{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-02-06T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-09-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "30676", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/30676"}, {"name": "29841", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/29841"}, {"name": "oval:org.mitre.oval:def:11505", "tags": ["vdb-entry", "signature", "x_refsource_OVAL"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11505"}, {"name": "27650", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/27650"}, {"name": "29897", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/29897"}, {"name": "29498", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/29498"}, {"name": "BEA08-201.00", "tags": ["vendor-advisory", "x_refsource_BEA"], "url": "http://dev2dev.bea.com/pub/advisory/277"}, {"name": "GLSA-200804-28", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://security.gentoo.org/glsa/glsa-200804-28.xml"}, {"name": "29858", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/29858"}, {"name": "ADV-2008-0429", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/0429"}, {"name": "231261", "tags": ["vendor-advisory", "x_refsource_SUNALERT"], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-231261-1"}, {"name": "1019308", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1019308"}, {"name": "SUSE-SA:2008:025", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html"}, {"name": "ADV-2008-1252", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/1252"}, {"name": "28795", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28795"}, {"name": "RHSA-2008:0156", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://www.redhat.com/support/errata/RHSA-2008-0156.html"}, {"name": "31497", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/31497"}, {"name": "28888", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28888"}, {"name": "RHSA-2008:0210", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://www.redhat.com/support/errata/RHSA-2008-0210.html"}, {"name": "30780", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/30780"}, {"name": "ADV-2008-1856", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/1856/references"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.vmware.com/security/advisories/VMSA-2008-0010.html"}, {"name": "29214", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/29214"}, {"name": "RHSA-2008:0123", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://www.redhat.com/support/errata/RHSA-2008-0123.html"}, {"name": "GLSA-200804-20", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml"}, {"name": "GLSA-200806-11", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2008-0657", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "30676", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/30676"}, {"name": "29841", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/29841"}, {"name": "oval:org.mitre.oval:def:11505", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11505"}, {"name": "27650", "refsource": "BID", "url": "http://www.securityfocus.com/bid/27650"}, {"name": "29897", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/29897"}, {"name": "29498", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/29498"}, {"name": "BEA08-201.00", "refsource": "BEA", "url": "http://dev2dev.bea.com/pub/advisory/277"}, {"name": "GLSA-200804-28", "refsource": "GENTOO", "url": "http://security.gentoo.org/glsa/glsa-200804-28.xml"}, {"name": "29858", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/29858"}, {"name": "ADV-2008-0429", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/0429"}, {"name": "231261", "refsource": "SUNALERT", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-231261-1"}, {"name": "1019308", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1019308"}, {"name": "SUSE-SA:2008:025", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html"}, {"name": "ADV-2008-1252", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/1252"}, {"name": "28795", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28795"}, {"name": "RHSA-2008:0156", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2008-0156.html"}, {"name": "31497", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/31497"}, {"name": "28888", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28888"}, {"name": "RHSA-2008:0210", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2008-0210.html"}, {"name": "30780", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/30780"}, {"name": "ADV-2008-1856", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/1856/references"}, {"name": "http://www.vmware.com/security/advisories/VMSA-2008-0010.html", "refsource": "CONFIRM", "url": "http://www.vmware.com/security/advisories/VMSA-2008-0010.html"}, {"name": "29214", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/29214"}, {"name": "RHSA-2008:0123", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2008-0123.html"}, {"name": "GLSA-200804-20", "refsource": "GENTOO", "url": "http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml"}, {"name": "GLSA-200806-11", "refsource": "GENTOO", "url": "http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T07:54:23.245Z"}, "title": "CVE Program Container", "references": [{"name": "30676", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/30676"}, {"name": "29841", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/29841"}, {"name": "oval:org.mitre.oval:def:11505", "tags": ["vdb-entry", "signature", "x_refsource_OVAL", "x_transferred"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11505"}, {"name": "27650", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/27650"}, {"name": "29897", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/29897"}, {"name": "29498", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/29498"}, {"name": "BEA08-201.00", "tags": ["vendor-advisory", "x_refsource_BEA", "x_transferred"], "url": "http://dev2dev.bea.com/pub/advisory/277"}, {"name": "GLSA-200804-28", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "http://security.gentoo.org/glsa/glsa-200804-28.xml"}, {"name": "29858", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/29858"}, {"name": "ADV-2008-0429", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2008/0429"}, {"name": "231261", "tags": ["vendor-advisory", "x_refsource_SUNALERT", "x_transferred"], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-231261-1"}, {"name": "1019308", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1019308"}, {"name": "SUSE-SA:2008:025", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html"}, {"name": "ADV-2008-1252", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2008/1252"}, {"name": "28795", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/28795"}, {"name": "RHSA-2008:0156", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://www.redhat.com/support/errata/RHSA-2008-0156.html"}, {"name": "31497", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/31497"}, {"name": "28888", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/28888"}, {"name": "RHSA-2008:0210", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://www.redhat.com/support/errata/RHSA-2008-0210.html"}, {"name": "30780", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/30780"}, {"name": "ADV-2008-1856", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2008/1856/references"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.vmware.com/security/advisories/VMSA-2008-0010.html"}, {"name": "29214", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/29214"}, {"name": "RHSA-2008:0123", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://www.redhat.com/support/errata/RHSA-2008-0123.html"}, {"name": "GLSA-200804-20", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml"}, {"name": "GLSA-200806-11", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2008-0657", "datePublished": "2008-02-07T20:00:00", "dateReserved": "2008-02-07T00:00:00", "dateUpdated": "2024-08-07T07:54:23.245Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sun:jre:*:update13:*:*:*:*:*:*", "matchCriteriaId": "0284CD7F-4BF7-47EE-A27B-A7A12AD6553D", "versionEndIncluding": "1.5.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:jre:*:update1:*:*:*:*:*:*", "matchCriteriaId": "2CE4D7F3-A393-40E7-A08D-60527A1658DA", "versionEndIncluding": "1.6.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sun:jdk:*:*:*:*:*:*:*:*", "matchCriteriaId": "0346781D-3289-47BB-8D82-D6634F05315F", "versionEndIncluding": "5.0_update13", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:jre:*:update1:*:*:*:*:*:*", "matchCriteriaId": "2CE4D7F3-A393-40E7-A08D-60527A1658DA", "versionEndIncluding": "1.6.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades no especificadas en el Java Runtime Environment en Sun JDK y JRE 6 Update 1 y versiones anteriores y 5.0 Update 13 y versiones anteriores, permite a atacantes seg\u00fan contexto conseguir privilegios a trav\u00e9s de (1) aplicaci\u00f3n o (2) applet no confiables, como se demostr\u00f3 por una aplicaci\u00f3n o applet que garantiza de por s\u00ed privilegios de (a) lectura en archivos locales (b) escritura en archivos locales, o (c) ejecuci\u00f3n de programas locales."}], "id": "CVE-2008-0657", "lastModified": "2017-09-29T01:30:24.020", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2008-02-07T21:00:00.000", "references": [{"source": "cve@mitre.org", "url": "http://dev2dev.bea.com/pub/advisory/277"}, {"source": "cve@mitre.org", "url": "http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/28795"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/28888"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/29214"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/29498"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/29841"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/29858"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/29897"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/30676"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/30780"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/31497"}, {"source": "cve@mitre.org", "url": "http://security.gentoo.org/glsa/glsa-200804-28.xml"}, {"source": "cve@mitre.org", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-231261-1"}, {"source": "cve@mitre.org", "url": "http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml"}, {"source": "cve@mitre.org", "url": "http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml"}, {"source": "cve@mitre.org", "url": "http://www.redhat.com/support/errata/RHSA-2008-0123.html"}, {"source": "cve@mitre.org", "url": "http://www.redhat.com/support/errata/RHSA-2008-0156.html"}, {"source": "cve@mitre.org", "url": "http://www.redhat.com/support/errata/RHSA-2008-0210.html"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/27650"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1019308"}, {"source": "cve@mitre.org", "url": "http://www.vmware.com/security/advisories/VMSA-2008-0010.html"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2008/0429"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2008/1252"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2008/1856/references"}, {"source": "cve@mitre.org", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11505"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-264"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2008:0123", "cpe": "cpe:/a:redhat:rhel_extras:4", "package": "java-1.5.0-sun-0:1.5.0.14-1jpp.2.el4", "product_name": "Extras for RHEL 4", "release_date": "2008-02-12T00:00:00Z"}, {"advisory": "RHSA-2008:0210", "cpe": "cpe:/a:redhat:rhel_extras:4", "package": "java-1.5.0-ibm-1:1.5.0.7-1jpp.2.el4", "product_name": "Extras for RHEL 4", "release_date": "2008-04-03T00:00:00Z"}, {"advisory": "RHSA-2008:0638", "cpe": "cpe:/a:redhat:network_satellite:5.1::el4", "package": "java-1.5.0-ibm-1:1.5.0.8-1jpp.1.el4", "product_name": "Red Hat Network Satellite Server v 5.1", "release_date": "2008-08-13T00:00:00Z"}, {"advisory": "RHSA-2008:0123", "cpe": "cpe:/a:redhat:rhel_extras:5", "package": "java-1.5.0-sun-0:1.5.0.14-1jpp.2.el5", "product_name": "Supplementary for Red Hat Enterprise Linux 5", "release_date": "2008-02-12T00:00:00Z"}, {"advisory": "RHSA-2008:0156", "cpe": "cpe:/a:redhat:rhel_extras:5", "package": "java-1.5.0-bea-0:1.5.0.14-1jpp.1.el5", "product_name": "Supplementary for Red Hat Enterprise Linux 5", "release_date": "2008-03-05T00:00:00Z"}, {"advisory": "RHSA-2008:0210", "cpe": "cpe:/a:redhat:rhel_extras:5", "package": "java-1.5.0-ibm-1:1.5.0.7-1jpp.2.el5", "product_name": "Supplementary for Red Hat Enterprise Linux 5", "release_date": "2008-04-03T00:00:00Z"}], "bugzilla": {"description": "java-1.5.0 Privilege escalation via unstrusted applet and application", "id": "431861", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=431861"}, "csaw": false, "details": ["Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs."], "name": "CVE-2008-0657", "public_date": "2008-02-05T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2008-0657\nhttps://nvd.nist.gov/vuln/detail/CVE-2008-0657"], "threat_severity": "Important"}