VAR-200812-0096
Vulnerability from variot - Updated: 2025-04-10 23:03Multiple buffer overflows in Sun Java Wireless Toolkit (WTK) for CLDC 2.5.2 and earlier allow downloaded programs to execute arbitrary code via unknown vectors. Sun Java Wireless Toolkit for CDLC is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. An attacker can exploit this issue to execute arbitrary code in the context of the toolkit. Failed attacks will likely cause denial-of-service conditions. Sun Java Wireless Toolkit 2.5.2 and prior versions are vulnerable. ----------------------------------------------------------------------
Did you know that a change in our assessment rating, exploit code availability, or if an updated patch is released by the vendor, is not part of this mailing-list?
Click here to learn more: http://secunia.com/advisories/business_solutions/
TITLE: Sun Java Wireless Toolkit for CLDC Buffer Overflow Vulnerabilities
SECUNIA ADVISORY ID: SA33159
VERIFY ADVISORY: http://secunia.com/advisories/33159/
CRITICAL: Less critical
IMPACT: Security Bypass
WHERE:
From remote
SOFTWARE: Sun Java Wireless Toolkit for CLDC 2.x http://secunia.com/advisories/product/20784/
DESCRIPTION: Some vulnerabilities have been reported in Sun Java Wireless Toolkit for CLDC, which can be exploited by malicious people to bypass certain security restrictions. http://java.sun.com/products/sjwtoolkit/
PROVIDED AND/OR DISCOVERED BY: Reported by the vendor.
ORIGINAL ADVISORY: http://sunsolve.sun.com/search/document.do?assetkey=1-66-247566-1
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/advisories/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200812-0096",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "java wireless toolkit for cldc",
"scope": "eq",
"trust": 1.6,
"vendor": "sun",
"version": "2.5"
},
{
"model": "java wireless toolkit for cldc",
"scope": "eq",
"trust": 1.6,
"vendor": "sun",
"version": "1.0"
},
{
"model": "java wireless toolkit for cldc",
"scope": "eq",
"trust": 1.6,
"vendor": "sun",
"version": "2.5.1"
},
{
"model": "java wireless toolkit for cldc",
"scope": "eq",
"trust": 1.6,
"vendor": "sun",
"version": "2.2"
},
{
"model": "java wireless toolkit for cldc",
"scope": "lte",
"trust": 1.0,
"vendor": "sun",
"version": "2.5.2"
},
{
"model": "java wireless toolkit",
"scope": "lte",
"trust": 0.8,
"vendor": "sun microsystems",
"version": "2.5.2"
},
{
"model": "java wireless toolkit for cldc",
"scope": "eq",
"trust": 0.6,
"vendor": "sun",
"version": "2.5.2"
},
{
"model": "java wireless toolkit",
"scope": "eq",
"trust": 0.3,
"vendor": "sun",
"version": "2.5.2"
},
{
"model": "java wireless toolkit 2.5.2 01",
"scope": "ne",
"trust": 0.3,
"vendor": "sun",
"version": null
}
],
"sources": [
{
"db": "BID",
"id": "32862"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-002397"
},
{
"db": "CNNVD",
"id": "CNNVD-200812-354"
},
{
"db": "NVD",
"id": "CVE-2008-5662"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:sun:java_wireless_toolkit_for_cldc",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2008-002397"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Sun",
"sources": [
{
"db": "BID",
"id": "32862"
},
{
"db": "CNNVD",
"id": "CNNVD-200812-354"
}
],
"trust": 0.9
},
"cve": "CVE-2008-5662",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.6,
"id": "CVE-2008-5662",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.6,
"id": "VHN-35787",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2008-5662",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2008-5662",
"trust": 0.8,
"value": "High"
},
{
"author": "CNNVD",
"id": "CNNVD-200812-354",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "VULHUB",
"id": "VHN-35787",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-35787"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-002397"
},
{
"db": "CNNVD",
"id": "CNNVD-200812-354"
},
{
"db": "NVD",
"id": "CVE-2008-5662"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Multiple buffer overflows in Sun Java Wireless Toolkit (WTK) for CLDC 2.5.2 and earlier allow downloaded programs to execute arbitrary code via unknown vectors. Sun Java Wireless Toolkit for CDLC is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. \nAn attacker can exploit this issue to execute arbitrary code in the context of the toolkit. Failed attacks will likely cause denial-of-service conditions. \nSun Java Wireless Toolkit 2.5.2 and prior versions are vulnerable. ----------------------------------------------------------------------\n\nDid you know that a change in our assessment rating, exploit code\navailability, or if an updated patch is released by the vendor, is\nnot part of this mailing-list?\n\nClick here to learn more:\nhttp://secunia.com/advisories/business_solutions/\n\n----------------------------------------------------------------------\n\nTITLE:\nSun Java Wireless Toolkit for CLDC Buffer Overflow Vulnerabilities\n\nSECUNIA ADVISORY ID:\nSA33159\n\nVERIFY ADVISORY:\nhttp://secunia.com/advisories/33159/\n\nCRITICAL:\nLess critical\n\nIMPACT:\nSecurity Bypass\n\nWHERE:\n\u003eFrom remote\n\nSOFTWARE:\nSun Java Wireless Toolkit for CLDC 2.x\nhttp://secunia.com/advisories/product/20784/\n\nDESCRIPTION:\nSome vulnerabilities have been reported in Sun Java Wireless Toolkit\nfor CLDC, which can be exploited by malicious people to bypass\ncertain security restrictions. \nhttp://java.sun.com/products/sjwtoolkit/\n\nPROVIDED AND/OR DISCOVERED BY:\nReported by the vendor. \n\nORIGINAL ADVISORY:\nhttp://sunsolve.sun.com/search/document.do?assetkey=1-66-247566-1\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/advisories/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/advisories/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2008-5662"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-002397"
