CVE-2008-3105
First published: Wed Jul 09 2008(Updated: )
Unspecified vulnerability in the JAX-WS client and service in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows remote attackers to access URLs or cause a denial of service via unknown vectors involving "processing of XML data" by a trusted application.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Java Development Kit (JDK) | <=6 | |
| Java Development Kit (JDK) | =6-update_1 | |
| Java Development Kit (JDK) | =6-update_2 | |
| Java Development Kit (JDK) | =6-update_3 | |
| Java Development Kit (JDK) | =6-update_4 | |
| Java Development Kit (JDK) | =6-update_5 | |
| Sun Java Runtime Environment (JRE) | <=6 | |
| Sun Java Runtime Environment (JRE) | =6-update_1 | |
| Sun Java Runtime Environment (JRE) | =6-update_2 | |
| Sun Java Runtime Environment (JRE) | =6-update_3 | |
| Sun Java Runtime Environment (JRE) | =6-update_4 | |
| Sun Java Runtime Environment (JRE) | =6-update_5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-238628-1
- http://www.securityfocus.com/bid/30143
- http://secunia.com/advisories/31010
- http://www.us-cert.gov/cas/techalerts/TA08-193A.html
- http://www.redhat.com/support/errata/RHSA-2008-0594.html
- http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html
- http://secunia.com/advisories/31600
- http://support.apple.com/kb/HT3179
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html
- http://secunia.com/advisories/32018
- http://secunia.com/advisories/32180
- http://www.vmware.com/security/advisories/VMSA-2008-0016.html
- http://secunia.com/advisories/32179
- http://marc.info/?l=bugtraq&m=122331139823057&w=2
- http://secunia.com/advisories/32436
- http://www.securitytracker.com/id?1020457
- http://secunia.com/advisories/33237
- http://secunia.com/advisories/33238
- http://www.redhat.com/support/errata/RHSA-2008-1045.html
- http://www.redhat.com/support/errata/RHSA-2008-1044.html
- http://www.redhat.com/support/errata/RHSA-2008-0906.html
- http://support.avaya.com/elmodocs2/security/ASA-2008-507.htm
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=756717
- http://support.avaya.com/elmodocs2/security/ASA-2008-299.htm
- http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm
- http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=751014
- http://security.gentoo.org/glsa/glsa-200911-02.xml
- http://secunia.com/advisories/37386
- http://www.vupen.com/english/advisories/2008/2056/references
- http://www.vupen.com/english/advisories/2008/2740
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43657
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43654
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11274
- http://www.securityfocus.com/archive/1/497041/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2008-3105?
CVE-2008-3105 has a high severity rating due to the potential for remote attackers to access sensitive URLs or cause a denial of service.
How do I fix CVE-2008-3105?
To mitigate CVE-2008-3105, update your JDK or JRE to a version later than 6 Update 6.
What types of applications are affected by CVE-2008-3105?
CVE-2008-3105 affects applications that utilize the JAX-WS client and service in Java Runtime Environment versions 6 Update 6 and earlier.
Can CVE-2008-3105 be exploited remotely?
Yes, CVE-2008-3105 can be exploited remotely, allowing attackers to potentially gain access to sensitive data.
What versions of Java are vulnerable to CVE-2008-3105?
Java versions 6 Update 1 through 6 Update 6 in both JDK and JRE are vulnerable to CVE-2008-3105.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/references
- agent/severity
- agent/remedy
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/sun
- canonical/java development kit (jdk)
- version/java development kit (jdk)/6
- version/java development kit (jdk)/6-update_1
- version/java development kit (jdk)/6-update_2
- version/java development kit (jdk)/6-update_3
- version/java development kit (jdk)/6-update_4
- version/java development kit (jdk)/6-update_5
- canonical/sun java runtime environment (jre)
- version/sun java runtime environment (jre)/6
- version/sun java runtime environment (jre)/6-update_1
- version/sun java runtime environment (jre)/6-update_2
- version/sun java runtime environment (jre)/6-update_3
- version/sun java runtime environment (jre)/6-update_4
- version/sun java runtime environment (jre)/6-update_5