The LiveConnect implementation in plugin/icedteanp/IcedTeaNPPlugin.cc in IcedTea-Web before 1.4.2 allows local users to read the messages between a Java applet and a web browser by pre-creating a temporary socket file with a predictable name in /tmp.

icedtea-web was updated to version 1.4.2 (bnc#864364), fixing various bugs and a security issues :

  - Dialogs center on screen before becoming visible

  - Support for u45 new manifest attributes     (Application-Name)

  - Custom applet permission policies panel in     itweb-settings control panel

  - Plugin

  - PR1271: icedtea-web does not handle     'javascript:'-protocol URLs

  - RH976833: Multiple applets on one page cause deadlock

  - Enabled javaconsole

  - Security Updates

  - CVE-2013-6493/RH1010958: insecure temporary file use     flaw in LiveConnect implementation

  - Except above also :

  - Christmas splashscreen extension

  - fixed classloading deadlocks

  - cleaned code from warnings

  - pipes moved to XDG runtime dir

  - Patches changes :

  - rebased icedtea-web-1.1-moonlight-symbol-clash.patch

  - add icedtea-web-1.4.2-mkdir.patch

  - add icedtea-web-1.4.2-softkiller-link.patch

  - build with rhino support

  - use fdupes

  - run make run-netx-dist-tests in %check on openSUSE >     13.1

The OpenJDK Java Plugin IcedTea Web was released to fix a temporary file access problem.

Changes :

  - Dialogs center on screen before becoming visible.

  - Support for u45 new manifest attributes     (Application-Name).

  - Custom applet permission policies panel in     itweb-settings control panel.

  - Plugin fixes :

  - PR1271: icedtea-web does not handle     'javascript:'-protocol URLs

  - RH976833: Multiple applets on one page cause deadlock

  - Enabled javaconsole.

  - Security fixes :

  - CVE-2013-6493/RH1010958: Insecure temporary file use     flaw in LiveConnect implementation.

  - Additional fixes and changes :

  - Christmas splashscreen extension

  - Fixed classloading deadlocks

  - Cleaned code from warnings

  - Pipes moved to XDG runtime dir.

Michael Scherer discovered that IcedTea Web created temporary directories in an unsafe fashion. A local attacker could possibly use this issue to obtain or modify sensitive information from other local user sessions.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
75272	openSUSE Security Update : icedtea-web (openSUSE-SU-2014:0310-1)	Nessus	SuSE Local Security Checks	low
73117	SuSE 11.3 Security Update : icedtea-web (SAT Patch Number 8974)	Nessus	SuSE Local Security Checks	low
72875	Ubuntu 12.04 LTS / 12.10 / 13.10 : icedtea-web vulnerability (USN-2131-1)	Nessus	Ubuntu Local Security Checks	low

Detections

Analytics

CVE-2013-6493

medium

Tenable Plugins

low

low

low