PT-2008-3603 · Oracle+1 · Jdk+4

Timothy D. Morgan · Published 2008-12-04 · Updated 2018-10-11 · CVE-2008-2086

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions JDK and JRE 6 versions 6 Update 10 and earlier JDK and JRE 5.0 versions 5.0 Update 16 and earlier SDK and JRE 1.4.2 versions 1.4.2 18 and earlier

Description The issue allows remote attackers to execute arbitrary code via a crafted jnlp file that modifies the java.home, java.ext.dirs, or user.home System Properties. This is related to the "Java Web Start File Inclusion" issue.

Recommendations For JDK and JRE 6 versions 6 Update 10 and earlier, update to a version later than 6 Update 10. For JDK and JRE 5.0 versions 5.0 Update 16 and earlier, update to a version later than 5.0 Update 16. For SDK and JRE 1.4.2 versions 1.4.2 18 and earlier, update to a version later than 1.4.2 18. As a temporary workaround, consider restricting the use of crafted jnlp files that modify the java.home, java.ext.dirs, or user.home System Properties until a patch is available.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2008-2086

HPSBUX02411

RHSA-2008:1018

RHSA-2008:1025

RHSA-2009:0015

RHSA-2009:0016

RHSA-2009:0445

RHSA-2009:1662

Affected Products

Hp-Ux

Jdk

Jre

Java Platform

Sdk

References · 60

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_calendar_deserialize.rb · Exploit
• http://rhn.redhat.com/errata/RHSA-2008-1025.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5357 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5339 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5341 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5350 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5354 · Security Note
• http://redhat.com/support/errata/RHSA-2009-0016.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-1018.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5342 · Security Note
• http://redhat.com/support/errata/RHSA-2009-0445.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5343 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2008-2086 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html · Vendor Advisory