CVE-2008-3103

Sun Java Runtime Environment <6 - Unauthorized Operations

Title source: llm

Description

Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier, when local monitoring is enabled, allows remote attackers to "perform unauthorized operations" via unspecified vectors.

References (41)

Core 41

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1020458

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2008-1044.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/32394

Mailing List vendor-advisory x_refsource_apple

http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html

Mailing List mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=122331139823057&w=2

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/32436

Vendor Advisory x_refsource_confirm

http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm

Vendor Advisory x_refsource_confirm

http://support.avaya.com/elmodocs2/security/ASA-2008-507.htm

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/43669

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/31600

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/32018

Third Party Advisory vendor-advisory x_refsource_gentoo

http://security.gentoo.org/glsa/glsa-200911-02.xml

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/32179

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/2740

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/33237

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/2056/references

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/31055

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/32180

Vendor Advisory x_refsource_confirm

http://www.vmware.com/security/advisories/VMSA-2008-0016.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/34972

Vendor Advisory vendor-advisory x_refsource_redhat

https://rhn.redhat.com/errata/RHSA-2009-0466.html

Patch vendor-advisory x_refsource_sunalert

http://sunsolve.sun.com/search/document.do?assetkey=1-66-238965-1

Vendor Advisory x_refsource_confirm

http://support.apple.com/kb/HT3178

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2008-0594.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/32437

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/31497

Vendor Advisory x_refsource_confirm

http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2008-0891.html

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2008-1045.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/30146

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/33238

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/497041/100/0/threaded

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2008-0906.html

US Government Resource third-party-advisory x_refsource_cert

http://www.us-cert.gov/cas/techalerts/TA08-193A.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/37386

Vendor Advisory x_refsource_confirm

http://support.apple.com/kb/HT3179

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10920

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2008-0595.html

Patch, Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/31010

Scores

EPSS 0.2187

EPSS Percentile 95.8%

Details

CWE

CWE-264

Status published

Products (8)

sun/jdk 5.0 update_1 (14 CPE variants)

sun/jdk 6 update_1 (5 CPE variants)

sun/jdk < 5.0

sun/jdk < 6

sun/jre 5.0 update_1 (14 CPE variants)

sun/jre 6 update_1 (5 CPE variants)

sun/jre < 5.0

sun/jre < 6

Published Jul 09, 2008

Tracked Since Feb 18, 2026