CVE-2008-3103 Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier...
HighCVSS 9.3
EPSS 5.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier, when local monitoring is enabled, allows remote attackers to "perform unauthorized operations" via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jdk | <= 5.0 | No fix listed |
| sun jdk | <= 6 | No fix listed |
| sun jdk | = 5.0-update_1 | No fix listed |
| sun jdk | = 5.0-update_10 | No fix listed |
| sun jdk | = 5.0-update_11 | No fix listed |
| sun jdk | = 5.0-update_12 | No fix listed |
| sun jdk | = 5.0-update_13 | No fix listed |
| sun jdk | = 5.0-update_14 | No fix listed |
| sun jdk | = 5.0-update_2 | No fix listed |
| sun jdk | = 5.0-update_3 | No fix listed |
| sun jdk | = 5.0-update_4 | No fix listed |
| sun jdk | = 5.0-update_5 | No fix listed |
| sun jdk | = 5.0-update_6 | No fix listed |
| sun jdk | = 5.0-update_7 | No fix listed |
| sun jdk | = 5.0-update_8 | No fix listed |
| sun jdk | = 5.0-update_9 | No fix listed |
| sun jdk | = 6-update_1 | No fix listed |
| sun jdk | = 6-update_2 | No fix listed |
| sun jdk | = 6-update_3 | No fix listed |
| sun jdk | = 6-update_4 | No fix listed |
| sun jdk | = 6-update_5 | No fix listed |
| sun jre | <= 5.0 | No fix listed |
| sun jre | <= 6 | No fix listed |
| sun jre | = 5.0-update_1 | No fix listed |
| sun jre | = 5.0-update_10 | No fix listed |
Show 17 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jre | = 5.0-update_11 | No fix listed |
| sun jre | = 5.0-update_12 | No fix listed |
| sun jre | = 5.0-update_13 | No fix listed |
| sun jre | = 5.0-update_14 | No fix listed |
| sun jre | = 5.0-update_2 | No fix listed |
| sun jre | = 5.0-update_3 | No fix listed |
| sun jre | = 5.0-update_4 | No fix listed |
| sun jre | = 5.0-update_5 | No fix listed |
| sun jre | = 5.0-update_6 | No fix listed |
| sun jre | = 5.0-update_7 | No fix listed |
| sun jre | = 5.0-update_8 | No fix listed |
| sun jre | = 5.0-update_9 | No fix listed |
| sun jre | = 6-update_1 | No fix listed |
| sun jre | = 6-update_2 | No fix listed |
| sun jre | = 6-update_3 | No fix listed |
| sun jre | = 6-update_4 | No fix listed |
| sun jre | = 6-update_5 | No fix listed |
References
- APPLE-SA-2008-09-24 vendor-advisory
- SUSE-SA:2008:042 vendor-advisory
- SUSE-SR:2008:022 vendor-advisory
- 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and mailing-list
- 31010 patch third-party-advisory vendor-advisory
- 31055 third-party-advisory
- 31497 third-party-advisory
- 31600 third-party-advisory
- 32018 third-party-advisory
- 32179 third-party-advisory
- 32180 third-party-advisory
- 32394 third-party-advisory
- 32436 third-party-advisory
- 32437 third-party-advisory
- 33237 third-party-advisory
- 33238 third-party-advisory
- 34972 third-party-advisory
- 37386 third-party-advisory
- GLSA-200911-02 vendor-advisory
- 238965 patch vendor-advisory
- support.apple.com
- support.apple.com
- support.avaya.com
- support.avaya.com
- support.avaya.com
- RHSA-2008:0594 vendor-advisory
- RHSA-2008:0595 vendor-advisory
- RHSA-2008:0891 vendor-advisory
- RHSA-2008:0906 vendor-advisory
- RHSA-2008:1044 vendor-advisory
- RHSA-2008:1045 vendor-advisory
- 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues mailing-list
- 30146 vdb-entry
- 1020458 vdb-entry
- TA08-193A third-party-advisory us-government-resource
- www.vmware.com
- ADV-2008-2056 vdb-entry
- ADV-2008-2740 vdb-entry
- sun-jmx-security-bypass(43669) vdb-entry
- oval:org.mitre.oval:def:10920 signature vdb-entry
- RHSA-2009:0466 vendor-advisory