CVE-2008-3105

EUVD-2008-3095
Unspecified vulnerability in the JAX-WS client and service in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows remote attackers to access URLs or cause a denial of service via unknown vectors involving "processing of XML data" by a trusted application.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
Affected Products (NVD)
VendorProductVersion
sunjdk
𝑥
≤ 6
sunjre
𝑥
≤ 6
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
openjdk-6
dapper
dne
feisty
dne
gutsy
dne
hardy
Fixed 6b11-2ubuntu2.1
released
intrepid
Fixed 6b11-1
released
jaunty
Fixed 6b11-1
released
karmic
Fixed 6b11-1
released
sun-java5
dapper
not-affected
feisty
not-affected
gutsy
not-affected
hardy
not-affected
intrepid
not-affected
jaunty
not-affected
karmic
dne
sun-java6
dapper
dne
feisty
ignored
gutsy
ignored
hardy
Fixed 6-17-0ubuntu1.8.04
released
intrepid
not-affected
jaunty
not-affected
karmic
not-affected
Common Weakness Enumeration
References