The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0471 advisory.

    This update corrects several security vulnerabilities in the IBM Java     Runtime Environment shipped as part of Red Hat Network Satellite Server     5.3. In a typical operating environment, these are of low security risk as     the runtime is not used on untrusted applets.

    Several flaws were fixed in the IBM Java 2 Runtime Environment.
    (CVE-2010-0084, CVE-2010-0085, CVE-2010-0087, CVE-2010-0088, CVE-2010-0089,     CVE-2010-0090, CVE-2010-0091, CVE-2010-0092, CVE-2010-0094, CVE-2010-0095,     CVE-2010-0837, CVE-2010-0838, CVE-2010-0839, CVE-2010-0840, CVE-2010-0841,     CVE-2010-0842, CVE-2010-0843, CVE-2010-0844, CVE-2010-0846, CVE-2010-0848,     CVE-2010-0849)

    Users of Red Hat Network Satellite Server 5.3 are advised to upgrade to     these updated java-1.6.0-ibm packages, which resolve these issues. For this     update to take effect, Red Hat Network Satellite Server must be restarted     (/usr/sbin/rhn-satellite restart), as well as all running instances of     IBM Java.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

a. vCenter Server and vCenter Update Manager update Microsoft    SQL Server 2005 Express Edition to Service Pack 3

   Microsoft SQL Server 2005 Express Edition (SQL Express)    distributed with vCenter Server 4.1 Update 1 and vCenter Update    Manager 4.1 Update 1 is upgraded from  SQL Express Service Pack 2    to SQL Express Service Pack 3, to address multiple security    issues that exist in the earlier releases of Microsoft SQL Express.

   Customers using other database solutions need not update for    these issues.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2008-5416, CVE-2008-0085, CVE-2008-0086,    CVE-2008-0107 and CVE-2008-0106 to the issues addressed in MS SQL    Express Service Pack 3.

b. vCenter Apache Tomcat Management Application Credential Disclosure

   The Apache Tomcat Manager application configuration file contains    logon credentials that can be read by unprivileged local users.

   The issue is resolved by removing the Manager application in    vCenter 4.1 Update 1.

   If vCenter 4.1 is updated to vCenter 4.1 Update 1 the logon    credentials are not present in the configuration file after the    update.

   VMware would like to thank Claudio Criscione of Secure Networking    for reporting this issue to us.

   The Common Vulnerabilities and Exposures Project (cve.mitre.org)    has assigned the name CVE-2010-2928 to this issue.

c. vCenter Server and ESX, Oracle (Sun) JRE is updated to version    1.6.0_21

   Oracle (Sun) JRE update to version 1.6.0_21, which addresses    multiple security issues that existed in earlier releases of    Oracle (Sun) JRE.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the following names to the security issues fixed in    Oracle (Sun) JRE 1.6.0_19: CVE-2009-3555, CVE-2010-0082,    CVE-2010-0084, CVE-2010-0085, CVE-2010-0087, CVE-2010-0088,    CVE-2010-0089, CVE-2010-0090, CVE-2010-0091, CVE-2010-0092,    CVE-2010-0093, CVE-2010-0094, CVE-2010-0095, CVE-2010-0837,    CVE-2010-0838, CVE-2010-0839, CVE-2010-0840, CVE-2010-0841,    CVE-2010-0842, CVE-2010-0843, CVE-2010-0844, CVE-2010-0845,    CVE-2010-0846, CVE-2010-0847, CVE-2010-0848, CVE-2010-0849,    CVE-2010-0850.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the following name to the security issue fixed in    Oracle (Sun) JRE 1.6.0_20: CVE-2010-0886.

