Security Advisory

CVE-2009-3875

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-11-05 16:00:00

Last updated 2024-08-07 06:45:50

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to spoof HMAC-based digital signatures, and possibly bypass authentication, via unspecified vectors related to "timing attack vulnerabilities," aka Bug Id 6863503.

← Browse all CVEs View on cve.org ↗