CVE-2008-5339

Sun Java Web Start and Plug-in - Unauthorized Network Connections

Title source: manual
STIX 2.1

Description

Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to perform network connections to unauthorized hosts via unknown vectors, aka CR 6727079.

References (30)

Core 30
Core References
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6409
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=126583436323697&w=2
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/0672
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2008-1018.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/33015
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34889
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34233
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200911-02.xml
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=123678756409861&w=2
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/38539
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35065
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/33528
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2008-1025.html
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/3339
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2009-0445.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2009-0016.html
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA08-340A.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34605
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2009-0015.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/32991
Patch, Vendor Advisory vendor-advisory x_refsource_sunalert
http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/37386
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/33710

Scores

EPSS 0.0133
EPSS Percentile 80.2%

Details

Status published
Products (22)
sun/jdk 5.0 update_1 (15 CPE variants)
sun/jdk 6 (10 CPE variants)
sun/jdk < 5.0
sun/jdk < 6
sun/jre 1.4.2_1
sun/jre 1.4.2_2
sun/jre 1.4.2_3
sun/jre 1.4.2_4
sun/jre 1.4.2_5
sun/jre 1.4.2_6
... and 12 more
Published Dec 05, 2008
Tracked Since Feb 18, 2026