CVE-2008-3103

Aliases:CGA-2cj4-8pjq-4x48CGA-2qwh-cw6q-fq6xCGA-3556-f6gx-9955CGA-45m5-23q2-6964CGA-4pm9-8fqc-w9g6CGA-53jm-qw9v-8cpvCGA-557j-jmw4-8q82CGA-56mw-89px-6fhpCGA-5852-9379-fj8hCGA-599r-438j-c3cvCGA-5h7r-f3r9-hgc7CGA-68mp-mh3g-5cfpCGA-6hqj-x2w3-6h27CGA-6hv8-p955-qgh6CGA-6jmm-2fp3-6274CGA-6mv3-hwjc-p277CGA-6w3v-xgpc-5c68CGA-75h4-5mhm-rg2pCGA-76rr-6cwh-cpx2CGA-78cw-2pj2-rm8cCGA-7rcw-hrqc-p6w7CGA-7w8v-c46q-j9gxCGA-7wr7-vwxf-gxrwCGA-886c-r575-85q4CGA-8r86-q5pp-xjrwCGA-98v7-688f-4fc5CGA-9h74-94c7-8mvhCGA-c93f-526r-36mqCGA-ccm3-9c9v-89fxCGA-cg5j-r5jp-f24wCGA-cj7h-f5vh-3prxCGA-cmm3-73r8-vmpmCGA-f2f9-mxqm-rwhxCGA-fmqm-9fw5-x989CGA-fq7r-x969-g5xrCGA-fr7r-6x59-gqx8CGA-fvc6-mg7m-mxv3CGA-fxm2-f8pj-x96gCGA-gg8j-5j33-r69cCGA-h6cg-f6fx-5292CGA-h754-6mvq-c6rvCGA-hg78-4679-cq6jCGA-j8xm-9mc5-2hqhCGA-jjgw-256q-hhgvCGA-jmmc-4pq7-v6p9CGA-jp5v-qpwp-q59vCGA-jx83-3mhf-7j2pCGA-m2qj-xf93-9p4mCGA-m9f9-5m9p-22gxCGA-mf7g-mcmr-88pcCGA-mgmc-wg3w-gv62CGA-mh8c-4fg8-pxhhCGA-mp45-vmgr-q7h9CGA-p247-xp7r-h75mCGA-p763-fm8w-rggmCGA-p7pf-jfhw-34qmCGA-phx9-23vm-vf27CGA-pmfw-9588-3w9wCGA-pxpj-33m6-hqw7CGA-q5vc-439p-qp6gCGA-qc57-793v-q75fCGA-qhx6-j647-wrm7CGA-qmw7-f2w7-6vgpCGA-qx3g-wvm2-xw4jCGA-r46f-2q97-68fcCGA-r58m-h9qp-w4p8CGA-r6vw-x7f9-c4jvCGA-r7cw-43p7-wgxgCGA-rff9-pv8q-973hCGA-rpjg-r5pw-qx7mCGA-rpwf-p3f2-g8q5CGA-rxxp-hqj6-2gg7CGA-v6p4-8jj2-36vvCGA-v8mj-5rv7-9q2wCGA-v9rp-m7wq-7xp2CGA-vxww-xp38-q6q2CGA-wp7p-m9xr-qm66CGA-wr88-58xf-7xrx
Advisory lineage Upstream: 0 Downstream: 6
Modified
Published: 09 Jul 2008, 23:00
Last modified:07 Aug 2024, 09:28

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9.3 HIGH
v2.0 (nvd)
EPSS Score
5.08% LOW
5% probability -19.30%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

09 Jul 2008, 23:00
Published
Vulnerability first disclosed
07 Aug 2024, 09:28
Last Modified
Vulnerability information updated

Description

Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier, when local monitoring is enabled, allows remote attackers to "perform unauthorized operations" via unspecified vectors.

CVSS Metrics

  • v2.0•HIGH•Score: 9.3AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 5.08%• Percentile: 92%

Techniques & Countermeasures

  • CWE-264•Permissions, Privileges, and Access Controls

    Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Affected Systems

  • chainguard•openjdk-11-openj9

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-dbg

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-default-jdk

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-default-jvm

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-doc

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-jmods

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-jre

    < 0.59.0-r2

  • chainguard•openjdk-17-openj9

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-jre

    < 0.59.0-r1

  • sun•jdk

    ≤ 5.0 | ≤ 6 | 5.0:update_1 | 5.0:update_10 | 5.0:update_11 | 5.0:update_12 | 5.0:update_13 | 5.0:update_14 | 5.0:update_2 | 5.0:update_3 | 5.0:update_4 | 5.0:update_5 | 5.0:update_6 | 5.0:update_7 | 5.0:update_8 | 5.0:update_9 | 6:update_1 | 6:update_2 | 6:update_3 | 6:update_4 | 6:update_5

  • sun•jre

    ≤ 5.0 | ≤ 6 | 5.0:update_1 | 5.0:update_10 | 5.0:update_11 | 5.0:update_12 | 5.0:update_13 | 5.0:update_14 | 5.0:update_2 | 5.0:update_3 | 5.0:update_4 | 5.0:update_5 | 5.0:update_6 | 5.0:update_7 | 5.0:update_8 | 5.0:update_9 | 6:update_1 | 6:update_2 | 6:update_3 | 6:update_4 | 6:update_5

References (41)