Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-2086
HistoryDec 05, 2008 - 12:00 a.m.

CVE-2008-2086

2008-12-0500:00:00
ubuntu.com
ubuntu.com
11

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.483 Medium

EPSS

Percentile

97.4%

Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and
earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
and earlier allow remote attackers to execute arbitrary code via a crafted
jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or (3)
user.home System Properties, aka “Java Web Start File Inclusion” and CR
6694892.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchsun-java6< 6-17-0ubuntu1.8.04UNKNOWN
ubuntu8.10noarchsun-java6< 6-14-0ubuntu1.8.10UNKNOWN

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.483 Medium

EPSS

Percentile

97.4%