<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">CVE-2008-5341</DocumentTitle>
  <DocumentType>SUSE CVE</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE CVE-2008-5341</ID>
    </Identification>
    <Status>Interim</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>9</Number>
        <Date>2022-10-15T18:20:26Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2021-05-30T12:44:48Z</InitialReleaseDate>
    <CurrentReleaseDate>2022-10-15T18:20:26Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf-cve.pl</Engine>
      <Date>2020-12-27T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="CVE" Type="Summary" Ordinal="1" xml:lang="en">CVE-2008-5341</Note>
    <Note Title="Mitre CVE Description" Type="Description" Ordinal="2" xml:lang="en">Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071.</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="4" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
  </DocumentNotes>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00000.html</URL>
      <Description>E-Mail link for SUSE-SA:2009:001</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html</URL>
      <Description>E-Mail link for SUSE-SA:2009:007</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html</URL>
      <Description>E-Mail link for SUSE-SA:2009:018</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 11">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 11">
        <FullProductName ProductID="SUSE Linux Enterprise Server 11" CPE="cpe:/o:suse:suse_sles:11">SUSE Linux Enterprise Server 11</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 11">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 11">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11" CPE="cpe:/o:suse:sles_sap:11">SUSE Linux Enterprise Server for SAP Applications 11</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="java-1_6_0-ibm-1.6.0-124.6.1">
      <FullProductName ProductID="java-1_6_0-ibm-1.6.0-124.6.1" CPE="cpe:2.3:a:ibm:java:1.6.0:*:*:*:*:*:*:*">java-1_6_0-ibm-1.6.0-124.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="java-1_6_0-ibm-alsa-1.6.0-124.6.1">
      <FullProductName ProductID="java-1_6_0-ibm-alsa-1.6.0-124.6.1">java-1_6_0-ibm-alsa-1.6.0-124.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="java-1_6_0-ibm-alsa-x86-1.6.0-124.7.1">
      <FullProductName ProductID="java-1_6_0-ibm-alsa-x86-1.6.0-124.7.1">java-1_6_0-ibm-alsa-x86-1.6.0-124.7.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="java-1_6_0-ibm-fonts-1.6.0-124.6.1">
      <FullProductName ProductID="java-1_6_0-ibm-fonts-1.6.0-124.6.1">java-1_6_0-ibm-fonts-1.6.0-124.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="java-1_6_0-ibm-jdbc-1.6.0-124.6.1">
      <FullProductName ProductID="java-1_6_0-ibm-jdbc-1.6.0-124.6.1">java-1_6_0-ibm-jdbc-1.6.0-124.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="java-1_6_0-ibm-plugin-1.6.0-124.6.1">
      <FullProductName ProductID="java-1_6_0-ibm-plugin-1.6.0-124.6.1">java-1_6_0-ibm-plugin-1.6.0-124.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="java-1_6_0-ibm-x86-1.6.0-124.7.1">
      <FullProductName ProductID="java-1_6_0-ibm-x86-1.6.0-124.7.1">java-1_6_0-ibm-x86-1.6.0-124.7.1</FullProductName>
    </Branch>
    <Relationship ProductReference="java-1_6_0-ibm-1.6.0-124.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11:java-1_6_0-ibm-1.6.0-124.6.1">java-1_6_0-ibm-1.6.0-124.6.1 as a component of SUSE Linux Enterprise Server 11</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-alsa-1.6.0-124.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11:java-1_6_0-ibm-alsa-1.6.0-124.6.1">java-1_6_0-ibm-alsa-1.6.0-124.6.1 as a component of SUSE Linux Enterprise Server 11</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-alsa-x86-1.6.0-124.7.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11:java-1_6_0-ibm-alsa-x86-1.6.0-124.7.1">java-1_6_0-ibm-alsa-x86-1.6.0-124.7.1 as a component of SUSE Linux Enterprise Server 11</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-fonts-1.6.0-124.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11:java-1_6_0-ibm-fonts-1.6.0-124.6.1">java-1_6_0-ibm-fonts-1.6.0-124.6.1 as a component of SUSE Linux Enterprise Server 11</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-jdbc-1.6.0-124.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11:java-1_6_0-ibm-jdbc-1.6.0-124.6.1">java-1_6_0-ibm-jdbc-1.6.0-124.6.1 as a component of SUSE Linux Enterprise Server 11</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-plugin-1.6.0-124.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11:java-1_6_0-ibm-plugin-1.6.0-124.6.1">java-1_6_0-ibm-plugin-1.6.0-124.6.1 as a component of SUSE Linux Enterprise Server 11</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-x86-1.6.0-124.7.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11:java-1_6_0-ibm-x86-1.6.0-124.7.1">java-1_6_0-ibm-x86-1.6.0-124.7.1 as a component of SUSE Linux Enterprise Server 11</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-1.6.0-124.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11:java-1_6_0-ibm-1.6.0-124.6.1">java-1_6_0-ibm-1.6.0-124.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-alsa-1.6.0-124.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11:java-1_6_0-ibm-alsa-1.6.0-124.6.1">java-1_6_0-ibm-alsa-1.6.0-124.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-alsa-x86-1.6.0-124.7.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11:java-1_6_0-ibm-alsa-x86-1.6.0-124.7.1">java-1_6_0-ibm-alsa-x86-1.6.0-124.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-fonts-1.6.0-124.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11:java-1_6_0-ibm-fonts-1.6.0-124.6.1">java-1_6_0-ibm-fonts-1.6.0-124.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-jdbc-1.6.0-124.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11:java-1_6_0-ibm-jdbc-1.6.0-124.6.1">java-1_6_0-ibm-jdbc-1.6.0-124.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-plugin-1.6.0-124.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11:java-1_6_0-ibm-plugin-1.6.0-124.6.1">java-1_6_0-ibm-plugin-1.6.0-124.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-x86-1.6.0-124.7.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11:java-1_6_0-ibm-x86-1.6.0-124.7.1">java-1_6_0-ibm-x86-1.6.0-124.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071.</Note>
    </Notes>
    <CVE>CVE-2008-5341</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11:java-1_6_0-ibm-1.6.0-124.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11:java-1_6_0-ibm-alsa-1.6.0-124.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11:java-1_6_0-ibm-alsa-x86-1.6.0-124.7.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11:java-1_6_0-ibm-fonts-1.6.0-124.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11:java-1_6_0-ibm-jdbc-1.6.0-124.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11:java-1_6_0-ibm-plugin-1.6.0-124.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11:java-1_6_0-ibm-x86-1.6.0-124.7.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11:java-1_6_0-ibm-1.6.0-124.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11:java-1_6_0-ibm-alsa-1.6.0-124.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11:java-1_6_0-ibm-alsa-x86-1.6.0-124.7.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11:java-1_6_0-ibm-fonts-1.6.0-124.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11:java-1_6_0-ibm-jdbc-1.6.0-124.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11:java-1_6_0-ibm-plugin-1.6.0-124.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11:java-1_6_0-ibm-x86-1.6.0-124.7.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>5</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:N/C:P/I:N/A:N</VectorV2>
      </ScoreSetV2>
    </CVSSScoreSets>
  </Vulnerability>
</cvrfdoc>
