bug-classpath
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Bug classpath/29960] New: SystemProperties can be used to circumvent se


From: roman at kennke dot org
Subject: [Bug classpath/29960] New: SystemProperties can be used to circumvent security restrictions
Date: 23 Nov 2006 20:12:52 -0000

The SystemProperties can easily be abused by application code to circumvent
security restrictions. Compile and run the attached test program. If you
replace SystemProperties with System and run this with the RI, then you get an
Exception (rightly so). Not so with Classpath and the use of SystemProperties.
I suspect this is a gaping security hole.


-- 
           Summary: SystemProperties can be used to circumvent security
                    restrictions
           Product: classpath
           Version: 0.93
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: classpath
        AssignedTo: unassigned at gcc dot gnu dot org
        ReportedBy: roman at kennke dot org


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=29960





reply via email to

[Prev in Thread] Current Thread [Next in Thread]