6.4 - CVE-2008-5360

Executive Summary

Informations
Name	CVE-2008-5360	First vendor Publication	2008-12-05
Vendor	Cve	Last vendor Modification	2019-10-09

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:N)
Cvss Base Score	6.4	Attack Range	Network
Cvss Impact Score	4.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious JAR files via unknown vectors.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5360

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:13408

Oval ID:	oval:org.mitre.oval:def:13408
Title:	USN-713-1 -- openjdk-6 vulnerabilities
Description:	It was discovered that Java did not correctly handle untrusted applets. If a user were tricked into running a malicious applet, a remote attacker could gain user privileges, or list directory contents. It was discovered that Kerberos authentication and RSA public key processing were not correctly handled in Java. A remote attacker could exploit these flaws to cause a denial of service. It was discovered that Java accepted UTF-8 encodings that might be handled incorrectly by certain applications. A remote attacker could bypass string filters, possible leading to other exploits. Overflows were discovered in Java JAR processing. If a user or automated system were tricked into processing a malicious JAR file, a remote attacker could crash the application, leading to a denial of service. It was discovered that Java calendar objects were not unserialized safely. If a user or automated system were tricked into processing a specially crafted calendar object, a remote attacker could execute arbitrary code with user privileges. It was discovered that the Java image handling code could lead to memory corruption. If a user or automated system were tricked into processing a specially crafted image, a remote attacker could crash the application, leading to a denial of service. It was discovered that temporary files created by Java had predictable names. If a user or automated system were tricked into processing a specially crafted JAR file, a remote attacker could overwrite sensitive information
Family:	unix	Class:	patch
Reference(s):	USN-713-1 CVE-2008-5347 CVE-2008-5350 CVE-2008-5348 CVE-2008-5349 CVE-2008-5351 CVE-2008-5352 CVE-2008-5354 CVE-2008-5353 CVE-2008-5358 CVE-2008-5359 CVE-2008-5360	Version:	5
Platform(s):	Ubuntu 8.10	Product(s):	openjdk-6
Definition Synopsis:
Ubuntu 8.10 is installed Architecture section Architecture independent section Installed architecture is all AND Packages section openjdk-6-jre-lib DPKG is earlier than 6b12-0ubuntu6.1 AND openjdk-6-doc DPKG is earlier than 6b12-0ubuntu6.1 AND openjdk-6-source-files DPKG is earlier than 6b12-0ubuntu6.1 AND openjdk-6-source DPKG is earlier than 6b12-0ubuntu6.1 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section openjdk-6-jre DPKG is earlier than 6b12-0ubuntu6.1 AND openjdk-6-jre-headless DPKG is earlier than 6b12-0ubuntu6.1 AND openjdk-6-demo DPKG is earlier than 6b12-0ubuntu6.1 AND openjdk-6-dbg DPKG is earlier than 6b12-0ubuntu6.1 AND openjdk-6-jdk DPKG is earlier than 6b12-0ubuntu6.1 AND icedtea6-plugin DPKG is earlier than 6b12-0ubuntu6.1

Definition Id: oval:org.mitre.oval:def:21870

Oval ID:	oval:org.mitre.oval:def:21870
Title:	ELSA-2009:0445: java-1.4.2-ibm security update (Critical)
Description:	Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious JAR files via unknown vectors.
Family:	unix	Class:	patch
Reference(s):	ELSA-2009:0445-01 CVE-2008-2086 CVE-2008-5339 CVE-2008-5340 CVE-2008-5342 CVE-2008-5343 CVE-2008-5344 CVE-2008-5345 CVE-2008-5346 CVE-2008-5348 CVE-2008-5350 CVE-2008-5351 CVE-2008-5353 CVE-2008-5354 CVE-2008-5359 CVE-2008-5360	Version:	65
Platform(s):	Oracle Linux 5	Product(s):	java-1.4.2-ibm
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.4.2-ibm is earlier than 0:1.4.2.13-1jpp.1.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.13-1jpp.1.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.13-1jpp.1.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.13-1jpp.1.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.13-1jpp.1.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.13-1jpp.1.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.13-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:22126

