PT-2005-4645 · Oracle · Jdk+2

Adam Gowdiak · Publicado 2005-11-30 · Atualizado 2018-10-30 · CVE-2005-3905

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Java SDK and JRE versions 1.3.1 15 and earlier Java SDK and JRE versions 1.4.2 08 and earlier JDK and JRE 5.0 Update 3 and earlier

Description The issue allows remote attackers to escape the Java sandbox, accessing arbitrary files or executing arbitrary applications via unknown attack vectors. This is related to unspecified vulnerability in reflection APIs.

Recommendations For Java SDK and JRE versions 1.3.1 15 and earlier, update to a version later than 1.3.1 15. For Java SDK and JRE versions 1.4.2 08 and earlier, update to a version later than 1.4.2 08. For JDK and JRE 5.0 Update 3 and earlier, update to a version later than 5.0 Update 3.

Correção

Identificadores relacionados

CVE-2005-3905

Produtos afetados

Jdk

Jre

Java Sdk

Referências · 18

• http://vupen.com/english/advisories/2005/2675 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-3905 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3905 · Nota
• http://kb.cert.org/vuls/id/974188 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23251 · Nota
• http://secunia.com/advisories/18503 · Aviso do Fabricante
• http://vupen.com/english/advisories/2005/2946 · Aviso do Fabricante
• http://www-1.ibm.com/support/docview.wss?uid=swg21225628 · Nota
• http://secunia.com/advisories/17847 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2005/Nov/msg00004.html · Aviso do Fabricante
• http://secunia.com/advisories/18435 · Aviso do Fabricante
• http://secunia.com/advisories/18092 · Aviso do Fabricante
• http://secunia.com/advisories/17748 · Aviso do Fabricante
• http://gentoo.org/security/en/glsa/glsa-200601-10.xml · Aviso do Fabricante
• http://vupen.com/english/advisories/2005/2636 · Aviso do Fabricante