First published: Wed Jul 09 2008(Updated: )
Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier, when local monitoring is enabled, allows remote attackers to "perform unauthorized operations" via unspecified vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Sun JDK | =5.0-update_12 | |
Sun JDK | =5.0-update_3 | |
Sun JRE | =5.0-update_13 | |
Sun JRE | =5.0-update_1 | |
Sun JDK | =5.0-update_11 | |
Sun JRE | <=5.0 | |
Sun JDK | =5.0-update_8 | |
Sun JRE | =5.0-update_14 | |
Sun JRE | =6-update_3 | |
Sun JRE | =6-update_4 | |
Sun JRE | =5.0-update_12 | |
Sun JDK | =5.0-update_1 | |
Sun JDK | =6-update_1 | |
Sun JDK | =6-update_3 | |
Sun JDK | =5.0-update_5 | |
Sun JRE | =6-update_2 | |
Sun JRE | =5.0-update_4 | |
Sun JDK | =6-update_4 | |
Sun JRE | =5.0-update_9 | |
Sun JRE | =5.0-update_8 | |
Sun JRE | =5.0-update_7 | |
Sun JDK | =5.0-update_6 | |
Sun JRE | <=6 | |
Sun JRE | =6-update_5 | |
Sun JDK | <=6 | |
Sun JDK | =5.0-update_14 | |
Sun JRE | =5.0-update_2 | |
Sun JDK | =6-update_2 | |
Sun JDK | =5.0-update_13 | |
Sun JRE | =5.0-update_5 | |
Sun JRE | =5.0-update_6 | |
Sun JRE | =5.0-update_11 | |
Sun JRE | =6-update_1 | |
Sun JDK | =6-update_5 | |
Sun JDK | =5.0-update_10 | |
Sun JDK | =5.0-update_2 | |
Sun JDK | <=5.0 | |
Sun JDK | =5.0-update_4 | |
Sun JDK | =5.0-update_9 | |
Sun JRE | =5.0-update_3 | |
Sun JRE | =5.0-update_10 | |
Sun JDK | =5.0-update_7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2008-3103 is classified as a high severity vulnerability due to its potential to allow unauthorized operations through remote access.
To fix CVE-2008-3103, upgrade to a version of Sun Java Runtime Environment (JRE) or Java Development Kit (JDK) that is later than Update 6 for JDK 6 or Update 15 for JRE 5.0.
CVE-2008-3103 affects Sun JDK and JRE versions 6 Update 6 and earlier, as well as JDK and JRE 5.0 Update 15 and earlier.
Yes, CVE-2008-3103 can be exploited remotely if local monitoring is enabled.
If using an affected version of Sun JRE or JDK related to CVE-2008-3103, immediately update to a secure version that addresses this vulnerability.