6.8

CVE-2008-3104

Multiple unspecified vulnerabilities in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allow remote attackers to violate the security model for an applet's outbound connections by connecting to localhost services running on the machine that loaded the applet.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sun ≫ Jdk Update update_15 Version <= 5.0
Sun ≫ Jdk Update update_6 Version <= 6
Sun ≫ Jdk Version 1.5.0 Update update_12
Sun ≫ Jdk Version 5.0 Update update_1
Sun ≫ Jdk Version 5.0 Update update_10
Sun ≫ Jdk Version 5.0 Update update_11
Sun ≫ Jdk Version 5.0 Update update_12
Sun ≫ Jdk Version 5.0 Update update_13
Sun ≫ Jdk Version 5.0 Update update_14
Sun ≫ Jdk Version 5.0 Update update_2
Sun ≫ Jdk Version 5.0 Update update_3
Sun ≫ Jdk Version 5.0 Update update_4
Sun ≫ Jdk Version 5.0 Update update_5
Sun ≫ Jdk Version 5.0 Update update_6
Sun ≫ Jdk Version 5.0 Update update_7
Sun ≫ Jdk Version 5.0 Update update_8
Sun ≫ Jdk Version 5.0 Update update_9
Sun ≫ Jdk Version 6 Update update_1
Sun ≫ Jdk Version 6 Update update_2
Sun ≫ Jdk Version 6 Update update_3
Sun ≫ Jdk Version 6 Update update_4
Sun ≫ Jdk Version 6 Update update_5
Sun ≫ Jre Version 1.3.0
Sun ≫ Jre Version 1.3.1
Sun ≫ Jre Version 1.3.1 Update update16
Sun ≫ Jre Version 1.3.1 Update update18
Sun ≫ Jre Version 1.3.1 Update update19
Sun ≫ Jre Version 1.3.1 Update update20
Sun ≫ Jre Version 1.3.1_02
Sun ≫ Jre Version 1.3.1_03
Sun ≫ Jre Version 1.3.1_04
Sun ≫ Jre Version 1.3.1_05
Sun ≫ Jre Version 1.3.1_06
Sun ≫ Jre Version 1.3.1_07
Sun ≫ Jre Version 1.3.1_08
Sun ≫ Jre Version 1.3.1_09
Sun ≫ Jre Version 1.3.1_10
Sun ≫ Jre Version 1.3.1_11
Sun ≫ Jre Version 1.3.1_12
Sun ≫ Jre Version 1.3.1_13
Sun ≫ Jre Version 1.3.1_14
Sun ≫ Jre Version 1.3.1_15
Sun ≫ Jre Version 1.3.1_17
Sun ≫ Jre Version 1.3.1_21
Sun ≫ Jre Version 1.3.1_22
Sun ≫ Jre Version 1.4.2_1
Sun ≫ Jre Version 1.4.2_2
Sun ≫ Jre Version 1.4.2_3
Sun ≫ Jre Version 1.4.2_4
Sun ≫ Jre Version 1.4.2_5
Sun ≫ Jre Version 1.4.2_6
Sun ≫ Jre Version 1.4.2_7
Sun ≫ Jre Version 1.4.2_8
Sun ≫ Jre Version 1.4.2_9
Sun ≫ Jre Version 1.4.2_10
Sun ≫ Jre Version 1.4.2_11
Sun ≫ Jre Version 1.4.2_12
Sun ≫ Jre Version 1.4.2_13
Sun ≫ Jre Version 1.4.2_14
Sun ≫ Jre Version 1.4.2_15
Sun ≫ Jre Version 1.4.2_16
Sun ≫ Jre Version 1.4.2_17
Sun ≫ Sdk Version 1.3.0
Sun ≫ Sdk Version 1.3.1_01
Sun ≫ Sdk Version 1.3.1_02
Sun ≫ Sdk Version 1.3.1_03
Sun ≫ Sdk Version 1.3.1_04
Sun ≫ Sdk Version 1.3.1_05
Sun ≫ Sdk Version 1.3.1_06
Sun ≫ Sdk Version 1.3.1_07
Sun ≫ Sdk Version 1.3.1_08
Sun ≫ Sdk Version 1.3.1_09
Sun ≫ Sdk Version 1.3.1_10
Sun ≫ Sdk Version 1.3.1_11
Sun ≫ Sdk Version 1.3.1_12
Sun ≫ Sdk Version 1.3.1_13
Sun ≫ Sdk Version 1.3.1_14
Sun ≫ Sdk Version 1.3.1_15
Sun ≫ Sdk Version 1.3.1_16
Sun ≫ Sdk Version 1.3.1_17
Sun ≫ Sdk Version 1.3.1_18
Sun ≫ Sdk Version 1.3.1_19
Sun ≫ Sdk Version 1.3.1_20
Sun ≫ Sdk Version 1.3.1_21
Sun ≫ Sdk Version 1.3.1_22
Sun ≫ Sdk Version 1.4.2
Sun ≫ Sdk Version 1.4.2_01
Sun ≫ Sdk Version 1.4.2_02
Sun ≫ Sdk Version 1.4.2_03
Sun ≫ Sdk Version 1.4.2_04
Sun ≫ Sdk Version 1.4.2_05
Sun ≫ Sdk Version 1.4.2_06
Sun ≫ Sdk Version 1.4.2_07
Sun ≫ Sdk Version 1.4.2_08
Sun ≫ Sdk Version 1.4.2_09
Sun ≫ Sdk Version 1.4.2_10
Sun ≫ Sdk Version 1.4.2_11
Sun ≫ Sdk Version 1.4.2_12
Sun ≫ Sdk Version 1.4.2_13
Sun ≫ Sdk Version 1.4.2_14
Sun ≫ Sdk Version 1.4.2_15
Sun ≫ Sdk Version 1.4.2_16
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.6% 0.88
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/31497
http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html
http://secunia.com/advisories/32018
http://support.apple.com/kb/HT3178
http://support.apple.com/kb/HT3179
http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html
http://marc.info/?l=bugtraq&m=122331139823057&w=2
http://secunia.com/advisories/31010
Patch
Vendor Advisory
http://secunia.com/advisories/31055
http://secunia.com/advisories/31600
http://secunia.com/advisories/32179
http://secunia.com/advisories/32180
http://secunia.com/advisories/32436
http://secunia.com/advisories/33237
http://secunia.com/advisories/33238
http://secunia.com/advisories/37386
http://security.gentoo.org/glsa/glsa-200911-02.xml
http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm
http://support.avaya.com/elmodocs2/security/ASA-2008-507.htm
http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm
http://www.redhat.com/support/errata/RHSA-2008-0594.html
http://www.redhat.com/support/errata/RHSA-2008-0595.html
http://www.redhat.com/support/errata/RHSA-2008-0906.html
http://www.redhat.com/support/errata/RHSA-2008-1044.html
http://www.redhat.com/support/errata/RHSA-2008-1045.html
http://www.securityfocus.com/archive/1/497041/100/0/threaded
http://www.us-cert.gov/cas/techalerts/TA08-193A.html
US Government Resource
http://www.vmware.com/security/advisories/VMSA-2008-0016.html
http://www.vupen.com/english/advisories/2008/2056/references
http://www.vupen.com/english/advisories/2008/2740
http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00002.html
http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html
http://rhn.redhat.com/errata/RHSA-2008-0955.html
http://secunia.com/advisories/31269
http://secunia.com/advisories/31320
http://secunia.com/advisories/31736
http://secunia.com/advisories/32826
http://secunia.com/advisories/33194
http://secunia.com/advisories/33236
http://secunia.com/advisories/35065
http://sunsolve.sun.com/search/document.do?assetkey=1-66-238968-1
Patch
http://www.redhat.com/support/errata/RHSA-2008-0790.html
http://www.redhat.com/support/errata/RHSA-2008-1043.html
http://www.securityfocus.com/bid/30140
http://www.securitytracker.com/id?1020459
https://exchange.xforce.ibmcloud.com/vulnerabilities/43662
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9565