d. vCenter Update Manager Oracle (Sun) JRE is updated to version   1.5.0_26

   Oracle (Sun) JRE update to version 1.5.0_26, which addresses    multiple security issues that existed in earlier releases of    Oracle (Sun) JRE.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the following names to the security issues fixed in    Oracle (Sun) JRE 1.5.0_26: CVE-2010-3556, CVE-2010-3566,    CVE-2010-3567, CVE-2010-3550, CVE-2010-3561, CVE-2010-3573,    CVE-2010-3565,CVE-2010-3568, CVE-2010-3569,  CVE-2009-3555,    CVE-2010-1321, CVE-2010-3548, CVE-2010-3551, CVE-2010-3562,    CVE-2010-3571, CVE-2010-3554, CVE-2010-3559, CVE-2010-3572,    CVE-2010-3553, CVE-2010-3549, CVE-2010-3557, CVE-2010-3541,    CVE-2010-3574.

e. vCenter Server and ESX Apache Tomcat updated to version 6.0.28

   Apache Tomcat updated to version 6.0.28, which addresses multiple    security issues that existed in earlier releases of Apache Tomcat

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the following names to the security issues fixed in    Apache Tomcat 6.0.24: CVE-2009-2693, CVE-2009-2901, CVE-2009-2902,i    and CVE-2009-3548.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the following names to the security issues fixed in    Apache Tomcat 6.0.28: CVE-2010-2227, CVE-2010-1157.

f. vCenter Server third-party component OpenSSL updated to version    0.9.8n

   The version of the OpenSSL library in vCenter Server is updated to    0.9.8n.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2010-0740 and CVE-2010-0433 to the    issues addressed in this version of OpenSSL.

g. ESX third-party component OpenSSL updated to version 0.9.8p

   The version of the ESX OpenSSL library is updated to 0.9.8p.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2010-3864 and CVE-2010-2939 to the    issues addressed in this update.

h. ESXi third-party component cURL updated

   The version of cURL library in ESXi is updated.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2010-0734 to the issues addressed in    this update.

i. ESX third-party component pam_krb5 updated

   The version of pam_krb5 library is updated.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2008-3825 and CVE-2009-1384 to the    issues addressed in the update.

j. ESX third-party update for Service Console kernel

   The Service Console kernel is updated to include kernel version    2.6.18-194.11.1.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2010-1084, CVE-2010-2066, CVE-2010-2070,    CVE-2010-2226, CVE-2010-2248, CVE-2010-2521, CVE-2010-2524,    CVE-2010-0008, CVE-2010-0415, CVE-2010-0437, CVE-2009-4308,    CVE-2010-0003, CVE-2010-0007, CVE-2010-0307, CVE-2010-1086,    CVE-2010-0410, CVE-2010-0730, CVE-2010-1085, CVE-2010-0291,    CVE-2010-0622, CVE-2010-1087, CVE-2010-1173, CVE-2010-1437,    CVE-2010-1088, CVE-2010-1187, CVE-2010-1436, CVE-2010-1641, and    CVE-2010-3081 to the issues addressed in the update.

   Notes :
   - The update also addresses the 64-bit compatibility mode    stack pointer underflow issue identified by CVE-2010-3081. This    issue was patched in an ESX 4.1 patch prior to the release of    ESX 4.1 Update 1 and in a previous ESX 4.0 patch release.
   - The update also addresses CVE-2010-2240 for ESX 4.0.

Updated java-1.5.0-ibm packages that fix a security issue are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

The IBM 1.5.0 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit.

A flaw was found in the way the TLS/SSL (Transport Layer Security/Secure Sockets Layer) protocols handle session renegotiation.
A man-in-the-middle attacker could use this flaw to prefix arbitrary plain text to a client's session (for example, an HTTPS connection to a website). This could force the server to process an attacker's request as if authenticated using the victim's credentials.
(CVE-2009-3555)

This update disables renegotiation in the Java Secure Socket Extension (JSSE) component. Unsafe renegotiation can be re-enabled using the com.ibm.jsse2.renegotiate property. Refer to the following Knowledgebase article for details:
http://kbase.redhat.com/faq/docs/DOC-20491

All users of java-1.5.0-ibm are advised to upgrade to these updated packages, containing the IBM 1.5.0 SR11-FP1 Java release. All running instances of IBM Java must be restarted for this update to take effect.

