CVE-2008-4368

Published: Oct 1, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The default configuration of Java 1.5 on Apple Mac OS X 10.5.4 and 10.5.5 contains a jurisdiction policy that limits Java Cryptography Extension (JCE) key sizes to 128 bits, which makes it easier for attackers to decrypt ciphertext produced by JCE.

Affected (2)

Products: Apple: Mac Os X

Apple

1 product

Mac Os X

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	Version 10.5.4
Apple Mac Os X	Version 10.5.5

Related CWEs

CWE-310

References (6)

http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html

Source: cve@mitre.org

http://support.apple.com/kb/HT3179

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/45650

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.apple.com/kb/HT3179

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/45650

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.