CVE 2009-2476
The Java Management Extensions (JMX) implementation in Sun Java SE 6 before Update 15, and OpenJDK, does not properly enforce OpenType checks, which allows context-dependent attackers to bypass intended access restrictions by leveraging finalizer resurrection to obtain a reference to a privileged object.
Related bugs and status
CVE-2009-2476 (Candidate) is related to these bugs:
Bug #85969: Java Docs Package Won't Install
| Summary | In | Importance | Status | |||
|---|---|---|---|---|---|---|
| 85969 | Java Docs Package Won't Install | sun-java6 (Ubuntu) | Medium | Fix Released | ||
| 85969 | Java Docs Package Won't Install | sun-java5 (Ubuntu) | Medium | Invalid | ||
| 85969 | Java Docs Package Won't Install | j2se1.4-i586 (Ubuntu) | Wishlist | Invalid | ||
Bug #409559: version 1.6.0_15 is available
| Summary | In | Importance | Status | |||
|---|---|---|---|---|---|---|
| 409559 | version 1.6.0_15 is available | sun-java6 (Ubuntu) | Undecided | Fix Released | ||
| 409559 | version 1.6.0_15 is available | The Dell Mini Project | Undecided | Invalid | ||
| 409559 | version 1.6.0_15 is available | Jaunty Jackalope Backports | Undecided | Invalid | ||
| 409559 | version 1.6.0_15 is available | Intrepid Ibex Backports | Undecided | Invalid | ||
| 409559 | version 1.6.0_15 is available | Hardy Backports | Undecided | Invalid | ||
| 409559 | version 1.6.0_15 is available | sun-java6 (Ubuntu Hardy) | Undecided | Fix Released | ||
| 409559 | version 1.6.0_15 is available | sun-java6 (Ubuntu Karmic) | Undecided | Fix Released | ||
| 409559 | version 1.6.0_15 is available | sun-java6 (Ubuntu Intrepid) | Undecided | Invalid | ||
| 409559 | version 1.6.0_15 is available | sun-java6 (Ubuntu Jaunty) | Undecided | Fix Released | ||
Bug #420426: sun-java6 6b16 update for karmic, hardy and jaunty
| Summary | In | Importance | Status | |||
|---|---|---|---|---|---|---|
| 420426 | sun-java6 6b16 update for karmic, hardy and jaunty | sun-java6 (Ubuntu) | Undecided | Fix Released | ||
| 420426 | sun-java6 6b16 update for karmic, hardy and jaunty | sun-java6 (Ubuntu Hardy) | Undecided | Fix Released | ||
| 420426 | sun-java6 6b16 update for karmic, hardy and jaunty | sun-java6 (Ubuntu Jaunty) | Undecided | Fix Released | ||
| 420426 | sun-java6 6b16 update for karmic, hardy and jaunty | sun-java6 (Ubuntu Karmic) | Undecided | Fix Released | ||
See the 
CVE page on Mitre.org
for more details.
