Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2008-5350

Published: 05/12/2008 Updated: 29/09/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Subscribe to Sun

Vulnerability Summary

Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and previous versions; JDK and JRE 5.0 Update 16 and previous versions; and SDK and JRE 1.4.2_18 and previous versions allows untrusted applications and applets to list the contents of the operating user's directory via unknown vectors.

Vulnerable Product Search on Vulmon Subscribe to Product

sun jdk 6

sun jre 6

sun jre 5.0

sun jdk 5.0

sun jre

sun jre 1.4.2_16

sun sdk 1.4.2_16

sun jre 1.4.2_15

sun sdk 1.4.2_12

sun jre 1.4.2_11

sun sdk 1.4.2_8

sun jre 1.4.2_7

sun sdk 1.4.2_4

sun jre 1.4.2_3

sun sdk 1.4.2_3

sun jdk

sun sdk

sun sdk 1.4.2_14

sun jre 1.4.2_13

sun sdk 1.4.2_10

sun jre 1.4.2_9

sun sdk 1.4.2_6

sun jre 1.4.2_5

sun jre 1.4.2_1

sun sdk 1.4.2_1

sun jre 1.4.2_17

sun sdk 1.4.2_17

sun sdk 1.4.2_13

sun jre 1.4.2_12

sun sdk 1.4.2_9

sun jre 1.4.2_8

sun sdk 1.4.2_5

sun jre 1.4.2_4

sun sdk 1.4.2_15

sun jre 1.4.2_14

sun sdk 1.4.2_11

sun jre 1.4.2_10

sun sdk 1.4.2_7

sun jre 1.4.2_6

sun jre 1.4.2_2

sun sdk 1.4.2_2

Vendor Advisories

Ubuntu Security Notice: OpenJDK vulnerabilities
It was discovered that Java did not correctly handle untrusted applets If a user were tricked into running a malicious applet, a remote attacker could gain user privileges, or list directory contents (CVE-2008-5347, CVE-2008-5350) ...
Red Hat: Critical: java-1.5.0-ibm security update
Synopsis Critical: java-150-ibm security update Type/Severity Security Advisory: Critical Topic Updated java-150-ibm packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 4 Extras and 5 SupplementaryThis update has been rated as having critical security impact by the R ...
Red Hat: Critical: java-1.6.0-sun security update
Synopsis Critical: java-160-sun security update Type/Severity Security Advisory: Critical Topic Updated java-160-sun packages that correct several security issues arenow available for Red Hat Enterprise Linux 4 Extras and 5 SupplementaryThis update has been rated as having critical security impact by t ...
Red Hat: Low: java-1.5.0-ibm security update
Synopsis Low: java-150-ibm security update Type/Severity Security Advisory: Low Topic Updated java-150-ibm packages that fix several security issues are nowavailable for Red Hat Network Satellite ServerThis update has been rated as having low security impact by the Red HatSecurity Response Team ...
Red Hat: Critical: java-1.6.0-ibm security update
Synopsis Critical: java-160-ibm security update Type/Severity Security Advisory: Critical Topic Updated java-160-ibm packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 4 Extras and 5 SupplementaryThis update has been rated as having critical security impact by the R ...
Red Hat: Critical: java-1.4.2-ibm security update
Synopsis Critical: java-142-ibm security update Type/Severity Security Advisory: Critical Topic Updated java-142-ibm packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 3 Extras, Red Hat Enterprise Linux 4Extras, and Red Hat Enterprise Linux 5 SupplementaryThis updat ...
Red Hat: Critical: java-1.5.0-sun security update
Synopsis Critical: java-150-sun security update Type/Severity Security Advisory: Critical Topic Updated java-150-sun packages that correct several security issues arenow available for Red Hat Enterprise Linux 4 Extras and 5 SupplementaryThis update has been rated as having critical security impact by t ...

References

CWE-200http://sunsolve.sun.com/search/document.do?assetkey=1-26-246266-1http://secunia.com/advisories/32991http://rhn.redhat.com/errata/RHSA-2008-1025.htmlhttp://secunia.com/advisories/33015http://rhn.redhat.com/errata/RHSA-2008-1018.htmlhttp://www.securityfocus.com/bid/32608http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.htmlhttp://www.securitytracker.com/id?1021310http://secunia.com/advisories/33709http://secunia.com/advisories/33710http://www.us-cert.gov/cas/techalerts/TA08-340A.htmlhttp://secunia.com/advisories/33528http://www.redhat.com/support/errata/RHSA-2009-0015.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.htmlhttp://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdfhttp://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=http://support.avaya.com/elmodocs2/security/ASA-2009-012.htmhttp://www.redhat.com/support/errata/RHSA-2009-0016.htmlhttp://www.vupen.com/english/advisories/2009/0672http://secunia.com/advisories/34259http://marc.info/?l=bugtraq&m=123678756409861&w=2http://secunia.com/advisories/34233http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.htmlhttp://secunia.com/advisories/34605http://secunia.com/advisories/34889http://www.redhat.com/support/errata/RHSA-2009-0445.htmlhttp://secunia.com/advisories/35065http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.htmlhttps://rhn.redhat.com/errata/RHSA-2009-0466.htmlhttp://secunia.com/advisories/34972http://osvdb.org/50503http://security.gentoo.org/glsa/glsa-200911-02.xmlhttp://secunia.com/advisories/37386http://secunia.com/advisories/38539http://www.vupen.com/english/advisories/2008/3339http://marc.info/?l=bugtraq&m=126583436323697&w=2https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6424https://usn.ubuntu.com/713-1/https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4040cross-site scriptingCVE-2023-25790CVE-2024-2961XML external entityCVE-2024-26926CVE-2024-32806CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook