{"document":{"aggregate_severity":{"namespace":"https://www.suse.com/support/security/rating/","text":"critical"},"category":"csaf_vex","csaf_version":"2.0","distribution":{"text":"Copyright 2023 SUSE LLC. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"summary","text":"SUSE CVE-2008-0657","title":"Title"},{"category":"description","text":"Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.","title":"Description of the CVE"},{"category":"legal_disclaimer","text":"CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).","title":"Terms of use"}],"publisher":{"category":"vendor","contact_details":"https://www.suse.com/support/security/contact/","name":"SUSE Product Security Team","namespace":"https://www.suse.com/"},"references":[{"category":"external","summary":"CVE-2008-0657","url":"https://www.suse.com/security/cve/CVE-2008-0657"},{"category":"external","summary":"SUSE Security Ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"external","summary":"SUSE Bug 347242 for CVE-2008-0657","url":"https://bugzilla.suse.com/347242"},{"category":"external","summary":"SUSE Bug 361008 for CVE-2008-0657","url":"https://bugzilla.suse.com/361008"},{"category":"external","summary":"SUSE Bug 379038 for CVE-2008-0657","url":"https://bugzilla.suse.com/379038"},{"category":"external","summary":"Advisory link for SUSE-SA:2008:025","url":"https://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html"}],"title":"SUSE CVE CVE-2008-0657","tracking":{"current_release_date":"2023-02-15T06:09:16Z","generator":{"date":"2023-02-15T06:09:16Z","engine":{"name":"cve-database.git:bin/generate-csaf-vex.pl","version":"1"}},"id":"CVE-2008-0657","initial_release_date":"2023-02-15T06:09:16Z","revision_history":[{"date":"2023-02-15T06:09:16Z","number":"2","summary":"Current version"}],"status":"interim","version":"2"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_name","name":"SUSE Linux Enterprise Module for Legacy 12","product":{"name":"SUSE Linux Enterprise Module for Legacy 12","product_id":"SUSE Linux Enterprise Module for Legacy 12","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-legacy:12"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 11 SP1 for Teradata","product":{"name":"SUSE Linux Enterprise Server 11 SP1 for Teradata","product_id":"SUSE Linux Enterprise Server 11 SP1 for Teradata","product_identification_helper":{"cpe":"cpe:/o:suse:suse_sles_teradata:11:sp1"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 11 SP3 for Teradata","product":{"name":"SUSE Linux Enterprise Server 11 SP3 for Teradata","product_id":"SUSE Linux Enterprise Server 11 SP3 for Teradata","product_identification_helper":{"cpe":"cpe:/o:suse:suse_sles_teradata:11:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Legacy 12","product":{"name":"SUSE Linux Enterprise Module for Legacy 12","product_id":"SUSE Linux Enterprise Module for Legacy 12","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-legacy:12"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Legacy 12","product":{"name":"SUSE Linux Enterprise Module for Legacy 12","product_id":"SUSE Linux Enterprise Module for Legacy 12","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-legacy:12"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Legacy 12","product":{"name":"SUSE Linux Enterprise Module for Legacy 12","product_id":"SUSE Linux Enterprise Module for Legacy 12","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-legacy:12"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Legacy 12","product":{"name":"SUSE Linux Enterprise Module for Legacy 12","product_id":"SUSE Linux Enterprise Module for Legacy 12","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-legacy:12"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Legacy 12","product":{"name":"SUSE Linux Enterprise Module for Legacy 12","product_id":"SUSE Linux Enterprise Module for Legacy 12","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-legacy:12"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Legacy 12","product":{"name":"SUSE Linux Enterprise Module for Legacy 12","product_id":"SUSE Linux Enterprise Module for Legacy 12","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-legacy:12"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Legacy 12","product":{"name":"SUSE Linux Enterprise Module for Legacy 12","product_id":"SUSE Linux Enterprise Module for Legacy 