CVE

Id
35456  
CVE No.
CVE-2008-5339  
Status
Candidate  
Description
Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to perform network connections to unauthorized hosts via unknown vectors, aka CR 6727079.  
Phase
Assigned (20081204)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
388670 35456 CVE-2008-5339 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm  View
388671 35456 CVE-2008-5339 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm  View
388672 35456 CVE-2008-5339 CONFIRM:http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=  View
388673 35456 CVE-2008-5339 CONFIRM:http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf  View
388674 35456 CVE-2008-5339 GENTOO:GLSA-200911-02  View
388675 35456 CVE-2008-5339 URL:http://security.gentoo.org/glsa/glsa-200911-02.xml  View
388676 35456 CVE-2008-5339 HP:HPSBUX02411  View
388677 35456 CVE-2008-5339 URL:http://marc.info/?l=bugtraq&m=123678756409861&w=2  View
388678 35456 CVE-2008-5339 HP:SSRT080111  View
388679 35456 CVE-2008-5339 URL:http://marc.info/?l=bugtraq&m=123678756409861&w=2  View
388680 35456 CVE-2008-5339 HP:HPSBMA02486  View
388681 35456 CVE-2008-5339 URL:http://marc.info/?l=bugtraq&m=126583436323697&w=2  View
388682 35456 CVE-2008-5339 HP:SSRT090049  View
388683 35456 CVE-2008-5339 URL:http://marc.info/?l=bugtraq&m=126583436323697&w=2  View
388684 35456 CVE-2008-5339 REDHAT:RHSA-2008:1018  View
388685 35456 CVE-2008-5339 URL:http://rhn.redhat.com/errata/RHSA-2008-1018.html  View
388686 35456 CVE-2008-5339 REDHAT:RHSA-2008:1025  View
388687 35456 CVE-2008-5339 URL:http://rhn.redhat.com/errata/RHSA-2008-1025.html  View
388688 35456 CVE-2008-5339 REDHAT:RHSA-2009:0015  View
388689 35456 CVE-2008-5339 URL:http://www.redhat.com/support/errata/RHSA-2009-0015.html  View
388690 35456 CVE-2008-5339 REDHAT:RHSA-2009:0016  View
388691 35456 CVE-2008-5339 URL:http://www.redhat.com/support/errata/RHSA-2009-0016.html  View
388692 35456 CVE-2008-5339 REDHAT:RHSA-2009:0445  View
388693 35456 CVE-2008-5339 URL:http://www.redhat.com/support/errata/RHSA-2009-0445.html  View
388694 35456 CVE-2008-5339 SUNALERT:244988  View
388695 35456 CVE-2008-5339 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1  View
388696 35456 CVE-2008-5339 SUSE:SUSE-SA:2009:007  View
388697 35456 CVE-2008-5339 URL:http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html  View
388698 35456 CVE-2008-5339 SUSE:SUSE-SA:2009:018  View
388699 35456 CVE-2008-5339 URL:http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html  View
388700 35456 CVE-2008-5339 SUSE:SUSE-SR:2009:010  View
388701 35456 CVE-2008-5339 URL:http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html  View
388702 35456 CVE-2008-5339 CERT:TA08-340A  View
388703 35456 CVE-2008-5339 URL:http://www.us-cert.gov/cas/techalerts/TA08-340A.html  View
388704 35456 CVE-2008-5339 OVAL:oval:org.mitre.oval:def:6409  View
388705 35456 CVE-2008-5339 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6409  View
388706 35456 CVE-2008-5339 SECUNIA:34233  View
388707 35456 CVE-2008-5339 URL:http://secunia.com/advisories/34233  View
388708 35456 CVE-2008-5339 SECUNIA:34605  View
388709 35456 CVE-2008-5339 URL:http://secunia.com/advisories/34605  View
388710 35456 CVE-2008-5339 SECUNIA:34889  View
388711 35456 CVE-2008-5339 URL:http://secunia.com/advisories/34889  View
388712 35456 CVE-2008-5339 SECUNIA:35065  View
388713 35456 CVE-2008-5339 URL:http://secunia.com/advisories/35065  View
388714 35456 CVE-2008-5339 SECUNIA:37386  View
388715 35456 CVE-2008-5339 URL:http://secunia.com/advisories/37386  View
388716 35456 CVE-2008-5339 SECUNIA:38539  View
388717 35456 CVE-2008-5339 URL:http://secunia.com/advisories/38539  View
388718 35456 CVE-2008-5339 VUPEN:ADV-2008-3339  View
388719 35456 CVE-2008-5339 URL:http://www.vupen.com/english/advisories/2008/3339  View
388720 35456 CVE-2008-5339 SECUNIA:32991  View
388721 35456 CVE-2008-5339 URL:http://secunia.com/advisories/32991  View
388722 35456 CVE-2008-5339 SECUNIA:33015  View
388723 35456 CVE-2008-5339 URL:http://secunia.com/advisories/33015  View
388724 35456 CVE-2008-5339 SECUNIA:33710  View
388725 35456 CVE-2008-5339 URL:http://secunia.com/advisories/33710  View
388726 35456 CVE-2008-5339 SECUNIA:33528  View
388727 35456 CVE-2008-5339 URL:http://secunia.com/advisories/33528  View
388728 35456 CVE-2008-5339 VUPEN:ADV-2009-0672  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46836 JVNDB-2008-002146 Sun Java Web Start および Java Plug-in における HTTP セッションをハイジャックされる脆弱性 Sun Java Web Start (JWS) および Java Plug-in には、認証されていないネットワークコネクションを作成される、およびブラウザに保存されたクッキーを使用する HTTP セッションをハイジャックされる脆弱性が存在します。 CVE-2008-5343 35456 9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002146.html  View