CVE-2008-3103
Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java...
9.3 HighFix available
Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier, when local monitoring is enabled, allows remote attackers to "perform unauthorized operations" via unspecified vectors.
Exploit likelihood
5.07%Up 1.1 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier, when local monitoring is enabled, allows remote attackers to "perform unauthorized operations" via unspecified vectors.
- Record
CVE-2008-3103- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier, when local monitoring is enabled, allows remote attackers to "perform unauthorized operations" via unspecified vectors.
- Record
CVE-2008-3103- Updated
- 2026-11-02
EUVDEUVD-2008-3093 No score
Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier, when local monitoring is enabled, allows remote attackers to "perform unauthorized operations" via unspecified vectors.
- Record
EUVD-2008-3093- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5qfv-7x2h-3988 No score
Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java...
Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier, when local monitoring is enabled, allows remote attackers to "perform unauthorized operations" via unspecified vectors.
- Record
GHSA-5qfv-7x2h-3988- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sunRed Hat:rhel_extras:4 |
before 1:1.6.0.7-1jpp.2.el4 | 1:1.6.0.7-1jpp.2.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 |
before 1:1.6.0.7-1jpp.2.el4 | 1:1.6.0.7-1jpp.2.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 |
before 1:1.6.0.7-1jpp.2.el4 | 1:1.6.0.7-1jpp.2.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 |
before 1:1.6.0.7-1jpp.2.el4 | 1:1.6.0.7-1jpp.2.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 |
before 1:1.6.0.7-1jpp.2.el4 | 1:1.6.0.7-1jpp.2.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 |
before 1:1.6.0.7-1jpp.2.el4 | 1:1.6.0.7-1jpp.2.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
Show 78 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.5.0-sunRed Hat:rhel_extras:4 |
before 0:1.5.0.16-1jpp.2.el4 | 0:1.5.0.16-1jpp.2.el4 |
java-1.5.0-sun-demoRed Hat:rhel_extras:4 |
before 0:1.5.0.16-1jpp.2.el4 | 0:1.5.0.16-1jpp.2.el4 |
java-1.5.0-sun-develRed Hat:rhel_extras:4 |
before 0:1.5.0.16-1jpp.2.el4 | 0:1.5.0.16-1jpp.2.el4 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:4 |
before 0:1.5.0.16-1jpp.2.el4 | 0:1.5.0.16-1jpp.2.el4 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:4 |
before 0:1.5.0.16-1jpp.2.el4 | 0:1.5.0.16-1jpp.2.el4 |
java-1.5.0-sun-srcRed Hat:rhel_extras:4 |
before 0:1.5.0.16-1jpp.2.el4 | 0:1.5.0.16-1jpp.2.el4 |
java-1.5.0-sunRed Hat:rhel_extras:5::client |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-demoRed Hat:rhel_extras:5::client |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-develRed Hat:rhel_extras:5::client |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:5::client |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:5::client |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-srcRed Hat:rhel_extras:5::client |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sunRed Hat:rhel_extras:5::server |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-demoRed Hat:rhel_extras:5::server |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-develRed Hat:rhel_extras:5::server |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:5::server |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:5::server |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-srcRed Hat:rhel_extras:5::server |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sunRed Hat:network_satellite:5.1::el4 |
before 0:1.5.0.16-1jpp.2.el4 | 0:1.5.0.16-1jpp.2.el4 |
java-1.5.0-sun-develRed Hat:network_satellite:5.1::el4 |
before 0:1.5.0.16-1jpp.2.el4 | 0:1.5.0.16-1jpp.2.el4 |
java-1.5.0-ibmRed Hat:rhel_extras:4 |
before 1:1.5.0.8-1jpp.2.el4 | 1:1.5.0.8-1jpp.2.el4 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:4 |
before 1:1.5.0.8-1jpp.2.el4 | 1:1.5.0.8-1jpp.2.el4 |
java-1.5.0-ibm-develRed Hat:rhel_extras:4 |
before 1:1.5.0.8-1jpp.2.el4 | 1:1.5.0.8-1jpp.2.el4 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:4 |
before 1:1.5.0.8-1jpp.2.el4 | 1:1.5.0.8-1jpp.2.el4 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:4 |
before 1:1.5.0.8-1jpp.2.el4 | 1:1.5.0.8-1jpp.2.el4 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:4 |
before 1:1.5.0.8-1jpp.2.el4 | 1:1.5.0.8-1jpp.2.el4 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:4 |
before 1:1.5.0.8-1jpp.2.el4 | 1:1.5.0.8-1jpp.2.el4 |
java-1.5.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.5.0.8-1jpp.2.el5 | 1:1.5.0.8-1jpp.2.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::client |
before 1:1.5.0.8-1jpp.2.el5 | 1:1.5.0.8-1jpp.2.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.5.0.8-1jpp.2.el5 | 1:1.5.0.8-1jpp.2.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.5.0.8-1jpp.2.el5 | 1:1.5.0.8-1jpp.2.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::client |
before 1:1.5.0.8-1jpp.2.el5 | 1:1.5.0.8-1jpp.2.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.5.0.8-1jpp.2.el5 | 1:1.5.0.8-1jpp.2.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.5.0.8-1jpp.2.el5 | 1:1.5.0.8-1jpp.2.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.5.0.8-1jpp.2.el5 | 1:1.5.0.8-1jpp.2.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.5.0.8-1jpp.2.el5 | 1:1.5.0.8-1jpp.2.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::server |
before 1:1.5.0.8-1jpp.2.el5 | 1:1.5.0.8-1jpp.2.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.5.0.8-1jpp.2.el5 | 1:1.5.0.8-1jpp.2.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.5.0.8-1jpp.2.el5 | 1:1.5.0.8-1jpp.2.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::server |
before 1:1.5.0.8-1jpp.2.el5 | 1:1.5.0.8-1jpp.2.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.5.0.8-1jpp.2.el5 | 1:1.5.0.8-1jpp.2.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.5.0.8-1jpp.2.el5 | 1:1.5.0.8-1jpp.2.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.5.0.8-1jpp.2.el5 | 1:1.5.0.8-1jpp.2.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:4 |
before 1:1.6.0.2-1jpp.2.el4 | 1:1.6.0.2-1jpp.2.el4 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:4 |
before 1:1.6.0.2-1jpp.2.el4 | 1:1.6.0.2-1jpp.2.el4 |
java-1.6.0-ibm-develRed Hat:rhel_extras:4 |
before 1:1.6.0.2-1jpp.2.el4 | 1:1.6.0.2-1jpp.2.el4 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:4 |
before 1:1.6.0.2-1jpp.2.el4 | 1:1.6.0.2-1jpp.2.el4 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:4 |
before 1:1.6.0.2-1jpp.2.el4 | 1:1.6.0.2-1jpp.2.el4 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:4 |
before 1:1.6.0.2-1jpp.2.el4 | 1:1.6.0.2-1jpp.2.el4 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:4 |
before 1:1.6.0.2-1jpp.2.el4 | 1:1.6.0.2-1jpp.2.el4 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.5.0-ibmRed Hat:network_satellite:5.2::el4 |
before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibm-develRed Hat:network_satellite:5.2::el4 |
before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibmRed Hat:network_satellite:5.2::el5 |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-develRed Hat:network_satellite:5.2::el5 |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-3103 is a high vulnerability (CVSS 9.3) in Sun Jdk, published July 9, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.07%, the 92nd percentile. Fixed in java-1.6.0-sun 1:1.6.0.7-1jpp.2.el4.
References
securitytracker.com/id?1020458
redhat.com/support/errata/RHSA-2008-1044.html
secunia.com/advisories/32394
lists.apple.com/archives/security-announce//2008/Sep/msg00008.html
marc.info?l=bugtraq&m=122331139823057&w=2
Show 146 moreShow less
support.avaya.com/elmodocs2/security/ASA-2008-428.htm
exchange.xforce.ibmcloud.com/vulnerabilities/43669
lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html
security.gentoo.org/glsa/glsa-200911-02.xml
vupen.com/english/advisories/2008/2740
vmware.com/security/advisories/VMSA-2008-0016.html
rhn.redhat.com/errata/RHSA-2009-0466.html
sunsolve.sun.com/search/document.do?assetkey=1-66-238965-1
support.apple.com/kb/HT3178
securityfocus.com/bid/30146
us-cert.gov/cas/techalerts/TA08-193A.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10920
nvd.nist.gov/vuln/detail/CVE-2008-3103
github.com/advisories/GHSA-5qfv-7x2h-3988
access.redhat.com/errata/RHSA-2008:0594
bugzilla.redhat.com/show_bug.cgi?id=452649
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0594.json
cve.org/CVERecord?id=CVE-2008-3103
www-128.ibm.com/developerworks/java/jdk/alerts