Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2008-1195

Unspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to access arbitrary network services on the local host via unspecified vectors related to JavaScript and Java APIs.

Security Impact Summary

CVE-2008-1195 is a security vulnerability that . Impacting 4 products from sun, from sun, from sun and 1 other, organizations running these solutions should prioritize assessment and patching.

Historical Context

Originally identified in 2008, this vulnerability predates many modern security frameworks and practices. The vulnerability landscape of that era was characterized by different threat models and less mature defense mechanisms compared to contemporary standards.

Published

2008-03-06T21:44:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
CWE-254

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jre	1.4.2	Yes
Application	sun	jre	1.4.2_1	Yes
Application	sun	jre	1.4.2_2	Yes
Application	sun	jre	1.4.2_3	Yes
Application	sun	jre	1.4.2_4	Yes
Application	sun	jre	1.4.2_5	Yes
Application	sun	jre	1.4.2_6	Yes
Application	sun	jre	1.4.2_7	Yes
Application	sun	jre	1.4.2_8	Yes
Application	sun	jre	1.4.2_9	Yes
Application	sun	jre	1.4.2_10	Yes
Application	sun	jre	1.4.2_11	Yes
Application	sun	jre	1.4.2_12	Yes
Application	sun	jre	1.4.2_13	Yes
Application	sun	jre	1.4.2_14	Yes
Application	sun	jre	1.4.2_15	Yes
Application	sun	jre	1.4.2_16	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	sdk	1.4.2	Yes
Application	sun	sdk	1.4.2_1	Yes
Application	sun	sdk	1.4.2_2	Yes
Application	sun	sdk	1.4.2_3	Yes
Application	sun	sdk	1.4.2_4	Yes
Application	sun	sdk	1.4.2_5	Yes
Application	sun	sdk	1.4.2_6	Yes
Application	sun	sdk	1.4.2_7	Yes
Application	sun	sdk	1.4.2_8	Yes
Application	sun	sdk	1.4.2_9	Yes
Application	sun	sdk	1.4.2_10	Yes
Application	sun	sdk	1.4.2_11	Yes
Application	sun	sdk	1.4.2_12	Yes
Application	sun	sdk	1.4.2_13	Yes
Application	sun	sdk	1.4.2_14	Yes
Application	sun	sdk	1.4.2_15	Yes
Application	sun	sdk	1.4.2_16	Yes
Operating System	canonical	ubuntu_linux	6.06	Yes
Operating System	canonical	ubuntu_linux	6.10	Yes
Operating System	canonical	ubuntu_linux	7.04	Yes
Operating System	canonical	ubuntu_linux	7.10	Yes

References

http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html Mailing List, Third Party Advisory ([email protected])
http://secunia.com/advisories/29239 Third Party Advisory ([email protected])
http://secunia.com/advisories/29273 Third Party Advisory ([email protected])
http://secunia.com/advisories/29498 Third Party Advisory ([email protected])
http://secunia.com/advisories/29526 Third Party Advisory ([email protected])
http://secunia.com/advisories/29541 Third Party Advisory ([email protected])
http://secunia.com/advisories/29547 Third Party Advisory ([email protected])
http://secunia.com/advisories/29560 Third Party Advisory ([email protected])
http://secunia.com/advisories/29582 Third Party Advisory ([email protected])
http://secunia.com/advisories/29645 Third Party Advisory ([email protected])
http://secunia.com/advisories/29858 Third Party Advisory ([email protected])
http://secunia.com/advisories/29897 Third Party Advisory ([email protected])
http://secunia.com/advisories/30620 Third Party Advisory ([email protected])
http://secunia.com/advisories/30676 Third Party Advisory ([email protected])
http://secunia.com/advisories/30780 Third Party Advisory ([email protected])
http://secunia.com/advisories/31497 Third Party Advisory ([email protected])
http://secunia.com/advisories/32018 Third Party Advisory ([email protected])
http://security.gentoo.org/glsa/glsa-200804-28.xml Third Party Advisory ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-26-233326-1 Third Party Advisory ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 Third Party Advisory ([email protected])
http://support.apple.com/kb/HT3178 Third Party Advisory ([email protected])
http://support.apple.com/kb/HT3179 Third Party Advisory ([email protected])
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128 Third Party Advisory ([email protected])
http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml Third Party Advisory ([email protected])
http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml Third Party Advisory ([email protected])
http://www.mandriva.com/security/advisories?name=MDVSA-2008:080 Third Party Advisory ([email protected])
http://www.mozilla.org/security/announce/2008/mfsa2008-18.html Third Party Advisory ([email protected])
http://www.redhat.com/support/errata/RHSA-2008-0186.html Third Party Advisory ([email protected])
http://www.redhat.com/support/errata/RHSA-2008-0210.html Third Party Advisory ([email protected])
http://www.redhat.com/support/errata/RHSA-2008-0267.html Third Party Advisory ([email protected])
http://www.securityfocus.com/archive/1/490196/100/0/threaded Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id?1019553 Third Party Advisory, VDB Entry ([email protected])
http://www.ubuntu.com/usn/usn-592-1 Third Party Advisory ([email protected])
http://www.us-cert.gov/cas/techalerts/TA08-066A.html Third Party Advisory, US Government Resource ([email protected])
http://www.us-cert.gov/cas/techalerts/TA08-087A.html Third Party Advisory, US Government Resource ([email protected])
http://www.vmware.com/security/advisories/VMSA-2008-0010.html Third Party Advisory ([email protected])
http://www.vupen.com/english/advisories/2008/0770/references Third Party Advisory ([email protected])
http://www.vupen.com/english/advisories/2008/0998/references Third Party Advisory ([email protected])
http://www.vupen.com/english/advisories/2008/1793/references Third Party Advisory ([email protected])
http://www.vupen.com/english/advisories/2008/1856/references Third Party Advisory ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/41030 Third Party Advisory, VDB Entry ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9486 Third Party Advisory ([email protected])
http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/29239 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/29273 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/29498 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/29526 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/29541 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/29547 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/29560 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/29582 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/29645 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/29858 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/29897 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/30620 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/30676 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/30780 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31497 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/32018 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://security.gentoo.org/glsa/glsa-200804-28.xml Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-233326-1 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://support.apple.com/kb/HT3178 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://support.apple.com/kb/HT3179 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDVSA-2008:080 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.mozilla.org/security/announce/2008/mfsa2008-18.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2008-0186.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2008-0210.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2008-0267.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/490196/100/0/threaded Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1019553 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/usn-592-1 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.us-cert.gov/cas/techalerts/TA08-066A.html Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.us-cert.gov/cas/techalerts/TA08-087A.html Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/security/advisories/VMSA-2008-0010.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/0770/references Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/0998/references Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/1793/references Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/1856/references Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/41030 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9486 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For sun's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.