jvndb-2005-000707
Vulnerability from jvndb
Published
2008-05-21 00:00
Modified
2008-05-21 00:00
Summary
Fujitsu Java Runtime Environment reflection API vulnerability
Details
A vulnerability exists in the reflection API in the Java Runtime Environment that may allow a Java applet to elevate its privileges bypassing its security restrictions.
This problem was reported by Sun Microsystems as a vulnerability in Java Runtime Environment. Fujitsu's product is modified based on this product and is reported to contain a similar vulnerability.
References
Impacted products
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2005/JVNDB-2005-000707.html",
"dc:date": "2008-05-21T00:00+09:00",
"dcterms:issued": "2008-05-21T00:00+09:00",
"dcterms:modified": "2008-05-21T00:00+09:00",
"description": "A vulnerability exists in the reflection API in the Java Runtime Environment that may allow a Java applet to elevate its privileges bypassing its security restrictions.\r\n\r\nThis problem was reported by Sun Microsystems as a vulnerability in Java Runtime Environment. Fujitsu\u0027s product is modified based on this product and is reported to contain a similar vulnerability.",
"link": "https://jvndb.jvn.jp/en/contents/2005/JVNDB-2005-000707.html",
"sec:cpe": [
{
"#text": "cpe:/a:ibm:java_sdk",
"@product": "IBM SDK, Java",
"@vendor": "IBM Corporation",
"@version": "2.2"
},
{
"#text": "cpe:/a:sun:jdk",
"@product": "JDK",
"@vendor": "Sun Microsystems, Inc.",
"@version": "2.2"
},
{
"#text": "cpe:/a:sun:jre",
"@product": "JRE",
"@vendor": "Sun Microsystems, Inc.",
"@version": "2.2"
},
{
"#text": "cpe:/a:sun:sdk",
"@product": "SDK",
"@vendor": "Sun Microsystems, Inc.",
"@version": "2.2"
}
],
"sec:cvss": {
"@score": "7.5",
"@severity": "High",
"@type": "Base",
"@vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"@version": "2.0"
},
"sec:identifier": "JVNDB-2005-000707",
"sec:references": [
{
"#text": "http://jvn.jp/en/jp/JVN15972537/index.html",
"@id": "JVN#15972537",
"@source": "JVN"
},
{
"#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3906",
"@id": "CVE-2005-3906",
"@source": "CVE"
},
{
"#text": "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2005-3906",
"@id": "CVE-2005-3906",
"@source": "NVD"
},
{
"#text": "http://www.kb.cert.org/vuls/id/974188",
"@id": "VU#974188",
"@source": "CERT-VN"
},
{
"#text": "http://secunia.com/advisories/17748/",
"@id": "SA17748",
"@source": "SECUNIA"
},
{
"#text": "http://www.securityfocus.com/bid/15615",
"@id": "15615",
"@source": "BID"
},
{
"#text": "http://www.frsirt.com/english/advisories/2005/2636",
"@id": "FrSIRT/ADV-2005-2636",
"@source": "FRSIRT"
}
],
"title": "Fujitsu Java Runtime Environment reflection API vulnerability"
}
Loading...