6.8 - CVE-2008-1196

Executive Summary

Informations
Name	CVE-2008-1196	First vendor Publication	2008-03-06
Vendor	Cve	Last vendor Modification	2019-07-31

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Cvss Base Score	6.8	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Stack-based buffer overflow in Java Web Start (javaws.exe) in Sun JDK and JRE 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to execute arbitrary code via a crafted JNLP file.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1196

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:10412

Oval ID:	oval:org.mitre.oval:def:10412
Title:	Stack-based buffer overflow in Java Web Start (javaws.exe) in Sun JDK and JRE 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to execute arbitrary code via a crafted JNLP file.
Description:	Stack-based buffer overflow in Java Web Start (javaws.exe) in Sun JDK and JRE 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to execute arbitrary code via a crafted JNLP file.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-1196	Version:	3
Platform(s):	Red Hat Enterprise Linux Extras 4 Red Hat Enterprise Linux Extras 5	Product(s):
Definition Synopsis:
IF redhat-release is version 4 AND java-1.5.0-ibm-javacomm is earlier than 0:1.5.0.7-1jpp.2.el4 AND java-1.5.0-ibm-devel is earlier than 0:1.5.0.7-1jpp.2.el4 AND java-1.5.0-ibm-src is earlier than 0:1.5.0.7-1jpp.2.el4 AND java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el4 AND java-1.5.0-ibm-demo is earlier than 0:1.5.0.7-1jpp.2.el4 AND java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el4 AND java-1.5.0-ibm is earlier than 0:1.5.0.7-1jpp.2.el4 AND java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el4 AND java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el4 AND java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el4 AND java-1.5.0-ibm-jdbc is earlier than 0:1.5.0.7-1jpp.2.el4 AND java-1.5.0-ibm-plugin is earlier than 0:1.5.0.7-1jpp.2.el4 AND java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el4 OR redhat-release is version 5 AND java-1.5.0-ibm-javacomm is earlier than 0:1.5.0.7-1jpp.2.el5 AND java-1.5.0-ibm-devel is earlier than 0:1.5.0.7-1jpp.2.el5 AND java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el5 AND java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el5 AND java-1.6.0-ibm-accessibility is earlier than 0:1.6.0.1-1jpp.2.el5 AND java-1.6.0-ibm-jdbc is earlier than 0:1.6.0.1-1jpp.2.el5 AND java-1.6.0-ibm-src is earlier than 0:1.6.0.1-1jpp.2.el5 AND java-1.6.0-ibm-javacomm is earlier than 0:1.6.0.1-1jpp.2.el5 AND java-1.5.0-ibm-plugin is earlier than 0:1.5.0.7-1jpp.2.el5 AND java-1.6.0-ibm is earlier than 0:1.6.0.1-1jpp.2.el5 AND java-1.6.0-ibm-plugin is earlier than 0:1.6.0.1-1jpp.2.el5 AND java-1.6.0-ibm-devel is earlier than 0:1.6.0.1-1jpp.2.el5 AND java-1.5.0-ibm-src is earlier than 0:1.5.0.7-1jpp.2.el5 AND java-1.6.0-ibm-demo is earlier than 0:1.6.0.1-1jpp.2.el5 AND java-1.5.0-ibm-demo is earlier than 0:1.5.0.7-1jpp.2.el5 AND java-1.5.0-ibm-accessibility is earlier than 0:1.5.0.7-1jpp.2.el5 AND java-1.5.0-ibm is earlier than 0:1.5.0.7-1jpp.2.el5 AND java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el5 AND java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el5 AND java-1.5.0-ibm-jdbc is earlier than 0:1.5.0.7-1jpp.2.el5 AND java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el5 AND java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el5

Definition Id: oval:org.mitre.oval:def:21767

Oval ID:	oval:org.mitre.oval:def:21767
Title:	ELSA-2008:0555: java-1.4.2-ibm security update (Critical)
Description:	Stack-based buffer overflow in Java Web Start (javaws.exe) in Sun JDK and JRE 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to execute arbitrary code via a crafted JNLP file.
Family:	unix	Class:	patch
Reference(s):	ELSA-2008:0555-01 CVE-2008-1187 CVE-2008-1196	Version:	13
Platform(s):	Oracle Linux 5	Product(s):	java-1.4.2-ibm
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.4.2-ibm is earlier than 0:1.4.2.11-1jpp.2.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.11-1jpp.2.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.11-1jpp.2.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.11-1jpp.2.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.11-1jpp.2.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.11-1jpp.2.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.11-1jpp.2.el5

