OSVDB ID: 50498

Title: Sun Java JDK / JRE Java Update Mechanism Digital Signature Verification Weakness

Info

Disclosure

Dec 03, 2008

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Location: Remote / Network Access
Attack Type: Other
Impact: Loss of Integrity
Solution: Solution Unknown
Exploit: Exploit Commercial
Disclosure: Vendor Verified

Solution

OSVDB is not aware of a solution for this vulnerability.

Products

Unknown or Incomplete

References

CVE ID: 2008-5355 (see also: NVD)
Secunia Advisory ID: 32991 33015 33457 37386 47134
Related OSVDB ID: 50495 50496 50497 50499 50500 50501 50502 50503 50504 50505 50506 50507 50508
Other Advisory URL: http://blog.infobytesec.com/2011/12/pwning-java-update-process-2007-today.html
Vendor Specific News/Changelog Entry: http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00001.html
Vendor Specific Advisory URL: http://sunsolve.sun.com/search/document.do?assetkey=1-66-244989-1
http://www.gentoo.org/security/en/glsa/glsa-200911-02.xml
RedHat RHSA: https://rhn.redhat.com/errata/RHSA-2008-1018.html
https://rhn.redhat.com/errata/RHSA-2008-1025.html

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/50498