« Volver al listado

CVE-2006-0614

Estado: ModificadaMedia (6.4)—

Vulnerabilidad no especificada en Sun Java JDK y JRE 5.0 Update 3 y anteriores, SDK y JRE 1.3.x hasta 1.3.1_16 y 1.4.x hasta 1.4.2_08, que permite a atacantes remotos eludir la seguridad del entorno aislado (sandbox) de Java y obtener privilegios mediante vectores no especificados relacionados con las API de reflexión, también conocida como "primer problema".

Traducción automática del texto original de NVD (en inglés).

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

SUN — JDKSUN — JRESUN — SDK

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-0614",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-02-09T02:02:00.000",
  "references": [
    {
      "url": "http://docs.info.apple.com/article.html?artnum=303658",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/18760",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/18884",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1015596",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102171-1",
      "tags": [
        "Broken Link",
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200602-07.xml",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/759996",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/0467",
      "tags": [
        "Permissions Required",
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/0828",
      "tags": [
        "Permissions Required",
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/1398",
      "tags": [
        "Permissions Required",
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24561",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://docs.info.apple.com/article.html?artnum=303658",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/18760",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/18884",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1015596",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102171-1",
      "tags": [
        "Broken Link",
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200602-07.xml",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/759996",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/0467",
      "tags": [
        "Permissions Required",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/0828",
      "tags": [
        "Permissions Required",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/1398",
      "tags": [
        "Permissions Required",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24561",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in Sun Java JDK and JRE 5.0 Update 3 and earlier, SDK and JRE 1.3.x through 1.3.1_16 and 1.4.x through 1.4.2_08 allows remote attackers to bypass Java sandbox security and obtain privileges via unspecified vectors involving the reflection APIs, aka the \"first issue.\""
    }
  ],
  "lastModified": "2026-06-16T22:20:56.380",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sun:jdk:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D9D9B6F3-906D-4CCC-9655-99A1496B1475"
            },
            {
              "criteria": "cpe:2.3:a:sun:jdk:5.0:update1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "15AFED7D-005C-4BDF-9E98-D79A5164BF86"
            },
            {
              "criteria": "cpe:2.3:a:sun:jdk:5.0:update2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "896AD81D-C7D9-4CF4-B7E7-C4FFDF3477FA"
            },
            {
              "criteria": "cpe:2.3:a:sun:jdk:5.0:update3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AEBBA0B7-B05D-438C-BB0B-3FEE4D11D1F7"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5C45EF9E-57AE-4EB1-B787-ECAC8353A329",
              "versionEndIncluding": "1.3.1_16",
              "versionStartIncluding": "1.3.0"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "88A9881D-77F9-4872-B363-BF47977FF4E1",
              "versionEndIncluding": "1.4.2_8",
              "versionStartIncluding": "1.4.0"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3241D774-D0F4-4529-A779-2F4F11813D18"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:5.0:update1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ABE265F4-C6C3-4266-8C1C-A058C6AD06E0"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:5.0:update2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "94DC01AD-8FDB-44E0-B341-1E85CB6E11C1"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:5.0:update3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C89AE14B-16C8-453D-9728-D8E08EAB864A"
            },
            {
              "criteria": "cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3C309E8B-4C1E-47F0-A173-72D5C3E75245",
              "versionEndIncluding": "1.3.1_16",
              "versionStartIncluding": "1.3.0"
            },
            {
              "criteria": "cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8526B561-0B12-40D1-9B40-EF2D3EA8C9C7",
              "versionEndIncluding": "1.4.2_08",
              "versionStartIncluding": "1.4.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}