{"id":"CVE-2005-3904","aliases":["EUVD-2005-3899","GHSA-r8qg-vjh8-h4m5"],"status":"published","title":"Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1...","description":"Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1.4.2 and later, 1.3.1 and later allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.05168,"percentile":0.92492,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2005-11-30T11:00:00Z","modified":"2026-06-16T22:17:51Z","products":[{"vendor":"sun","product":"jdk"},{"vendor":"sun","product":"jre"}],"references":[{"url":"http://secunia.com/advisories/17847","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/18503","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securityfocus.com/bid/15615","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2005/2946","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2005/2675","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21225628","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2005/2636","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102017-1","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/931684","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource"]},{"url":"http://lists.apple.com/archives/security-announce/2005/Nov/msg00004.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred"]},{"url":"http://securitytracker.com/id?1015281","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/23252","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://secunia.com/advisories/17748","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/18092","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-3904"},{"url":"https://github.com/advisories/GHSA-r8qg-vjh8-h4m5"}],"sources":{"cve":[{"id":"CVE-2005-3904","description":"Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1.4.2 and later, 1.3.1 and later allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors.","status":"published","published":"2005-11-30T11:00:00Z","modified":"2024-08-07T23:31:47.865Z","updated_at":"2026-11-02T14:33:38.550354Z"}],"euvd":[{"id":"EUVD-2005-3899","description":"Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1.4.2 and later, 1.3.1 and later allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors.","status":"published","published":"2005-11-30T11:00:00Z","modified":"2024-08-07T23:31:47Z","updated_at":"2026-11-03T01:15:24.702518Z"}],"ghsa":[{"id":"GHSA-r8qg-vjh8-h4m5","title":"Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1...","description":"Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1.4.2 and later, 1.3.1 and later allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors.","status":"published","published":"2022-05-01T02:22:16Z","modified":"2023-01-30T05:08:19Z","updated_at":"2026-11-02T14:47:49.163545Z"}],"nvd":[{"id":"CVE-2005-3904","description":"Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1.4.2 and later, 1.3.1 and later allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors.","status":"published","published":"2005-11-30T11:03:00Z","modified":"2026-06-16T22:17:51.237Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:57.944899Z"}]}}