12","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-legacy:12"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Legacy 12","product":{"name":"SUSE Linux Enterprise Module for Legacy 12","product_id":"SUSE Linux Enterprise Module for Legacy 12","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-legacy:12"}}},{"category":"product_version","name":"java-1_6_0-ibm","product":{"name":"java-1_6_0-ibm","product_id":"java-1_6_0-ibm","product_identification_helper":{"cpe":"cpe:2.3:a:ibm:java:*:*:*:*:*:*:*:*"}}},{"category":"product_version","name":"java-1_6_0-ibm-fonts","product":{"name":"java-1_6_0-ibm-fonts","product_id":"java-1_6_0-ibm-fonts"}},{"category":"product_version","name":"java-1_6_0-ibm-jdbc","product":{"name":"java-1_6_0-ibm-jdbc","product_id":"java-1_6_0-ibm-jdbc"}},{"category":"product_version","name":"java-1_6_0-ibm-plugin","product":{"name":"java-1_6_0-ibm-plugin","product_id":"java-1_6_0-ibm-plugin"}}],"category":"product_family","name":"SUSE Linux Enterprise"}],"category":"vendor","name":"SUSE"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"java-1_6_0-ibm as component of SUSE Linux Enterprise Module for Legacy 12","product_id":"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm"},"product_reference":"java-1_6_0-ibm","relates_to_product_reference":"SUSE Linux Enterprise Module for Legacy 12"},{"category":"default_component_of","full_product_name":{"name":"java-1_6_0-ibm-fonts as component of SUSE Linux Enterprise Module for Legacy 12","product_id":"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts"},"product_reference":"java-1_6_0-ibm-fonts","relates_to_product_reference":"SUSE Linux Enterprise Module for Legacy 12"},{"category":"default_component_of","full_product_name":{"name":"java-1_6_0-ibm-jdbc as component of SUSE Linux Enterprise Module for Legacy 12","product_id":"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc"},"product_reference":"java-1_6_0-ibm-jdbc","relates_to_product_reference":"SUSE Linux Enterprise Module for Legacy 12"},{"category":"default_component_of","full_product_name":{"name":"java-1_6_0-ibm-plugin as component of SUSE Linux Enterprise Module for Legacy 12","product_id":"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin"},"product_reference":"java-1_6_0-ibm-plugin","relates_to_product_reference":"SUSE Linux Enterprise Module for Legacy 12"},{"category":"default_component_of","full_product_name":{"name":"java-1_6_0-ibm as component of SUSE Linux Enterprise Server 11 SP1 for Teradata","product_id":"SUSE Linux Enterprise Server 11 SP1 for Teradata:java-1_6_0-ibm"},"product_reference":"java-1_6_0-ibm","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP1 for Teradata"},{"category":"default_component_of","full_product_name":{"name":"java-1_6_0-ibm as component of SUSE Linux Enterprise Server 11 SP3 for Teradata","product_id":"SUSE Linux Enterprise Server 11 SP3 for Teradata:java-1_6_0-ibm"},"product_reference":"java-1_6_0-ibm","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP3 for Teradata"}]},"vulnerabilities":[{"cve":"CVE-2008-0657","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2008-0657"}],"notes":[{"category":"general","text":"Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.","title":"Vulnerability description"}],"product_status":{"known affected":["SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm","SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts","SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc","SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin","SUSE Linux Enterprise Server 11 SP1 for Teradata:java-1_6_0-ibm","SUSE Linux Enterprise Server 11 SP3 for Teradata:java-1_6_0-ibm"]},"references":[{"category":"external","summary":"CVE-2008-0657","url":"https://www.suse.com/security/cve/CVE-2008-0657"},{"category":"external","summary":"SUSE Security Ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"external","summary":"SUSE Bug 347242 for CVE-2008-0657","url":"https://bugzilla.suse.com/347242"},{"category":"external","summary":"SUSE Bug 361008 for CVE-2008-0657","url":"https://bugzilla.suse.com/361008"},{"category":"external","summary":"SUSE Bug 379038 for CVE-2008-0657","url":"https://bugzilla.suse.com/379038"},{"category":"external","summary":"Advisory link for SUSE-SA:2008:025","url":"https://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html"}],"threats":[{"category":"impact","date":"2013-06-28T00:48:28Z","details":"critical"}],"title":"CVE-2008-0657"}]}