Vulnerability-Lookup

RHSA-2008_1025

Vulnerability from csaf_redhat - Published: 2008-12-04 15:45 - Updated: 2024-11-14 10:06

Summary

Red Hat Security Advisory: java-1.5.0-sun security update

Severity

Critical

Notes

Topic: Updated java-1.5.0-sun packages that correct several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team.

Details: The Java Runtime Environment (JRE) contains the software and tools that users need to run applets and applications written using the Java programming language. A vulnerability was found in in Java Web Start. If a user visits a malicious website, an attacker could misuse this flaw to execute arbitrary code. (CVE-2008-2086) Additionally, these packages fix several other vulnerabilities. These are summarized in the "Advance notification of Security Updates for Java SE" from Sun Microsystems. Users of java-1.5.0-sun should upgrade to these updated packages, which correct these issues.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2008-2086

Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or (3) user.home System Properties, aka "Java Web Start File Inclusion" and CR 6694892.

Vendor Fix Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188 https://access.redhat.com/errata/RHSA-2008:1025

CVE-2008-5339

Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to perform network connections to unauthorized hosts via unknown vectors, aka CR 6727079.

CVE-2008-5340

Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications via unknown vectors, aka 6727081.

CVE-2008-5341

Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071.

CVE-2008-5342

Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668.

CVE-2008-5343

Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows remote attackers to make unauthorized network connections and hijack HTTP sessions via a crafted file that validates as both a GIF and a Java JAR file, aka "GIFAR" and CR 6707535.

CVE-2008-5344

Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections via unknown vectors related to applet classloading, aka 6716217.

CVE-2008-5345

Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allows code that is loaded from a local filesystem to read arbitrary files and make unauthorized connections to localhost via unknown vectors.

CVE-2008-5346

Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file.

CVE-2008-5348

Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service (OS resource consumption) via unknown vectors.

CVE-2008-5349

Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows remote attackers to cause a denial of service (CPU consumption) via a crafted RSA public key.

7.1 ()


                        
                          AV:N/AC:M/Au:N/C:N/I:N/A:C

CVE-2008-5350

Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applications and applets to list the contents of the operating user's directory via unknown vectors.

CVE-2008-5351

Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier accepts UTF-8 encodings that are not the "shortest" form, which makes it easier for attackers to bypass protection mechanisms for other applications that rely on shortest-form UTF-8 encodings.

CVE-2008-5352

Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via a Pack200 compressed JAR file that triggers a heap-based buffer overflow.

CVE-2008-5353

The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run untrusted applets and applications in a privileged context, as demonstrated by "deserializing Calendar objects".

CVE-2008-5354

Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary code via a JAR file with a long Main-Class manifest entry.

CVE-2008-5356

Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file.

7.5 ()


                        
                          AV:N/AC:L/Au:N/C:P/I:P/A:P

CVE-2008-5357

Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file, which triggers a heap-based buffer overflow.

7.5 ()


                        
                          AV:N/AC:L/Au:N/C:P/I:P/A:P

CVE-2008-5359

Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a ConvolveOp operation in the Java AWT library.

CVE-2008-5360

Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious JAR files via unknown vectors.

