CVE-2008-5341
Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update...
5.0 Medium
CVE-2008-5341 is a medium vulnerability (CVSS 5.0) in Sun Jdk, published December 5, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.01%, the 87th percentile. No source names a fixed version.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 3.01%EPSS, 87th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071.
Exploit likelihood
3.01%Up 0.3 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sunRed Hat:rhel_extras:4 From an advisory covering 21 CVEs | before 1:1.6.0.11-1jpp.1.el4 | 1:1.6.0.11-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 21 CVEs | before 1:1.6.0.11-1jpp.1.el4 | 1:1.6.0.11-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 21 CVEs | before 1:1.6.0.11-1jpp.1.el4 | 1:1.6.0.11-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 21 CVEs | before 1:1.6.0.11-1jpp.1.el4 | 1:1.6.0.11-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 21 CVEs | before 1:1.6.0.11-1jpp.1.el4 | 1:1.6.0.11-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 21 CVEs | before 1:1.6.0.11-1jpp.1.el4 | 1:1.6.0.11-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client From an advisory covering 21 CVEs | before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 21 CVEs | before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 21 CVEs | before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 21 CVEs | before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
Show 72 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 21 CVEs | before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 21 CVEs | before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server From an advisory covering 21 CVEs | before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 21 CVEs | before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 21 CVEs | before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 21 CVEs | before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 21 CVEs | before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 21 CVEs | before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.5.0-sunRed Hat:rhel_extras:4 From an advisory covering 20 CVEs | before 0:1.5.0.17-1jpp.2.el4 | 0:1.5.0.17-1jpp.2.el4 |
java-1.5.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 20 CVEs | before 0:1.5.0.17-1jpp.2.el4 | 0:1.5.0.17-1jpp.2.el4 |
java-1.5.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 20 CVEs | before 0:1.5.0.17-1jpp.2.el4 | 0:1.5.0.17-1jpp.2.el4 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 20 CVEs | before 0:1.5.0.17-1jpp.2.el4 | 0:1.5.0.17-1jpp.2.el4 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 20 CVEs | before 0:1.5.0.17-1jpp.2.el4 | 0:1.5.0.17-1jpp.2.el4 |
java-1.5.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 20 CVEs | before 0:1.5.0.17-1jpp.2.el4 | 0:1.5.0.17-1jpp.2.el4 |
java-1.5.0-sunRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs | before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs | before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs | before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs | before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs | before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs | before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sunRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs | before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs | before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs | before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs | before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs | before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs | before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:4 From an advisory covering 20 CVEs | before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 20 CVEs | before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibm-develRed Hat:rhel_extras:4 From an advisory covering 20 CVEs | before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 20 CVEs | before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 20 CVEs | before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 20 CVEs | before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 20 CVEs | before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs | before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs | before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs | before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs | before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs | before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs | before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs | before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs | before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs | before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs | before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs | before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs | before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs | before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs | before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs | before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs | before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:4 From an advisory covering 8 CVEs | before 1:1.6.0.4-1jpp.1.el4 | 1:1.6.0.4-1jpp.1.el4 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 8 CVEs | before 1:1.6.0.4-1jpp.1.el4 | 1:1.6.0.4-1jpp.1.el4 |
java-1.6.0-ibm-develRed Hat:rhel_extras:4 From an advisory covering 8 CVEs | before 1:1.6.0.4-1jpp.1.el4 | 1:1.6.0.4-1jpp.1.el4 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 8 CVEs | before 1:1.6.0.4-1jpp.1.el4 | 1:1.6.0.4-1jpp.1.el4 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 8 CVEs | before 1:1.6.0.4-1jpp.1.el4 | 1:1.6.0.4-1jpp.1.el4 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 8 CVEs | before 1:1.6.0.4-1jpp.1.el4 | 1:1.6.0.4-1jpp.1.el4 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 8 CVEs | before 1:1.6.0.4-1jpp.1.el4 | 1:1.6.0.4-1jpp.1.el4 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs | before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs | before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs | before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs | before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs | before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs | before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs | before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs | before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs | before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs | before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs | before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs | before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs | before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs | before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs | before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs | before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
What each source reports
NVD Score used
Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071.
- Record
CVE-2008-5341- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE ListNo score
Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071.
- Record
CVE-2008-5341- Updated
- 2026-11-02
EUVDEUVD-2008-5318No score
Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071.
- Record
EUVD-2008-5318- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vwjg-vpwq-rxvvNo score
Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update...
Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071.
- Record
GHSA-vwjg-vpwq-rxvv- Weakness
- CWE-200
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
marc.info?l=bugtraq&m=126583436323697&w=2
lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html
vupen.com/english/advisories/2009/0672
secunia.com/advisories/34447
rhn.redhat.com/errata/RHSA-2008-1018.html
Show 121 moreShow less
support.avaya.com/elmodocs2/security/ASA-2009-012.htm
security.gentoo.org/glsa/glsa-200911-02.xml
www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf
redhat.com/support/errata/RHSA-2009-0369.html
us-cert.gov/cas/techalerts/TA08-340A.html
support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6529
sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1
nvd.nist.gov/vuln/detail/CVE-2008-5341
github.com/advisories/GHSA-vwjg-vpwq-rxvv
access.redhat.com/errata/RHSA-2008:1018
blogs.sun.com/security/entry/advance_notification_of_security_updates3
bugzilla.redhat.com/show_bug.cgi?id=474556
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_1018.json
cve.org/CVERecord?id=CVE-2008-2086
www-128.ibm.com/developerworks/java/jdk/alerts
ibm.com/developerworks/java/jdk/alerts