CVE-2005-3905 Common Vulnerabilities and Exposures

Upstream information

CVE-2005-3905 at MITRE

Description

Unspecified vulnerability in reflection APIs in Java SDK and JRE 1.3.1_15 and earlier, 1.4.2_08 and earlier, and JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors, a different vulnerability than CVE-2005-3906. NOTE: this is associated with the "first issue" identified in SUNALERT:102003.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having important severity.

CVSS v2 Scores
	National Vulnerability Database
Base Score	7.5
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
Access Vector	Network
Access Complexity	Low
Authentication	None
Confidentiality Impact	Partial
Integrity Impact	Partial
Availability Impact	Partial

SUSE Bugzilla entry: 135835 [RESOLVED / FIXED]

SUSE Security Advisories:

SUSE-SR:2006:001, published Fri, 13 Jan 2006 14:00:00 +0000

SUSE Timeline for this CVE

CVE page created: Fri Jun 28 02:30:57 2013
CVE page last modified: Fri Dec 8 16:14:38 2023