PT-2005-4646 · Oracle · Jdk+2

Adam Gowdiak · Publicado 2005-11-30 · Atualizado 2018-10-30 · CVE-2005-3906

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Java SDK and JRE versions 1.4.2 08 and earlier JDK and JRE 5.0 Update 3 and earlier

Description The issue involves multiple unspecified vulnerabilities in reflection APIs, allowing remote attackers to escape the Java sandbox. This enables access to arbitrary files or execution of arbitrary applications via unknown attack vectors.

Recommendations For Java SDK and JRE versions 1.4.2 08 and earlier, update to a version later than 1.4.2 08 to resolve the issue. For JDK and JRE 5.0 Update 3 and earlier, update to a version later than 5.0 Update 3 to resolve the issue.

Correção

Identificadores relacionados

CVE-2005-3906

Produtos afetados

Jdk

Jre

Java Sdk

Referências · 18

• https://nvd.nist.gov/vuln/detail/CVE-2005-3906 · Nota de Segurança
• http://vupen.com/english/advisories/2005/2675 · Aviso do Fabricante
• http://kb.cert.org/vuls/id/974188 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23251 · Nota
• http://secunia.com/advisories/18503 · Aviso do Fabricante
• http://vupen.com/english/advisories/2005/2946 · Aviso do Fabricante
• http://www-1.ibm.com/support/docview.wss?uid=swg21225628 · Nota
• http://secunia.com/advisories/17847 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2005/Nov/msg00004.html · Aviso do Fabricante
• http://secunia.com/advisories/18435 · Aviso do Fabricante
• http://secunia.com/advisories/18092 · Aviso do Fabricante
• http://secunia.com/advisories/17748 · Aviso do Fabricante
• http://gentoo.org/security/en/glsa/glsa-200601-10.xml · Aviso do Fabricante
• http://vupen.com/english/advisories/2005/2636 · Aviso do Fabricante
• http://securitytracker.com/id?1015280 · Nota