CVE-2008-3105

Aliases:CGA-36wg-mpr9-2v2fCGA-457h-ph52-9p6hCGA-47vg-ppj3-6w7hCGA-4986-vg6v-h665CGA-4h56-5gm4-f9qvCGA-5748-m8hh-8v5wCGA-65xp-9x54-7gq7CGA-6c6m-wqjr-7cggCGA-6cp4-qgp6-m8v2CGA-6g9p-f9qf-g74mCGA-6qmg-vp65-44m4CGA-6v4g-pf4g-jv2jCGA-78c6-fjmg-x7wgCGA-7xmm-h4hr-q4hmCGA-82x2-2xgw-7c7jCGA-83fp-gjcx-56hfCGA-8gcr-r2f9-5xpvCGA-8hm4-p4vq-fjh8CGA-8p4f-cm85-wp3pCGA-8wxj-52v4-grf3CGA-95q4-r5qg-42ffCGA-9hfh-fv6p-6hc6CGA-c9jj-j6pf-pcg4CGA-cv3r-gphg-w38fCGA-cxwh-2pr4-3wxmCGA-f5qw-6q7m-7858CGA-f728-38vp-q8jrCGA-fprr-xhjg-g9jmCGA-g22r-v39h-3762CGA-g87g-3469-jmg3CGA-g9vf-mvgq-pq3rCGA-gh33-4fhh-94fmCGA-gm8x-ff7f-82xwCGA-gmjh-cmph-g5c2CGA-gqg8-9238-hwp9CGA-h5rh-3268-99rjCGA-h797-gw7j-2jm3CGA-hj7h-8v85-jmp2CGA-hm8f-hf3j-6jcfCGA-hqj7-6hxp-wgfgCGA-hv6r-qr7m-g3m2CGA-hw3p-3p2f-6m78CGA-jg44-3q2w-q99jCGA-jq88-q726-vr3fCGA-jr7q-m6j3-ghq2CGA-m4r2-4cf5-25h6CGA-mc3j-hwc5-7jv2CGA-mjch-g6j8-j4h8CGA-mqw6-4vq3-4wqqCGA-mwj7-6r72-6rqwCGA-mwm5-q435-xmfpCGA-p5qq-x6jr-66pwCGA-pf5c-x7x6-5wqgCGA-phfv-c7q4-gfwhCGA-pp46-qxg8-xgcpCGA-pwg4-rr3r-cp43CGA-q5c2-245q-xq38CGA-qfp9-h457-55rxCGA-qp6m-468v-2gw6CGA-qx43-9vgf-c5p8CGA-r8fc-p76f-cx5mCGA-rjmh-3w4q-c8pqCGA-v87v-xh3h-8r9wCGA-vc7p-63j8-9pcfCGA-vcjr-rxp7-95p2CGA-vfjf-xv49-hxffCGA-vrpr-g43g-j922CGA-w3ch-87w6-f7qpCGA-w4rc-c93r-67hwCGA-w7mw-pg48-qcqrCGA-w8qq-q7h4-w8q2CGA-w9c7-698c-xr5qCGA-wf3p-hh98-3jwjCGA-wrf4-fj9f-xxrjCGA-wrw5-5mxq-5g6cCGA-x72v-9m5j-gmw7CGA-xhj2-vh22-4w3cCGA-xw2r-jqc7-6wqw
Advisory lineage Upstream: 0 Downstream: 2
Modified
Published: 09 Jul 2008, 23:00
Last modified:07 Aug 2024, 09:28

Vulnerability Summary

Overall Risk (default)
medium
34/100
CVSS Score
8.3 HIGH
v2.0 (nvd)
EPSS Score
4.04% LOW
4% probability -20.99%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

09 Jul 2008, 23:00
Published
Vulnerability first disclosed
07 Aug 2024, 09:28
Last Modified
Vulnerability information updated

Description

Unspecified vulnerability in the JAX-WS client and service in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows remote attackers to access URLs or cause a denial of service via unknown vectors involving "processing of XML data" by a trusted application.

CVSS Metrics

  • v2.0•HIGH•Score: 8.3AV:N/AC:M/Au:N/C:P/I:P/A:C

EPSS Trends

Current EPSS score: 4.04%• Percentile: 90%

Techniques & Countermeasures

  • CWE-264•Permissions, Privileges, and Access Controls

    Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Affected Systems

  • chainguard•openjdk-11-openj9

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-dbg

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-default-jdk

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-default-jvm

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-doc

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-jmods

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-jre

    < 0.59.0-r2

  • chainguard•openjdk-17-openj9

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-jre

    < 0.59.0-r1

  • sun•jdk

    ≤ 6 | 6:update_1 | 6:update_2 | 6:update_3 | 6:update_4 | 6:update_5

  • sun•jre

    ≤ 6 | 6:update_1 | 6:update_2 | 6:update_3 | 6:update_4 | 6:update_5

References (35)