PT-2008-3603 · Oracle+1 · Jdk+4

Timothy D. Morgan · Publicado 2008-12-04 · Atualizado 2018-10-11 · CVE-2008-2086

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions JDK and JRE 6 versions 6 Update 10 and earlier JDK and JRE 5.0 versions 5.0 Update 16 and earlier SDK and JRE 1.4.2 versions 1.4.2 18 and earlier

Description The issue allows remote attackers to execute arbitrary code via a crafted jnlp file that modifies the java.home, java.ext.dirs, or user.home System Properties. This is related to the "Java Web Start File Inclusion" issue.

Recommendations For JDK and JRE 6 versions 6 Update 10 and earlier, update to a version later than 6 Update 10. For JDK and JRE 5.0 versions 5.0 Update 16 and earlier, update to a version later than 5.0 Update 16. For SDK and JRE 1.4.2 versions 1.4.2 18 and earlier, update to a version later than 1.4.2 18. As a temporary workaround, consider restricting the use of crafted jnlp files that modify the java.home, java.ext.dirs, or user.home System Properties until a patch is available.

Exploit

Correção

RCE

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2008-2086

HPSBUX02411

RHSA-2008:1018

RHSA-2008:1025

RHSA-2009:0015

RHSA-2009:0016

RHSA-2009:0445

RHSA-2009:1662

Produtos afetados

Hp-Ux

Jdk

Jre

Java Platform

Sdk

Referências · 60

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_calendar_deserialize.rb · Exploit
• http://rhn.redhat.com/errata/RHSA-2008-1025.html · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5357 · Nota de Segurança
• http://secunia.com/advisories/33710 · Nota
• http://vupen.com/english/advisories/2009/0424 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5339 · Nota de Segurança
• http://us-cert.gov/cas/techalerts/TA08-340A.html · Nota
• http://secunia.com/advisories/35065 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5341 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5350 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5354 · Nota de Segurança
• http://redhat.com/support/errata/RHSA-2009-0016.html · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2008-1018.html · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5342 · Nota de Segurança