Info

Disclosure

Dec 03, 2008

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Dec 03, 2008

Description

Classification

Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Upgrade
Exploit: Exploit Private
Disclosure: Vendor Verified

Solution

Upgrade to version JDK/JRE 5.0 Update 17, JDK/JRE 6 Update 11, SDK/JRE 1.4.2_19, SDK/JRE 1.3.1_24 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Unknown or Incomplete

References

CVE ID: 2008-5357 (see also: NVD)
Secunia Advisory ID: 32991 33015 33187 33457 33536 33710 34233 34259 34447 34605 34972 35065 37386 38539
Related OSVDB ID: 50495 50496 50497 50498 50499 50500 50501 50502 50503 50504 50505 50506 50507 50508 50515 50516
Keyword: c02000725, HPSBMA02486, SSRT090049
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2008-12/0053.html
Vendor Specific Advisory URL: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02000725
http://sunsolve.sun.com/search/document.do?assetkey=1-66-244987-1
http://www.gentoo.org/security/en/glsa/glsa-200911-02.xml
http://www.novell.com/linux/security/advisories/2009_18_ibmjava.html
http://www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01683026
Other Advisory URL: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=760
http://support.avaya.com/elmodocs2/security/ASA-2008-484.htm
Vendor Specific News/Changelog Entry: http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00001.html
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html
RedHat RHSA: https://rhn.redhat.com/errata/RHSA-2008-1018.html
https://rhn.redhat.com/errata/RHSA-2008-1025.html
https://rhn.redhat.com/errata/RHSA-2009-0016.html
https://rhn.redhat.com/errata/RHSA-2009-0369.html
https://rhn.redhat.com/errata/RHSA-2009-0466.html

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/50517