CVE-2008-5343— SUN JRE SDK JDK中GIFAR HTTP会话劫持漏洞

一分钟漏洞结论

复制摘要 复制引用

影响对象

n/a n/a

利用判断

利用概率较高，应尽快评估

建议动作

优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。

Solaris系统的Java运行时环境(JRE)为JAVA应用程序提供可靠的运行环境。 Sun JDK和JRE 6 Update 10及更早的版本中的Java Web Start(JWS)和Java插件；JDK和JRE 5.0 Update 16及更早的版本；SDK 和 JRE 1.4.2_18及更早的版本中，允许远程攻击者通过一个特制的文件在未授权的网络中发起连接并劫持HTTP会话，这种文件会被作为GIF和Java JAR文件来验证，又名"GIFAR"和 CR 6707535。

CVE-2008-5343 影响 n/a n/a。利用概率较高，应尽快评估。Solaris系统的Java运行时环境(JRE)为JAVA应用程序提供可靠的运行环境。 Sun JDK和JRE 6 Update 10及更早的版本中的Java Web Start(JWS)和Java插件；JDK和JRE 5.0 Update 16及更早的版本；SDK 和 JRE 1.4.2_18及更早的版本中，允许远程攻击者通过一个特制的文件在未授权的网络中 CVE-2008-5343 漏洞详情，神龙漏洞库，https://cve.imfht.com/detail/CVE-2008-5343

一、 漏洞 CVE-2008-5343 基础信息

受影响产品

二、漏洞 CVE-2008-5343 的公开POC

三、漏洞 CVE-2008-5343 的情报信息

CVE-2008-5343 厂商安全公告 (20)

• http://secunia.com/advisories/33015 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/34605 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/33710 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/32991 third-party-advisory x_refsource_SECUNIA
• http://osvdb.org/50512 vdb-entry x_refsource_OSVDB
• http://secunia.com/advisories/37386 third-party-advisory x_refsource_SECUNIA
• http://www.securityfocus.com/bid/32892 vdb-entry x_refsource_BID
• http://secunia.com/advisories/38539 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/34233 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/35065 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/34447 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/34889 third-party-advisory x_refsource_SECUNIA
• http://www.us-cert.gov/cas/techalerts/TA08-340A.html third-party-advisory x_refsource_CERT
• http://www.vupen.com/english/advisories/2009/0424 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2009/0672 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2008/3339 vdb-entry x_refsource_VUPEN
• http://rhn.redhat.com/errata/RHSA-2008-1025.html vendor-advisory x_refsource_REDHAT
• http://rhn.redhat.com/errata/RHSA-2008-1018.html vendor-advisory x_refsource_REDHAT
• http://security.gentoo.org/glsa/glsa-200911-02.xml vendor-advisory x_refsource_GENTOO
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5924 vdb-entry signature x_refsource_OVAL

CVE-2008-5343 邮件列表归档 (6)

• http://marc.info/?l=bugtraq&m=123678756409861&w=2 vendor-advisory x_refsource_HP
• http://marc.info/?l=bugtraq&m=126583436323697&w=2 vendor-advisory x_refsource_HP
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html vendor-advisory x_refsource_SUSE
• http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html vendor-advisory x_refsource_SUSE
• http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html vendor-advisory x_refsource_SUSE
• http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html vendor-advisory x_refsource_APPLE

CVE-2008-5343 安全博客文章 (1)

• http://xs-sniper.com/blog/2008/12/17/sun-fixes-gifars/ x_refsource_MISC

CVE-2008-5343 其他参考 (7)

• http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm x_refsource_CONFIRM
• http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm x_refsource_CONFIRM
• http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid= x_refsource_CONFIRM
• http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf x_refsource_CONFIRM
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1 vendor-advisory x_refsource_SUNALERT
• http://www.redhat.com/support/errata/RHSA-2009-0016.html vendor-advisory x_refsource_REDHAT
• http://www.redhat.com/support/errata/RHSA-2009-0369.html vendor-advisory x_refsource_REDHAT

• https://www.cve.org/CVERecord?id=CVE-2008-5343

同批安全公告 · n/a · 2008-12-05 · 共 41 条

显示前 20 条，共 41 条。 查看全部 → →

IV. Related Vulnerabilities

V. Comments for CVE-2008-5343