PT-2008-6472 · Oracle+1 · Java Runtime Environment+2

Publicado 2008-12-05 · Atualizado 2017-09-29 · CVE-2008-5348

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Java Runtime Environment (JRE) versions prior to 6 Update 11 Java Runtime Environment (JRE) versions prior to 5.0 Update 17 Java Runtime Environment (JRE) versions prior to 1.4.2 19

Description The issue allows remote attackers to cause a denial of service, resulting in OS resource consumption, when Kerberos authentication is used. The estimated number of potentially affected devices worldwide is not specified.

Recommendations For versions prior to 6 Update 11, update to version 6 Update 11 or later to resolve the issue. For versions prior to 5.0 Update 17, update to version 5.0 Update 17 or later to resolve the issue. For versions prior to 1.4.2 19, update to version 1.4.2 19 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2008-5348

HPSBUX02411

RHSA-2008:1018

RHSA-2008:1025

RHSA-2009:0015

RHSA-2009:0016

RHSA-2009:0445

RHSA-2009:0466

Produtos afetados

Hp-Ux

Java Platform

Java Runtime Environment

Referências · 59

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_calendar_deserialize.rb · Exploit
• http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5357 · Nota de Segurança
• http://secunia.com/advisories/35065 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5356 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5354 · Nota de Segurança
• http://secunia.com/advisories/34233 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5351 · Nota de Segurança
• http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5348 · Nota
• http://redhat.com/support/errata/RHSA-2009-0015.html · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5345 · Nota de Segurança
• http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/action.process/public/kb/docDisplay/?javax.portlet.action=true&spf_p.tpst=kbDocDisplay&javax.portlet.begCacheTok=com.vignette.cachetoken&spf_p.prp_kbDocDisplay=wsrp-interactionState%3DdocId%253DZW1yX25hLWMwMTY4MzAyNg%2525253D%2525253DhPsCeNc%257CdocLocale%253Den_US%257CcalledBy%253D&javax.portlet.endCacheTok=com.vignette.cachetoken · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5343 · Nota de Segurança
• http://secunia.com/advisories/34889 · Nota