CVE-2009-2721

Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6406003.

• http://java.sun.com/j2se/1.5.0/ReleaseNotes.htmlPatch, Vendor Advisory
• http://secunia.com/advisories/37386
• http://secunia.com/advisories/37460
• http://security.gentoo.org/glsa/glsa-200911-02.xml
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1Patch, Vendor Advisory
• http://www.securityfocus.com/archive/1/507985/100/0/threaded
• http://www.vmware.com/security/advisories/VMSA-2009-0016.html
• http://www.vupen.com/english/advisories/2009/3316
• http://java.sun.com/j2se/1.5.0/ReleaseNotes.htmlPatch, Vendor Advisory
• http://secunia.com/advisories/37386
• http://secunia.com/advisories/37460
• http://security.gentoo.org/glsa/glsa-200911-02.xml
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1Patch, Vendor Advisory
• http://www.securityfocus.com/archive/1/507985/100/0/threaded
• http://www.vmware.com/security/advisories/VMSA-2009-0016.html
• http://www.vupen.com/english/advisories/2009/3316

Published

Aug 10, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2715Sun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS user…
• CVE-2009-2716The plugin functionality in Sun Java SE 6 before Update 15 d…
• CVE-2009-2717The Abstract Window Toolkit (AWT) implementation in Sun Java…
• CVE-2009-2718The Abstract Window Toolkit (AWT) implementation in Sun Java…
• CVE-2009-2719The Java Web Start implementation in Sun Java SE 6 before Up…
• CVE-2009-2720Unspecified vulnerability in the javax.swing.plaf.synth.Synt…
• CVE-2009-2722Multiple unspecified vulnerabilities in the Provider class i…
• CVE-2009-2723Unspecified vulnerability in deserialization in the Provider…
• CVE-2009-2724Race condition in the java.lang package in Sun Java SE 5.0 b…
• CVE-2009-2726The SIP channel driver in Asterisk Open Source 1.2.x before …
• CVE-2009-2727Stack-based buffer overflow in the _tt_internal_realpath fun…
• CVE-2009-2730libgnutls in GnuTLS before 2.8.2 does not properly handle a …