Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2005-3906 Details

Description

Multiple unspecified vulnerabilities in reflection APIs in Java SDK and JRE 1.4.2_08 and earlier and JDK and JRE 5.0 Update 3 and earlier allow remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors, a different set of vulnerabilities than CVE-2005-3905. NOTE: this is associated with the "second and third issues" identified in SUNALERT:102003.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://lists.apple.com/archives/security-announce/2005/Nov/msg00004.html	CVE
http://secunia.com/advisories/17748	CVE	PatchVendor Advisory
http://secunia.com/advisories/17847	CVE	Vendor Advisory
http://secunia.com/advisories/18092	CVE	Vendor Advisory
http://secunia.com/advisories/18435	CVE	Vendor Advisory
http://secunia.com/advisories/18503	CVE	Vendor Advisory
http://securitytracker.com/id?1015280	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/23251	CVE
http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102003-1	CVE	PatchVendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg21225628	CVE
http://www.gentoo.org/security/en/glsa/glsa-200601-10.xml	CVE
http://www.kb.cert.org/vuls/id/974188	CVE	US Government Resource
http://www.securityfocus.com/bid/15615	CVE
http://www.vupen.com/english/advisories/2005/2636	CVE	Vendor Advisory
http://www.vupen.com/english/advisories/2005/2675	CVE	Vendor Advisory
http://www.vupen.com/english/advisories/2005/2946	CVE	Vendor Advisory
http://lists.apple.com/archives/security-announce/2005/Nov/msg00004.html	[email protected]
http://secunia.com/advisories/17748	[email protected]	PatchVendor Advisory
http://secunia.com/advisories/17847	[email protected]	Vendor Advisory
http://secunia.com/advisories/18092	[email protected]	Vendor Advisory
http://secunia.com/advisories/18435	[email protected]	Vendor Advisory
http://secunia.com/advisories/18503	[email protected]	Vendor Advisory
http://securitytracker.com/id?1015280	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/23251	[email protected]
http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102003-1	[email protected]	PatchVendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg21225628	[email protected]
http://www.gentoo.org/security/en/glsa/glsa-200601-10.xml	[email protected]
http://www.kb.cert.org/vuls/id/974188	[email protected]	US Government Resource
http://www.securityfocus.com/bid/15615	[email protected]
http://www.vupen.com/english/advisories/2005/2636	[email protected]	Vendor Advisory
http://www.vupen.com/english/advisories/2005/2675	[email protected]	Vendor Advisory
http://www.vupen.com/english/advisories/2005/2946	[email protected]	Vendor Advisory

see all 32 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-noinfo	Insufficient Information to Classify Weakness	[email protected]

Affected Products

Product	Versions
sun jdk	1.3 1.3.0_02 1.3.0_05 1.3.1_01 1.3.1_01a
CPE cpe:2.3:a:sun:jdk:1.3::solaris::::: cpe:2.3:a:sun:jdk:1.3.0_02::linux::::: cpe:2.3:a:sun:jdk:1.3.0_02::solaris::::: cpe:2.3:a:sun:jdk:1.3.0_02::windows::::: cpe:2.3:a:sun:jdk:1.3.0_05::linux::::: cpe:2.3:a:sun:jdk:1.3.0_05::windows::::: cpe:2.3:a:sun:jdk:1.3.1_01::linux::::: cpe:2.3:a:sun:jdk:1.3.1_01::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_01a::windows::::: cpe:2.3:a:sun:jdk:1.3.1_02::linux::::: cpe:2.3:a:sun:jdk:1.3.1_02::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_02::windows::::: cpe:2.3:a:sun:jdk:1.3.1_03::linux::::: cpe:2.3:a:sun:jdk:1.3.1_03::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_03::windows::::: cpe:2.3:a:sun:jdk:1.3.1_04::windows::::: cpe:2.3:a:sun:jdk:1.3.1_05::linux::::: cpe:2.3:a:sun:jdk:1.3.1_05::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_05::windows::::: cpe:2.3:a:sun:jdk:1.3.1_06::linux::::: cpe:2.3:a:sun:jdk:1.3.1_06::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_06::windows::::: cpe:2.3:a:sun:jdk:1.3.1_07::linux::::: cpe:2.3:a:sun:jdk:1.3.1_07::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_07::windows::::: cpe:2.3:a:sun:jdk:1.3.1_08::linux::::: cpe:2.3:a:sun:jdk:1.3.1_08::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_08::windows::::: cpe:2.3:a:sun:jdk:1.3.1_09::linux::::: cpe:2.3:a:sun:jdk:1.3.1_09::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_09::windows::::: cpe:2.3:a:sun:jdk:1.3.1_10::linux::::: cpe:2.3:a:sun:jdk:1.3.1_10::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_10::windows::::: cpe:2.3:a:sun:jdk:1.3.1_11::linux::::: cpe:2.3:a:sun:jdk:1.3.1_11::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_11::windows::::: cpe:2.3:a:sun:jdk:1.3.1_12::linux::::: cpe:2.3:a:sun:jdk:1.3.1_12::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_12::windows::::: cpe:2.3:a:sun:jdk:1.3.1_13::linux::::: cpe:2.3:a:sun:jdk:1.3.1_13::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_13::windows::::: cpe:2.3:a:sun:jdk:1.3.1_14::linux::::: cpe:2.3:a:sun:jdk:1.3.1_14::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_14::windows::::: cpe:2.3:a:sun:jdk:1.3.1_15::linux::::: cpe:2.3:a:sun:jdk:1.3.1_15::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_15::windows::::: cpe:2.3:a:sun:jdk:1.3_02::solaris::::: cpe:2.3:a:sun:jdk:1.3_05::solaris::::: cpe:2.3:a:sun:jdk:1.4::linux::::: cpe:2.3:a:sun:jdk:1.4::solaris::::: cpe:2.3:a:sun:jdk:1.4::windows::::: cpe:2.3:a:sun:jdk:1.4.0_01::windows::::: cpe:2.3:a:sun:jdk:1.4.0_02::linux::::: cpe:2.3:a:sun:jdk:1.4.0_02::solaris::::: cpe:2.3:a:sun:jdk:1.4.0_02::windows::::: cpe:2.3:a:sun:jdk:1.4.0_03::linux::::: cpe:2.3:a:sun:jdk:1.4.0_03::solaris::::: cpe:2.3:a:sun:jdk:1.4.0_03::windows::::: cpe:2.3:a:sun:jdk:1.4.0_4::linux::::: cpe:2.3:a:sun:jdk:1.4.0_4::solaris::::: cpe:2.3:a:sun:jdk:1.4.0_4::windows::::: cpe:2.3:a:sun:jdk:1.4.1::linux::::: cpe:2.3:a:sun:jdk:1.4.1::solaris::::: cpe:2.3:a:sun:jdk:1.4.1::windows::::: cpe:2.3:a:sun:jdk:1.4.1_01::linux::::: cpe:2.3:a:sun:jdk:1.4.1_01::solaris::::: cpe:2.3:a:sun:jdk:1.4.1_01::windows::::: cpe:2.3:a:sun:jdk:1.4.1_02::linux::::: cpe:2.3:a:sun:jdk:1.4.1_02::solaris::::: cpe:2.3:a:sun:jdk:1.4.1_02::windows::::: cpe:2.3:a:sun:jdk:1.4.1_03::linux::::: cpe:2.3:a:sun:jdk:1.4.1_03::solaris::::: cpe:2.3:a:sun:jdk:1.4.1_03::windows::::: cpe:2.3:a:sun:jdk:1.4.2::linux::::: cpe:2.3:a:sun:jdk:1.4.2::solaris::::: cpe:2.3:a:sun:jdk:1.4.2::windows::::: cpe:2.3:a:sun:jdk:1.4.2_01::linux::::: cpe:2.3:a:sun:jdk:1.4.2_02::linux::::: cpe:2.3:a:sun:jdk:1.4.2_03::linux::::: cpe:2.3:a:sun:jdk:1.4.2_03::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_03::windows::::: cpe:2.3:a:sun:jdk:1.4.2_04::linux::::: cpe:2.3:a:sun:jdk:1.4.2_04::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_04::windows::::: cpe:2.3:a:sun:jdk:1.4.2_05::linux::::: cpe:2.3:a:sun:jdk:1.4.2_05::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_05::windows::::: cpe:2.3:a:sun:jdk:1.4.2_08::linux::::: cpe:2.3:a:sun:jdk:1.4.2_08::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_08::windows::::: cpe:2.3:a:sun:jdk:1.5.0_03::linux::::: cpe:2.3:a:sun:jdk:1.5.0_03::solaris::::: cpe:2.3:a:sun:jdk:1.5.0_03::windows::::: Remediation No remediation found in references.
sun jre	1.3.0 1.3.0 update1 1.3.0 update2 1.3.0 update3 1.3.0 update4
CPE cpe:2.3:a:sun:jre:1.3.0:::::::* cpe:2.3:a:sun:jre:1.3.0:update1:::::: cpe:2.3:a:sun:jre:1.3.0:update2:::::: cpe:2.3:a:sun:jre:1.3.0:update3:::::: cpe:2.3:a:sun:jre:1.3.0:update4:::::: cpe:2.3:a:sun:jre:1.3.0:update5:::::: cpe:2.3:a:sun:jre:1.3.1:::::::* cpe:2.3:a:sun:jre:1.3.1:update1:::::: cpe:2.3:a:sun:jre:1.3.1:update15:::::: cpe:2.3:a:sun:jre:1.3.1:update1a:::::: cpe:2.3:a:sun:jre:1.3.1:update4:::::: cpe:2.3:a:sun:jre:1.3.1:update8:::::: cpe:2.3:a:sun:jre:1.4.1:::::::* cpe:2.3:a:sun:jre:1.4.2:::::::* cpe:2.3:a:sun:jre:1.4.2_1:::::::* cpe:2.3:a:sun:jre:1.4.2_2:::::::* cpe:2.3:a:sun:jre:1.4.2_3:::::::* cpe:2.3:a:sun:jre:1.4.2_4:::::::* cpe:2.3:a:sun:jre:1.4.2_5:::::::* cpe:2.3:a:sun:jre:1.4.2_6:::::::* cpe:2.3:a:sun:jre:1.4.2_7:::::::* cpe:2.3:a:sun:jre:1.4.2_8:::::::* cpe:2.3:a:sun:jre:1.5.0:::::::* cpe:2.3:a:sun:jre:1.5.0:update1:::::: cpe:2.3:a:sun:jre:1.5.0:update2:::::: cpe:2.3:a:sun:jre:1.5.0:update3:::::: Remediation No remediation found in references.

Change History

14 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 16, 2026		[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Oct 30, 2018	CPE Deprecation Remap	[email protected]
Oct 30, 2018	CPE Deprecation Remap	[email protected]
Oct 30, 2018	CPE Deprecation Remap	[email protected]
Oct 30, 2018	CPE Deprecation Remap	[email protected]
Oct 30, 2018	CPE Deprecation Remap	[email protected]
Oct 30, 2018	CPE Deprecation Remap	[email protected]
Oct 30, 2018	CPE Deprecation Remap	[email protected]
Oct 30, 2018	CPE Deprecation Remap	[email protected]
Jul 20, 2017	CVE Modified	[email protected]
Nov 30, 2005	Initial Analysis	[email protected]