{"schemaVersion":3,"id":"RHSA-2008:0825","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Red Hat Security Advisory: JBoss Enterprise Application Platform 4.2.0.CP03 security update","dates":{"published":"2024-09-15T17:17:32.000Z","modified":"2025-11-22T10:17:52.000Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"redhat","product":"glassfish-javamail","name":"glassfish-javamail","label":"glassfish-javamail","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/glassfish-javamail","purlType":"rpm","versions":[{"text":"< 0:1.4.0-0jpp.ep1.9.el4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.4.0-0jpp.ep1.9.el4","eol":null,"hubHref":null},{"vendor":"redhat","product":"hibernate3","name":"hibernate3","label":"hibernate3","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/hibernate3","purlType":"rpm","versions":[{"text":"< 1:3.2.4-1.SP1_CP03.0jpp.ep1.1.el4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:3.2.4-1.SP1_CP03.0jpp.ep1.1.el4","eol":null,"hubHref":null},{"vendor":"redhat","product":"hibernate3-annotations","name":"hibernate3-annotations","label":"hibernate3-annotations","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/hibernate3-annotations","purlType":"rpm","versions":[{"text":"< 0:3.2.1-1.patch02.1jpp.ep1.3.el4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.2.1-1.patch02.1jpp.ep1.3.el4","eol":null,"hubHref":null},{"vendor":"redhat","product":"hibernate3-annotations-javadoc","name":"hibernate3-annotations-javadoc","label":"hibernate3-annotations-javadoc","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/hibernate3-annotations-javadoc","purlType":"rpm","versions":[{"text":"< 0:3.2.1-1.patch02.1jpp.ep1.3.el4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.2.1-1.patch02.1jpp.ep1.3.el4","eol":null,"hubHref":null},{"vendor":"redhat","product":"hibernate3-javadoc","name":"hibernate3-javadoc","label":"hibernate3-javadoc","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/hibernate3-javadoc","purlType":"rpm","versions":[{"text":"< 1:3.2.4-1.SP1_CP03.0jpp.ep1.1.el4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:3.2.4-1.SP1_CP03.0jpp.ep1.1.el4","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-cache","name":"jboss-cache","label":"jboss-cache","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-cache","purlType":"rpm","versions":[{"text":"< 0:1.4.1-4.SP9.1jpp.ep1.1.el4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.4.1-4.SP9.1jpp.ep1.1.el4","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-remoting","name":"jboss-remoting","label":"jboss-remoting","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-remoting","purlType":"rpm","versions":[{"text":"< 0:2.2.2-3.SP7.0jpp.ep1.3.el4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.2.2-3.SP7.0jpp.ep1.3.el4","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-seam","name":"jboss-seam","label":"jboss-seam","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-seam","purlType":"rpm","versions":[{"text":"< 0:1.2.1-1.ep1.7.el4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.2.1-1.ep1.7.el4","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-seam-docs","name":"jboss-seam-docs","label":"jboss-seam-docs","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-seam-docs","purlType":"rpm","versions":[{"text":"< 0:1.2.1-1.ep1.7.el4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.2.1-1.ep1.7.el4","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossas","name":"jbossas","label":"jbossas","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossas","purlType":"rpm","versions":[{"text":"< 0:4.2.0-3.GA_CP03.ep1.9.el4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:4.2.0-3.GA_CP03.ep1.9.el4","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossts","name":"jbossts","label":"jbossts","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossts","purlType":"rpm","versions":[{"text":"< 1:4.2.3-1.SP5_CP01.1jpp.ep1.1.el4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:4.2.3-1.SP5_CP01.1jpp.ep1.1.el4","eol":null,"hubHref":null},{"vendor":"redhat","product":"jcommon","name":"jcommon","label":"jcommon","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jcommon","purlType":"rpm","versions":[{"text":"< 0:1.0.12-1jpp.ep1.3.el4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.0.12-1jpp.ep1.3.el4","eol":null,"hubHref":null},{"vendor":"redhat","product":"jfreechart","name":"jfreechart","label":"jfreechart","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jfreechart","purlType":"rpm","versions":[{"text":"< 0:1.0.9-1jpp.ep1.3.el4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.0.9-1jpp.ep1.3.el4","eol":null,"hubHref":null},{"vendor":"redhat","product":"rh-eap-docs","name":"rh-eap-docs","label":"rh-eap-docs","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/rh-eap-docs","purlType":"rpm","versions":[{"text":"< 0:4.2.0-3.GA_CP03.ep1.5.el4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:4.2.0-3.GA_CP03.ep1.5.el4","eol":null,"hubHref":null},{"vendor":"redhat","product":"rh-eap-docs-examples","name":"rh-eap-docs-examples","label":"rh-eap-docs-examples","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/rh-eap-docs-examples","purlType":"rpm","versions":[{"text":"< 0:4.2.0-3.GA_CP03.ep1.5.el4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:4.2.0-3.GA_CP03.ep1.5.el4","eol":null,"hubHref":null}],"affectedCount":15,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://access.redhat.com/errata/RHSA-2008:0825","label":"access.redhat.com/errata/RHSA-2008:0825","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp03/html-single/readme/index.html","label":"www.redhat.com/docs/…","hostname":"www.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=437082","label":"bugzilla.redhat.com/show_bug.cgi?id=437082","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=457757","label":"bugzilla.redhat.com/show_bug.cgi?id=457757","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0825.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0825.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-1285","label":"access.redhat.com/security/cve/CVE-2008-1285","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-1285","label":"www.cve.org/CVERecord?id=CVE-2008-1285","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-1285","label":"nvd.nist.gov/vuln/detail/CVE-2008-1285","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-3273","label":"access.redhat.com/security/cve/CVE-2008-3273","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-3273","label":"www.cve.org/CVERecord?id=CVE-2008-3273","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-3273","label":"nvd.nist.gov/vuln/detail/CVE-2008-3273","hostname":"nvd.nist.gov","tags":["Advisory"]}],"lineage":{"upstream":["CVE-2008-1285","CVE-2008-3273"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2024-09-15T17:17:32.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-11-22T10:17:52.000Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T18:27:58.885Z","stale":false,"partial":false}}