References

URL

Category

	https://access.redhat.com/errata/RHSA-2008:1025	self
	https://access.redhat.com/security/updates/classi…	external
	http://blogs.sun.com/security/entry/advance_notif…	external
	https://bugzilla.redhat.com/show_bug.cgi?id=474556	external
	https://security.access.redhat.com/data/csaf/v2/a…	self
	https://access.redhat.com/security/cve/CVE-2008-2086	self
	https://bugzilla.redhat.com/show_bug.cgi?id=474556	external
	https://www.cve.org/CVERecord?id=CVE-2008-2086	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-2086	external
	https://access.redhat.com/security/cve/CVE-2008-5339	self
	https://bugzilla.redhat.com/show_bug.cgi?id=474772	external
	https://www.cve.org/CVERecord?id=CVE-2008-5339	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5339	external
	https://access.redhat.com/security/cve/CVE-2008-5340	self
	https://bugzilla.redhat.com/show_bug.cgi?id=474773	external
	https://www.cve.org/CVERecord?id=CVE-2008-5340	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5340	external
	https://access.redhat.com/security/cve/CVE-2008-5341	self
	https://bugzilla.redhat.com/show_bug.cgi?id=474786	external
	https://www.cve.org/CVERecord?id=CVE-2008-5341	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5341	external
	https://access.redhat.com/security/cve/CVE-2008-5342	self
	https://bugzilla.redhat.com/show_bug.cgi?id=474789	external
	https://www.cve.org/CVERecord?id=CVE-2008-5342	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5342	external
	https://access.redhat.com/security/cve/CVE-2008-5343	self
	https://bugzilla.redhat.com/show_bug.cgi?id=474790	external
	https://www.cve.org/CVERecord?id=CVE-2008-5343	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5343	external
	https://access.redhat.com/security/cve/CVE-2008-5344	self
	https://bugzilla.redhat.com/show_bug.cgi?id=474792	external
	https://www.cve.org/CVERecord?id=CVE-2008-5344	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5344	external
	https://access.redhat.com/security/cve/CVE-2008-5345	self
	https://bugzilla.redhat.com/show_bug.cgi?id=474793	external
	https://www.cve.org/CVERecord?id=CVE-2008-5345	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5345	external
	https://access.redhat.com/security/cve/CVE-2008-5346	self
	https://bugzilla.redhat.com/show_bug.cgi?id=474794	external
	https://www.cve.org/CVERecord?id=CVE-2008-5346	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5346	external
	https://access.redhat.com/security/cve/CVE-2008-5348	self
	https://bugzilla.redhat.com/show_bug.cgi?id=472209	external
	https://www.cve.org/CVERecord?id=CVE-2008-5348	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5348	external
	https://access.redhat.com/security/cve/CVE-2008-5349	self
	https://bugzilla.redhat.com/show_bug.cgi?id=472206	external
	https://www.cve.org/CVERecord?id=CVE-2008-5349	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5349	external
	https://access.redhat.com/security/cve/CVE-2008-5350	self
	https://bugzilla.redhat.com/show_bug.cgi?id=472201	external
	https://www.cve.org/CVERecord?id=CVE-2008-5350	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5350	external
	https://access.redhat.com/security/cve/CVE-2008-5351	self
	https://bugzilla.redhat.com/show_bug.cgi?id=472213	external
	https://www.cve.org/CVERecord?id=CVE-2008-5351	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5351	external
	https://access.redhat.com/security/cve/CVE-2008-5352	self
	https://bugzilla.redhat.com/show_bug.cgi?id=472233	external
	https://www.cve.org/CVERecord?id=CVE-2008-5352	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5352	external
	https://access.redhat.com/security/cve/CVE-2008-5353	self
	https://bugzilla.redhat.com/show_bug.cgi?id=472224	external
	https://www.cve.org/CVERecord?id=CVE-2008-5353	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5353	external
	https://access.redhat.com/security/cve/CVE-2008-5354	self
	https://bugzilla.redhat.com/show_bug.cgi?id=472228	external
	https://www.cve.org/CVERecord?id=CVE-2008-5354	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5354	external
	https://access.redhat.com/security/cve/CVE-2008-5356	self
	https://bugzilla.redhat.com/show_bug.cgi?id=472218	external
	https://www.cve.org/CVERecord?id=CVE-2008-5356	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5356	external
	https://access.redhat.com/security/cve/CVE-2008-5357	self
	https://bugzilla.redhat.com/show_bug.cgi?id=472231	external
	https://www.cve.org/CVERecord?id=CVE-2008-5357	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5357	external
	https://access.redhat.com/security/cve/CVE-2008-5359	self
	https://bugzilla.redhat.com/show_bug.cgi?id=472212	external
	https://www.cve.org/CVERecord?id=CVE-2008-5359	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5359	external
	https://access.redhat.com/security/cve/CVE-2008-5360	self
	https://bugzilla.redhat.com/show_bug.cgi?id=472211	external
	https://www.cve.org/CVERecord?id=CVE-2008-5360	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5360	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated java-1.5.0-sun packages that correct several security issues are\nnow available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The Java Runtime Environment (JRE) contains the software and tools that\nusers need to run applets and applications written using the Java\nprogramming language. \n\nA vulnerability was found in in Java Web Start. If a user visits a\nmalicious website, an attacker could misuse this flaw to execute arbitrary\ncode. (CVE-2008-2086)\n\nAdditionally, these packages fix several other vulnerabilities. These are\nsummarized in the \"Advance notification of Security Updates for Java SE\"\nfrom Sun Microsystems. \n\nUsers of java-1.5.0-sun should upgrade to these updated packages, which\ncorrect these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2008:1025",
        "url": "https://access.redhat.com/errata/RHSA-2008:1025"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "http://blogs.sun.com/security/entry/advance_notification_of_security_updates3",
        "url": "http://blogs.sun.com/security/entry/advance_notification_of_security_updates3"
      },
      {
        "category": "external",
        "summary": "474556",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=474556"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_1025.json"
      }
    ],
    "title": "Red Hat Security Advisory: java-1.5.0-sun security update",
    "tracking": {
      "current_release_date": "2024-11-14T10:06:55+00:00",
      "generator": {
        "date": "2024-11-14T10:06:55+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.0"
        }
      },
      "id": "RHSA-2008:1025",
      "initial_release_date": "2008-12-04T15:45:00+00:00",
      "revision_history": [
        {
          "date": "2008-12-04T15:45:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2008-12-04T10:45:47+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-14T10:06:55+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
                  "product_id": "5Client-Supplementary",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:5::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
                  "product_id": "5Server-Supplementary",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:5::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 4 Extras",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 4 Extras",
                  "product_id": "4AS-LACD",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Desktop version 4 Extras",
                "product": {
                  "name": "Red Hat Desktop version 4 Extras",
                  "product_id": "4Desktop-LACD",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 4 Extras",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 4 Extras",
                  "product_id": "4ES-LACD",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 4 Extras",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 4 Extras",
                  "product_id": "4WS-LACD",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux Supplementary"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
                "product": {
                  "name": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
                  "product_id": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-sun-jdbc@1.5.0.17-1jpp.2.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
                "product": {
                  "name": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
                  "product_id": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.17-1jpp.2.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
                "product": {
                  "name": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
                  "product_id": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-sun-src@1.5.0.17-1jpp.2.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
                "product": {
                  "name": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
                  "product_id": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-sun-demo@1.5.0.17-1jpp.2.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
                "product": {
                  "name": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
                  "product_id": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.17-1jpp.2.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
                "product": {
                  "name": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
                  "product_id": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-sun-src@1.5.0.17-1jpp.2.el4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
                "product": {
                  "name": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
                  "product_id": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-sun-demo@1.5.0.17-1jpp.2.el4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
                "product": {
                  "name": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
                  "product_id": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.17-1jpp.2.el4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
                "product": {
                  "name": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
                  "product_id": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.17-1jpp.2.el4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
                "product": {
                  "name": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
                  "product_id": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-sun-jdbc@1.5.0.17-1jpp.2.el4?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
                "product": {
                  "name": "java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
                  "product_id": "java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-sun-plugin@1.5.0.17-1jpp.2.el5?arch=i586"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
                "product": {
                  "name": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
                  "product_id": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-sun-jdbc@1.5.0.17-1jpp.2.el5?arch=i586"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
                "product": {
                  "name": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
                  "product_id": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.17-1jpp.2.el5?arch=i586"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
                "product": {
                  "name": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
                  "product_id": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-sun-src@1.5.0.17-1jpp.2.el5?arch=i586"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
                "product": {
                  "name": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
                  "product_id": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-sun-demo@1.5.0.17-1jpp.2.el5?arch=i586"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
                "product": {
                  "name": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
                  "product_id": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.17-1jpp.2.el5?arch=i586"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
                "product": {
                  "name": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
                  "product_id": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-sun-src@1.5.0.17-1jpp.2.el4?arch=i586"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
                "product": {
                  "name": "java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
                  "product_id": "java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-sun-plugin@1.5.0.17-1jpp.2.el4?arch=i586"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
                "product": {
                  "name": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
                  "product_id": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-sun-demo@1.5.0.17-1jpp.2.el4?arch=i586"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
                "product": {
                  "name": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
                  "product_id": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.17-1jpp.2.el4?arch=i586"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
                "product": {
                  "name": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
                  "product_id": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.17-1jpp.2.el4?arch=i586"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
                "product": {
                  "name": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
                  "product_id": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-sun-jdbc@1.5.0.17-1jpp.2.el4?arch=i586"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
          "product_id": "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586"
        },
        "product_reference": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
        "relates_to_product_reference": "4AS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
          "product_id": "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64"
        },
        "product_reference": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
        "relates_to_product_reference": "4AS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
          "product_id": "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586"
        },
        "product_reference": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
        "relates_to_product_reference": "4AS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
          "product_id": "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64"
        },
        "product_reference": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
        "relates_to_product_reference": "4AS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
          "product_id": "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586"
        },
        "product_reference": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
        "relates_to_product_reference": "4AS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
          "product_id": "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64"
        },
        "product_reference": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
        "relates_to_product_reference": "4AS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
          "product_id": "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586"
        },
        "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
        "relates_to_product_reference": "4AS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
          "product_id": "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64"
        },
        "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
        "relates_to_product_reference": "4AS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
          "product_id": "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586"
        },
        "product_reference": "java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
        "relates_to_product_reference": "4AS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
          "product_id": "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586"
        },
        "product_reference": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
        "relates_to_product_reference": "4AS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
          "product_id": "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64"
        },
        "product_reference": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
        "relates_to_product_reference": "4AS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Desktop version 4 Extras",
          "product_id": "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586"
        },
        "product_reference": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
        "relates_to_product_reference": "4Desktop-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
          "product_id": "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64"
        },
        "product_reference": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
        "relates_to_product_reference": "4Desktop-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Desktop version 4 Extras",
          "product_id": "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586"
        },
        "product_reference": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
        "relates_to_product_reference": "4Desktop-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
          "product_id": "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64"
        },
        "product_reference": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
        "relates_to_product_reference": "4Desktop-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Desktop version 4 Extras",
          "product_id": "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586"
        },
        "product_reference": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
        "relates_to_product_reference": "4Desktop-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
          "product_id": "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64"
        },
        "product_reference": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
        "relates_to_product_reference": "4Desktop-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Desktop version 4 Extras",
          "product_id": "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586"
        },
        "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
        "relates_to_product_reference": "4Desktop-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
          "product_id": "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64"
        },
        "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
        "relates_to_product_reference": "4Desktop-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Desktop version 4 Extras",
          "product_id": "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586"
        },
        "product_reference": "java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
        "relates_to_product_reference": "4Desktop-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Desktop version 4 Extras",
          "product_id": "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586"
        },
        "product_reference": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
        "relates_to_product_reference": "4Desktop-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
          "product_id": "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64"
        },
        "product_reference": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
        "relates_to_product_reference": "4Desktop-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
          "product_id": "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586"
        },
        "product_reference": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
        "relates_to_product_reference": "4ES-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
          "product_id": "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64"
        },
        "product_reference": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
        "relates_to_product_reference": "4ES-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
          "product_id": "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586"
        },
        "product_reference": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
        "relates_to_product_reference": "4ES-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
          "product_id": "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64"
        },
        "product_reference": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
        "relates_to_product_reference": "4ES-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
          "product_id": "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586"
        },
        "product_reference": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
        "relates_to_product_reference": "4ES-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
          "product_id": "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64"
        },
        "product_reference": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
        "relates_to_product_reference": "4ES-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
          "product_id": "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586"
        },
        "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
        "relates_to_product_reference": "4ES-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
          "product_id": "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64"
        },
        "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
        "relates_to_product_reference": "4ES-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
          "product_id": "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586"
        },
        "product_reference": "java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
        "relates_to_product_reference": "4ES-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
          "product_id": "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586"
        },
        "product_reference": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
        "relates_to_product_reference": "4ES-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
          "product_id": "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64"
        },
        "product_reference": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
        "relates_to_product_reference": "4ES-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
          "product_id": "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586"
        },
        "product_reference": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
        "relates_to_product_reference": "4WS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
          "product_id": "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64"
        },
        "product_reference": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
        "relates_to_product_reference": "4WS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
          "product_id": "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586"
        },
        "product_reference": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
        "relates_to_product_reference": "4WS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
          "product_id": "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64"
        },
        "product_reference": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
        "relates_to_product_reference": "4WS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
          "product_id": "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586"
        },
        "product_reference": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
        "relates_to_product_reference": "4WS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
          "product_id": "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64"
        },
        "product_reference": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
        "relates_to_product_reference": "4WS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
          "product_id": "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586"
        },
        "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
        "relates_to_product_reference": "4WS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
          "product_id": "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64"
        },
        "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
        "relates_to_product_reference": "4WS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
          "product_id": "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586"
        },
        "product_reference": "java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
        "relates_to_product_reference": "4WS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
          "product_id": "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586"
        },
        "product_reference": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
        "relates_to_product_reference": "4WS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
          "product_id": "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64"
        },
        "product_reference": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
        "relates_to_product_reference": "4WS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
          "product_id": "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586"
        },
        "product_reference": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
        "relates_to_product_reference": "5Client-Supplementary"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
          "product_id": "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64"
        },
        "product_reference": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
        "relates_to_product_reference": "5Client-Supplementary"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
          "product_id": "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586"
        },
        "product_reference": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
        "relates_to_product_reference": "5Client-Supplementary"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
          "product_id": "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64"
        },
        "product_reference": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
        "relates_to_product_reference": "5Client-Supplementary"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
          "product_id": "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586"
        },
        "product_reference": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
        "relates_to_product_reference": "5Client-Supplementary"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
          "product_id": "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64"
        },
        "product_reference": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
        "relates_to_product_reference": "5Client-Supplementary"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
          "product_id": "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586"
        },
        "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
        "relates_to_product_reference": "5Client-Supplementary"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
          "product_id": "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64"
        },
        "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
        "relates_to_product_reference": "5Client-Supplementary"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
          "product_id": "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586"
        },
        "product_reference": "java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
        "relates_to_product_reference": "5Client-Supplementary"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
          "product_id": "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586"
        },
        "product_reference": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
        "relates_to_product_reference": "5Client-Supplementary"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
          "product_id": "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
        },
        "product_reference": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
        "relates_to_product_reference": "5Client-Supplementary"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586"
        },
        "product_reference": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
        "relates_to_product_reference": "5Server-Supplementary"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64"
        },
        "product_reference": "java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
        "relates_to_product_reference": "5Server-Supplementary"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586"
        },
        "product_reference": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
        "relates_to_product_reference": "5Server-Supplementary"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64"
        },
        "product_reference": "java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
        "relates_to_product_reference": "5Server-Supplementary"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586"
        },
        "product_reference": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
        "relates_to_product_reference": "5Server-Supplementary"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64"
        },
        "product_reference": "java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
        "relates_to_product_reference": "5Server-Supplementary"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586"
        },
        "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
        "relates_to_product_reference": "5Server-Supplementary"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64"
        },
        "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
        "relates_to_product_reference": "5Server-Supplementary"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586"
        },
        "product_reference": "java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
        "relates_to_product_reference": "5Server-Supplementary"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586"
        },
        "product_reference": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
        "relates_to_product_reference": "5Server-Supplementary"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
        },
        "product_reference": "java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
        "relates_to_product_reference": "5Server-Supplementary"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2008-2086",
      "discovery_date": "2008-12-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "474556"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or (3) user.home System Properties, aka \"Java Web Start File Inclusion\" and CR 6694892.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Java Web Start File Inclusion via System Properties Override",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-2086"
        },
        {
          "category": "external",
          "summary": "RHBZ#474556",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=474556"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-2086",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-2086"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-2086",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-2086"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-12-04T15:45:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:1025"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Java Web Start File Inclusion via System Properties Override"
    },
    {
      "cve": "CVE-2008-5339",
      "discovery_date": "2008-12-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "474772"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to perform network connections to unauthorized hosts via unknown vectors, aka CR 6727079.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "JavaWebStart allows unauthorized network connections",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5339"
        },
        {
          "category": "external",
          "summary": "RHBZ#474772",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=474772"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5339",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5339"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5339",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5339"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-12-04T15:45:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:1025"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "JavaWebStart allows unauthorized network connections"
    },
    {
      "cve": "CVE-2008-5340",
      "discovery_date": "2008-12-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "474773"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications via unknown vectors, aka 6727081.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Java WebStart privilege escalation",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5340"
        },
        {
          "category": "external",
          "summary": "RHBZ#474773",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=474773"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5340",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5340"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5340",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5340"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-12-04T15:45:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:1025"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Java WebStart privilege escalation"
    },
    {
      "cve": "CVE-2008-5341",
      "discovery_date": "2008-12-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "474786"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Java Web Start exposes username and the pathname of the JWS cache",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5341"
        },
        {
          "category": "external",
          "summary": "RHBZ#474786",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=474786"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5341",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5341"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5341",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5341"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-12-04T15:45:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:1025"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Java Web Start exposes username and the pathname of the JWS cache"
    },
    {
      "cve": "CVE-2008-5342",
      "discovery_date": "2008-12-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "474789"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Java Web Start BasicService displays local files in the browser",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5342"
        },
        {
          "category": "external",
          "summary": "RHBZ#474789",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=474789"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5342",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5342"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5342",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5342"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-12-04T15:45:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:1025"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Java Web Start BasicService displays local files in the browser"
    },
    {
      "cve": "CVE-2008-5343",
      "discovery_date": "2008-12-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "474790"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows remote attackers to make unauthorized network connections and hijack HTTP sessions via a crafted file that validates as both a GIF and a Java JAR file, aka \"GIFAR\" and CR 6707535.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Java WebStart allows hidden code privilege escalation",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5343"
        },
        {
          "category": "external",
          "summary": "RHBZ#474790",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=474790"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5343",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5343"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5343",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5343"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-12-04T15:45:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:1025"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Java WebStart allows hidden code privilege escalation"
    },
    {
      "cve": "CVE-2008-5344",
      "discovery_date": "2008-12-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "474792"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections via unknown vectors related to applet classloading, aka 6716217.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Java WebStart unprivileged local file and network access",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5344"
        },
        {
          "category": "external",
          "summary": "RHBZ#474792",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=474792"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5344",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5344"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5344",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5344"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-12-04T15:45:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:1025"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Java WebStart unprivileged local file and network access"
    },
    {
      "cve": "CVE-2008-5345",
      "discovery_date": "2008-12-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "474793"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allows code that is loaded from a local filesystem to read arbitrary files and make unauthorized connections to localhost via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "JRE allows unauthorized file access and connections to localhost",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5345"
        },
        {
          "category": "external",
          "summary": "RHBZ#474793",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=474793"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5345",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5345"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5345",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5345"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-12-04T15:45:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:1025"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "JRE allows unauthorized file access and connections to localhost"
    },
    {
      "cve": "CVE-2008-5346",
      "discovery_date": "2008-12-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "474794"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "JRE allows unauthorized memory read access via a crafted ZIP file",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5346"
        },
        {
          "category": "external",
          "summary": "RHBZ#474794",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=474794"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5346",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5346"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5346",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5346"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-12-04T15:45:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:1025"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "JRE allows unauthorized memory read access via a crafted ZIP file"
    },
    {
      "cve": "CVE-2008-5348",
      "discovery_date": "2008-11-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "472209"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service (OS resource consumption) via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK Denial-Of-Service in kerberos authentication (6588160)",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5348"
        },
        {
          "category": "external",
          "summary": "RHBZ#472209",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472209"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5348",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5348"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5348",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5348"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-12-04T15:45:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:1025"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK Denial-Of-Service in kerberos authentication (6588160)"
    },
    {
      "cve": "CVE-2008-5349",
      "discovery_date": "2008-11-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "472206"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows remote attackers to cause a denial of service (CPU consumption) via a crafted RSA public key.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK RSA public key length denial-of-service (6497740)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5349"
        },
        {
          "category": "external",
          "summary": "RHBZ#472206",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472206"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5349",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5349"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5349",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5349"
        }
      ],
      "release_date": "2008-12-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-12-04T15:45:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:1025"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.1,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "products": [
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK RSA public key length denial-of-service (6497740)"
    },
    {
      "cve": "CVE-2008-5350",
      "discovery_date": "2008-11-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "472201"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applications and applets to list the contents of the operating user\u0027s directory via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK allows to list files within the user home directory (6484091)",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5350"
        },
        {
          "category": "external",
          "summary": "RHBZ#472201",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472201"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5350",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5350"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5350",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5350"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-12-04T15:45:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:1025"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK allows to list files within the user home directory (6484091)"
    },
    {
      "cve": "CVE-2008-5351",
      "discovery_date": "2008-11-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "472213"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier accepts UTF-8 encodings that are not the \"shortest\" form, which makes it easier for attackers to bypass protection mechanisms for other applications that rely on shortest-form UTF-8 encodings.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK UTF-8 decoder accepts non-shortest form sequences (4486841)",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5351"
        },
        {
          "category": "external",
          "summary": "RHBZ#472213",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472213"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5351",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5351"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5351",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5351"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-12-04T15:45:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:1025"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "OpenJDK UTF-8 decoder accepts non-shortest form sequences (4486841)"
    },
    {
      "cve": "CVE-2008-5352",
      "discovery_date": "2008-11-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "472233"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via a Pack200 compressed JAR file that triggers a heap-based buffer overflow.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK Jar200 Decompression buffer overflow (6755943)",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5352"
        },
        {
          "category": "external",
          "summary": "RHBZ#472233",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472233"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5352",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5352"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5352",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5352"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-12-04T15:45:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:1025"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK Jar200 Decompression buffer overflow (6755943)"
    },
    {
      "cve": "CVE-2008-5353",
      "discovery_date": "2008-11-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "472224"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run untrusted applets and applications in a privileged context, as demonstrated by \"deserializing Calendar objects\".",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK calendar object deserialization allows privilege escalation (6734167)",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5353"
        },
        {
          "category": "external",
          "summary": "RHBZ#472224",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472224"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5353",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5353"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5353",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5353"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-12-04T15:45:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:1025"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK calendar object deserialization allows privilege escalation (6734167)"
    },
    {
      "cve": "CVE-2008-5354",
      "discovery_date": "2008-11-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "472228"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary code via a JAR file with a long Main-Class manifest entry.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK Privilege escalation in command line applications (6733959)",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5354"
        },
        {
          "category": "external",
          "summary": "RHBZ#472228",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472228"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5354",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5354"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5354",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5354"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-12-04T15:45:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:1025"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK Privilege escalation in command line applications (6733959)"
    },
    {
      "cve": "CVE-2008-5356",
      "discovery_date": "2008-11-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "472218"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK Font processing vulnerability (6733336)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5356"
        },
        {
          "category": "external",
          "summary": "RHBZ#472218",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472218"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5356",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5356"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5356",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5356"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-12-04T15:45:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:1025"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK Font processing vulnerability (6733336)"
    },
    {
      "cve": "CVE-2008-5357",
      "discovery_date": "2008-11-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "472231"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file, which triggers a heap-based buffer overflow.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK Truetype Font processing vulnerability (6751322)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5357"
        },
        {
          "category": "external",
          "summary": "RHBZ#472231",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472231"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5357",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5357"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5357",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5357"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-12-04T15:45:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:1025"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK Truetype Font processing vulnerability (6751322)"
    },
    {
      "cve": "CVE-2008-5359",
      "discovery_date": "2008-11-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "472212"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a ConvolveOp operation in the Java AWT library.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK Buffer overflow in image processing (6726779)",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5359"
        },
        {
          "category": "external",
          "summary": "RHBZ#472212",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472212"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5359",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5359"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5359",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5359"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-12-04T15:45:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:1025"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK Buffer overflow in image processing (6726779)"
    },
    {
      "cve": "CVE-2008-5360",
      "discovery_date": "2008-11-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "472211"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious JAR files via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK temporary files have guessable file names (6721753)",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
          "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
          "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
          "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
          "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5360"
        },
        {
          "category": "external",
          "summary": "RHBZ#472211",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472211"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5360",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5360"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5360",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5360"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-12-04T15:45:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el4.x86_64",
            "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.i586",
            "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el4.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.17-1jpp.2.el5.x86_64",
            "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.i586",
            "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.17-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:1025"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "OpenJDK temporary files have guessable file names (6721753)"
    }
  ]
}

