CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
94.1%
Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1.4.2 and later, 1.3.1 and later allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors.
Vendor | Product | Version | CPE |
---|---|---|---|
sun | jdk | 1.5.0_03 | cpe:2.3:a:sun:jdk:1.5.0_03:*:linux:*:*:*:*:* |
sun | jdk | 1.5.0_03 | cpe:2.3:a:sun:jdk:1.5.0_03:*:solaris:*:*:*:*:* |
sun | jdk | 1.5.0_03 | cpe:2.3:a:sun:jdk:1.5.0_03:*:windows:*:*:*:*:* |
sun | jre | 1.3.0 | cpe:2.3:a:sun:jre:1.3.0:*:*:*:*:*:*:* |
sun | jre | 1.3.0 | cpe:2.3:a:sun:jre:1.3.0:update1:*:*:*:*:*:* |
sun | jre | 1.3.0 | cpe:2.3:a:sun:jre:1.3.0:update2:*:*:*:*:*:* |
sun | jre | 1.3.0 | cpe:2.3:a:sun:jre:1.3.0:update3:*:*:*:*:*:* |
sun | jre | 1.3.0 | cpe:2.3:a:sun:jre:1.3.0:update4:*:*:*:*:*:* |
sun | jre | 1.3.0 | cpe:2.3:a:sun:jre:1.3.0:update5:*:*:*:*:*:* |
sun | jre | 1.3.1 | cpe:2.3:a:sun:jre:1.3.1:*:*:*:*:*:*:* |
lists.apple.com/archives/security-announce/2005/Nov/msg00004.html
secunia.com/advisories/17748
secunia.com/advisories/17847
secunia.com/advisories/18092
secunia.com/advisories/18503
securitytracker.com/id?1015281
sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102017-1
www-1.ibm.com/support/docview.wss?uid=swg21225628
www.kb.cert.org/vuls/id/931684
www.securityfocus.com/bid/15615
www.vupen.com/english/advisories/2005/2636
www.vupen.com/english/advisories/2005/2675
www.vupen.com/english/advisories/2005/2946
exchange.xforce.ibmcloud.com/vulnerabilities/23252