Definition Id: oval:org.mitre.oval:def:22208

Oval ID:	oval:org.mitre.oval:def:22208
Title:	ELSA-2008:0267: java-1.6.0-ibm security update (Critical)
Description:	Stack-based buffer overflow in Java Web Start (javaws.exe) in Sun JDK and JRE 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to execute arbitrary code via a crafted JNLP file.
Family:	unix	Class:	patch
Reference(s):	ELSA-2008:0267-01 CVE-2008-1187 CVE-2008-1188 CVE-2008-1189 CVE-2008-1190 CVE-2008-1191 CVE-2008-1192 CVE-2008-1193 CVE-2008-1194 CVE-2008-1195 CVE-2008-1196	Version:	45
Platform(s):	Oracle Linux 5	Product(s):	java-1.6.0-ibm
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.6.0-ibm-javacomm is earlier than 1:1.6.0.1-1jpp.2.el5 AND java-1.6.0-ibm is earlier than 1:1.6.0.1-1jpp.2.el5 AND java-1.6.0-ibm-accessibility is earlier than 1:1.6.0.1-1jpp.2.el5 AND java-1.6.0-ibm-devel is earlier than 1:1.6.0.1-1jpp.2.el5 AND java-1.6.0-ibm-demo is earlier than 1:1.6.0.1-1jpp.2.el5 AND java-1.6.0-ibm-src is earlier than 1:1.6.0.1-1jpp.2.el5 AND java-1.6.0-ibm-plugin is earlier than 1:1.6.0.1-1jpp.2.el5 AND java-1.6.0-ibm-jdbc is earlier than 1:1.6.0.1-1jpp.2.el5

Definition Id: oval:org.mitre.oval:def:22449

Oval ID:	oval:org.mitre.oval:def:22449
Title:	ELSA-2008:0186: java-1.5.0-sun security update (Critical)
Description:	Stack-based buffer overflow in Java Web Start (javaws.exe) in Sun JDK and JRE 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to execute arbitrary code via a crafted JNLP file.
Family:	unix	Class:	patch
Reference(s):	ELSA-2008:0186-01 CVE-2008-1185 CVE-2008-1186 CVE-2008-1187 CVE-2008-1188 CVE-2008-1189 CVE-2008-1190 CVE-2008-1192 CVE-2008-1193 CVE-2008-1194 CVE-2008-1195 CVE-2008-1196	Version:	49
Platform(s):	Oracle Linux 5	Product(s):	java-1.5.0-sun
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el5 AND java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el5 AND java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el5 AND java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el5 AND java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el5 AND java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el5

Definition Id: oval:org.mitre.oval:def:22529

Oval ID:	oval:org.mitre.oval:def:22529
Title:	ELSA-2008:0210: java-1.5.0-ibm security update (Critical)
Description:	Stack-based buffer overflow in Java Web Start (javaws.exe) in Sun JDK and JRE 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to execute arbitrary code via a crafted JNLP file.
Family:	unix	Class:	patch
Reference(s):	ELSA-2008:0210-01 CVE-2008-0657 CVE-2008-1187 CVE-2008-1188 CVE-2008-1189 CVE-2008-1190 CVE-2008-1192 CVE-2008-1193 CVE-2008-1194 CVE-2008-1195 CVE-2008-1196	Version:	45
Platform(s):	Oracle Linux 5	Product(s):	java-1.5.0-ibm
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.7-1jpp.2.el5 AND java-1.5.0-ibm is earlier than 1:1.5.0.7-1jpp.2.el5 AND java-1.5.0-ibm-accessibility is earlier than 1:1.5.0.7-1jpp.2.el5 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.7-1jpp.2.el5 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.7-1jpp.2.el5 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.7-1jpp.2.el5 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.7-1jpp.2.el5 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.7-1jpp.2.el5

CPE : Common Platform Enumeration

Type	Description	Count
Application	Sun Jdk cpe:2.3:a:sun:jdk:1.6.0:update_4:::::: cpe:2.3:a:sun:jdk:1.6.0:update_3:::::: cpe:2.3:a:sun:jdk:1.6.0:-:::::: cpe:2.3:a:sun:jdk:1.5.0:update9:::::: cpe:2.3:a:sun:jdk:1.5.0:update11:::::: cpe:2.3:a:sun:jdk:1.5.0:update14:::::: cpe:2.3:a:sun:jdk:1.5.0:update8:::::: cpe:2.3:a:sun:jdk:1.5.0:update13:::::: cpe:2.3:a:sun:jdk:1.5.0:update12:::::: cpe:2.3:a:sun:jdk:1.5.0:update2:::::: cpe:2.3:a:sun:jdk:1.5.0:update1:::::: cpe:2.3:a:sun:jdk:1.5.0:update4:::::: cpe:2.3:a:sun:jdk:1.5.0:-:::::: cpe:2.3:a:sun:jdk:1.5.0:update3:::::: cpe:2.3:a:sun:jdk:1.5.0:update6:::::: cpe:2.3:a:sun:jdk:1.5.0:update7:::::: cpe:2.3:a:sun:jdk:1.5.0:update5:::::: cpe:2.3:a:sun:jdk:1.5.0:update10::::::	18
Application	Sun Jre cpe:2.3:a:sun:jre:1.6.0:-:::::: cpe:2.3:a:sun:jre:1.6.0:update_4:::::: cpe:2.3:a:sun:jre:1.6.0:update_2:::::: cpe:2.3:a:sun:jre:1.6.0:update_3:::::: cpe:2.3:a:sun:jre:1.6.0:update_1:::::: cpe:2.3:a:sun:jre:1.5.0:update3:::::: cpe:2.3:a:sun:jre:1.5.0:update12:::::: cpe:2.3:a:sun:jre:1.5.0:update10:::::: cpe:2.3:a:sun:jre:1.5.0:update6:::::: cpe:2.3:a:sun:jre:1.5.0:-:::::: cpe:2.3:a:sun:jre:1.5.0:update13:::::: cpe:2.3:a:sun:jre:1.5.0:update14:::::: cpe:2.3:a:sun:jre:1.5.0:update2:::::: cpe:2.3:a:sun:jre:1.5.0:update9:::::: cpe:2.3:a:sun:jre:1.5.0:update1:::::: cpe:2.3:a:sun:jre:1.5.0:update8:::::: cpe:2.3:a:sun:jre:1.5.0:update11:::::: cpe:2.3:a:sun:jre:1.5.0:update7:::::: cpe:2.3:a:sun:jre:1.5.0:update5:::::: cpe:2.3:a:sun:jre:1.5.0:update4:::::: cpe:2.3:a:sun:jre:1.4.2_9:::::::* cpe:2.3:a:sun:jre:1.4.2_8:::::::* cpe:2.3:a:sun:jre:1.4.2_7:::::::* cpe:2.3:a:sun:jre:1.4.2_6:::::::* cpe:2.3:a:sun:jre:1.4.2_5:::::::* cpe:2.3:a:sun:jre:1.4.2_4:::::::* cpe:2.3:a:sun:jre:1.4.2_3:::::::* cpe:2.3:a:sun:jre:1.4.2_2:::::::* cpe:2.3:a:sun:jre:1.4.2_16:::::::* cpe:2.3:a:sun:jre:1.4.2_15:::::::* cpe:2.3:a:sun:jre:1.4.2_14:::::::* cpe:2.3:a:sun:jre:1.4.2_13:::::::* cpe:2.3:a:sun:jre:1.4.2_12:::::::* cpe:2.3:a:sun:jre:1.4.2_11:::::::* cpe:2.3:a:sun:jre:1.4.2_10:::::::* cpe:2.3:a:sun:jre:1.4.2_1:::::::* cpe:2.3:a:sun:jre:1.4.2:-::::::	37
Application	Sun Sdk cpe:2.3:a:sun:sdk:1.4.2_9:::::::* cpe:2.3:a:sun:sdk:1.4.2_8:::::::* cpe:2.3:a:sun:sdk:1.4.2_7:::::::* cpe:2.3:a:sun:sdk:1.4.2_6:::::::* cpe:2.3:a:sun:sdk:1.4.2_5:::::::* cpe:2.3:a:sun:sdk:1.4.2_4:::::::* cpe:2.3:a:sun:sdk:1.4.2_3:::::::* cpe:2.3:a:sun:sdk:1.4.2_2:::::::* cpe:2.3:a:sun:sdk:1.4.2_16:::::::* cpe:2.3:a:sun:sdk:1.4.2_15:::::::* cpe:2.3:a:sun:sdk:1.4.2_14:::::::* cpe:2.3:a:sun:sdk:1.4.2_13:::::::* cpe:2.3:a:sun:sdk:1.4.2_12:::::::* cpe:2.3:a:sun:sdk:1.4.2_11:::::::* cpe:2.3:a:sun:sdk:1.4.2_10:::::::* cpe:2.3:a:sun:sdk:1.4.2_1:::::::* cpe:2.3:a:sun:sdk:1.4.2:::::::*	17