Oval ID:	oval:org.mitre.oval:def:22126
Title:	ELSA-2009:0016: java-1.5.0-ibm security update (Critical)
Description:	Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious JAR files via unknown vectors.
Family:	unix	Class:	patch
Reference(s):	ELSA-2009:0016-01 CVE-2008-2086 CVE-2008-5339 CVE-2008-5340 CVE-2008-5341 CVE-2008-5342 CVE-2008-5343 CVE-2008-5344 CVE-2008-5345 CVE-2008-5346 CVE-2008-5348 CVE-2008-5349 CVE-2008-5350 CVE-2008-5351 CVE-2008-5352 CVE-2008-5353 CVE-2008-5354 CVE-2008-5356 CVE-2008-5357 CVE-2008-5359 CVE-2008-5360	Version:	85
Platform(s):	Oracle Linux 5	Product(s):	java-1.5.0-ibm
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.9-1jpp.2.el5 AND java-1.5.0-ibm is earlier than 1:1.5.0.9-1jpp.2.el5 AND java-1.5.0-ibm-accessibility is earlier than 1:1.5.0.9-1jpp.2.el5 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.9-1jpp.2.el5 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.9-1jpp.2.el5 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.9-1jpp.2.el5 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.9-1jpp.2.el5 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.9-1jpp.2.el5

Definition Id: oval:org.mitre.oval:def:22263

Oval ID:	oval:org.mitre.oval:def:22263
Title:	ELSA-2008:1018: java-1.6.0-sun security update (Critical)
Description:	Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious JAR files via unknown vectors.
Family:	unix	Class:	patch
Reference(s):	ELSA-2008:1018-01 CVE-2008-2086 CVE-2008-5339 CVE-2008-5340 CVE-2008-5341 CVE-2008-5342 CVE-2008-5343 CVE-2008-5344 CVE-2008-5345 CVE-2008-5347 CVE-2008-5348 CVE-2008-5349 CVE-2008-5350 CVE-2008-5351 CVE-2008-5352 CVE-2008-5353 CVE-2008-5354 CVE-2008-5356 CVE-2008-5357 CVE-2008-5358 CVE-2008-5359 CVE-2008-5360	Version:	89
Platform(s):	Oracle Linux 5	Product(s):	java-1.6.0-sun
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.6.0-sun-jdbc is earlier than 1:1.6.0.11-1jpp.1.el5 AND java-1.6.0-sun is earlier than 1:1.6.0.11-1jpp.1.el5 AND java-1.6.0-sun-demo is earlier than 1:1.6.0.11-1jpp.1.el5 AND java-1.6.0-sun-plugin is earlier than 1:1.6.0.11-1jpp.1.el5 AND java-1.6.0-sun-src is earlier than 1:1.6.0.11-1jpp.1.el5 AND java-1.6.0-sun-devel is earlier than 1:1.6.0.11-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:22521

Oval ID:	oval:org.mitre.oval:def:22521
Title:	ELSA-2008:1025: java-1.5.0-sun security update (Critical)
Description:	Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious JAR files via unknown vectors.
Family:	unix	Class:	patch
Reference(s):	ELSA-2008:1025-01 CVE-2008-2086 CVE-2008-5339 CVE-2008-5340 CVE-2008-5341 CVE-2008-5342 CVE-2008-5343 CVE-2008-5344 CVE-2008-5345 CVE-2008-5346 CVE-2008-5348 CVE-2008-5349 CVE-2008-5350 CVE-2008-5351 CVE-2008-5352 CVE-2008-5353 CVE-2008-5354 CVE-2008-5356 CVE-2008-5357 CVE-2008-5359 CVE-2008-5360	Version:	85
Platform(s):	Oracle Linux 5	Product(s):	java-1.5.0-sun
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.5.0-sun-plugin is earlier than 0:1.5.0.17-1jpp.2.el5 AND java-1.5.0-sun is earlier than 0:1.5.0.17-1jpp.2.el5 AND java-1.5.0-sun-jdbc is earlier than 0:1.5.0.17-1jpp.2.el5 AND java-1.5.0-sun-demo is earlier than 0:1.5.0.17-1jpp.2.el5 AND java-1.5.0-sun-devel is earlier than 0:1.5.0.17-1jpp.2.el5 AND java-1.5.0-sun-src is earlier than 0:1.5.0.17-1jpp.2.el5

