vulnwire
6.8med

CVE-2008-3104

Multiple unspecified vulnerabilities in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update…

Published 18 y ago · modified 4 mo ago · JSON

CVSS
6.8
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.6%
percentile 90%
Public exploits
0
none known

Multiple unspecified vulnerabilities in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allow remote attackers to violate the security model for an applet's outbound connections by connecting to localhost services running on the machine that loaded the applet.

Exploit prediction (EPSS)

3.60% probability of exploitation in the next 30 days, higher than 90% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.06.8AV:N/AC:M/Au:N/C:P/I:P/A:P

Classification

Weakness
  • CWE-264 Permissions, Privileges, and Access Controls

References

  • exchange.xforce.ibmcloud.com /vulnerabilities/43662 · vdb-entry, x_refsource_XF, x_transferred
  • redhat.com /support/errata/RHSA-2008-1044.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • lists.apple.com /archives/security-announce//2008/Sep/msg00008.html · vendor-advisory, x_refsource_APPLE, x_transferred
  • marc.info /?l=bugtraq&m=122331139823057&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • secunia.com /advisories/32436 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/32826 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • support.avaya.com /elmodocs2/security/ASA-2008-428.htm · x_refsource_CONFIRM, x_transferred
  • support.avaya.com /elmodocs2/security/ASA-2008-507.htm · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/31600 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securitytracker.com /id?1020459 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2008-08/msg00005.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • secunia.com /advisories/32018 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • redhat.com /support/errata/RHSA-2008-1043.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • security.gentoo.org /glsa/glsa-200911-02.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • secunia.com /advisories/32179 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • sunsolve.sun.com /search/document.do?assetkey=1-66-238968-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred
  • secunia.com /advisories/33194 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2008/2740 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/31320 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2008-09/msg00000.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • secunia.com /advisories/33237 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2008/2056/references · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/31055 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/32180 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vmware.com /security/advisories/VMSA-2008-0016.html · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/31736 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/35065 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /bid/30140 · vdb-entry, x_refsource_BID, x_transferred
  • secunia.com /advisories/33236 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • support.apple.com /kb/HT3178 · x_refsource_CONFIRM, x_transferred
  • redhat.com /support/errata/RHSA-2008-0594.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • secunia.com /advisories/31269 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/31497 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • support.avaya.com /elmodocs2/security/ASA-2008-509.htm · x_refsource_CONFIRM, x_transferred
  • redhat.com /support/errata/RHSA-2008-1045.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2009-05/msg00000.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • rhn.redhat.com /errata/RHSA-2008-0955.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • secunia.com /advisories/33238 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2008-12/msg00003.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • securityfocus.com /archive/1/497041/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2008-09/msg00002.html
  • secunia.com /advisories/31010 · Patch, Vendor Advisory
  • secunia.com /advisories/37386
  • support.apple.com /kb/HT3179
  • redhat.com /support/errata/RHSA-2008-0595.html
  • redhat.com /support/errata/RHSA-2008-0790.html
  • redhat.com /support/errata/RHSA-2008-0906.html

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.