CVE-2008-5359 (GCVE-0-2008-5359)

Vulnerability from cvelistv5 – Published: 2008-12-05 11:00 – Updated: 2024-08-07 10:49

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/34259	third-party-advisoryx_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/0672	vdb-entryx_refsource_VUPEN
	http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/33015	third-party-advisoryx_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://secunia.com/advisories/34889	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34233	third-party-advisoryx_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
	http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisoryx_refsource_GENTOO
	http://www116.nortel.com/pub/repository/CLARIFY/D…	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://secunia.com/advisories/38539	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34972	third-party-advisoryx_refsource_SECUNIA
	https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/35065	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33528	third-party-advisoryx_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisoryx_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://www.vupen.com/english/advisories/2008/3339	vdb-entryx_refsource_VUPEN
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://www.redhat.com/support/errata/RHSA-2009-04…	vendor-advisoryx_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisoryx_refsource_CERT
	http://secunia.com/advisories/33709	third-party-advisoryx_refsource_SECUNIA
	http://support.nortel.com/go/main.jsp?cscat=BLTND…	x_refsource_CONFIRM
	http://secunia.com/advisories/34605	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://www.zerodayinitiative.com/advisories/ZDI-08-080/	x_refsource_MISC
	http://secunia.com/advisories/33187	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32991	third-party-advisoryx_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/32608	vdb-entryx_refsource_BID
	http://secunia.com/advisories/37386	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33710	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2008-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.380Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "244987",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1"
          },
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "34259",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34259"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34889"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "jre-image-processing-privilege-escalation(47048)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47048"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "SUSE-SR:2009:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "33528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33528"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "RHSA-2009:0445",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
          },
          {
            "name": "oval:org.mitre.oval:def:5841",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5841"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "name": "33709",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33709"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "RHSA-2009:0015",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.zerodayinitiative.com/advisories/ZDI-08-080/"
          },
          {
            "name": "33187",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33187"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm"
          },
          {
            "name": "32608",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32608"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a ConvolveOp operation in the Java AWT library."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "244987",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1"
        },
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "34259",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34259"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34889"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "jre-image-processing-privilege-escalation(47048)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47048"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "SUSE-SR:2009:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "33528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33528"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "RHSA-2009:0445",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
        },
        {
          "name": "oval:org.mitre.oval:def:5841",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5841"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "name": "33709",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33709"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "RHSA-2009:0015",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.zerodayinitiative.com/advisories/ZDI-08-080/"
        },
        {
          "name": "33187",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33187"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm"
        },
        {
          "name": "32608",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32608"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5359",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a ConvolveOp operation in the Java AWT library."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "244987",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1"
            },
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "34259",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34259"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34889"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "jre-image-processing-privilege-escalation(47048)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47048"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "SUSE-SR:2009:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "33528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33528"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "RHSA-2009:0445",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
            },
            {
              "name": "oval:org.mitre.oval:def:5841",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5841"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "33709",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33709"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "RHSA-2009:0015",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
            },
            {
              "name": "http://www.zerodayinitiative.com/advisories/ZDI-08-080/",
              "refsource": "MISC",
              "url": "http://www.zerodayinitiative.com/advisories/ZDI-08-080/"
            },
            {
              "name": "33187",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33187"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm"
            },
            {
              "name": "32608",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32608"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5359",
    "datePublished": "2008-12-05T11:00:00.000Z",
    "dateReserved": "2008-12-04T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:49:12.380Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-5340 (GCVE-0-2008-5340)

Vulnerability from cvelistv5 – Published: 2008-12-05 11:00 – Updated: 2024-08-07 10:49

Summary

Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications via unknown vectors, aka 6727081.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.vupen.com/english/advisories/2009/0672	vdb-entryx_refsource_VUPEN
	http://secunia.com/advisories/34447	third-party-advisoryx_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/33015	third-party-advisoryx_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://secunia.com/advisories/34889	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34233	third-party-advisoryx_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisoryx_refsource_GENTOO
	http://www116.nortel.com/pub/repository/CLARIFY/D…	x_refsource_CONFIRM
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2009-03…	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://secunia.com/advisories/38539	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/35065	third-party-advisoryx_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/0424	vdb-entryx_refsource_VUPEN
	http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisoryx_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://www.vupen.com/english/advisories/2008/3339	vdb-entryx_refsource_VUPEN
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://www.redhat.com/support/errata/RHSA-2009-04…	vendor-advisoryx_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisoryx_refsource_CERT
	http://support.nortel.com/go/main.jsp?cscat=BLTND…	x_refsource_CONFIRM
	http://secunia.com/advisories/34605	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/32991	third-party-advisoryx_refsource_SECUNIA
	http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://secunia.com/advisories/37386	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33710	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2008-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.541Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "34447",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34447"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34889"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "oval:org.mitre.oval:def:6627",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6627"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm"
          },
          {
            "name": "RHSA-2009:0369",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "ADV-2009-0424",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0424"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "RHSA-2009:0445",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "APPLE-SA-2009-02-12",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html"
          },
          {
            "name": "244988",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications via unknown vectors, aka 6727081."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "34447",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34447"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34889"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "oval:org.mitre.oval:def:6627",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6627"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm"
        },
        {
          "name": "RHSA-2009:0369",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "ADV-2009-0424",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0424"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "RHSA-2009:0445",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "APPLE-SA-2009-02-12",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html"
        },
        {
          "name": "244988",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5340",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications via unknown vectors, aka 6727081."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "34447",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34447"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34889"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "oval:org.mitre.oval:def:6627",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6627"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm"
            },
            {
              "name": "RHSA-2009:0369",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "ADV-2009-0424",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0424"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "RHSA-2009:0445",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "APPLE-SA-2009-02-12",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html"
            },
            {
              "name": "244988",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5340",
    "datePublished": "2008-12-05T11:00:00.000Z",
    "dateReserved": "2008-12-04T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:49:12.541Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-5342 (GCVE-0-2008-5342)

Vulnerability from cvelistv5 – Published: 2008-12-05 11:00 – Updated: 2024-08-07 10:49

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.vupen.com/english/advisories/2009/0672	vdb-entryx_refsource_VUPEN
	http://osvdb.org/50514	vdb-entryx_refsource_OSVDB
	http://secunia.com/advisories/34447	third-party-advisoryx_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/33015	third-party-advisoryx_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://secunia.com/advisories/34889	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34233	third-party-advisoryx_refsource_SECUNIA
	http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisoryx_refsource_GENTOO
	http://www116.nortel.com/pub/repository/CLARIFY/D…	x_refsource_CONFIRM
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2009-03…	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://secunia.com/advisories/38539	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/35065	third-party-advisoryx_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/0424	vdb-entryx_refsource_VUPEN
	http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisoryx_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://www.vupen.com/english/advisories/2008/3339	vdb-entryx_refsource_VUPEN
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://www.redhat.com/support/errata/RHSA-2009-04…	vendor-advisoryx_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisoryx_refsource_CERT
	http://support.nortel.com/go/main.jsp?cscat=BLTND…	x_refsource_CONFIRM
	http://secunia.com/advisories/34605	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://secunia.com/advisories/32991	third-party-advisoryx_refsource_SECUNIA
	http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://secunia.com/advisories/37386	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33710	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2008-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.631Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "50514",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/50514"
          },
          {
            "name": "34447",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34447"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34889"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm"
          },
          {
            "name": "RHSA-2009:0369",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "ADV-2009-0424",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0424"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "RHSA-2009:0445",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "oval:org.mitre.oval:def:6359",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6359"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "APPLE-SA-2009-02-12",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html"
          },
          {
            "name": "244988",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "50514",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/50514"
        },
        {
          "name": "34447",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34447"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34889"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm"
        },
        {
          "name": "RHSA-2009:0369",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "ADV-2009-0424",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0424"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "RHSA-2009:0445",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "oval:org.mitre.oval:def:6359",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6359"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "APPLE-SA-2009-02-12",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html"
        },
        {
          "name": "244988",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5342",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "50514",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/50514"
            },
            {
              "name": "34447",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34447"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34889"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm"
            },
            {
              "name": "RHSA-2009:0369",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "ADV-2009-0424",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0424"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "RHSA-2009:0445",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "oval:org.mitre.oval:def:6359",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6359"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "APPLE-SA-2009-02-12",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html"
            },
            {
              "name": "244988",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5342",
    "datePublished": "2008-12-05T11:00:00.000Z",
    "dateReserved": "2008-12-04T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:49:12.631Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-5350 (GCVE-0-2008-5350)

Vulnerability from cvelistv5 – Published: 2008-12-05 11:00 – Updated: 2024-08-07 10:49

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/34259	third-party-advisoryx_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/0672	vdb-entryx_refsource_VUPEN
	http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisoryx_refsource_REDHAT
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://secunia.com/advisories/33015	third-party-advisoryx_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://secunia.com/advisories/34889	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34233	third-party-advisoryx_refsource_SECUNIA
	http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisoryx_refsource_GENTOO
	http://www116.nortel.com/pub/repository/CLARIFY/D…	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://secunia.com/advisories/38539	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34972	third-party-advisoryx_refsource_SECUNIA
	https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/35065	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33528	third-party-advisoryx_refsource_SECUNIA
	http://osvdb.org/50503	vdb-entryx_refsource_OSVDB
	http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisoryx_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://www.vupen.com/english/advisories/2008/3339	vdb-entryx_refsource_VUPEN
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://www.securitytracker.com/id?1021310	vdb-entryx_refsource_SECTRACK
	http://www.redhat.com/support/errata/RHSA-2009-04…	vendor-advisoryx_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisoryx_refsource_CERT
	http://secunia.com/advisories/33709	third-party-advisoryx_refsource_SECUNIA
	http://support.nortel.com/go/main.jsp?cscat=BLTND…	x_refsource_CONFIRM
	http://secunia.com/advisories/34605	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/32991	third-party-advisoryx_refsource_SECUNIA
	http://www.securityfocus.com/bid/32608	vdb-entryx_refsource_BID
	http://secunia.com/advisories/37386	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33710	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2008-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.689Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "34259",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34259"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "246266",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246266-1"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34889"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "SUSE-SR:2009:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "33528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33528"
          },
          {
            "name": "50503",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/50503"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "1021310",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021310"
          },
          {
            "name": "RHSA-2009:0445",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "oval:org.mitre.oval:def:6424",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6424"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "name": "33709",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33709"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "RHSA-2009:0015",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "32608",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32608"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applications and applets to list the contents of the operating user\u0027s directory via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "34259",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34259"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "246266",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246266-1"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34889"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "SUSE-SR:2009:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "33528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33528"
        },
        {
          "name": "50503",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/50503"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "1021310",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021310"
        },
        {
          "name": "RHSA-2009:0445",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "oval:org.mitre.oval:def:6424",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6424"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "name": "33709",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33709"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "RHSA-2009:0015",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "32608",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32608"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5350",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applications and applets to list the contents of the operating user\u0027s directory via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "34259",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34259"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "246266",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246266-1"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34889"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "SUSE-SR:2009:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "33528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33528"
            },
            {
              "name": "50503",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/50503"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "1021310",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021310"
            },
            {
              "name": "RHSA-2009:0445",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "oval:org.mitre.oval:def:6424",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6424"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "33709",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33709"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "RHSA-2009:0015",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "32608",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32608"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5350",
    "datePublished": "2008-12-05T11:00:00.000Z",
    "dateReserved": "2008-12-04T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:49:12.689Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-5360 (GCVE-0-2008-5360)

Vulnerability from cvelistv5 – Published: 2008-12-05 11:00 – Updated: 2024-08-07 10:49

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/34259	third-party-advisoryx_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/0672	vdb-entryx_refsource_VUPEN
	http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/33015	third-party-advisoryx_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://secunia.com/advisories/34889	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34233	third-party-advisoryx_refsource_SECUNIA
	http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisoryx_refsource_GENTOO
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://www116.nortel.com/pub/repository/CLARIFY/D…	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://secunia.com/advisories/38539	third-party-advisoryx_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://secunia.com/advisories/34972	third-party-advisoryx_refsource_SECUNIA
	https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/35065	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33528	third-party-advisoryx_refsource_SECUNIA
	http://www.securitytracker.com/id?1021316	vdb-entryx_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisoryx_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://www.vupen.com/english/advisories/2008/3339	vdb-entryx_refsource_VUPEN
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
	http://www.redhat.com/support/errata/RHSA-2009-04…	vendor-advisoryx_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisoryx_refsource_CERT
	http://secunia.com/advisories/33709	third-party-advisoryx_refsource_SECUNIA
	http://support.nortel.com/go/main.jsp?cscat=BLTND…	x_refsource_CONFIRM
	http://secunia.com/advisories/34605	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/33187	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32991	third-party-advisoryx_refsource_SECUNIA
	http://www.securityfocus.com/bid/32608	vdb-entryx_refsource_BID
	http://secunia.com/advisories/37386	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33710	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2008-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.483Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-484.htm"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "34259",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34259"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34889"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "name": "244986",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244986-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "name": "oval:org.mitre.oval:def:6596",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6596"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "SUSE-SR:2009:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "33528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33528"
          },
          {
            "name": "1021316",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021316"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "jre-guessable-file-unauth-access(47045)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47045"
          },
          {
            "name": "RHSA-2009:0445",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "name": "33709",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33709"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "RHSA-2009:0015",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
          },
          {
            "name": "33187",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33187"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "32608",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32608"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious JAR files via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-484.htm"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "34259",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34259"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34889"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "name": "244986",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244986-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "name": "oval:org.mitre.oval:def:6596",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6596"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "SUSE-SR:2009:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "33528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33528"
        },
        {
          "name": "1021316",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021316"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "jre-guessable-file-unauth-access(47045)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47045"
        },
        {
          "name": "RHSA-2009:0445",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "name": "33709",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33709"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "RHSA-2009:0015",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
        },
        {
          "name": "33187",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33187"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "32608",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32608"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5360",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious JAR files via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2008-484.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-484.htm"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "34259",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34259"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34889"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "244986",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244986-1"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "oval:org.mitre.oval:def:6596",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6596"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "SUSE-SR:2009:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "33528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33528"
            },
            {
              "name": "1021316",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021316"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "jre-guessable-file-unauth-access(47045)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47045"
            },
            {
              "name": "RHSA-2009:0445",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "33709",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33709"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "RHSA-2009:0015",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
            },
            {
              "name": "33187",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33187"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "32608",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32608"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5360",
    "datePublished": "2008-12-05T11:00:00.000Z",
    "dateReserved": "2008-12-04T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:49:12.483Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-5348 (GCVE-0-2008-5348)

Vulnerability from cvelistv5 – Published: 2008-12-05 11:00 – Updated: 2024-08-07 10:49

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/34259	third-party-advisoryx_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/0672	vdb-entryx_refsource_VUPEN
	http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/33015	third-party-advisoryx_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://secunia.com/advisories/34889	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34233	third-party-advisoryx_refsource_SECUNIA
	http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisoryx_refsource_GENTOO
	http://www116.nortel.com/pub/repository/CLARIFY/D…	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://secunia.com/advisories/38539	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34972	third-party-advisoryx_refsource_SECUNIA
	https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/35065	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33528	third-party-advisoryx_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisoryx_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://www.redhat.com/support/errata/RHSA-2009-04…	vendor-advisoryx_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisoryx_refsource_CERT
	http://secunia.com/advisories/33709	third-party-advisoryx_refsource_SECUNIA
	http://support.nortel.com/go/main.jsp?cscat=BLTND…	x_refsource_CONFIRM
	http://secunia.com/advisories/34605	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/32991	third-party-advisoryx_refsource_SECUNIA
	http://osvdb.org/50505	vdb-entryx_refsource_OSVDB
	http://www.securityfocus.com/bid/32608	vdb-entryx_refsource_BID
	http://secunia.com/advisories/37386	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33710	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2008-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.294Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "246346",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246346-1"
          },
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "34259",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34259"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34889"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "1019797",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019797.1-1"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "SUSE-SR:2009:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "33528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33528"
          },
          {
            "name": "oval:org.mitre.oval:def:6549",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6549"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "RHSA-2009:0445",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "name": "33709",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33709"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "RHSA-2009:0015",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "50505",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/50505"
          },
          {
            "name": "32608",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32608"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service (OS resource consumption) via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "246346",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246346-1"
        },
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "34259",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34259"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34889"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "1019797",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019797.1-1"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "SUSE-SR:2009:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "33528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33528"
        },
        {
          "name": "oval:org.mitre.oval:def:6549",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6549"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "RHSA-2009:0445",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "name": "33709",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33709"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "RHSA-2009:0015",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "50505",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/50505"
        },
        {
          "name": "32608",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32608"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5348",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service (OS resource consumption) via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "246346",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246346-1"
            },
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "34259",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34259"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34889"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "1019797",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019797.1-1"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "SUSE-SR:2009:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "33528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33528"
            },
            {
              "name": "oval:org.mitre.oval:def:6549",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6549"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "RHSA-2009:0445",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "33709",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33709"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "RHSA-2009:0015",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "50505",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/50505"
            },
            {
              "name": "32608",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32608"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5348",
    "datePublished": "2008-12-05T11:00:00.000Z",
    "dateReserved": "2008-12-04T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:49:12.294Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-5344 (GCVE-0-2008-5344)

Vulnerability from cvelistv5 – Published: 2008-12-05 11:00 – Updated: 2024-08-07 10:49

Summary

Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections via unknown vectors related to applet classloading, aka 6716217.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://osvdb.org/50513	vdb-entryx_refsource_OSVDB
	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.vupen.com/english/advisories/2009/0672	vdb-entryx_refsource_VUPEN
	http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/33015	third-party-advisoryx_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://secunia.com/advisories/34889	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34233	third-party-advisoryx_refsource_SECUNIA
	http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisoryx_refsource_GENTOO
	http://www116.nortel.com/pub/repository/CLARIFY/D…	x_refsource_CONFIRM
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://secunia.com/advisories/38539	third-party-advisoryx_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
	http://secunia.com/advisories/35065	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33528	third-party-advisoryx_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisoryx_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://www.vupen.com/english/advisories/2008/3339	vdb-entryx_refsource_VUPEN
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://www.redhat.com/support/errata/RHSA-2009-04…	vendor-advisoryx_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisoryx_refsource_CERT
	http://support.nortel.com/go/main.jsp?cscat=BLTND…	x_refsource_CONFIRM
	http://secunia.com/advisories/34605	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/32991	third-party-advisoryx_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://secunia.com/advisories/37386	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33710	third-party-advisoryx_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL

Date Public ?

