CVE-2005-1080: Sun SDK

Medium severity, CVSS 5.0. EPSS: 5.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in filenames in a .jar file.

Affected products

• Sun SDK: version 1.4.2 only; version 1.5 only

Published 2005-05-02. Last modified 2026-06-16.