CVE-2013-2035

Severity: medium (CVSS 4.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2013-08-28 · updated 2026-06-16
Weakness: CWE-94

Description

Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp.

Affected products

RedHat Hawtjni: through 1.7; 1.0, 1.1, 1.2, 1.3, 1.4, 1.5 (+1)

References

http://rhn.redhat.com/errata/RHSA-2013-1029.html
http://rhn.redhat.com/errata/RHSA-2013-1784.html
http://rhn.redhat.com/errata/RHSA-2013-1785.html
http://rhn.redhat.com/errata/RHSA-2013-1786.html
http://rhn.redhat.com/errata/RHSA-2014-0029.html
http://rhn.redhat.com/errata/RHSA-2014-0245.html
http://rhn.redhat.com/errata/RHSA-2014-0254.html
http://rhn.redhat.com/errata/RHSA-2014-0400.html
http://rhn.redhat.com/errata/RHSA-2015-0034.html
http://secunia.com/advisories/53415
http://secunia.com/advisories/54108
http://secunia.com/advisories/57915

Get alerted when CVE-2013-2035 or the next vulnerability affects your stack