2008-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.674Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50513",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/50513"
          },
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34889"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "name": "jre-appletclass-security-bypass(47057)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47057"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "33528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33528"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "RHSA-2009:0445",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "RHSA-2009:0015",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "244988",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          },
          {
            "name": "oval:org.mitre.oval:def:6249",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6249"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections via unknown vectors related to applet classloading, aka 6716217."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50513",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/50513"
        },
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34889"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "name": "jre-appletclass-security-bypass(47057)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47057"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "33528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33528"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "RHSA-2009:0445",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "RHSA-2009:0015",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "244988",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        },
        {
          "name": "oval:org.mitre.oval:def:6249",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6249"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5344",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections via unknown vectors related to applet classloading, aka 6716217."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50513",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/50513"
            },
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34889"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "jre-appletclass-security-bypass(47057)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47057"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "33528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33528"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "RHSA-2009:0445",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "RHSA-2009:0015",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "244988",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            },
            {
              "name": "oval:org.mitre.oval:def:6249",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6249"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5344",
    "datePublished": "2008-12-05T11:00:00.000Z",
    "dateReserved": "2008-12-04T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:49:12.674Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-5356 (GCVE-0-2008-5356)

Vulnerability from cvelistv5 – Published: 2008-12-05 11:00 – Updated: 2024-08-07 10:49

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/34259	third-party-advisoryx_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/0672	vdb-entryx_refsource_VUPEN
	http://osvdb.org/50516	vdb-entryx_refsource_OSVDB
	http://secunia.com/advisories/34447	third-party-advisoryx_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/33015	third-party-advisoryx_refsource_SECUNIA
	http://labs.idefense.com/intelligence/vulnerabili…	third-party-advisoryx_refsource_IDEFENSE
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://secunia.com/advisories/34233	third-party-advisoryx_refsource_SECUNIA
	http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisoryx_refsource_GENTOO
	http://www116.nortel.com/pub/repository/CLARIFY/D…	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2009-03…	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://secunia.com/advisories/38539	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34972	third-party-advisoryx_refsource_SECUNIA
	https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/35065	third-party-advisoryx_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisoryx_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://www.vupen.com/english/advisories/2008/3339	vdb-entryx_refsource_VUPEN
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisoryx_refsource_CERT
	http://support.nortel.com/go/main.jsp?cscat=BLTND…	x_refsource_CONFIRM
	http://secunia.com/advisories/34605	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
	http://secunia.com/advisories/33187	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32991	third-party-advisoryx_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/32608	vdb-entryx_refsource_BID
	http://secunia.com/advisories/37386	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33710	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2008-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.830Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "244987",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1"
          },
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "34259",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34259"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "50516",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/50516"
          },
          {
            "name": "34447",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34447"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "name": "20081204 Sun Java JRE TrueType Font Parsing Heap Overflow Vulnerability",
            "tags": [
              "third-party-advisory",
              "x_refsource_IDEFENSE",
              "x_transferred"
            ],
            "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=757"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "name": "RHSA-2009:0369",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "SUSE-SR:2009:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "oval:org.mitre.oval:def:6494",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6494"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "jre-truetype-font-bo(47103)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47103"
          },
          {
            "name": "33187",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33187"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm"
          },
          {
            "name": "32608",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32608"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "244987",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1"
        },
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "34259",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34259"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "50516",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/50516"
        },
        {
          "name": "34447",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34447"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "name": "20081204 Sun Java JRE TrueType Font Parsing Heap Overflow Vulnerability",
          "tags": [
            "third-party-advisory",
            "x_refsource_IDEFENSE"
          ],
          "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=757"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "name": "RHSA-2009:0369",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "SUSE-SR:2009:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "oval:org.mitre.oval:def:6494",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6494"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "jre-truetype-font-bo(47103)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47103"
        },
        {
          "name": "33187",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33187"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm"
        },
        {
          "name": "32608",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32608"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5356",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "244987",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1"
            },
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "34259",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34259"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "50516",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/50516"
            },
            {
              "name": "34447",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34447"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "20081204 Sun Java JRE TrueType Font Parsing Heap Overflow Vulnerability",
              "refsource": "IDEFENSE",
              "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=757"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "RHSA-2009:0369",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "SUSE-SR:2009:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "oval:org.mitre.oval:def:6494",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6494"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "jre-truetype-font-bo(47103)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47103"
            },
            {
              "name": "33187",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33187"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm"
            },
            {
              "name": "32608",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32608"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5356",
    "datePublished": "2008-12-05T11:00:00.000Z",
    "dateReserved": "2008-12-04T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:49:12.830Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-5339 (GCVE-0-2008-5339)

Vulnerability from cvelistv5 – Published: 2008-12-05 11:00 – Updated: 2024-08-07 10:49

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://www.vupen.com/english/advisories/2009/0672	vdb-entryx_refsource_VUPEN
	http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/33015	third-party-advisoryx_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://secunia.com/advisories/34889	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34233	third-party-advisoryx_refsource_SECUNIA
	http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisoryx_refsource_GENTOO
	http://www116.nortel.com/pub/repository/CLARIFY/D…	x_refsource_CONFIRM
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://secunia.com/advisories/38539	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/35065	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33528	third-party-advisoryx_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisoryx_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://www.vupen.com/english/advisories/2008/3339	vdb-entryx_refsource_VUPEN
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://www.redhat.com/support/errata/RHSA-2009-04…	vendor-advisoryx_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisoryx_refsource_CERT
	http://support.nortel.com/go/main.jsp?cscat=BLTND…	x_refsource_CONFIRM
	http://secunia.com/advisories/34605	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/32991	third-party-advisoryx_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://secunia.com/advisories/37386	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33710	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2008-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.319Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "oval:org.mitre.oval:def:6409",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6409"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34889"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "33528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33528"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "RHSA-2009:0445",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "RHSA-2009:0015",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "244988",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to perform network connections to unauthorized hosts via unknown vectors, aka CR 6727079."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "oval:org.mitre.oval:def:6409",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6409"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34889"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "33528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33528"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "RHSA-2009:0445",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "RHSA-2009:0015",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "244988",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5339",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to perform network connections to unauthorized hosts via unknown vectors, aka CR 6727079."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "oval:org.mitre.oval:def:6409",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6409"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34889"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "33528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33528"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "RHSA-2009:0445",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "RHSA-2009:0015",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "244988",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5339",
    "datePublished": "2008-12-05T11:00:00.000Z",
    "dateReserved": "2008-12-04T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:49:12.319Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-5351 (GCVE-0-2008-5351)

Vulnerability from cvelistv5 – Published: 2008-12-05 11:00 – Updated: 2024-08-07 10:49

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://osvdb.org/50502	vdb-entryx_refsource_OSVDB
	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/34259	third-party-advisoryx_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://www.vupen.com/english/advisories/2009/0672	vdb-entryx_refsource_VUPEN
	http://secunia.com/advisories/34447	third-party-advisoryx_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/33015	third-party-advisoryx_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://secunia.com/advisories/34889	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34233	third-party-advisoryx_refsource_SECUNIA
	http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisoryx_refsource_GENTOO
	http://www116.nortel.com/pub/repository/CLARIFY/D…	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2009-03…	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://secunia.com/advisories/38539	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34972	third-party-advisoryx_refsource_SECUNIA
	https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/35065	third-party-advisoryx_refsource_SECUNIA
	http://www.securitytracker.com/id?1021311	vdb-entryx_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisoryx_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://www.vupen.com/english/advisories/2008/3339	vdb-entryx_refsource_VUPEN
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://www.redhat.com/support/errata/RHSA-2009-04…	vendor-advisoryx_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisoryx_refsource_CERT
	http://secunia.com/advisories/33709	third-party-advisoryx_refsource_SECUNIA
	http://support.nortel.com/go/main.jsp?cscat=BLTND…	x_refsource_CONFIRM
	http://secunia.com/advisories/34605	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/32991	third-party-advisoryx_refsource_SECUNIA
	http://www.securityfocus.com/bid/32608	vdb-entryx_refsource_BID
	http://secunia.com/advisories/37386	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33710	third-party-advisoryx_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL

Date Public ?

2008-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.371Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50502",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/50502"
          },
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "34259",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34259"
          },
          {
            "name": "245246",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-245246-1"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "34447",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34447"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34889"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "name": "RHSA-2009:0369",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "SUSE-SR:2009:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "1021311",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021311"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "RHSA-2009:0445",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "name": "33709",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33709"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "32608",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32608"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          },
          {
            "name": "oval:org.mitre.oval:def:6212",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6212"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier accepts UTF-8 encodings that are not the \"shortest\" form, which makes it easier for attackers to bypass protection mechanisms for other applications that rely on shortest-form UTF-8 encodings."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50502",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/50502"
        },
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "34259",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34259"
        },
        {
          "name": "245246",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-245246-1"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "34447",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34447"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34889"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "name": "RHSA-2009:0369",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "SUSE-SR:2009:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "1021311",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021311"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "RHSA-2009:0445",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "name": "33709",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33709"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "32608",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32608"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        },
        {
          "name": "oval:org.mitre.oval:def:6212",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6212"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5351",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier accepts UTF-8 encodings that are not the \"shortest\" form, which makes it easier for attackers to bypass protection mechanisms for other applications that rely on shortest-form UTF-8 encodings."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50502",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/50502"
            },
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "34259",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34259"
            },
            {
              "name": "245246",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-245246-1"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "34447",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34447"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34889"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "RHSA-2009:0369",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "SUSE-SR:2009:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "1021311",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021311"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "RHSA-2009:0445",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "33709",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33709"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "32608",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32608"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            },
            {
              "name": "oval:org.mitre.oval:def:6212",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6212"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5351",
    "datePublished": "2008-12-05T11:00:00.000Z",
    "dateReserved": "2008-12-04T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:49:12.371Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-2086 (GCVE-0-2008-2086)

Vulnerability from cvelistv5 – Published: 2008-12-05 02:00 – Updated: 2024-08-07 08:49

