Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.8
CVSSv2

CVE-2008-3104

Published: 09/07/2008 Updated: 30/10/2018
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Subscribe to Jdk

Vulnerability Summary

Multiple unspecified vulnerabilities in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, SDK and JRE 1.4.x prior to 1.4.2_18, and SDK and JRE 1.3.x prior to 1.3.1_23 allow remote malicious users to violate the security model for an applet's outbound connections by connecting to localhost services running on the machine that loaded the applet.

Vulnerable Product Search on Vulmon Subscribe to Product

sun jdk 5.0

sun jdk 6

sun jre 1.3.1_02

sun jre 1.3.1_03

sun jre 1.3.1_11

sun jre 1.3.1_12

sun jre 1.4.2_1

sun jre 1.4.2_10

sun jre 1.4.2_3

sun jre 1.4.2_4

sun sdk 1.3.0

sun sdk 1.3.1_01

sun sdk 1.3.1_08

sun sdk 1.3.1_09

sun jdk 1.5.0

sun jre 1.3.1

sun jre 1.3.1_09

sun jre 1.3.1_10

sun jre 1.3.1_21

sun jre 1.3.1_22

sun jre 1.4.2_15

sun jre 1.4.2_2

sun jre 1.4.2_16

sun jre 1.4.2_17

sun sdk 1.3.1_06

sun sdk 1.3.1_07

sun sdk 1.3.1_14

sun sdk 1.3.1_15

sun sdk 1.4.2

sun sdk 1.4.2_01

sun sdk 1.4.2_08

sun sdk 1.4.2_09

sun sdk 1.4.2_16

sun jdk

sun jre 1.3.0

sun jre 1.3.1_04

sun jre 1.3.1_05

sun jre 1.3.1_13

sun jre 1.3.1_14

sun jre 1.4.2_11

sun jre 1.4.2_12

sun jre 1.4.2_5

sun jre 1.4.2_6

sun jre 1.4.2_7

sun sdk 1.3.1_02

sun sdk 1.3.1_03

sun sdk 1.3.1_10

sun sdk 1.3.1_11

sun sdk 1.3.1_19

sun sdk 1.3.1_20

sun sdk 1.4.2_04

sun sdk 1.4.2_05

sun sdk 1.4.2_12

sun sdk 1.4.2_13

sun jre 1.3.1_06

sun jre 1.3.1_07

sun jre 1.3.1_08

sun jre 1.3.1_15

sun jre 1.3.1_17

sun jre 1.4.2_13

sun jre 1.4.2_14

sun sdk 1.3.1_16

sun sdk 1.3.1_17

sun sdk 1.3.1_18

sun sdk 1.4.2_02

sun sdk 1.4.2_03

sun sdk 1.4.2_10

sun sdk 1.4.2_11

sun jre 1.4.2_8

sun jre 1.4.2_9

sun sdk 1.3.1_04

sun sdk 1.3.1_05

sun sdk 1.3.1_12

sun sdk 1.3.1_13

sun sdk 1.3.1_21

sun sdk 1.3.1_22

sun sdk 1.4.2_06

sun sdk 1.4.2_07

sun sdk 1.4.2_14

sun sdk 1.4.2_15

Vendor Advisories

Red Hat: Important: java-1.5.0-bea security update
Synopsis Important: java-150-bea security update Type/Severity Security Advisory: Important Topic java-150-bea as shipped in Red Hat Enterprise Linux 4 Extras and Red HatEnterprise Linux 5 Supplementary, contains security flaws and should not beusedThis update has been rated as having important securit ...
Red Hat: Important: java-1.6.0-bea security update
Synopsis Important: java-160-bea security update Type/Severity Security Advisory: Important Topic java-160-bea as shipped in Red Hat Enterprise Linux 4 Extras and Red HatEnterprise Linux 5 Supplementary, contains security flaws and should not beusedThis update has been rated as having important securit ...
Red Hat: Important: java-1.4.2-bea security update
Synopsis Important: java-142-bea security update Type/Severity Security Advisory: Important Topic java-142-bea as shipped in Red Hat Enterprise Linux 3 Extras, Red HatEnterprise Linux 4 Extras, and Red Hat Enterprise Linux 5 Supplementary,contains security flaws and should not be usedThis update has be ...
Red Hat: Critical: java-1.4.2-ibm security update
Synopsis Critical: java-142-ibm security update Type/Severity Security Advisory: Critical Topic Updated java-142-ibm packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 3 Extras, Red Hat Enterprise Linux 4Extras, and Red Hat Enterprise Linux 5 SupplementaryThis updat ...
Red Hat: Critical: java-1.6.0-ibm security update
Synopsis Critical: java-160-ibm security update Type/Severity Security Advisory: Critical Topic Updated java-160-ibm packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 4 Extras and Red Hat EnterpriseLinux 5 SupplementaryThis update has been rated as having critical ...

References

CWE-264NVD-CWE-noinfohttp://sunsolve.sun.com/search/document.do?assetkey=1-66-238968-1http://www.securityfocus.com/bid/30140http://secunia.com/advisories/31010http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.htmlhttp://secunia.com/advisories/31269http://secunia.com/advisories/31320http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00000.htmlhttp://secunia.com/advisories/31600http://www.redhat.com/support/errata/RHSA-2008-0595.htmlhttp://secunia.com/advisories/31497http://www.us-cert.gov/cas/techalerts/TA08-193A.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0594.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0790.htmlhttp://secunia.com/advisories/31055http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.htmlhttp://lists.opensuse.org/opensuse-security-announce/2008-09/msg00002.htmlhttp://secunia.com/advisories/32018http://support.apple.com/kb/HT3178http://support.apple.com/kb/HT3179http://secunia.com/advisories/32180http://www.vmware.com/security/advisories/VMSA-2008-0016.htmlhttp://marc.info/?l=bugtraq&m=122331139823057&w=2http://secunia.com/advisories/32179http://secunia.com/advisories/32436http://www.securitytracker.com/id?1020459http://rhn.redhat.com/errata/RHSA-2008-0955.htmlhttp://secunia.com/advisories/32826http://secunia.com/advisories/33238http://www.redhat.com/support/errata/RHSA-2008-1043.htmlhttp://secunia.com/advisories/33237http://www.redhat.com/support/errata/RHSA-2008-1045.htmlhttp://secunia.com/advisories/33236http://www.redhat.com/support/errata/RHSA-2008-1044.htmlhttp://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.htmlhttp://secunia.com/advisories/33194http://www.redhat.com/support/errata/RHSA-2008-0906.htmlhttp://secunia.com/advisories/35065http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.htmlhttp://support.avaya.com/elmodocs2/security/ASA-2008-507.htmhttp://support.avaya.com/elmodocs2/security/ASA-2008-509.htmhttp://support.avaya.com/elmodocs2/security/ASA-2008-428.htmhttp://security.gentoo.org/glsa/glsa-200911-02.xmlhttp://secunia.com/advisories/37386http://www.vupen.com/english/advisories/2008/2056/referenceshttp://www.vupen.com/english/advisories/2008/2740http://secunia.com/advisories/31736https://exchange.xforce.ibmcloud.com/vulnerabilities/43662https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9565http://www.securityfocus.com/archive/1/497041/100/0/threadedhttps://nvd.nist.govhttps://access.redhat.com/errata/RHSA-2008:1044
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3400CVE-2023-7252CVE-2024-21111denial of serviceCVE-2024-29661CVE-2024-22856remote attackersencryptionCVE-2023-38299
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook