Remote Access to Floppy Drive via Sun Java Plug-In 1.4 - 1.4.2_02

CVE-2003-1521 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:P/A:N

Sun Java Plug-In 1.4 through 1.4.2_02 allows remote attackers to repeatedly access the floppy drive via the createXmlDocument method in the org.apache.crimson.tree.XmlDocument class, which violates the Java security model.

Learn more about our Cis Benchmark Audit For Apache Http Server.