CVE-2005-3904
Summary
| CVE | CVE-2005-3904 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2005-11-30 11:03:00 UTC |
| Updated | 2025-04-03 01:03:51 UTC |
| Description | Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1.4.2 and later, 1.3.1 and later allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors. |
Risk And Classification
Primary CVSS: v2.0 7.5 from [email protected]
AV:N/AC:L/Au:N/C:P/I:P/A:P
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:L/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Sun | Jdk | 1.5.0_03 | All | linux | All |
| Application | Sun | Jdk | 1.5.0_03 | All | solaris | All |
| Application | Sun | Jdk | 1.5.0_03 | All | windows | All |
| Application | Sun | Jre | 1.3.0 | All | All | All |
| Application | Sun | Jre | 1.3.0 | update1 | All | All |
| Application | Sun | Jre | 1.3.0 | update2 | All | All |
| Application | Sun | Jre | 1.3.0 | update3 | All | All |
| Application | Sun | Jre | 1.3.0 | update4 | All | All |
| Application | Sun | Jre | 1.3.0 | update5 | All | All |
| Application | Sun | Jre | 1.3.1 | All | All | All |
| Application | Sun | Jre | 1.3.1 | update1 | All | All |
| Application | Sun | Jre | 1.3.1 | update15 | All | All |
| Application | Sun | Jre | 1.3.1 | update1a | All | All |
| Application | Sun | Jre | 1.3.1 | update4 | All | All |
| Application | Sun | Jre | 1.3.1 | update8 | All | All |
| Application | Sun | Jre | 1.4.1 | All | All | All |
| Application | Sun | Jre | 1.4.2 | All | All | All |
| Application | Sun | Jre | 1.4.2_1 | All | All | All |
| Application | Sun | Jre | 1.4.2_2 | All | All | All |
| Application | Sun | Jre | 1.4.2_3 | All | All | All |
| Application | Sun | Jre | 1.4.2_4 | All | All | All |
| Application | Sun | Jre | 1.4.2_5 | All | All | All |
| Application | Sun | Jre | 1.4.2_6 | All | All | All |
| Application | Sun | Jre | 1.4.2_7 | All | All | All |
| Application | Sun | Jre | 1.4.2_8 | All | All | All |
| Application | Sun | Jre | 1.5.0 | All | All | All |
| Application | Sun | Jre | 1.5.0 | update1 | All | All |
| Application | Sun | Jre | 1.5.0 | update2 | All | All |
| Application | Sun | Jre | 1.5.0 | update3 | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Secunia - Advisories - Sun Java JRE Sandbox Security Bypass Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Patch, Vendor Advisory |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Secunia - Advisories - SUSE update for multiple packages | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| #102017: Security Vulnerability With Java Management Extensions in the Java Runtime Environment may Allow Untrusted Applet to Elevate Privileges | af854a3a-2127-422b-91ae-364da2661108 | sunsolve.sun.com | Vendor Advisory |
| SecurityTracker.com Archives - Sun Java Runtime Environment (JRE) JMX Bug Lets Applets Gain Elevated Privileges | af854a3a-2127-422b-91ae-364da2661108 | securitytracker.com | |
| IBM notice: The page you requested cannot be displayed | af854a3a-2127-422b-91ae-364da2661108 | www-1.ibm.com | |
| Sun Java Runtime Environment Multiple Privilege Escalation Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Secunia - Advisories - IBM Java SDK JRE Sandbox Security Bypass Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| APPLE-SA-2005-11-30 J2SE 5.0 Release 3 | af854a3a-2127-422b-91ae-364da2661108 | lists.apple.com | |
| US-CERT Vulnerability Note VU#931684 | af854a3a-2127-422b-91ae-364da2661108 | www.kb.cert.org | US Government Resource |
| Secunia - Advisories - Apple Mac OS X update for Java | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.