OpenVAS Exploits

Date	Description
2010-05-28	Name : Java for Mac OS X 10.5 Update 2 File : nvt/macosx_java_for_10_5_upd_2.nasl
2009-10-13	Name : SLES10: Security update for IBM Java 1.4.2 File : nvt/sles10_java-1_4_2-ibm1.nasl
2009-10-13	Name : SLES10: Security update for IBM Java 1.4.2 File : nvt/sles10_java-1_4_2-ibm3.nasl
2009-10-13	Name : SLES10: Security update for Sun Java File : nvt/sles10_java-1_4_2-sun1.nasl
2009-10-13	Name : SLES10: Security update for IBM Java 1.5.0 File : nvt/sles10_java-1_5_0-ibm4.nasl
2009-10-10	Name : SLES9: Security update for Java2 File : nvt/sles9p5023078.nasl
2009-10-10	Name : SLES9: Security update for IBM Java 5 and JRE File : nvt/sles9p5023460.nasl
2009-10-10	Name : SLES9: Security update for IBM Java 2 JRE and SDK File : nvt/sles9p5023603.nasl
2009-10-10	Name : SLES9: Security update for IBM Java2 JRE and SDK File : nvt/sles9p5033560.nasl
2009-01-23	Name : SuSE Update for Sun Java SUSE-SA:2008:018 File : nvt/gb_suse_2008_018.nasl
2009-01-23	Name : SuSE Update for IBMJava2,IBMJava5,java-1_4_2-ibm,java-1_5_0-ibm SUSE-SA:2008... File : nvt/gb_suse_2008_025.nasl
2008-09-24	Name : Gentoo Security Advisory GLSA 200804-20 (sun-jdk, sun-jre-bin, emul-linux-x86... File : nvt/glsa_200804_20.nasl
2008-09-24	Name : Gentoo Security Advisory GLSA 200804-28 (jrockit-jdk-bin) File : nvt/glsa_200804_28.nasl
2008-09-24	Name : Gentoo Security Advisory GLSA 200806-11 (ibm-jdk-bin ibm-jre-bin) File : nvt/glsa_200806_11.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
42602	Sun Java Web Start Application JNLP File Handling Overflow (6660121)

Nessus® Vulnerability Scanner

Date	Description
2013-01-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0267.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20080714_java__jdk_1_5_0__on_SL4_x.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12210.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12142.nasl - Type : ACT_GATHER_INFO
2009-08-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0555.nasl - Type : ACT_GATHER_INFO
2009-08-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0186.nasl - Type : ACT_GATHER_INFO
2009-08-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0210.nasl - Type : ACT_GATHER_INFO
2009-07-27	Name : The remote VMware ESX host is missing a security-related patch. File : vmware_VMSA-2008-0010.nasl - Type : ACT_GATHER_INFO
2008-09-25	Name : The remote host is affected by multiple vulnerabilities. File : macosx_java_rel7.nasl - Type : ACT_GATHER_INFO
2008-09-25	Name : The remote host is affected by multiple vulnerabilities. File : macosx_java_10_5_update2.nasl - Type : ACT_GATHER_INFO
2008-08-22	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_4_2-ibm-5465.nasl - Type : ACT_GATHER_INFO
2008-06-26	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200806-11.nasl - Type : ACT_GATHER_INFO
2008-04-28	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200804-28.nasl - Type : ACT_GATHER_INFO
2008-04-25	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_4_2-ibm-5182.nasl - Type : ACT_GATHER_INFO
2008-04-25	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_5_0-ibm-5183.nasl - Type : ACT_GATHER_INFO
2008-04-22	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200804-20.nasl - Type : ACT_GATHER_INFO
2008-04-04	Name : The remote openSUSE host is missing a security update. File : suse_java-1_4_2-sun-5130.nasl - Type : ACT_GATHER_INFO
2008-04-04	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_4_2-sun-5131.nasl - Type : ACT_GATHER_INFO
2008-04-04	Name : The remote openSUSE host is missing a security update. File : suse_java-1_5_0-sun-5133.nasl - Type : ACT_GATHER_INFO
2008-04-04	Name : The remote openSUSE host is missing a security update. File : suse_java-1_6_0-sun-5132.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source	Url
APPLE	http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html
CERT	http://www.us-cert.gov/cas/techalerts/TA08-066A.html
CERT-VN	http://www.kb.cert.org/vuls/id/223028
CONFIRM	http://download.novell.com/Download?buildid=q5exhSqeBjA~ http://support.apple.com/kb/HT3178 http://support.apple.com/kb/HT3179 http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_50336... http://www.vmware.com/security/advisories/VMSA-2008-0010.html
GENTOO	http://security.gentoo.org/glsa/glsa-200804-28.xml http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml
OVAL	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
REDHAT	http://www.redhat.com/support/errata/RHSA-2008-0186.html http://www.redhat.com/support/errata/RHSA-2008-0210.html http://www.redhat.com/support/errata/RHSA-2008-0267.html http://www.redhat.com/support/errata/RHSA-2008-0555.html
SECTRACK	http://www.securitytracker.com/id?1019552
SECUNIA	http://secunia.com/advisories/29239 http://secunia.com/advisories/29273 http://secunia.com/advisories/29498 http://secunia.com/advisories/29582 http://secunia.com/advisories/29858 http://secunia.com/advisories/29897 http://secunia.com/advisories/30676 http://secunia.com/advisories/30780 http://secunia.com/advisories/31067 http://secunia.com/advisories/31497 http://secunia.com/advisories/31580 http://secunia.com/advisories/31586 http://secunia.com/advisories/32018
SUNALERT	http://sunsolve.sun.com/search/document.do?assetkey=1-26-233327-1
SUSE	http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html
VUPEN	http://www.vupen.com/english/advisories/2008/0770/references http://www.vupen.com/english/advisories/2008/1856/references
XF	https://exchange.xforce.ibmcloud.com/vulnerabilities/41026

Alert History

If you want to see full details history, please login or register.

Date	Informations
2024-02-02 01:08:26	Multiple Updates
2024-02-01 12:02:36	Multiple Updates
2023-09-05 12:07:51	Multiple Updates
2023-09-05 01:02:27	Multiple Updates
2023-09-02 12:07:57	Multiple Updates
2023-09-02 01:02:28	Multiple Updates
2023-08-12 12:09:21	Multiple Updates
2023-08-12 01:02:28	Multiple Updates
2023-08-11 12:08:01	Multiple Updates
2023-08-11 01:02:33	Multiple Updates
2023-08-06 12:07:40	Multiple Updates
2023-08-06 01:02:29	Multiple Updates
2023-08-04 12:07:45	Multiple Updates
2023-08-04 01:02:32	Multiple Updates
2023-07-14 12:07:44	Multiple Updates
2023-07-14 01:02:29	Multiple Updates
2023-03-29 01:08:42	Multiple Updates
2023-03-28 12:02:35	Multiple Updates
2022-10-11 12:06:52	Multiple Updates
2022-10-11 01:02:19	Multiple Updates
2021-05-04 12:07:43	Multiple Updates
2021-04-22 01:08:05	Multiple Updates
2020-05-23 00:21:24	Multiple Updates
2019-07-31 17:19:08	Multiple Updates
2019-07-31 12:02:22	Multiple Updates
2018-11-30 12:02:22	Multiple Updates
2018-10-10 12:02:20	Multiple Updates
2017-09-29 09:23:27	Multiple Updates
2017-08-08 09:23:55	Multiple Updates
2016-06-28 17:12:30	Multiple Updates
2016-04-26 17:12:09	Multiple Updates
2014-02-17 10:44:09	Multiple Updates
2013-05-11 00:11:59	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	5
CPE ID(s)	72
Sources(s)	36
osvdb(s)	1
Openvas Exploit(s)	14
Nessus® Exploit(s)	20

	Related
10	VMSA-2008-0010
10	RHSA-2008:0210
10	GLSA-200806-11
10	GLSA-200804-28
10	GLSA-200804-20
9.3	TA08-066A
9.3	RHSA-2008:0267
9.3	RHSA-2008:0186
6.8	VU#223028
6.8	SUN-233327
6.8	RHSA-2008:0555
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 11 more Alert(s)

6.8 - CVE-2008-1196

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

OpenVAS Exploits

Open Source Vulnerability Database (OSVDB)

Nessus® Vulnerability Scanner

Sources (Detail)

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU