Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.
Bug 454601 - (CVE-2008-3104) CVE-2008-3104 Java RE allows Same Origin Policy to be Bypassed (6687932)
CVE-2008-3104 Java RE allows Same Origin Policy to be Bypassed (6687932)
Status: CLOSED ERRATA
Product: Security Response
Classification: Other
Component: vulnerability (Show other bugs)
unspecified
All Linux
high Severity high
: ---
: ---
Assigned To: Red Hat Product Security
http://sunsolve.sun.com/search/docume...
impact=critical,source=sunsolve,publi...
: Security
Depends On: 454628 454632 454633 456880 456881 457470 462076 462486 466734 466735 466736 475760 475765 475766 475767 475768 475769 475819 529660 529661
Blocks:
  Show dependency treegraph
 
Reported: 2008-07-09 05:29 EDT by Marc Schoenefeld
Modified: 2013-03-26 12:07 EDT (History)
1 user (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2013-03-26 12:07:21 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)


External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2008:0594 normal SHIPPED_LIVE Critical: java-1.6.0-sun security update 2008-07-14 11:32:09 EDT
Red Hat Product Errata RHSA-2008:0595 normal SHIPPED_LIVE Critical: java-1.5.0-sun security update 2008-07-14 11:37:44 EDT
Red Hat Product Errata RHSA-2008:0636 normal SHIPPED_LIVE Low: Red Hat Network Satellite Server Sun Java Runtime security update 2008-08-13 10:18:21 EDT
Red Hat Product Errata RHSA-2008:0638 normal SHIPPED_LIVE Low: Red Hat Network Satellite Server IBM Java Runtime security update 2008-08-13 10:19:37 EDT
Red Hat Product Errata RHSA-2008:0790 normal SHIPPED_LIVE Critical: java-1.5.0-ibm security update 2008-07-31 11:23:54 EDT
Red Hat Product Errata RHSA-2008:0906 normal SHIPPED_LIVE Critical: java-1.6.0-ibm security update 2008-10-24 10:44:07 EDT
Red Hat Product Errata RHSA-2008:0955 normal SHIPPED_LIVE Critical: java-1.4.2-ibm security update 2008-11-25 04:45:49 EST
Red Hat Product Errata RHSA-2008:1043 normal SHIPPED_LIVE Important: java-1.4.2-bea security update 2008-12-18 13:32:17 EST
Red Hat Product Errata RHSA-2008:1044 normal SHIPPED_LIVE Important: java-1.5.0-bea security update 2008-12-18 13:32:38 EST
Red Hat Product Errata RHSA-2008:1045 normal SHIPPED_LIVE Important: java-1.6.0-bea security update 2008-12-18 13:33:38 EST

  None (edit)
Description Marc Schoenefeld 2008-07-09 05:29:16 EDT
Security vulnerabilities in the Java Runtime Environment may allow an untrusted
applet that is loaded from a remote system to circumvent network access
restrictions and establish socket connections to certain services running on the
local host, as if it were loaded from the system that the applet is running on.
This may allow the untrusted remote applet the ability to exploit any security
vulnerabilities existing in the services it has connected to.

Note You need to log in before you can comment on or make changes to this bug.