NVD

Id
51042  
Name
CVE-2009-3875  
Description
The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to spoof HMAC-based digital signatures, and possibly bypass authentication, via unspecified vectors related to "timing attack vulnerabilities," aka Bug Id 6863503.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-11-05  
Modified Date
2016-08-22  
Seq
2009-3875  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
258589 51042 CVE-2009-3875 http://java.sun.com/javase/6/webnotes/6u17.html  View
258590 51042 CVE-2009-3875 APPLE-SA-2009-12-03-1  View
258591 51042 CVE-2009-3875 APPLE-SA-2009-12-03-2  View
258592 51042 CVE-2009-3875 SUSE-SA:2009:058  View
258593 51042 CVE-2009-3875 SSRT100019  View
258594 51042 CVE-2009-3875 SSRT100242  View
258595 51042 CVE-2009-3875 HPSBMU02799  View
258596 51042 CVE-2009-3875 oval:org.mitre.oval:def:11847  View
258597 51042 CVE-2009-3875 oval:org.mitre.oval:def:12112  View
258598 51042 CVE-2009-3875 oval:org.mitre.oval:def:7549  View
258599 51042 CVE-2009-3875 oval:org.mitre.oval:def:7913  View
258600 51042 CVE-2009-3875 GLSA-200911-02  View
258601 51042 CVE-2009-3875 270475  View
258602 51042 CVE-2009-3875 http://support.apple.com/kb/HT3969  View
258603 51042 CVE-2009-3875 http://support.apple.com/kb/HT3970  View
258604 51042 CVE-2009-3875 MDVSA-2010:084  View
258605 51042 CVE-2009-3875 http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html  View
258606 51042 CVE-2009-3875 RHSA-2009:1694  View
258607 51042 CVE-2009-3875 36881  View
258608 51042 CVE-2009-3875 ADV-2009-3131  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41367 JVNDB-2009-002374 JDK、JRE および SDK の MessageDigest.isEqual 関数における HMAC ベースのデジタル署名の偽装および認証回避の脆弱性 JDK、JRE および SDK の MessageDigest.isEqual 関数には、HMAC ベースのデジタル署名の偽装および認証回避の脆弱性が存在します。 CVE-2009-3875 41306 CVE-2009-3875 51042 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002374.html 2009-11-05 2010-02-24 View