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://www.redhat.com/support/errata/RHSA-2008-10…	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.vupen.com/english/advisories/2009/0672	vdb-entryx_refsource_VUPEN
	http://www.securityfocus.com/bid/32620	vdb-entryx_refsource_BID
	http://securityreason.com/securityalert/4693	third-party-advisoryx_refsource_SREASON
	http://secunia.com/advisories/33015	third-party-advisoryx_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://secunia.com/advisories/34889	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34233	third-party-advisoryx_refsource_SECUNIA
	http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisoryx_refsource_GENTOO
	http://www116.nortel.com/pub/repository/CLARIFY/D…	x_refsource_CONFIRM
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://secunia.com/advisories/38539	third-party-advisoryx_refsource_SECUNIA
	http://osvdb.org/50510	vdb-entryx_refsource_OSVDB
	http://secunia.com/advisories/35065	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33528	third-party-advisoryx_refsource_SECUNIA
	http://www.vsecurity.com/bulletins/advisories/200…	x_refsource_MISC
	http://www.vupen.com/english/advisories/2009/0424	vdb-entryx_refsource_VUPEN
	http://www.securitytracker.com/id?1021318	vdb-entryx_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisoryx_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://www.redhat.com/support/errata/RHSA-2009-04…	vendor-advisoryx_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://www.securityfocus.com/archive/1/498907/100…	mailing-listx_refsource_BUGTRAQ
	http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisoryx_refsource_CERT
	http://support.nortel.com/go/main.jsp?cscat=BLTND…	x_refsource_CONFIRM
	http://secunia.com/advisories/34605	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/32991	third-party-advisoryx_refsource_SECUNIA
	http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://secunia.com/advisories/37386	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33710	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2008-12-04 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T08:49:57.423Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-1018.html"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "32620",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32620"
          },
          {
            "name": "4693",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/4693"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34889"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm"
          },
          {
            "name": "oval:org.mitre.oval:def:5601",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5601"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "name": "50510",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/50510"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "33528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33528"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.vsecurity.com/bulletins/advisories/2008/JWS-props.txt"
          },
          {
            "name": "ADV-2009-0424",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0424"
          },
          {
            "name": "1021318",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021318"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "RHSA-2009:0445",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "20081204 CVE-2008-2086: Java Web Start File Inclusion via System PropertiesOverride",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/498907/100/0/threaded"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "RHSA-2009:0015",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "APPLE-SA-2009-02-12",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html"
          },
          {
            "name": "244988",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-04T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or (3) user.home System Properties, aka \"Java Web Start File Inclusion\" and CR 6694892."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-1018.html"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "32620",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32620"
        },
        {
          "name": "4693",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/4693"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34889"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm"
        },
        {
          "name": "oval:org.mitre.oval:def:5601",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5601"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "name": "50510",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/50510"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "33528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33528"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.vsecurity.com/bulletins/advisories/2008/JWS-props.txt"
        },
        {
          "name": "ADV-2009-0424",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0424"
        },
        {
          "name": "1021318",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021318"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "RHSA-2009:0445",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "20081204 CVE-2008-2086: Java Web Start File Inclusion via System PropertiesOverride",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/498907/100/0/threaded"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "RHSA-2009:0015",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "APPLE-SA-2009-02-12",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html"
        },
        {
          "name": "244988",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-2086",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or (3) user.home System Properties, aka \"Java Web Start File Inclusion\" and CR 6694892."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-1018.html"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "32620",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32620"
            },
            {
              "name": "4693",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/4693"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34889"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm"
            },
            {
              "name": "oval:org.mitre.oval:def:5601",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5601"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "50510",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/50510"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "33528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33528"
            },
            {
              "name": "http://www.vsecurity.com/bulletins/advisories/2008/JWS-props.txt",
              "refsource": "MISC",
              "url": "http://www.vsecurity.com/bulletins/advisories/2008/JWS-props.txt"
            },
            {
              "name": "ADV-2009-0424",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0424"
            },
            {
              "name": "1021318",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021318"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "RHSA-2009:0445",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "20081204 CVE-2008-2086: Java Web Start File Inclusion via System PropertiesOverride",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/498907/100/0/threaded"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "RHSA-2009:0015",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "APPLE-SA-2009-02-12",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html"
            },
            {
              "name": "244988",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-2086",
    "datePublished": "2008-12-05T02:00:00.000Z",
    "dateReserved": "2008-05-06T00:00:00.000Z",
    "dateUpdated": "2024-08-07T08:49:57.423Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-5352 (GCVE-0-2008-5352)

Vulnerability from cvelistv5 – Published: 2008-12-05 11:00 – Updated: 2024-08-07 10:49

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://secunia.com/advisories/34259	third-party-advisoryx_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/33015	third-party-advisoryx_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisoryx_refsource_GENTOO
	http://www116.nortel.com/pub/repository/CLARIFY/D…	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/34972	third-party-advisoryx_refsource_SECUNIA
	https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/33528	third-party-advisoryx_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisoryx_refsource_REDHAT
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://www.vupen.com/english/advisories/2008/3339	vdb-entryx_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisoryx_refsource_CERT
	http://secunia.com/advisories/33709	third-party-advisoryx_refsource_SECUNIA
	http://support.nortel.com/go/main.jsp?cscat=BLTND…	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://osvdb.org/50501	vdb-entryx_refsource_OSVDB
	http://secunia.com/advisories/32991	third-party-advisoryx_refsource_SECUNIA
	http://labs.idefense.com/intelligence/vulnerabili…	third-party-advisoryx_refsource_IDEFENSE
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://www.securityfocus.com/bid/32608	vdb-entryx_refsource_BID
	http://www.securitytracker.com/id?1021312	vdb-entryx_refsource_SECTRACK
	http://secunia.com/advisories/37386	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33710	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2008-12-04 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.368Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "34259",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34259"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "SUSE-SR:2009:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
          },
          {
            "name": "33528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33528"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "244992",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244992-1"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "name": "33709",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33709"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "RHSA-2009:0015",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
          },
          {
            "name": "50501",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/50501"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "20081204 Sun Java JRE Pack200 Decompression Integer Overflow Vulnerability",
            "tags": [
              "third-party-advisory",
              "x_refsource_IDEFENSE",
              "x_transferred"
            ],
            "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=759"
          },
          {
            "name": "oval:org.mitre.oval:def:6383",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6383"
          },
          {
            "name": "32608",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32608"
          },
          {
            "name": "1021312",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021312"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-04T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via a Pack200 compressed JAR file that triggers a heap-based buffer overflow."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "34259",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34259"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "SUSE-SR:2009:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
        },
        {
          "name": "33528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33528"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "244992",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244992-1"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "name": "33709",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33709"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "RHSA-2009:0015",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
        },
        {
          "name": "50501",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/50501"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "20081204 Sun Java JRE Pack200 Decompression Integer Overflow Vulnerability",
          "tags": [
            "third-party-advisory",
            "x_refsource_IDEFENSE"
          ],
          "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=759"
        },
        {
          "name": "oval:org.mitre.oval:def:6383",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6383"
        },
        {
          "name": "32608",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32608"
        },
        {
          "name": "1021312",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021312"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5352",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via a Pack200 compressed JAR file that triggers a heap-based buffer overflow."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "34259",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34259"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "SUSE-SR:2009:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
            },
            {
              "name": "33528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33528"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "244992",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244992-1"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "33709",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33709"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "RHSA-2009:0015",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
            },
            {
              "name": "50501",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/50501"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "20081204 Sun Java JRE Pack200 Decompression Integer Overflow Vulnerability",
              "refsource": "IDEFENSE",
              "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=759"
            },
            {
              "name": "oval:org.mitre.oval:def:6383",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6383"
            },
            {
              "name": "32608",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32608"
            },
            {
              "name": "1021312",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021312"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5352",
    "datePublished": "2008-12-05T11:00:00.000Z",
    "dateReserved": "2008-12-04T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:49:12.368Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-5353 (GCVE-0-2008-5353)

Vulnerability from cvelistv5 – Published: 2008-12-05 11:00 – Updated: 2024-08-07 10:49

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/34259	third-party-advisoryx_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/0672	vdb-entryx_refsource_VUPEN
	http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/33015	third-party-advisoryx_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://secunia.com/advisories/34889	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34233	third-party-advisoryx_refsource_SECUNIA
	http://www.securitytracker.com/id?1021313	vdb-entryx_refsource_SECTRACK
	http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisoryx_refsource_GENTOO
	http://www116.nortel.com/pub/repository/CLARIFY/D…	x_refsource_CONFIRM
	http://blog.cr0.org/2009/05/write-once-own-everyo…	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://secunia.com/advisories/38539	third-party-advisoryx_refsource_SECUNIA
	http://landonf.bikemonkey.org/code/macosx/CVE-200…	x_refsource_MISC
	http://secunia.com/advisories/34972	third-party-advisoryx_refsource_SECUNIA
	https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/35065	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33528	third-party-advisoryx_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://www.securityfocus.com/archive/1/503797/100…	mailing-listx_refsource_BUGTRAQ
	http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisoryx_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://www.vupen.com/english/advisories/2008/3339	vdb-entryx_refsource_VUPEN
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://www.redhat.com/support/errata/RHSA-2009-04…	vendor-advisoryx_refsource_REDHAT
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisoryx_refsource_CERT
	http://secunia.com/advisories/33709	third-party-advisoryx_refsource_SECUNIA
	http://support.nortel.com/go/main.jsp?cscat=BLTND…	x_refsource_CONFIRM
	http://secunia.com/advisories/34605	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/35118	third-party-advisoryx_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1391	vdb-entryx_refsource_VUPEN
	http://secunia.com/advisories/32991	third-party-advisoryx_refsource_SECUNIA
	http://osvdb.org/50500	vdb-entryx_refsource_OSVDB
	http://www.securityfocus.com/bid/32608	vdb-entryx_refsource_BID
	http://secunia.com/advisories/37386	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33710	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2008-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.329Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "34259",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34259"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34889"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "1021313",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021313"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://blog.cr0.org/2009/05/write-once-own-everyone.html"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://landonf.bikemonkey.org/code/macosx/CVE-2008-5353.20090519.html"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "SUSE-SR:2009:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "33528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33528"
          },
          {
            "name": "oval:org.mitre.oval:def:6511",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6511"
          },
          {
            "name": "20090524 Hardening OSX against CVE-2008-5353",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/503797/100/0/threaded"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "RHSA-2009:0445",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
          },
          {
            "name": "244991",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244991-1"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "name": "33709",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33709"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "RHSA-2009:0015",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
          },
          {
            "name": "35118",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35118"
          },
          {
            "name": "ADV-2009-1391",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1391"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "50500",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/50500"
          },
          {
            "name": "32608",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32608"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run untrusted applets and applications in a privileged context, as demonstrated by \"deserializing Calendar objects\"."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "34259",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34259"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34889"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "1021313",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021313"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://blog.cr0.org/2009/05/write-once-own-everyone.html"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://landonf.bikemonkey.org/code/macosx/CVE-2008-5353.20090519.html"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "SUSE-SR:2009:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "33528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33528"
        },
        {
          "name": "oval:org.mitre.oval:def:6511",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6511"
        },
        {
          "name": "20090524 Hardening OSX against CVE-2008-5353",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/503797/100/0/threaded"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "RHSA-2009:0445",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
        },
        {
          "name": "244991",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244991-1"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "name": "33709",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33709"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "RHSA-2009:0015",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
        },
        {
          "name": "35118",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35118"
        },
        {
          "name": "ADV-2009-1391",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1391"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "50500",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/50500"
        },
        {
          "name": "32608",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32608"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5353",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run untrusted applets and applications in a privileged context, as demonstrated by \"deserializing Calendar objects\"."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "34259",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34259"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34889"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "1021313",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021313"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "http://blog.cr0.org/2009/05/write-once-own-everyone.html",
              "refsource": "MISC",
              "url": "http://blog.cr0.org/2009/05/write-once-own-everyone.html"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "http://landonf.bikemonkey.org/code/macosx/CVE-2008-5353.20090519.html",
              "refsource": "MISC",
              "url": "http://landonf.bikemonkey.org/code/macosx/CVE-2008-5353.20090519.html"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "SUSE-SR:2009:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "33528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33528"
            },
            {
              "name": "oval:org.mitre.oval:def:6511",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6511"
            },
            {
              "name": "20090524 Hardening OSX against CVE-2008-5353",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/503797/100/0/threaded"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "RHSA-2009:0445",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
            },
            {
              "name": "244991",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244991-1"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "33709",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33709"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "RHSA-2009:0015",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
            },
            {
              "name": "35118",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35118"
            },
            {
              "name": "ADV-2009-1391",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1391"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "50500",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/50500"
            },
            {
              "name": "32608",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32608"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5353",
    "datePublished": "2008-12-05T11:00:00.000Z",
    "dateReserved": "2008-12-04T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:49:12.329Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-5349 (GCVE-0-2008-5349)