Definition Id: oval:org.mitre.oval:def:22731

Oval ID:	oval:org.mitre.oval:def:22731
Title:	ELSA-2009:0015: java-1.6.0-ibm security update (Critical)
Description:	Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious JAR files via unknown vectors.
Family:	unix	Class:	patch
Reference(s):	ELSA-2009:0015-01 CVE-2008-2086 CVE-2008-5339 CVE-2008-5344 CVE-2008-5345 CVE-2008-5347 CVE-2008-5348 CVE-2008-5350 CVE-2008-5352 CVE-2008-5353 CVE-2008-5354 CVE-2008-5359 CVE-2008-5360	Version:	53
Platform(s):	Oracle Linux 5	Product(s):	java-1.6.0-ibm
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.6.0-ibm-javacomm is earlier than 1:1.6.0.3-1jpp.1.el5 AND java-1.6.0-ibm is earlier than 1:1.6.0.3-1jpp.1.el5 AND java-1.6.0-ibm-accessibility is earlier than 1:1.6.0.3-1jpp.1.el5 AND java-1.6.0-ibm-devel is earlier than 1:1.6.0.3-1jpp.1.el5 AND java-1.6.0-ibm-src is earlier than 1:1.6.0.3-1jpp.1.el5 AND java-1.6.0-ibm-demo is earlier than 1:1.6.0.3-1jpp.1.el5 AND java-1.6.0-ibm-plugin is earlier than 1:1.6.0.3-1jpp.1.el5 AND java-1.6.0-ibm-jdbc is earlier than 1:1.6.0.3-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:6596

Oval ID:	oval:org.mitre.oval:def:6596
Title:	Sun Java Runtime Environment temporary files weak security
Description:	Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious JAR files via unknown vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-5360	Version:	1
Platform(s):	VMWare ESX Server 3.5	Product(s):
Definition Synopsis:
IF VMware ESX Server 3.5.0 is installed AND Patch ESX350-200910403-SG is not installed

CPE : Common Platform Enumeration

Type	Description	Count
Application	Sun Jdk cpe:2.3:a:sun:jdk:1.6.0:update_4:::::: cpe:2.3:a:sun:jdk:1.6.0:update_10:::::: cpe:2.3:a:sun:jdk:1.6.0:update_7:::::: cpe:2.3:a:sun:jdk:1.6.0:update_6:::::: cpe:2.3:a:sun:jdk:1.6.0:update_5:::::: cpe:2.3:a:sun:jdk:1.6.0:update_3:::::: cpe:2.3:a:sun:jdk:1.6.0:-:::::: cpe:2.3:a:sun:jdk:1.5.0:update10:::::: cpe:2.3:a:sun:jdk:1.5.0:update16:::::: cpe:2.3:a:sun:jdk:1.5.0:update15:::::: cpe:2.3:a:sun:jdk:1.5.0:update2:::::: cpe:2.3:a:sun:jdk:1.5.0:update12:::::: cpe:2.3:a:sun:jdk:1.5.0:update11:::::: cpe:2.3:a:sun:jdk:1.5.0:update14:::::: cpe:2.3:a:sun:jdk:1.5.0:update13:::::: cpe:2.3:a:sun:jdk:1.5.0:update1:::::: cpe:2.3:a:sun:jdk:1.5.0:update11_b03:::::: cpe:2.3:a:sun:jdk:1.5.0:-::::::	18
Application	Sun Jre cpe:2.3:a:sun:jre:1.6.0:update_4:::::: cpe:2.3:a:sun:jre:1.6.0:update_10:::::: cpe:2.3:a:sun:jre:1.6.0:update_6:::::: cpe:2.3:a:sun:jre:1.6.0:update_1:::::: cpe:2.3:a:sun:jre:1.6.0:update_3:::::: cpe:2.3:a:sun:jre:1.6.0:update_2:::::: cpe:2.3:a:sun:jre:1.6.0:update_5:::::: cpe:2.3:a:sun:jre:1.6.0:-:::::: cpe:2.3:a:sun:jre:1.5.0:update16:::::: cpe:2.3:a:sun:jre:1.5.0:update15:::::: cpe:2.3:a:sun:jre:1.5.0:update12:::::: cpe:2.3:a:sun:jre:1.5.0:update10:::::: cpe:2.3:a:sun:jre:1.5.0:update13:::::: cpe:2.3:a:sun:jre:1.5.0:update14:::::: cpe:2.3:a:sun:jre:1.5.0:update11:::::: cpe:2.3:a:sun:jre:1.5.0:update1:::::: cpe:2.3:a:sun:jre:1.5.0:update2:::::: cpe:2.3:a:sun:jre:1.5.0:-:::::: cpe:2.3:a:sun:jre:1.4.2_9:::::::* cpe:2.3:a:sun:jre:1.4.2_8:::::::* cpe:2.3:a:sun:jre:1.4.2_7:::::::* cpe:2.3:a:sun:jre:1.4.2_6:::::::* cpe:2.3:a:sun:jre:1.4.2_5:::::::* cpe:2.3:a:sun:jre:1.4.2_4:::::::* cpe:2.3:a:sun:jre:1.4.2_3:::::::* cpe:2.3:a:sun:jre:1.4.2_2:::::::* cpe:2.3:a:sun:jre:1.4.2_18:::::::* cpe:2.3:a:sun:jre:1.4.2_17:::::::* cpe:2.3:a:sun:jre:1.4.2_16:::::::* cpe:2.3:a:sun:jre:1.4.2_15:::::::* cpe:2.3:a:sun:jre:1.4.2_14:::::::* cpe:2.3:a:sun:jre:1.4.2_13:::::::* cpe:2.3:a:sun:jre:1.4.2_12:::::::* cpe:2.3:a:sun:jre:1.4.2_11:::::::* cpe:2.3:a:sun:jre:1.4.2_10:::::::* cpe:2.3:a:sun:jre:1.4.2_1:::::::* cpe:2.3:a:sun:jre:1.4.2:-:::::: cpe:2.3:a:sun:jre:1.3.1_23:::::::* cpe:2.3:a:sun:jre:1.3.1_22:::::::* cpe:2.3:a:sun:jre:1.3.1_21:::::::* cpe:2.3:a:sun:jre:1.3.1_20:::::::* cpe:2.3:a:sun:jre:1.3.1_2:::::::* cpe:2.3:a:sun:jre:1.3.1_19:::::::* cpe:2.3:a:sun:jre:1.3.1_18:::::::* cpe:2.3:a:sun:jre:1.3.1_17:::::::* cpe:2.3:a:sun:jre:1.3.1_16:::::::* cpe:2.3:a:sun:jre:1.3.1_15:::::::* cpe:2.3:a:sun:jre:1.3.1_14:::::::* cpe:2.3:a:sun:jre:1.3.1_13:::::::* cpe:2.3:a:sun:jre:1.3.1_12:::::::* cpe:2.3:a:sun:jre:1.3.1_11:::::::* cpe:2.3:a:sun:jre:1.3.1_10:::::::* cpe:2.3:a:sun:jre:1.3.1_09:::::::* cpe:2.3:a:sun:jre:1.3.1_08:::::::* cpe:2.3:a:sun:jre:1.3.1_07:::::::* cpe:2.3:a:sun:jre:1.3.1_06:::::::* cpe:2.3:a:sun:jre:1.3.1_05:::::::* cpe:2.3:a:sun:jre:1.3.1_04:::::::* cpe:2.3:a:sun:jre:1.3.1_03:::::::* cpe:2.3:a:sun:jre:1.3.1:-::::::	60
Application	Sun Sdk cpe:2.3:a:sun:sdk:1.4.2_9:::::::* cpe:2.3:a:sun:sdk:1.4.2_8:::::::* cpe:2.3:a:sun:sdk:1.4.2_7:::::::* cpe:2.3:a:sun:sdk:1.4.2_6:::::::* cpe:2.3:a:sun:sdk:1.4.2_5:::::::* cpe:2.3:a:sun:sdk:1.4.2_4:::::::* cpe:2.3:a:sun:sdk:1.4.2_3:::::::* cpe:2.3:a:sun:sdk:1.4.2_2:::::::* cpe:2.3:a:sun:sdk:1.4.2_18:::::::* cpe:2.3:a:sun:sdk:1.4.2_17:::::::* cpe:2.3:a:sun:sdk:1.4.2_16:::::::* cpe:2.3:a:sun:sdk:1.4.2_15:::::::* cpe:2.3:a:sun:sdk:1.4.2_14:::::::* cpe:2.3:a:sun:sdk:1.4.2_13:::::::* cpe:2.3:a:sun:sdk:1.4.2_12:::::::* cpe:2.3:a:sun:sdk:1.4.2_11:::::::* cpe:2.3:a:sun:sdk:1.4.2_10:::::::* cpe:2.3:a:sun:sdk:1.4.2_1:::::::* cpe:2.3:a:sun:sdk:1.4.2_09:::::::* cpe:2.3:a:sun:sdk:1.4.2_08:::::::* cpe:2.3:a:sun:sdk:1.4.2_04:::::::* cpe:2.3:a:sun:sdk:1.4.2_03:::::::* cpe:2.3:a:sun:sdk:1.4.2_02:::::::* cpe:2.3:a:sun:sdk:1.4.2:::::::* cpe:2.3:a:sun:sdk:1.3.1_23:::::::* cpe:2.3:a:sun:sdk:1.3.1_22:::::::* cpe:2.3:a:sun:sdk:1.3.1_21:::::::* cpe:2.3:a:sun:sdk:1.3.1_20:::::::* cpe:2.3:a:sun:sdk:1.3.1_19:::::::* cpe:2.3:a:sun:sdk:1.3.1_18:::::::* cpe:2.3:a:sun:sdk:1.3.1_17:::::::* cpe:2.3:a:sun:sdk:1.3.1_16:::::::* cpe:2.3:a:sun:sdk:1.3.1_15:::::::* cpe:2.3:a:sun:sdk:1.3.1_14:::::::* cpe:2.3:a:sun:sdk:1.3.1_13:::::::* cpe:2.3:a:sun:sdk:1.3.1_12:::::::* cpe:2.3:a:sun:sdk:1.3.1_11:::::::* cpe:2.3:a:sun:sdk:1.3.1_10:::::::* cpe:2.3:a:sun:sdk:1.3.1_09:::::::* cpe:2.3:a:sun:sdk:1.3.1_08:::::::* cpe:2.3:a:sun:sdk:1.3.1_07:::::::* cpe:2.3:a:sun:sdk:1.3.1_06:::::::* cpe:2.3:a:sun:sdk:1.3.1_05:::::::* cpe:2.3:a:sun:sdk:1.3.1_04:::::::* cpe:2.3:a:sun:sdk:1.3.1_03:::::::* cpe:2.3:a:sun:sdk:1.3.1_02:::::::* cpe:2.3:a:sun:sdk:1.3.1_01a:::::::* cpe:2.3:a:sun:sdk:1.3.1_01:::::::* cpe:2.3:a:sun:sdk:1.3.1:::::::*	49

OpenVAS Exploits

Date	Description
2010-05-28	Name : Java for Mac OS X 10.5 Update 4 File : nvt/macosx_java_for_10_5_upd_4.nasl
2009-11-23	Name : Gentoo Security Advisory GLSA 200911-02 (sun-jre-bin sun-jdk emul-linux-x86-j... File : nvt/glsa_200911_02.nasl
2009-10-13	Name : SLES10: Security update for IBM Java 1.4.2 File : nvt/sles10_java-1_4_2-ibm0.nasl
2009-10-13	Name : SLES10: Security update for Sun Java 1.4.2 File : nvt/sles10_java-1_4_2-sun.nasl
2009-10-13	Name : SLES10: Security update for IBM Java 1.5.0 File : nvt/sles10_java-1_5_0-ibm2.nasl
2009-10-11	Name : SLES11: Security update for IBM Java 1.4.2 File : nvt/sles11_java-1_4_2-ibm.nasl
2009-10-10	Name : SLES9: Security update for Sun Java File : nvt/sles9p5040565.nasl
2009-10-10	Name : SLES9: Security update for IBM Java5 JRE and SDK File : nvt/sles9p5041763.nasl
2009-10-10	Name : SLES9: Security update for IBM Java2 JRE and SDK File : nvt/sles9p5046860.nasl
2009-05-20	Name : SuSE Security Summary SUSE-SR:2009:010 File : nvt/suse_sr_2009_010.nasl
2009-05-05	Name : HP-UX Update for Java HPSBUX02411 File : nvt/gb_hp_ux_HPSBUX02411.nasl
2009-04-28	Name : RedHat Security Advisory RHSA-2009:0445 File : nvt/RHSA_2009_0445.nasl
2009-03-13	Name : Ubuntu USN-732-1 (dash) File : nvt/ubuntu_732_1.nasl
2009-03-13	Name : Ubuntu USN-731-1 (apache2) File : nvt/ubuntu_731_1.nasl
2009-03-13	Name : SuSE Security Summary SUSE-SR:2009:006 File : nvt/suse_sr_2009_006.nasl
2009-02-16	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2008-10913 File : nvt/gb_fedora_2008_10913_java-1.6.0-openjdk_fc10.nasl
2009-02-16	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2008-10860 File : nvt/gb_fedora_2008_10860_java-1.6.0-openjdk_fc9.nasl
2009-02-02	Name : Ubuntu USN-710-1 (xine-lib) File : nvt/ubuntu_710_1.nasl
2009-02-02	Name : Ubuntu USN-711-1 (ktorrent) File : nvt/ubuntu_711_1.nasl
2009-02-02	Name : Ubuntu USN-712-1 (vim) File : nvt/ubuntu_712_1.nasl
2009-02-02	Name : Ubuntu USN-713-1 (openjdk-6) File : nvt/ubuntu_713_1.nasl
2009-01-20	Name : RedHat Security Advisory RHSA-2009:0016 File : nvt/RHSA_2009_0016.nasl
2009-01-20	Name : RedHat Security Advisory RHSA-2009:0015 File : nvt/RHSA_2009_0015.nasl
2009-01-13	Name : SuSE Security Advisory SUSE-SA:2009:001 (Sun Java) File : nvt/suse_sa_2009_001.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
50495	Sun Java JDK / JRE Environment Temporary File Name Prediction Weakness

Information Assurance Vulnerability Management (IAVM)

Date	Description
2009-10-22	IAVM : 2009-A-0105 - Multiple Vulnerabilities in VMware Products Severity : Category I - VMSKEY : V0021867

Nessus® Vulnerability Scanner

Date	Description
2016-03-03	Name : The remote host is missing a security-related patch. File : vmware_VMSA-2009-0014_remote.nasl - Type : ACT_GATHER_INFO
2014-11-26	Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2009-0014.nasl - Type : ACT_GATHER_INFO
2013-02-22	Name : The remote Unix host contains a runtime environment that is affected by multi... File : sun_java_jre_244986_unix.nasl - Type : ACT_GATHER_INFO
2010-01-10	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-0466.nasl - Type : ACT_GATHER_INFO
2009-12-14	Name : The remote HP-UX host is missing a security-related patch. File : hpux_PHSS_40374.nasl - Type : ACT_GATHER_INFO
2009-12-14	Name : The remote HP-UX host is missing a security-related patch. File : hpux_PHSS_40375.nasl - Type : ACT_GATHER_INFO
2009-11-18	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200911-02.nasl - Type : ACT_GATHER_INFO
2009-10-19	Name : The remote VMware ESX host is missing one or more security-related patches. File : vmware_VMSA-2009-0014.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12336.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_5_0-ibm-5960.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_4_2-sun-5852.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_4_2-ibm-090405.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12387.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12321.nasl - Type : ACT_GATHER_INFO
2009-08-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-0445.nasl - Type : ACT_GATHER_INFO
2009-08-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-1018.nasl - Type : ACT_GATHER_INFO
2009-08-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-1025.nasl - Type : ACT_GATHER_INFO
2009-08-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-0015.nasl - Type : ACT_GATHER_INFO
2009-08-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-0016.nasl - Type : ACT_GATHER_INFO
2009-07-21	Name : The remote openSUSE host is missing a security update. File : suse_11_0_java-1_5_0-sun-081217.nasl - Type : ACT_GATHER_INFO
2009-07-21	Name : The remote openSUSE host is missing a security update. File : suse_11_0_java-1_6_0-sun-081217.nasl - Type : ACT_GATHER_INFO
2009-07-21	Name : The remote openSUSE host is missing a security update. File : suse_11_1_java-1_5_0-sun-081217.nasl - Type : ACT_GATHER_INFO
2009-07-21	Name : The remote openSUSE host is missing a security update. File : suse_11_1_java-1_6_0-openjdk-090303.nasl - Type : ACT_GATHER_INFO
2009-07-21	Name : The remote openSUSE host is missing a security update. File : suse_11_1_java-1_6_0-sun-081217.nasl - Type : ACT_GATHER_INFO
2009-07-09	Name : The remote host has a version of Java that is affected by multiple vulnerabil... File : macosx_java_rel9.nasl - Type : ACT_GATHER_INFO
2009-06-17	Name : The remote host has a version of Java that is affected by multiple vulnerabil... File : macosx_java_10_5_update4.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-713-1.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Fedora host is missing a security update. File : fedora_2008-10913.nasl - Type : ACT_GATHER_INFO
2009-01-07	Name : The remote openSUSE host is missing a security update. File : suse_java-1_5_0-sun-5875.nasl - Type : ACT_GATHER_INFO
2009-01-07	Name : The remote openSUSE host is missing a security update. File : suse_java-1_6_0-sun-5876.nasl - Type : ACT_GATHER_INFO
2008-12-08	Name : The remote Fedora host is missing a security update. File : fedora_2008-10860.nasl - Type : ACT_GATHER_INFO
2008-12-04	Name : The remote Windows host contains a runtime environment that is affected by mu... File : sun_java_jre_244986.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/32608
CERT	http://www.us-cert.gov/cas/techalerts/TA08-340A.html
CONFIRM	http://support.avaya.com/elmodocs2/security/ASA-2008-484.htm http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914... http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf
GENTOO	http://security.gentoo.org/glsa/glsa-200911-02.xml
HP	http://marc.info/?l=bugtraq&m=123678756409861&w=2 http://marc.info/?l=bugtraq&m=126583436323697&w=2
OVAL	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
REDHAT	http://rhn.redhat.com/errata/RHSA-2008-1018.html http://rhn.redhat.com/errata/RHSA-2008-1025.html http://www.redhat.com/support/errata/RHSA-2009-0015.html http://www.redhat.com/support/errata/RHSA-2009-0016.html http://www.redhat.com/support/errata/RHSA-2009-0445.html https://rhn.redhat.com/errata/RHSA-2009-0466.html
SECTRACK	http://www.securitytracker.com/id?1021316
SECUNIA	http://secunia.com/advisories/32991 http://secunia.com/advisories/33015 http://secunia.com/advisories/33187 http://secunia.com/advisories/33528 http://secunia.com/advisories/33709 http://secunia.com/advisories/33710 http://secunia.com/advisories/34233 http://secunia.com/advisories/34259 http://secunia.com/advisories/34605 http://secunia.com/advisories/34889 http://secunia.com/advisories/34972 http://secunia.com/advisories/35065 http://secunia.com/advisories/37386 http://secunia.com/advisories/38539
SUNALERT	http://sunsolve.sun.com/search/document.do?assetkey=1-26-244986-1
SUSE	http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html
VUPEN	http://www.vupen.com/english/advisories/2008/3339 http://www.vupen.com/english/advisories/2009/0672
XF	https://exchange.xforce.ibmcloud.com/vulnerabilities/47045

Alert History

If you want to see full details history, please login or register.

Date	Informations
2024-02-02 01:09:51	Multiple Updates
2024-02-01 12:02:52	Multiple Updates
2023-09-05 12:09:12	Multiple Updates
2023-09-05 01:02:43	Multiple Updates
2023-09-02 12:09:19	Multiple Updates
2023-09-02 01:02:44	Multiple Updates
2023-08-12 12:10:56	Multiple Updates
2023-08-12 01:02:44	Multiple Updates
2023-08-11 12:09:21	Multiple Updates
2023-08-11 01:02:49	Multiple Updates
2023-08-06 12:08:58	Multiple Updates
2023-08-06 01:02:45	Multiple Updates
2023-08-04 12:09:03	Multiple Updates
2023-08-04 01:02:48	Multiple Updates
2023-07-14 12:09:02	Multiple Updates
2023-07-14 01:02:45	Multiple Updates
2023-03-29 01:10:16	Multiple Updates
2023-03-28 12:02:51	Multiple Updates
2022-10-11 12:08:01	Multiple Updates
2022-10-11 01:02:35	Multiple Updates
2021-05-04 12:08:42	Multiple Updates
2021-04-22 01:09:02	Multiple Updates
2020-05-23 00:22:41	Multiple Updates
2019-10-10 05:19:25	Multiple Updates
2019-07-31 17:19:09	Multiple Updates
2019-07-31 12:02:37	Multiple Updates
2018-11-30 12:02:37	Multiple Updates
2018-10-10 12:02:32	Multiple Updates
2017-09-29 09:23:51	Multiple Updates
2017-08-08 09:24:33	Multiple Updates
2016-08-23 09:24:33	Multiple Updates
2016-06-28 17:22:00	Multiple Updates
2016-04-26 18:05:44	Multiple Updates
2016-03-04 13:26:24	Multiple Updates
2014-02-17 10:47:31	Multiple Updates
2013-11-11 12:38:08	Multiple Updates
2013-05-11 00:31:52	Multiple Updates

Global Informations

Type	Count
Oval ID(s)	7
CPE ID(s)	127
Sources(s)	39
osvdb(s)	1
Openvas Exploit(s)	24
IAVM(s)	1
Nessus® Exploit(s)	32

	Related
10	VMSA-2009-0014
10	USN-713-1
10	TA08-340A
10	RHSA-2009:0445
10	RHSA-2009:0016
10	RHSA-2009:0015
10	RHSA-2008:1025
10	RHSA-2008:1018
10	HPSBUX02411 SSR...
10	HPSBMA02486 SSR...
10	GLSA-200911-02
6.4	SUN-244986
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 12 more Alert(s)

6.4 - CVE-2008-5360

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

OVAL Definitions

CPE : Common Platform Enumeration

OpenVAS Exploits

Open Source Vulnerability Database (OSVDB)

Information Assurance Vulnerability Management (IAVM)

Nessus® Vulnerability Scanner

Sources (Detail)

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU