Detections
Analytics
Sun Java JRE Applet Handling Privilege Escalation (231261)
high Nessus Plugin ID 31344
Synopsis
The remote Windows host has an application that is affected by privilege escalation vulnerabilities.Description
The version of Sun Java Runtime Environment (JRE) installed on the remote host reportedly contains two vulnerabilities that may independently allow an untrusted application or applet to elevate its privileges by, for example, granting itself permission to read and write local files or execute local applications subject to the privileges of the user running the application or applet.Solution
Upgrade to Sun JDK and JRE 6 Update 2 / JDK and JRE 5.0 Update 14 or later and remove any affected versions.See Also
Plugin Details
Severity: High
ID: 31344
File Name: sun_java_jre_231261.nasl
Version: 1.24
Type: local
Agent: windows
Family: Windows
Published: 3/4/2008
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS v3
Risk Factor: High
Base Score: 8.8
Temporal Score: 7.7
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:oracle:jre
Required KB Items: SMB/Java/JRE/Installed
Exploit Ease: No known exploits are available
Patch Publication Date: 2/5/2008
Reference Information
CVE: CVE-2008-0657
BID: 27650