Vulnerability from cvelistv5 – Published: 2008-12-05 11:00 – Updated: 2024-08-07 10:49

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://h20000.www2.hp.com/bizsupport/TechSupport/…	vendor-advisoryx_refsource_HP
	http://secunia.com/advisories/34259	third-party-advisoryx_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
	http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/33015	third-party-advisoryx_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://www.securityfocus.com/archive/1/504010/100…	vendor-advisoryx_refsource_HP
	http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisoryx_refsource_GENTOO
	http://www116.nortel.com/pub/repository/CLARIFY/D…	x_refsource_CONFIRM
	http://secunia.com/advisories/35255	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34972	third-party-advisoryx_refsource_SECUNIA
	https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.vupen.com/english/advisories/2009/1426	vdb-entryx_refsource_VUPEN
	http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisoryx_refsource_REDHAT
	http://www.vupen.com/english/advisories/2008/3339	vdb-entryx_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisoryx_refsource_CERT
	http://secunia.com/advisories/33709	third-party-advisoryx_refsource_SECUNIA
	http://h20000.www2.hp.com/bizsupport/TechSupport/…	vendor-advisoryx_refsource_HP
	http://support.nortel.com/go/main.jsp?cscat=BLTND…	x_refsource_CONFIRM
	http://osvdb.org/50504	vdb-entryx_refsource_OSVDB
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://secunia.com/advisories/32991	third-party-advisoryx_refsource_SECUNIA
	http://www.securityfocus.com/bid/32608	vdb-entryx_refsource_BID
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/37386	third-party-advisoryx_refsource_SECUNIA
	http://www.securitytracker.com/id?1021309	vdb-entryx_refsource_SECTRACK

Date Public ?

2008-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.357Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSRT090058",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01745133"
          },
          {
            "name": "34259",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34259"
          },
          {
            "name": "sun-jre-rsa-dos(47064)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47064"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-491.htm"
          },
          {
            "name": "HPSBUX02429",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/504010/100/0/threaded"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "name": "35255",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35255"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "SUSE-SR:2009:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
          },
          {
            "name": "ADV-2009-1426",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1426"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "name": "33709",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33709"
          },
          {
            "name": "HPSBMA02429",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01745133"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "50504",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/50504"
          },
          {
            "name": "oval:org.mitre.oval:def:5843",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5843"
          },
          {
            "name": "SUSE-SR:2009:016",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html"
          },
          {
            "name": "246286",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246286-1"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "32608",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32608"
          },
          {
            "name": "SUSE-SR:2009:017",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "1021309",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021309"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows remote attackers to cause a denial of service (CPU consumption) via a crafted RSA public key."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SSRT090058",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01745133"
        },
        {
          "name": "34259",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34259"
        },
        {
          "name": "sun-jre-rsa-dos(47064)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47064"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-491.htm"
        },
        {
          "name": "HPSBUX02429",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://www.securityfocus.com/archive/1/504010/100/0/threaded"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "name": "35255",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35255"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "SUSE-SR:2009:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
        },
        {
          "name": "ADV-2009-1426",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1426"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "name": "33709",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33709"
        },
        {
          "name": "HPSBMA02429",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01745133"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "50504",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/50504"
        },
        {
          "name": "oval:org.mitre.oval:def:5843",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5843"
        },
        {
          "name": "SUSE-SR:2009:016",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html"
        },
        {
          "name": "246286",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246286-1"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "32608",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32608"
        },
        {
          "name": "SUSE-SR:2009:017",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "1021309",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021309"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5349",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows remote attackers to cause a denial of service (CPU consumption) via a crafted RSA public key."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSRT090058",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01745133"
            },
            {
              "name": "34259",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34259"
            },
            {
              "name": "sun-jre-rsa-dos(47064)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47064"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2008-491.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-491.htm"
            },
            {
              "name": "HPSBUX02429",
              "refsource": "HP",
              "url": "http://www.securityfocus.com/archive/1/504010/100/0/threaded"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "35255",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35255"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "SUSE-SR:2009:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
            },
            {
              "name": "ADV-2009-1426",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1426"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "33709",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33709"
            },
            {
              "name": "HPSBMA02429",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01745133"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "50504",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/50504"
            },
            {
              "name": "oval:org.mitre.oval:def:5843",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5843"
            },
            {
              "name": "SUSE-SR:2009:016",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html"
            },
            {
              "name": "246286",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246286-1"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "32608",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32608"
            },
            {
              "name": "SUSE-SR:2009:017",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "1021309",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021309"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5349",
    "datePublished": "2008-12-05T11:00:00.000Z",
    "dateReserved": "2008-12-04T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:49:12.357Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-5346 (GCVE-0-2008-5346)

Vulnerability from cvelistv5 – Published: 2008-12-05 11:00 – Updated: 2024-08-07 10:49

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/33015	third-party-advisoryx_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://secunia.com/advisories/34889	third-party-advisoryx_refsource_SECUNIA
	http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisoryx_refsource_GENTOO
	http://www116.nortel.com/pub/repository/CLARIFY/D…	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/34972	third-party-advisoryx_refsource_SECUNIA
	https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/35065	third-party-advisoryx_refsource_SECUNIA
	http://www.securitytracker.com/id?1021306	vdb-entryx_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisoryx_refsource_REDHAT
	http://www.vupen.com/english/advisories/2008/3339	vdb-entryx_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2009-04…	vendor-advisoryx_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisoryx_refsource_CERT
	http://support.nortel.com/go/main.jsp?cscat=BLTND…	x_refsource_CONFIRM
	http://secunia.com/advisories/34605	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://secunia.com/advisories/32991	third-party-advisoryx_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://osvdb.org/50507	vdb-entryx_refsource_OSVDB
	http://secunia.com/advisories/37386	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33710	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2008-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.392Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34889"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "1021306",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021306"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "RHSA-2009:0445",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "oval:org.mitre.oval:def:6629",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6629"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "246386",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246386-1"
          },
          {
            "name": "50507",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/50507"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34889"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "1021306",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021306"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "RHSA-2009:0445",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "oval:org.mitre.oval:def:6629",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6629"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "246386",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246386-1"
        },
        {
          "name": "50507",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/50507"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5346",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34889"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "1021306",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021306"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "RHSA-2009:0445",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "oval:org.mitre.oval:def:6629",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6629"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "246386",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246386-1"
            },
            {
              "name": "50507",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/50507"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5346",
    "datePublished": "2008-12-05T11:00:00.000Z",
    "dateReserved": "2008-12-04T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:49:12.392Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-5357 (GCVE-0-2008-5357)

Vulnerability from cvelistv5 – Published: 2008-12-05 11:00 – Updated: 2024-08-07 10:49

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://osvdb.org/50517	vdb-entryx_refsource_OSVDB
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/34259	third-party-advisoryx_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/0672	vdb-entryx_refsource_VUPEN
	http://labs.idefense.com/intelligence/vulnerabili…	third-party-advisoryx_refsource_IDEFENSE
	http://secunia.com/advisories/34447	third-party-advisoryx_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/33015	third-party-advisoryx_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://secunia.com/advisories/34233	third-party-advisoryx_refsource_SECUNIA
	http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisoryx_refsource_GENTOO
	http://www116.nortel.com/pub/repository/CLARIFY/D…	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2009-03…	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://secunia.com/advisories/38539	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34972	third-party-advisoryx_refsource_SECUNIA
	https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/35065	third-party-advisoryx_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisoryx_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://www.vupen.com/english/advisories/2008/3339	vdb-entryx_refsource_VUPEN
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisoryx_refsource_CERT
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://support.nortel.com/go/main.jsp?cscat=BLTND…	x_refsource_CONFIRM
	https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
	http://secunia.com/advisories/34605	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/33187	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32991	third-party-advisoryx_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/32608	vdb-entryx_refsource_BID
	http://secunia.com/advisories/37386	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33710	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2008-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.352Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "244987",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1"
          },
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "50517",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/50517"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "34259",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34259"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "20081204 Sun Java JRE TrueType Font Parsing Integer Overflow Vulnerability",
            "tags": [
              "third-party-advisory",
              "x_refsource_IDEFENSE",
              "x_transferred"
            ],
            "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=760"
          },
          {
            "name": "34447",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34447"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "name": "RHSA-2009:0369",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "SUSE-SR:2009:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "name": "oval:org.mitre.oval:def:6505",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6505"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "jre-font-privilege-escalation(47050)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47050"
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "33187",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33187"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm"
          },
          {
            "name": "32608",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32608"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file, which triggers a heap-based buffer overflow."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "244987",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1"
        },
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "50517",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/50517"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "34259",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34259"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "20081204 Sun Java JRE TrueType Font Parsing Integer Overflow Vulnerability",
          "tags": [
            "third-party-advisory",
            "x_refsource_IDEFENSE"
          ],
          "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=760"
        },
        {
          "name": "34447",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34447"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "name": "RHSA-2009:0369",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "SUSE-SR:2009:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "name": "oval:org.mitre.oval:def:6505",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6505"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "jre-font-privilege-escalation(47050)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47050"
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "33187",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33187"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm"
        },
        {
          "name": "32608",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32608"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5357",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file, which triggers a heap-based buffer overflow."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "244987",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1"
            },
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "50517",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/50517"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "34259",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34259"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "20081204 Sun Java JRE TrueType Font Parsing Integer Overflow Vulnerability",
              "refsource": "IDEFENSE",
              "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=760"
            },
            {
              "name": "34447",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34447"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "RHSA-2009:0369",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "SUSE-SR:2009:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "oval:org.mitre.oval:def:6505",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6505"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "jre-font-privilege-escalation(47050)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47050"
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "33187",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33187"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm"
            },
            {
              "name": "32608",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32608"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5357",
    "datePublished": "2008-12-05T11:00:00.000Z",
    "dateReserved": "2008-12-04T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:49:12.352Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-5354 (GCVE-0-2008-5354)

Vulnerability from cvelistv5 – Published: 2008-12-05 11:00 – Updated: 2024-08-07 10:49

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/34259	third-party-advisoryx_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/0672	vdb-entryx_refsource_VUPEN
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://www.ximido.de/research/advisories/SM_Java-…	x_refsource_MISC
	http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/33015	third-party-advisoryx_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://secunia.com/advisories/34889	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34233	third-party-advisoryx_refsource_SECUNIA
	http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisoryx_refsource_GENTOO
	http://www116.nortel.com/pub/repository/CLARIFY/D…	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://secunia.com/advisories/38539	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34972	third-party-advisoryx_refsource_SECUNIA
	https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/35065	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33528	third-party-advisoryx_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisoryx_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://www.vupen.com/english/advisories/2008/3339	vdb-entryx_refsource_VUPEN
	https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://www.redhat.com/support/errata/RHSA-2009-04…	vendor-advisoryx_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisoryx_refsource_CERT
	http://secunia.com/advisories/33709	third-party-advisoryx_refsource_SECUNIA
	http://support.nortel.com/go/main.jsp?cscat=BLTND…	x_refsource_CONFIRM
	http://secunia.com/advisories/34605	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/32991	third-party-advisoryx_refsource_SECUNIA
	http://www.securityfocus.com/bid/32608	vdb-entryx_refsource_BID
	http://secunia.com/advisories/37386	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33710	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2008-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.655Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "34259",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34259"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "oval:org.mitre.oval:def:6537",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6537"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.ximido.de/research/advisories/SM_Java-BO_200811.txt"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34889"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "SUSE-SR:2009:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "33528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33528"
          },
          {
            "name": "244990",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244990-1"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "jre-commandline-privilege-escalation(47060)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47060"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "RHSA-2009:0445",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "name": "33709",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33709"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "RHSA-2009:0015",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "32608",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32608"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary code via a JAR file with a long Main-Class manifest entry."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "34259",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34259"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "oval:org.mitre.oval:def:6537",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6537"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.ximido.de/research/advisories/SM_Java-BO_200811.txt"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34889"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "SUSE-SR:2009:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "33528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33528"
        },
        {
          "name": "244990",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244990-1"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "jre-commandline-privilege-escalation(47060)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47060"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "RHSA-2009:0445",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "name": "33709",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33709"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "RHSA-2009:0015",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "32608",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32608"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5354",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary code via a JAR file with a long Main-Class manifest entry."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "34259",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34259"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "oval:org.mitre.oval:def:6537",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6537"
            },
            {
              "name": "http://www.ximido.de/research/advisories/SM_Java-BO_200811.txt",
              "refsource": "MISC",
              "url": "http://www.ximido.de/research/advisories/SM_Java-BO_200811.txt"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34889"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "SUSE-SR:2009:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "33528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33528"
            },
            {
              "name": "244990",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244990-1"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "jre-commandline-privilege-escalation(47060)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47060"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "RHSA-2009:0445",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "33709",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33709"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "RHSA-2009:0015",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "32608",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32608"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5354",
    "datePublished": "2008-12-05T11:00:00.000Z",
    "dateReserved": "2008-12-04T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:49:12.655Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-5343 (GCVE-0-2008-5343)

Vulnerability from cvelistv5 – Published: 2008-12-05 11:00 – Updated: 2024-08-07 10:49

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.securityfocus.com/bid/32892	vdb-entryx_refsource_BID
	http://www.vupen.com/english/advisories/2009/0672	vdb-entryx_refsource_VUPEN
	http://secunia.com/advisories/34447	third-party-advisoryx_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/33015	third-party-advisoryx_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://secunia.com/advisories/34889	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34233	third-party-advisoryx_refsource_SECUNIA
	http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisoryx_refsource_GENTOO
	http://www116.nortel.com/pub/repository/CLARIFY/D…	x_refsource_CONFIRM
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2009-03…	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://secunia.com/advisories/38539	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/35065	third-party-advisoryx_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/0424	vdb-entryx_refsource_VUPEN
	http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisoryx_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://xs-sniper.com/blog/2008/12/17/sun-fixes-gifars/	x_refsource_MISC
	http://www.vupen.com/english/advisories/2008/3339	vdb-entryx_refsource_VUPEN
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://www.redhat.com/support/errata/RHSA-2009-04…	vendor-advisoryx_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisoryx_refsource_CERT
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://support.nortel.com/go/main.jsp?cscat=BLTND…	x_refsource_CONFIRM
	http://secunia.com/advisories/34605	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://osvdb.org/50512	vdb-entryx_refsource_OSVDB
	http://secunia.com/advisories/32991	third-party-advisoryx_refsource_SECUNIA
	http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://secunia.com/advisories/37386	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33710	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2008-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.622Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "32892",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32892"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "34447",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34447"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34889"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm"
          },
          {
            "name": "RHSA-2009:0369",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "ADV-2009-0424",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0424"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://xs-sniper.com/blog/2008/12/17/sun-fixes-gifars/"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "RHSA-2009:0445",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "name": "oval:org.mitre.oval:def:5924",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5924"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "50512",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/50512"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "APPLE-SA-2009-02-12",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html"
          },
          {
            "name": "244988",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows remote attackers to make unauthorized network connections and hijack HTTP sessions via a crafted file that validates as both a GIF and a Java JAR file, aka \"GIFAR\" and CR 6707535."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "32892",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32892"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "34447",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34447"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34889"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm"
        },
        {
          "name": "RHSA-2009:0369",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "ADV-2009-0424",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0424"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://xs-sniper.com/blog/2008/12/17/sun-fixes-gifars/"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "RHSA-2009:0445",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "name": "oval:org.mitre.oval:def:5924",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5924"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "50512",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/50512"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "APPLE-SA-2009-02-12",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html"
        },
        {
          "name": "244988",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5343",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows remote attackers to make unauthorized network connections and hijack HTTP sessions via a crafted file that validates as both a GIF and a Java JAR file, aka \"GIFAR\" and CR 6707535."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "32892",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32892"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "34447",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34447"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34889"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm"
            },
            {
              "name": "RHSA-2009:0369",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "ADV-2009-0424",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0424"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "http://xs-sniper.com/blog/2008/12/17/sun-fixes-gifars/",
              "refsource": "MISC",
              "url": "http://xs-sniper.com/blog/2008/12/17/sun-fixes-gifars/"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "RHSA-2009:0445",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "oval:org.mitre.oval:def:5924",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5924"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "50512",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/50512"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "APPLE-SA-2009-02-12",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html"
            },
            {
              "name": "244988",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5343",
    "datePublished": "2008-12-05T11:00:00.000Z",
    "dateReserved": "2008-12-04T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:49:12.622Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-5341 (GCVE-0-2008-5341)

Vulnerability from cvelistv5 – Published: 2008-12-05 11:00 – Updated: 2024-08-07 10:49

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.vupen.com/english/advisories/2009/0672	vdb-entryx_refsource_VUPEN
	http://secunia.com/advisories/34447	third-party-advisoryx_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/33015	third-party-advisoryx_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://secunia.com/advisories/34233	third-party-advisoryx_refsource_SECUNIA
	http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisoryx_refsource_GENTOO
	http://www116.nortel.com/pub/repository/CLARIFY/D…	x_refsource_CONFIRM
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2009-03…	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://secunia.com/advisories/38539	third-party-advisoryx_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisoryx_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://www.vupen.com/english/advisories/2008/3339	vdb-entryx_refsource_VUPEN
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisoryx_refsource_CERT
	http://support.nortel.com/go/main.jsp?cscat=BLTND…	x_refsource_CONFIRM
	http://secunia.com/advisories/34605	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32991	third-party-advisoryx_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://secunia.com/advisories/37386	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33710	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2008-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.296Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "34447",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34447"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm"
          },
          {
            "name": "RHSA-2009:0369",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "oval:org.mitre.oval:def:6529",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6529"
          },
          {
            "name": "244988",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "34447",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34447"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm"
        },
        {
          "name": "RHSA-2009:0369",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "oval:org.mitre.oval:def:6529",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6529"
        },
        {
          "name": "244988",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5341",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "34447",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34447"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm"
            },
            {
              "name": "RHSA-2009:0369",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "oval:org.mitre.oval:def:6529",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6529"
            },
            {
              "name": "244988",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5341",
    "datePublished": "2008-12-05T11:00:00.000Z",
    "dateReserved": "2008-12-04T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:49:12.296Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-5345 (GCVE-0-2008-5345)

Vulnerability from cvelistv5 – Published: 2008-12-05 11:00 – Updated: 2024-08-07 10:49

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://osvdb.org/50508	vdb-entryx_refsource_OSVDB
	http://www.vupen.com/english/advisories/2009/0672	vdb-entryx_refsource_VUPEN
	http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/33015	third-party-advisoryx_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://secunia.com/advisories/34889	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34233	third-party-advisoryx_refsource_SECUNIA
	http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisoryx_refsource_GENTOO
	http://www116.nortel.com/pub/repository/CLARIFY/D…	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://secunia.com/advisories/38539	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34972	third-party-advisoryx_refsource_SECUNIA
	https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/35065	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33528	third-party-advisoryx_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisoryx_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisoryx_refsource_HP
	http://www.vupen.com/english/advisories/2008/3339	vdb-entryx_refsource_VUPEN
	http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisoryx_refsource_HP
	http://www.redhat.com/support/errata/RHSA-2009-04…	vendor-advisoryx_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisoryx_refsource_CERT
	http://support.nortel.com/go/main.jsp?cscat=BLTND…	x_refsource_CONFIRM
	http://secunia.com/advisories/34605	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/32991	third-party-advisoryx_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://secunia.com/advisories/37386	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33710	third-party-advisoryx_refsource_SECUNIA
	http://www.securitytracker.com/id?1021305	vdb-entryx_refsource_SECTRACK

Date Public ?

2008-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.304Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "50508",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/50508"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34889"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "33528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33528"
          },
          {
            "name": "oval:org.mitre.oval:def:6059",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6059"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "RHSA-2009:0445",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "RHSA-2009:0015",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "246387",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246387-1"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          },
          {
            "name": "1021305",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021305"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allows code that is loaded from a local filesystem to read arbitrary files and make unauthorized connections to localhost via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "50508",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/50508"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34889"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "33528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33528"
        },
        {
          "name": "oval:org.mitre.oval:def:6059",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6059"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "RHSA-2009:0445",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "RHSA-2009:0015",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "246387",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246387-1"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        },
        {
          "name": "1021305",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021305"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5345",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allows code that is loaded from a local filesystem to read arbitrary files and make unauthorized connections to localhost via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "50508",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/50508"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34889"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "33528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33528"
            },
            {
              "name": "oval:org.mitre.oval:def:6059",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6059"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "RHSA-2009:0445",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "RHSA-2009:0015",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "246387",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246387-1"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            },
            {
              "name": "1021305",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021305"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5345",
    "datePublished": "2008-12-05T11:00:00.000Z",
    "dateReserved": "2008-12-04T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:49:12.304Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2008_1025

CVE-2008-5359 (GCVE-0-2008-5359)

CVE-2008-5340 (GCVE-0-2008-5340)

CVE-2008-5342 (GCVE-0-2008-5342)

CVE-2008-5350 (GCVE-0-2008-5350)

CVE-2008-5360 (GCVE-0-2008-5360)

CVE-2008-5348 (GCVE-0-2008-5348)

CVE-2008-5344 (GCVE-0-2008-5344)

CVE-2008-5356 (GCVE-0-2008-5356)

CVE-2008-5339 (GCVE-0-2008-5339)

CVE-2008-5351 (GCVE-0-2008-5351)

CVE-2008-2086 (GCVE-0-2008-2086)

CVE-2008-5352 (GCVE-0-2008-5352)

CVE-2008-5353 (GCVE-0-2008-5353)

CVE-2008-5349 (GCVE-0-2008-5349)

CVE-2008-5346 (GCVE-0-2008-5346)

CVE-2008-5357 (GCVE-0-2008-5357)

CVE-2008-5354 (GCVE-0-2008-5354)

CVE-2008-5343 (GCVE-0-2008-5343)

CVE-2008-5341 (GCVE-0-2008-5341)

CVE-2008-5345 (GCVE-0-2008-5345)

Tags

Sightings

Nomenclature