A security vulnerability exists in the Netscape Network Security Services (NSS) tools "signtool" and "modutil". When either program attempts to "unzip" a maliciously constructed JAR, WAR, XPI or ZIP file, it is possible for code in that zip file to take over the running program and then perform tasks with the privilege of the user running the program.

This issue is described by the United States Computer Emergency Readiness Team at:

• http://www.kb.cert.org/vuls/id/680620

This issue is also described in CAN-2005-2096 at:

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2096

This issue can occur in the following releases:

SPARC Platform

• Sun Java Enterprise System 2003Q4, 2004Q2 and 2005Q1 for Solaris 8 without patch 119209-05
• Sun Java Enterprise System 2003Q4, 2004Q2 and 2005Q1 for Solaris 9 without patch 119211-05
• Sun Java Enterprise System 2005Q1 for Solaris 10 without patch 119213-05
• Solaris 9 without patch 119211-05
• Solaris 10 without patch 119213-05

x86 Platform

• Sun Java Enterprise System 2003Q4, 2004Q2 and 2005Q1 for Solaris 9 without patch 119212-05
• Sun Java Enterprise System 2005Q1 for Solaris 10 without patch 119214-05
• Solaris 9 without patch 119212-05
• Solaris 10 without patch 119214-05

There are no visible symptoms that would indicate the described issue has been exploited.

There is no workaround. Please see the "Resolution" section below.

This issue is addressed in the following releases:

Sparc Platform

• Sun Java Enterprise System 2003Q4, 2004Q2 and 2005Q1 for Solaris 8 with patch 119209-05 or later
• Sun Java Enterprise System 2003Q4, 2004Q2 and 2005Q1 for Solaris 9 with patch 119211-05 or later
• Sun Java Enterprise System 2005Q1 for Solaris 10 with patch 119213-05 or later
• Solaris 9 with patch 119211-05 or later
• Solaris 10 with patch 119213-05 or later

x86 Platform

• Sun Java Enterprise System 2003Q4, 2004Q2 and 2005Q1 for Solaris 9 with patch 119212-05 or later
• Sun Java Enterprise System 2005Q1 for Solaris 10 with patch 119214-05 or later
• Solaris 9 with patch 119212-05 or later
• Solaris 10 with patch 119214-05 or later

This solution has no attachment