{"api_version":"1","generated_at":"2026-07-23T10:19:42+00:00","cve":"CVE-2008-3425","urls":{"html":"https://cve.report/CVE-2008-3425","api":"https://cve.report/api/cve/CVE-2008-3425.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-3425","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-3425"},"summary":{"title":"CVE-2008-3425","description":"Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System (SPS) 5.2 and 6.0 allows remote authenticated SPS users to gain administrative access to the web server via unknown attack vectors.","state":"PUBLISHED","assigner":"mitre","published_at":"2008-07-31 22:41:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-287","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.5","severity":"","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securitytracker.com/id?1020608","name":"http://www.securitytracker.com/id?1020608","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Sun N1 Service Provisioning System Administration Console Grants Access to Managed Sun Java System Web Server Systems - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/30451","name":"http://www.securityfocus.com/bid/30451","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Sun Java System Web Server 7.0 Plugin for Sun N1SPS Remote Authentication Bypass Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/31301","name":"http://secunia.com/advisories/31301","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Sun N1 Service Provisioning System Web Server Plugin Vulnerability - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239566-1","name":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239566-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44114","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44114","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2008/2261/references","name":"http://www.vupen.com/english/advisories/2008/2261/references","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-3425","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-3425","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"3425","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sun","cpe5":"java_system_web_server_plugin","cpe6":"7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3425","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sun","cpe5":"n1_service_provisioning_system","cpe6":"5.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3425","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sun","cpe5":"n1_service_provisioning_system","cpe6":"6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T09:37:26.814Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"239566","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred"],"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239566-1"},{"name":"31301","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/31301"},{"name":"1020608","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1020608"},{"name":"ADV-2008-2261","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/2261/references"},{"name":"sun-n1sps-sjsws-unauth-access(44114)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44114"},{"name":"30451","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/30451"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-07-30T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System (SPS) 5.2 and 6.0 allows remote authenticated SPS users to gain administrative access to the web server via unknown attack vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-07T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"239566","tags":["vendor-advisory","x_refsource_SUNALERT"],"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239566-1"},{"name":"31301","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/31301"},{"name":"1020608","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1020608"},{"name":"ADV-2008-2261","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/2261/references"},{"name":"sun-n1sps-sjsws-unauth-access(44114)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44114"},{"name":"30451","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/30451"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2008-3425","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System (SPS) 5.2 and 6.0 allows remote authenticated SPS users to gain administrative access to the web server via unknown attack vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"239566","refsource":"SUNALERT","url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239566-1"},{"name":"31301","refsource":"SECUNIA","url":"http://secunia.com/advisories/31301"},{"name":"1020608","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1020608"},{"name":"ADV-2008-2261","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/2261/references"},{"name":"sun-n1sps-sjsws-unauth-access(44114)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44114"},{"name":"30451","refsource":"BID","url":"http://www.securityfocus.com/bid/30451"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2008-3425","datePublished":"2008-07-31T22:00:00.000Z","dateReserved":"2008-07-31T00:00:00.000Z","dateUpdated":"2024-08-07T09:37:26.814Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-07-31 22:41:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-287","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server_plugin:7.0:*:*:*:*:*:*:*","matchCriteriaId":"09517A56-F177-4B76-A07A-F5B3D9331E08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:n1_service_provisioning_system:5.2:*:*:*:*:*:*:*","matchCriteriaId":"5AA7BB07-DB3E-4DA0-A2CE-9B10230ADD3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:n1_service_provisioning_system:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2D002A0B-1406-4A21-A0E8-D5B3D6B0AD7E"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"3425","Ordinal":"1","Title":"CVE-2008-3425","CVE":"CVE-2008-3425","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"3425","Ordinal":"1","NoteData":"Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System (SPS) 5.2 and 6.0 allows remote authenticated SPS users to gain administrative access to the web server via unknown attack vectors.","Type":"Description","Title":"CVE-2008-3425"},{"CveYear":"2008","CveId":"3425","Ordinal":"2","NoteData":"2008-07-31","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"3425","Ordinal":"3","NoteData":"2017-08-07","Type":"Other","Title":"Modified"}]}}}