NVD

Id
4195  
Name
CVE-2008-4368  
Description
The default configuration of Java 1.5 on Apple Mac OS X 10.5.4 and 10.5.5 contains a jurisdiction policy that limits Java Cryptography Extension (JCE) key sizes to 128 bits, which makes it easier for attackers to decrypt ciphertext produced by JCE.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2008-10-01  
Modified Date
2008-10-07  
Seq
2008-4368  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
26707 4195 CVE-2008-4368 APPLE-SA-2008-09-24  View
26708 4195 CVE-2008-4368 http://support.apple.com/kb/HT3179  View
26709 4195 CVE-2008-4368 java-jce-information-disclosure(45650)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47041 JVNDB-2008-002351 Apple Mac OS X における暗号テキストが解読される脆弱性 Apple Mac OS X の Java のデフォルト設定には、管理ポリシーによって Java Cryptography Extension (JCE) の鍵の長さが 128 ビットまでと制限されているため、暗号テキストが解読される脆弱性が存在します。 CVE-2008-4368 34481 CVE-2008-4368 4195 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002351.html 2008-10-01 2009-07-08 View