Vulnerabilities
Misconfiguration
Runtime Security
Compliance
CVE Vulnerabilities

CVE-2009-3875

Published: Nov 05, 2009 | Modified: Oct 30, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2009-3875
CWEhttps://cwe.mitre.org/data/definitions/310.html

The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to spoof HMAC-based digital signatures, and possibly bypass authentication, via unspecified vectors related to timing attack vulnerabilities, aka Bug Id 6863503.

Affected Software

Name Vendor Start Version End Version
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.6.0 1.6.0
Jdk Sun 1.6.0 1.6.0
Jdk Sun 1.6.0 1.6.0
Jdk Sun 1.6.0 1.6.0
Jdk Sun 1.6.0 1.6.0
Jdk Sun 1.6.0 1.6.0
Jdk Sun 1.6.0 1.6.0
Jdk Sun 1.6.0 1.6.0
Jdk Sun 1.6.0 1.6.0
Jdk Sun 1.6.0 1.6.0
Jdk Sun 1.6.0 1.6.0
Jdk Sun 1.6.0 1.6.0
Jdk Sun 1.6.0 1.6.0
Jdk Sun 1.6.0 1.6.0
Jdk Sun 1.6.0 1.6.0
Jdk Sun 1.6.0 1.6.0
Jre Sun 1.4.2_1 1.4.2_1
Jre Sun 1.4.2_2 1.4.2_2
Jre Sun 1.4.2_02 1.4.2_02
Jre Sun 1.4.2_03 1.4.2_03
Jre Sun 1.4.2_3 1.4.2_3
Jre Sun 1.4.2_4 1.4.2_4
Jre Sun 1.4.2_04 1.4.2_04
Jre Sun 1.4.2_05 1.4.2_05
Jre Sun 1.4.2_5 1.4.2_5
Jre Sun 1.4.2_06 1.4.2_06
Jre Sun 1.4.2_6 1.4.2_6
Jre Sun 1.4.2_7 1.4.2_7
Jre Sun 1.4.2_07 1.4.2_07
Jre Sun 1.4.2_8 1.4.2_8
Jre Sun 1.4.2_08 1.4.2_08
Jre Sun 1.4.2_09 1.4.2_09
Jre Sun 1.4.2_9 1.4.2_9
Jre Sun 1.4.2_10 1.4.2_10
Jre Sun 1.4.2_11 1.4.2_11
Jre Sun 1.4.2_12 1.4.2_12
Jre Sun 1.4.2_13 1.4.2_13
Jre Sun 1.4.2_14 1.4.2_14
Jre Sun 1.4.2_15 1.4.2_15
Jre Sun 1.4.2_16 1.4.2_16
Jre Sun 1.4.2_17 1.4.2_17
Jre Sun 1.4.2_18 1.4.2_18
Jre Sun 1.4.2_19 1.4.2_19
Jre Sun 1.4.2_20 1.4.2_20
Jre Sun 1.4.2_21 1.4.2_21
Jre Sun 1.4.2_22 1.4.2_22
Jre Sun 1.4.2_23 1.4.2_23
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Sdk Sun 1.4.2_01 1.4.2_01
Sdk Sun 1.4.2_1 1.4.2_1
Sdk Sun 1.4.2_2 1.4.2_2
Sdk Sun 1.4.2_02 1.4.2_02
Sdk Sun 1.4.2_03 1.4.2_03
Sdk Sun 1.4.2_3 1.4.2_3
Sdk Sun 1.4.2_04 1.4.2_04
Sdk Sun 1.4.2_4 1.4.2_4
Sdk Sun 1.4.2_5 1.4.2_5
Sdk Sun 1.4.2_05 1.4.2_05
Sdk Sun 1.4.2_6 1.4.2_6
Sdk Sun 1.4.2_06 1.4.2_06
Sdk Sun 1.4.2_07 1.4.2_07
Sdk Sun 1.4.2_7 1.4.2_7
Sdk Sun 1.4.2_8 1.4.2_8
Sdk Sun 1.4.2_08 1.4.2_08
Sdk Sun 1.4.2_09 1.4.2_09
Sdk Sun 1.4.2_9 1.4.2_9
Sdk Sun 1.4.2_10 1.4.2_10
Sdk Sun 1.4.2_11 1.4.2_11
Sdk Sun 1.4.2_12 1.4.2_12
Sdk Sun 1.4.2_13 1.4.2_13
Sdk Sun 1.4.2_14 1.4.2_14
Sdk Sun 1.4.2_15 1.4.2_15
Sdk Sun 1.4.2_16 1.4.2_16
Sdk Sun 1.4.2_17 1.4.2_17
Sdk Sun 1.4.2_18 1.4.2_18
Sdk Sun 1.4.2_19 1.4.2_19
Sdk Sun 1.4.2_20 1.4.2_20
Sdk Sun 1.4.2_21 1.4.2_21
Sdk Sun 1.4.2_22 1.4.2_22
Sdk Sun 1.4.2_23 1.4.2_23

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2024 Aqua Security Software Ltd.   Privacy Policy | Terms of Use