CVE-2008-3112
EUVD-2008-310209.07.2008, 23:41
Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the writeManifest method in the CacheEntry class, aka CR 6703909.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| sun | jdk | 𝑥 ≤ 5.0 |
| sun | jdk | 𝑥 ≤ 6 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jre | 𝑥 ≤ 1.4.2_17 |
| sun | jre | 𝑥 ≤ 5.0 |
| sun | jre | 𝑥 ≤ 6 |
| sun | jre | 1.4.2 |
| sun | jre | 1.4.2_01:_01 |
| sun | jre | 1.4.2_02:_02 |
| sun | jre | 1.4.2_03:_03 |
| sun | jre | 1.4.2_04:_04 |
| sun | jre | 1.4.2_05:_05 |
| sun | jre | 1.4.2_06:_06 |
| sun | jre | 1.4.2_07:_07 |
| sun | jre | 1.4.2_8:_8 |
| sun | jre | 1.4.2_9:_9 |
| sun | jre | 1.4.2_10:_10 |
| sun | jre | 1.4.2_11:_11 |
| sun | jre | 1.4.2_12:_12 |
| sun | jre | 1.4.2_13:_13 |
| sun | jre | 1.4.2_14:_14 |
| sun | jre | 1.4.2_15:_15 |
| sun | jre | 1.4.2_16:_16 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | sdk | 1.4.2 |
| sun | sdk | 1.4.2_01:_01 |
| sun | sdk | 1.4.2_02:_02 |
| sun | sdk | 1.4.2_03:_03 |
| sun | sdk | 1.4.2_04:_04 |
| sun | sdk | 1.4.2_05:_05 |
| sun | sdk | 1.4.2_06:_06 |
| sun | sdk | 1.4.2_07:_07 |
| sun | sdk | 1.4.2_08:_08 |
| sun | sdk | 1.4.2_09:_09 |
| sun | sdk | 1.4.2_10:_10 |
| sun | sdk | 1.4.2_11:_11 |
| sun | sdk | 1.4.2_12:_12 |
| sun | sdk | 1.4.2_13:_13 |
| sun | sdk | 1.4.2_14:_14 |
| sun | sdk | 1.4.2_15:_15 |
| sun | sdk | 1.4.2_16:_16 |
| sun | sdk | 1.4.2_17:_17 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References