Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-4350703

ZipFile bypasses file delete permission check

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: P1 P1
    • 1.4.0
    • 1.3.0
    • core-libs
    • None
    • beta
    • generic
    • solaris_7
    • Verified

      The java.util.zip.ZipFile constructor can be used to open a file with
      a "delete" mode set. But the only SecurityManager call that is done
      is checkRead. A file that cannot be deleted by File.delete() can
      bypass security and be deleted using ZipFile.

      dean.long@Eng 2000-07-05

            busersunw Btplusnull User (Inactive)
            dlong Dean Long
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: