CVE-2008-5341
Summary
| CVE | CVE-2008-5341 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2008-12-05 11:30:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
NoneAvailability
NoneAV:N/AC:L/Au:N/C:P/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Sun | Jdk | 5.0 | update_1 | All | All |
| Application | Sun | Jdk | 5.0 | update_10 | All | All |
| Application | Sun | Jdk | 5.0 | update_11 | All | All |
| Application | Sun | Jdk | 5.0 | update_12 | All | All |
| Application | Sun | Jdk | 5.0 | update_13 | All | All |
| Application | Sun | Jdk | 5.0 | update_14 | All | All |
| Application | Sun | Jdk | 5.0 | update_15 | All | All |
| Application | Sun | Jdk | 5.0 | update_2 | All | All |
| Application | Sun | Jdk | 5.0 | update_3 | All | All |
| Application | Sun | Jdk | 5.0 | update_4 | All | All |
| Application | Sun | Jdk | 5.0 | update_5 | All | All |
| Application | Sun | Jdk | 5.0 | update_6 | All | All |
| Application | Sun | Jdk | 5.0 | update_7 | All | All |
| Application | Sun | Jdk | 5.0 | update_8 | All | All |
| Application | Sun | Jdk | 5.0 | update_9 | All | All |
| Application | Sun | Jdk | 6 | All | All | All |
| Application | Sun | Jdk | 6 | update_1 | All | All |
| Application | Sun | Jdk | 6 | update_2 | All | All |
| Application | Sun | Jdk | 6 | update_3 | All | All |
| Application | Sun | Jdk | 6 | update_4 | All | All |
| Application | Sun | Jdk | 6 | update_5 | All | All |
| Application | Sun | Jdk | 6 | update_6 | All | All |
| Application | Sun | Jdk | 6 | update_7 | All | All |
| Application | Sun | Jdk | 6 | update_8 | All | All |
| Application | Sun | Jdk | 6 | update_9 | All | All |
| Application | Sun | Jdk | All | update_16 | All | All |
| Application | Sun | Jdk | All | update_10 | All | All |
| Application | Sun | Jre | 1.4.2_1 | All | All | All |
| Application | Sun | Jre | 1.4.2_10 | All | All | All |
| Application | Sun | Jre | 1.4.2_11 | All | All | All |
| Application | Sun | Jre | 1.4.2_12 | All | All | All |
| Application | Sun | Jre | 1.4.2_13 | All | All | All |
| Application | Sun | Jre | 1.4.2_14 | All | All | All |
| Application | Sun | Jre | 1.4.2_15 | All | All | All |
| Application | Sun | Jre | 1.4.2_16 | All | All | All |
| Application | Sun | Jre | 1.4.2_17 | All | All | All |
| Application | Sun | Jre | 1.4.2_2 | All | All | All |
| Application | Sun | Jre | 1.4.2_3 | All | All | All |
| Application | Sun | Jre | 1.4.2_4 | All | All | All |
| Application | Sun | Jre | 1.4.2_5 | All | All | All |
| Application | Sun | Jre | 1.4.2_6 | All | All | All |
| Application | Sun | Jre | 1.4.2_7 | All | All | All |
| Application | Sun | Jre | 1.4.2_8 | All | All | All |
| Application | Sun | Jre | 1.4.2_9 | All | All | All |
| Application | Sun | Jre | 5.0 | All | All | All |
| Application | Sun | Jre | 5.0 | update_1 | All | All |
| Application | Sun | Jre | 5.0 | update_10 | All | All |
| Application | Sun | Jre | 5.0 | update_11 | All | All |
| Application | Sun | Jre | 5.0 | update_12 | All | All |
| Application | Sun | Jre | 5.0 | update_13 | All | All |
| Application | Sun | Jre | 5.0 | update_14 | All | All |
| Application | Sun | Jre | 5.0 | update_15 | All | All |
| Application | Sun | Jre | 5.0 | update_2 | All | All |
| Application | Sun | Jre | 5.0 | update_3 | All | All |
| Application | Sun | Jre | 5.0 | update_4 | All | All |
| Application | Sun | Jre | 5.0 | update_5 | All | All |
| Application | Sun | Jre | 5.0 | update_6 | All | All |
| Application | Sun | Jre | 5.0 | update_7 | All | All |
| Application | Sun | Jre | 5.0 | update_8 | All | All |
| Application | Sun | Jre | 5.0 | update_9 | All | All |
| Application | Sun | Jre | 6 | All | All | All |
| Application | Sun | Jre | 6 | update_1 | All | All |
| Application | Sun | Jre | 6 | update_2 | All | All |
| Application | Sun | Jre | 6 | update_3 | All | All |
| Application | Sun | Jre | 6 | update_4 | All | All |
| Application | Sun | Jre | 6 | update_5 | All | All |
| Application | Sun | Jre | 6 | update_6 | All | All |
| Application | Sun | Jre | 6 | update_7 | All | All |
| Application | Sun | Jre | 6 | update_8 | All | All |
| Application | Sun | Jre | 6 | update_9 | All | All |
| Application | Sun | Jre | All | All | All | All |
| Application | Sun | Jre | All | update_16 | All | All |
| Application | Sun | Jre | All | update_10 | All | All |
| Application | Sun | Sdk | 1.4.2_1 | All | All | All |
| Application | Sun | Sdk | 1.4.2_10 | All | All | All |
| Application | Sun | Sdk | 1.4.2_11 | All | All | All |
| Application | Sun | Sdk | 1.4.2_12 | All | All | All |
| Application | Sun | Sdk | 1.4.2_13 | All | All | All |
| Application | Sun | Sdk | 1.4.2_14 | All | All | All |
| Application | Sun | Sdk | 1.4.2_15 | All | All | All |
| Application | Sun | Sdk | 1.4.2_16 | All | All | All |
| Application | Sun | Sdk | 1.4.2_17 | All | All | All |
| Application | Sun | Sdk | 1.4.2_2 | All | All | All |
| Application | Sun | Sdk | 1.4.2_3 | All | All | All |
| Application | Sun | Sdk | 1.4.2_4 | All | All | All |
| Application | Sun | Sdk | 1.4.2_5 | All | All | All |
| Application | Sun | Sdk | 1.4.2_6 | All | All | All |
| Application | Sun | Sdk | 1.4.2_7 | All | All | All |
| Application | Sun | Sdk | 1.4.2_8 | All | All | All |
| Application | Sun | Sdk | 1.4.2_9 | All | All | All |
| Application | Sun | Sdk | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Webmail | OVH- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| ASA-2009-012 (RHSA-2009-0016) | af854a3a-2127-422b-91ae-364da2661108 | support.avaya.com | |
| Red Hat update for java-1.5.0-sun / java-1.6.0-sun - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Sun Java JDK / JRE Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| marc.info | af854a3a-2127-422b-91ae-364da2661108 | marc.info | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| [security-announce] SUSE Security Announcement: IBM Java 1.4.2 and 6 (SU | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| HP OpenView Network Node Manager Java JDK / JRE Multiple Vulnerabilities - Advisories - Community | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| rhn.redhat.com | Red Hat Support | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | |
| Support | af854a3a-2127-422b-91ae-364da2661108 | www.redhat.com | |
| #244988: Multiple Security Vulnerabilities in Java Web Start and Java Plug-in May Allow Privilege Escalation | af854a3a-2127-422b-91ae-364da2661108 | sunsolve.sun.com | Patch, Vendor Advisory |
| '[security bulletin] HPSBMA02486 SSRT090049 rev.1 - HP OpenView Network Node Manager (OV NNM) Java Ru' - MARC | af854a3a-2127-422b-91ae-364da2661108 | marc.info | |
| Gentoo Linux Documentation -- Sun JDK/JRE: Multiple vulnerabilites | af854a3a-2127-422b-91ae-364da2661108 | security.gentoo.org | |
| HP-UX update for JRE / JDK - Secunia Advisories - Vulnerability Information - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Gentoo updates for sun-jre-bin, sun-jdk, blackdown-jre, blackdown-jdk, and emul-linux-x86-java - Secunia Advisories - Vulnerability Information - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| SUSE update for IBMJava5-JRE and java-1_5_0-ibm - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Support | af854a3a-2127-422b-91ae-364da2661108 | www.redhat.com | |
| [security-announce] SUSE Security Announcement: IBM Java 5 (SUSE-SA:2009 | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| Nortel: Technical Support: Nortel Response to Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | support.nortel.com | |
| Red Hat update for java-1.6.0-ibm - Secunia Advisories - Vulnerability Information - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| SUSE update for IBM Java - Advisories - Community | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| rhn.redhat.com | Red Hat Support | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | |
| US-CERT Technical Cyber Security Alert TA08-340A -- Sun Java Updates for Multiple Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.us-cert.gov | US Government Resource |
| ASA-2008-486 (SUN 244988) | af854a3a-2127-422b-91ae-364da2661108 | support.avaya.com | |
| www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf | af854a3a-2127-422b-91ae-364da2661108 | www116.nortel.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.