[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248268

 
 

909

 
 

195051

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2008-5341Date: (C)2008-12-05   (M)2023-12-22


Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: NONE
Availability: NONE
  
Reference:
SUNALERT-244988
SECUNIA-32991
SECUNIA-33015
SECUNIA-33710
SECUNIA-34233
SECUNIA-34447
SECUNIA-34605
SECUNIA-37386
SECUNIA-38539
ADV-2008-3339
ADV-2009-0672
GLSA-200911-02
RHSA-2008:1018
RHSA-2008:1025
RHSA-2009:0016
RHSA-2009:0369
SSRT080111
SSRT090049
SUSE-SA:2009:007
SUSE-SA:2009:018
TA08-340A
http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm
http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=
http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf
oval:org.mitre.oval:def:6529

CPE    36
cpe:/a:sun:jre
cpe:/a:sun:sdk:1.4.2_1
cpe:/a:sun:sdk:1.4.2_2
cpe:/a:sun:sdk:1.4.2_3
...
CWE    1
CWE-200
OVAL    2
oval:org.secpod.oval:def:400075
oval:org.secpod.oval:def:21015

© SecPod Technologies