun StorEdge QFS and SAM-QFS file systems, as used in…
- CVE-2004-2760sshd in OpenSSH 3.5p1, when PermitRootLogin is disabled, imm…
- CVE-2004-2761The MD5 Message-Digest Algorithm is not collision resistant,…9.8
- CVE-2004-2762The server in IBM Tivoli Storage Manager (TSM) 4.2.x on MVS,…
- CVE-2004-2763The default configuration of Sun ONE/iPlanet Web Server 4.1 …
- CVE-2004-2765Cross-site scripting (XSS) vulnerability in Webmail in Sun O…
- CVE-2004-2766Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messagin…
- CVE-2004-2767NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWar…
- CVE-2004-2768dpkg 1.9.21 does not properly reset the metadata of a file d…
- CVE-2004-2769Cerberus FTP Server before 4.0.3.0 allows remote authenticat…
- CVE-2004-2770Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
Are you affected by CVE-2004-2764?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST