CVE-2006-4302

The Java Plug-in J2SE 1.3.0_02 through 5.0 Update 5, and Java Web Start 1.0 through 1.2 and J2SE 1.4.2 through 5.0 Update 5, allows remote attackers to exploit vulnerabilities by specifying a JRE version that contain vulnerabilities.

• CWE-264

• http://secunia.com/advisories/21570Patch, Vendor Advisory
• http://securitytracker.com/id?1016732
• http://securitytracker.com/id?1016733
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102557-1Patch
• http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm
• http://www.osvdb.org/28109
• http://www.securityfocus.com/archive/1/382413
• http://www.securityfocus.com/bid/11757
• http://www.securityfocus.com/bid/8879
• http://www.vupen.com/english/advisories/2006/3354Vendor Advisory
• http://secunia.com/advisories/21570Patch, Vendor Advisory
• http://securitytracker.com/id?1016732
• http://securitytracker.com/id?1016733
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102557-1Patch
• http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm
• http://www.osvdb.org/28109
• http://www.securityfocus.com/archive/1/382413
• http://www.securityfocus.com/bid/11757
• http://www.securityfocus.com/bid/8879
• http://www.vupen.com/english/advisories/2006/3354Vendor Advisory

Published

Aug 23, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-4296PHP remote file inclusion vulnerability in classes/Tar.php i…
• CVE-2006-4297SQL injection vulnerability in shopping_cart.php in osCommer…
• CVE-2006-4298Multiple directory traversal vulnerabilities in cache.php in…
• CVE-2006-4299Cross-site scripting (XSS) vulnerability in tiki-searchindex…
• CVE-2006-4300SQL injection vulnerability in comments.asp in SimpleBlog 2.…
• CVE-2006-4301Microsoft Internet Explorer 6.0 SP1 allows remote attackers …
• CVE-2006-4303Race condition in (1) libnsl and (2) TLI/XTI API routines in…
• CVE-2006-4304Buffer overflow in the sppp driver in FreeBSD 4.11 through 6…
• CVE-2006-4305Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows …
• CVE-2006-4306Unspecified vulnerability in Sun Solaris 8 and 9 before 2006…
• CVE-2006-4307Unspecified vulnerability in the format command in Sun Solar…
• CVE-2006-4308Multiple cross-site scripting (XSS) vulnerabilities in Black…