Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2008-3112

Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the writeManifest method in the CacheEntry class, aka CR 6703909.

Published

2008-07-09T23:41:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-264
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application sun jdk ≤ 5.0 Yes
Application sun jdk ≤ 6 Yes
Application sun jdk 5.0 Yes
Application sun jdk 5.0 Yes
Application sun jdk 5.0 Yes
Application sun jdk 5.0 Yes
Application sun jdk 5.0 Yes
Application sun jdk 5.0 Yes
Application sun jdk 5.0 Yes
Application sun jdk 5.0 Yes
Application sun jdk 5.0 Yes
Application sun jdk 5.0 Yes
Application sun jdk 5.0 Yes
Application sun jdk 5.0 Yes
Application sun jdk 5.0 Yes
Application sun jdk 6 Yes
Application sun jdk 6 Yes
Application sun jdk 6 Yes
Application sun jdk 6 Yes
Application sun jdk 6 Yes
Application sun jre ≤ 1.4.2_17 Yes
Application sun jre ≤ 5.0 Yes
Application sun jre ≤ 6 Yes
Application sun jre 1.4.2 Yes
Application sun jre 1.4.2_01 Yes
Application sun jre 1.4.2_02 Yes
Application sun jre 1.4.2_03 Yes
Application sun jre 1.4.2_04 Yes
Application sun jre 1.4.2_05 Yes
Application sun jre 1.4.2_06 Yes
Application sun jre 1.4.2_07 Yes
Application sun jre 1.4.2_8 Yes
Application sun jre 1.4.2_9 Yes
Application sun jre 1.4.2_10 Yes
Application sun jre 1.4.2_11 Yes
Application sun jre 1.4.2_12 Yes
Application sun jre 1.4.2_13 Yes
Application sun jre 1.4.2_14 Yes
Application sun jre 1.4.2_15 Yes
Application sun jre 1.4.2_16 Yes
Application sun jre 5.0 Yes
Application sun jre 5.0 Yes
Application sun jre 5.0 Yes
Application sun jre 5.0 Yes
Application sun jre 5.0 Yes
Application sun jre 5.0 Yes
Application sun jre 5.0 Yes
Application sun jre 5.0 Yes
Application sun jre 5.0 Yes
Application sun jre 5.0 Yes
Application sun jre 5.0 Yes
Application sun jre 5.0 Yes
Application sun jre 5.0 Yes
Application sun jre 5.0 Yes
Application sun jre 6 Yes
Application sun jre 6 Yes
Application sun jre 6 Yes
Application sun jre 6 Yes
Application sun jre 6 Yes
Application sun sdk 1.4.2 Yes
Application sun sdk 1.4.2_01 Yes
Application sun sdk 1.4.2_02 Yes
Application sun sdk 1.4.2_03 Yes
Application sun sdk 1.4.2_04 Yes
Application sun sdk 1.4.2_05 Yes
Application sun sdk 1.4.2_06 Yes
Application sun sdk 1.4.2_07 Yes
Application sun sdk 1.4.2_08 Yes
Application sun sdk 1.4.2_09 Yes
Application sun sdk 1.4.2_10 Yes
Application sun sdk 1.4.2_11 Yes
Application sun sdk 1.4.2_12 Yes
Application sun sdk 1.4.2_13 Yes
Application sun sdk 1.4.2_14 Yes
Application sun sdk 1.4.2_15 Yes
Application sun sdk 1.4.2_16 Yes
Application sun sdk 1.4.2_17 Yes
References