CVE-2008-3104: sun jdk

Modified

Published 09-07-2008Last modified 07-08-2024

Vulnerability summary

CVE-2008-3104 is a medium (CVSS 6.8) vulnerability in sun jdk. EPSS estimates a 3.60% chance of exploitation in the next 30 days, higher than 89.4% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 6.8, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

6.8/10

010

Medium · v2.0 (NVD)

EPSS score

3.60%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 7

RHSA-2008:0594 RHSA-2008:0595 RHSA-2008:0636 RHSA-2008:0638 RHSA-2008:0790 RHSA-2008:0906+1 more

Timeline

09-07-2008
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Multiple unspecified vulnerabilities in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allow remote attackers to violate the security model for an applet's outbound connections by connecting to localhost services running on the machine that loaded the applet.

CVSS metrics

1 score · 1 source · 1 version

v2.06.8

EPSS trend

Probability

3.60%

Chance of exploitation in the next 30 days

Percentile

89%

Versus all other CVEs

30-day change

No change 0.00 pp

From 3.60% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Sun3 products

jdk≤ 5.0 | ≤ 6 | 1.5.0:update_12 | 5.0:update_1 | 5.0:update_10 | 5.0:update_11 | 5.0:update_12 | 5.0:update_13 | 5.0:update_14 | 5.0:update_2 | 5.0:update_3 | 5.0:update_4 | 5.0:update_5 | 5.0:update_6 | 5.0:update_7 | 5.0:update_8 | 5.0:update_9 | 6:update_1 | 6:update_2 | 6:update_3 | 6:update_4 | 6:update_5
jre1.3.0 | 1.3.1 | 1.3.1:update16 | 1.3.1:update18 | 1.3.1:update19 | 1.3.1:update20 | 1.3.1_02 | 1.3.1_03 | 1.3.1_04 | 1.3.1_05 | 1.3.1_06 | 1.3.1_07 | 1.3.1_08 | 1.3.1_09 | 1.3.1_10 | 1.3.1_11 | 1.3.1_12 | 1.3.1_13 | 1.3.1_14 | 1.3.1_15 | 1.3.1_17 | 1.3.1_21 | 1.3.1_22 | 1.4.2_1 | 1.4.2_2 | 1.4.2_3 | 1.4.2_4 | 1.4.2_5 | 1.4.2_6 | 1.4.2_7 | 1.4.2_8 | 1.4.2_9 | 1.4.2_10 | 1.4.2_11 | 1.4.2_12 | 1.4.2_13 | 1.4.2_14 | 1.4.2_15 | 1.4.2_16 | 1.4.2_17
sdk1.3.0 | 1.3.1_01 | 1.3.1_02 | 1.3.1_03 | 1.3.1_04 | 1.3.1_05 | 1.3.1_06 | 1.3.1_07 | 1.3.1_08 | 1.3.1_09 | 1.3.1_10 | 1.3.1_11 | 1.3.1_12 | 1.3.1_13 | 1.3.1_14 | 1.3.1_15 | 1.3.1_16 | 1.3.1_17 | 1.3.1_18 | 1.3.1_19 | 1.3.1_20 | 1.3.1_21 | 1.3.1_22 | 1.4.2 | 1.4.2_01 | 1.4.2_02 | 1.4.2_03 | 1.4.2_04 | 1.4.2_05 | 1.4.2_06 | 1.4.2_07 | 1.4.2_08 | 1.4.2_09 | 1.4.2_10 | 1.4.2_11 | 1.4.2_12 | 1.4.2_13 | 1.4.2_14 | 1.4.2_15 | 1.4.2_16

1 vendor · 3 products

References

49 links

exchange.xforce.ibmcloud.com/vulnerabilities/43662VDB EntryX Refsource XF
www.redhat.com/support/errata/RHSA-2008-1044.htmlVendor AdvisoryX Refsource REDHAT
lists.apple.com/archives/security-announce//2008/Sep/msg00008.htmlVendor AdvisoryX Refsource APPLE
marc.info?l=bugtraq&m=122331139823057&w=2Mailing ListX Refsource BUGTRAQ
secunia.com/advisories/32436Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/32826Third Party AdvisoryX Refsource SECUNIA
support.avaya.com/elmodocs2/security/ASA-2008-428.htmX Refsource CONFIRM
support.avaya.com/elmodocs2/security/ASA-2008-507.htmX Refsource CONFIRM
secunia.com/advisories/31600Third Party AdvisoryX Refsource SECUNIA
www.securitytracker.com/id?1020459VDB EntryX Refsource SECTRACK

Show all 49 references

lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/32018Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2008-1043.htmlVendor AdvisoryX Refsource REDHAT
security.gentoo.org/glsa/glsa-200911-02.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/32179Third Party AdvisoryX Refsource SECUNIA
sunsolve.sun.com/search/document.do?assetkey=1-66-238968-1Vendor AdvisoryX Refsource SUNALERTPatch
secunia.com/advisories/33194Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/2740VDB EntryX Refsource VUPEN
secunia.com/advisories/31320Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2008-09/msg00000.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/33237Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/2056/referencesVDB EntryX Refsource VUPEN
secunia.com/advisories/31055Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/32180Third Party AdvisoryX Refsource SECUNIA
www.vmware.com/security/advisories/VMSA-2008-0016.htmlX Refsource CONFIRM
secunia.com/advisories/31736Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/35065Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/30140VDB EntryX Refsource BID
secunia.com/advisories/33236Third Party AdvisoryX Refsource SECUNIA
support.apple.com/kb/HT3178X Refsource CONFIRM
www.redhat.com/support/errata/RHSA-2008-0594.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/31269Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/31497Third Party AdvisoryX Refsource SECUNIA
support.avaya.com/elmodocs2/security/ASA-2008-509.htmX Refsource CONFIRM
www.redhat.com/support/errata/RHSA-2008-1045.htmlVendor AdvisoryX Refsource REDHAT
lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.htmlVendor AdvisoryX Refsource SUSE
rhn.redhat.com/errata/RHSA-2008-0955.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/33238Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.htmlVendor AdvisoryX Refsource SUSE
www.securityfocus.com/archive/1/497041/100/0/threadedMailing ListX Refsource BUGTRAQ
lists.opensuse.org/opensuse-security-announce/2008-09/msg00002.htmlVendor AdvisoryX Refsource SUSE
www.redhat.com/support/errata/RHSA-2008-0790.htmlVendor AdvisoryX Refsource REDHAT
www.redhat.com/support/errata/RHSA-2008-0906.htmlVendor AdvisoryX Refsource REDHAT
www.us-cert.gov/cas/techalerts/TA08-193A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
secunia.com/advisories/37386Third Party AdvisoryX Refsource SECUNIA
support.apple.com/kb/HT3179X Refsource CONFIRM
www.redhat.com/support/errata/RHSA-2008-0595.htmlVendor AdvisoryX Refsource REDHAT
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9565VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/31010Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory