Description
Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X does not prevent multiple programs from opening the same port as a Java ServerSocket, which allows local users to operate a Java program that intercepts network data intended for the ServerSocket of a different Java program.
References
- P-306 third-party-advisory government-resource
- ADV-2005-1734 vdb-entry
- 16808 third-party-advisory
- http://docs.info.apple.com/article.html?artnum=302265
- macos-serversocket-obtain-information(22269) vdb-entry
- 19397 vdb-entry
- 14827 vdb-entry
- APPLE-SA-2005-09-13 vendor-advisory