CVE-2008-5341
Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update...
5.0 MediumFix available
Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071.
Exploit likelihood
3.01%Up 0.3 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071.
- Record
CVE-2008-5341- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071.
- Record
CVE-2008-5341- Updated
- 2026-11-02
EUVDEUVD-2008-5318 No score
Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071.
- Record
EUVD-2008-5318- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vwjg-vpwq-rxvv No score
Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update...
Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071.
- Record
GHSA-vwjg-vpwq-rxvv- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sunRed Hat:rhel_extras:4 |
before 1:1.6.0.11-1jpp.1.el4 | 1:1.6.0.11-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 |
before 1:1.6.0.11-1jpp.1.el4 | 1:1.6.0.11-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 |
before 1:1.6.0.11-1jpp.1.el4 | 1:1.6.0.11-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 |
before 1:1.6.0.11-1jpp.1.el4 | 1:1.6.0.11-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 |
before 1:1.6.0.11-1jpp.1.el4 | 1:1.6.0.11-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 |
before 1:1.6.0.11-1jpp.1.el4 | 1:1.6.0.11-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client |
before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client |
before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client |
before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client |
before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
Show 72 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client |
before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client |
before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server |
before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.5.0-sunRed Hat:rhel_extras:4 |
before 0:1.5.0.17-1jpp.2.el4 | 0:1.5.0.17-1jpp.2.el4 |
java-1.5.0-sun-demoRed Hat:rhel_extras:4 |
before 0:1.5.0.17-1jpp.2.el4 | 0:1.5.0.17-1jpp.2.el4 |
java-1.5.0-sun-develRed Hat:rhel_extras:4 |
before 0:1.5.0.17-1jpp.2.el4 | 0:1.5.0.17-1jpp.2.el4 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:4 |
before 0:1.5.0.17-1jpp.2.el4 | 0:1.5.0.17-1jpp.2.el4 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:4 |
before 0:1.5.0.17-1jpp.2.el4 | 0:1.5.0.17-1jpp.2.el4 |
java-1.5.0-sun-srcRed Hat:rhel_extras:4 |
before 0:1.5.0.17-1jpp.2.el4 | 0:1.5.0.17-1jpp.2.el4 |
java-1.5.0-sunRed Hat:rhel_extras:5::client |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-demoRed Hat:rhel_extras:5::client |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-develRed Hat:rhel_extras:5::client |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:5::client |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:5::client |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-srcRed Hat:rhel_extras:5::client |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sunRed Hat:rhel_extras:5::server |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-demoRed Hat:rhel_extras:5::server |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-develRed Hat:rhel_extras:5::server |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:5::server |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:5::server |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-srcRed Hat:rhel_extras:5::server |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:4 |
before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:4 |
before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibm-develRed Hat:rhel_extras:4 |
before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:4 |
before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:4 |
before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:4 |
before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:4 |
before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::client |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::client |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::server |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::server |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:4 |
before 1:1.6.0.4-1jpp.1.el4 | 1:1.6.0.4-1jpp.1.el4 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:4 |
before 1:1.6.0.4-1jpp.1.el4 | 1:1.6.0.4-1jpp.1.el4 |
java-1.6.0-ibm-develRed Hat:rhel_extras:4 |
before 1:1.6.0.4-1jpp.1.el4 | 1:1.6.0.4-1jpp.1.el4 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:4 |
before 1:1.6.0.4-1jpp.1.el4 | 1:1.6.0.4-1jpp.1.el4 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:4 |
before 1:1.6.0.4-1jpp.1.el4 | 1:1.6.0.4-1jpp.1.el4 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:4 |
before 1:1.6.0.4-1jpp.1.el4 | 1:1.6.0.4-1jpp.1.el4 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:4 |
before 1:1.6.0.4-1jpp.1.el4 | 1:1.6.0.4-1jpp.1.el4 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-5341 is a medium vulnerability (CVSS 5.0) in Sun Jdk, published December 5, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.01%, the 87th percentile. Fixed in java-1.6.0-sun 1:1.6.0.11-1jpp.1.el4.
References
marc.info?l=bugtraq&m=126583436323697&w=2
lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html
vupen.com/english/advisories/2009/0672
secunia.com/advisories/34447
rhn.redhat.com/errata/RHSA-2008-1018.html
Show 121 moreShow less
support.avaya.com/elmodocs2/security/ASA-2009-012.htm
security.gentoo.org/glsa/glsa-200911-02.xml
www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf
redhat.com/support/errata/RHSA-2009-0369.html
us-cert.gov/cas/techalerts/TA08-340A.html
support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6529
sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1
nvd.nist.gov/vuln/detail/CVE-2008-5341
github.com/advisories/GHSA-vwjg-vpwq-rxvv
access.redhat.com/errata/RHSA-2008:1018
blogs.sun.com/security/entry/advance_notification_of_security_updates3
bugzilla.redhat.com/show_bug.cgi?id=474556
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_1018.json
cve.org/CVERecord?id=CVE-2008-2086
www-128.ibm.com/developerworks/java/jdk/alerts
ibm.com/developerworks/java/jdk/alerts