Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close


Published: 28 August 2013

Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/ in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp.

From the Ubuntu Security Team

It was discovered that HawtJNI wrote files with predictable names to /tmp. A local attacker could exploit a race condition by overwriting the predictably named temporary files, resulting in arbitrary code execution.




Package Release Status
Launchpad, Ubuntu, Debian
artful Ignored
(end of life)
bionic Not vulnerable
cosmic Not vulnerable
lucid Does not exist

precise Ignored
(end of life)
quantal Ignored
(end of life)
raring Ignored
(end of life)
saucy Ignored
(end of life)
Released (1.0~+git0c502e20c4-3+deb7u1build0.14.04.1)
Released (1.10-1)
utopic Ignored
(end of life)
vivid Ignored
(end of life)
wily Ignored
(end of life)
xenial Not vulnerable
yakkety Ignored
(end of life)
zesty Ignored
(end of life)
This vulnerability is mitigated in part by the use of symlink restrictions in Ubuntu.