},
{
"db": "BID",
"id": "32862"
},
{
"db": "VULHUB",
"id": "VHN-35787"
},
{
"db": "PACKETSTORM",
"id": "73077"
}
],
"trust": 2.07
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2008-5662",
"trust": 2.5
},
{
"db": "BID",
"id": "32862",
"trust": 2.0
},
{
"db": "SECUNIA",
"id": "33159",
"trust": 1.8
},
{
"db": "SECTRACK",
"id": "1021414",
"trust": 1.7
},
{
"db": "VUPEN",
"id": "ADV-2008-3439",
"trust": 1.7
},
{
"db": "JVNDB",
"id": "JVNDB-2008-002397",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-200812-354",
"trust": 0.7
},
{
"db": "XF",
"id": "47376",
"trust": 0.6
},
{
"db": "SUNALERT",
"id": "247566",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-35787",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "73077",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-35787"
},
{
"db": "BID",
"id": "32862"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-002397"
},
{
"db": "PACKETSTORM",
"id": "73077"
},
{
"db": "CNNVD",
"id": "CNNVD-200812-354"
},
{
"db": "NVD",
"id": "CVE-2008-5662"
}
]
},
"id": "VAR-200812-0096",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-35787"
}
],
"trust": 0.01
},
"last_update_date": "2025-04-10T23:03:21.072000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "247566",
"trust": 0.8,
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-247566-1"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2008-002397"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-119",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-35787"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-002397"
},
{
"db": "NVD",
"id": "CVE-2008-5662"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/32862"
},
{
"trust": 1.7,
"url": "http://www.securitytracker.com/id?1021414"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/33159"
},
{
"trust": 1.7,
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-247566-1"
},
{
"trust": 1.1,
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019851.1-1"
},
{
"trust": 1.1,
"url": "http://www.vupen.com/english/advisories/2008/3439"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47376"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-5662"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2008-5662"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/47376"
},
{
"trust": 0.6,
"url": "http://www.frsirt.com/english/advisories/2008/3439"
},
{
"trust": 0.4,
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-247566-1"
},
{
"trust": 0.4,
"url": "http://java.sun.com/products/sjwtoolkit/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/secunia_security_advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/product/20784/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/business_solutions/"
},
{
"trust": 0.1,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/33159/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/about_secunia_advisories/"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-35787"
},
{
"db": "BID",
"id": "32862"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-002397"
},
{
"db": "PACKETSTORM",
"id": "73077"
},
{
"db": "CNNVD",
"id": "CNNVD-200812-354"
},
{
"db": "NVD",
"id": "CVE-2008-5662"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-35787"
},
{
"db": "BID",
"id": "32862"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-002397"
},
{
"db": "PACKETSTORM",
"id": "73077"
},
{
"db": "CNNVD",
"id": "CNNVD-200812-354"
},
{
"db": "NVD",
"id": "CVE-2008-5662"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2008-12-17T00:00:00",
"db": "VULHUB",
"id": "VHN-35787"
},
{
"date": "2008-12-15T00:00:00",
"db": "BID",
"id": "32862"
},
{
"date": "2009-07-08T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2008-002397"
},
{
"date": "2008-12-16T06:45:34",
"db": "PACKETSTORM",
"id": "73077"
},
{
"date": "2008-12-17T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200812-354"
},
{
"date": "2008-12-17T20:30:01.093000",
"db": "NVD",
"id": "CVE-2008-5662"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-08-08T00:00:00",
"db": "VULHUB",
"id": "VHN-35787"
},
{
"date": "2008-12-16T20:22:00",
"db": "BID",
"id": "32862"
},
{
"date": "2009-07-08T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2008-002397"
},
{
"date": "2009-01-06T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200812-354"
},
{
"date": "2025-04-09T00:30:58.490000",
"db": "NVD",
"id": "CVE-2008-5662"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200812-354"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Sun Java Wireless Toolkit (WTK) Vulnerable to buffer overflow",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2008-002397"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "buffer overflow",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200812-354"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…