[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Bug classpath/29960] New: SystemProperties can be used to circumvent se
From: |
roman at kennke dot org |
Subject: |
[Bug classpath/29960] New: SystemProperties can be used to circumvent security restrictions |
Date: |
23 Nov 2006 20:12:52 -0000 |
The SystemProperties can easily be abused by application code to circumvent
security restrictions. Compile and run the attached test program. If you
replace SystemProperties with System and run this with the RI, then you get an
Exception (rightly so). Not so with Classpath and the use of SystemProperties.
I suspect this is a gaping security hole.
--
Summary: SystemProperties can be used to circumvent security
restrictions
Product: classpath
Version: 0.93
Status: UNCONFIRMED
Severity: normal
Priority: P3
Component: classpath
AssignedTo: unassigned at gcc dot gnu dot org
ReportedBy: roman at kennke dot org
http://gcc.gnu.org/bugzilla/show_bug.cgi?id=29960
- [Bug classpath/29960] New: SystemProperties can be used to circumvent security restrictions,
roman at kennke dot org <=