The remote host is affected by the vulnerability described in GLSA-201006-18 (Oracle JRE/JDK: Multiple vulnerabilities)

    Multiple vulnerabilities have been reported in the Oracle Java     implementation. Please review the CVE identifiers referenced below and     the associated Oracle Critical Patch Update Advisory for details.
  Impact :

    A remote attacker could exploit these vulnerabilities to cause     unspecified impact, possibly including remote execution of arbitrary     code.
  Workaround :

    There is no known workaround at this time.

This update of IBM Java 6 to SR 8 to fixes the following security issues :

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality via unknown     vectors. (CVE-2010-0084)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0085)

  - Unspecified vulnerability in the Java Web Start, Java     Plug-in component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0087)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0088)

  - Unspecified vulnerability in the Java Web Start, Java     Plug-in component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect availability via unknown     vectors. (CVE-2010-0089)

  - Unspecified vulnerability in the Java Web Start, Java     Plug-in component in Oracle Java SE and Java for     Business 6 Update 18 allows remote attackers to affect     integrity and availability via unknown vectors.
    (CVE-2010-0090)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality via unknown     vectors. (CVE-2010-0091)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, and 5.0 Update 23 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. (CVE-2010-0092)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18 and 5.0 Update 23 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is due to missing privilege checks during     deserialization of RMIConnectionImpl objects, which     allows remote attackers to call system-level Java     functions via the class loader of a constructor that is     being deserialized. (CVE-2010-0094)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality, integrity,     and availability via unknown vectors. (CVE-2010-0095)

  - Unspecified vulnerability in the Pack200 component in     Oracle Java SE and Java for Business 6 Update 18, 5.0,     Update, and 23 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0837)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0,     Update, and 23 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. NOTE: the previous information was obtained     from the March 2010 CPU. Oracle has not commented on     claims from a reliable researcher that this is a     stack-based buffer overflow using an untrusted size     value in the readMabCurveData function in the CMM module     of the JVM. (CVE-2010-0838)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. (CVE-2010-0839)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality, integrity,     and availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is related to improper checks when executing     privileged methods in the Java Runtime Environment     (JRE), which allows attackers to execute arbitrary code     via (1) an untrusted object that extends the trusted     class but has not modified a certain method, or (2) 'a     similar trust issue with interfaces,' aka 'Trusted     Methods Chaining Remote Code Execution Vulnerability.'.
    (CVE-2010-0840)

  - Unspecified vulnerability in the ImageIO component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, and 1.4.2_25 allows remote attackers to     affect confidentiality, integrity, and availability via     unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is an integer overflow in the Java Runtime Environment     that allows remote attackers to execute arbitrary code     via a JPEG image that contains subsample dimensions with     large values, related to JPEGImageReader and 'stepX'.
    (CVE-2010-0841)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is an uncontrolled array index that allows remote     attackers to execute arbitrary code via a MIDI file with     a crafted MixerSequencer object, related to the GM_Song     structure. (CVE-2010-0842)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is related to XNewPtr and improper handling of an     integer parameter when allocating heap memory in the     com.sun.media.sound libraries, which allows remote     attackers to execute arbitrary code. (CVE-2010-0843)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is for improper parsing of a crafted MIDI stream when     creating a MixerSequencer object, which causes a pointer     to be corrupted and allows a NULL byte to be written to     arbitrary memory. (CVE-2010-0844)

  - Unspecified vulnerability in the ImageIO component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow that allows     remote attackers to execute arbitrary code, related to     an 'invalid assignment' and inconsistent length values     in a JPEG image encoder (JPEGImageEncoderImpl).
    (CVE-2010-0846)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow that allows     arbitrary code execution via a crafted image.
    (CVE-2010-0847)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. (CVE-2010-0848)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow in a decoding     routine used by the JPEGImageDecoderImpl interface,     which allows code execution via a crafted JPEG image.
    (CVE-2010-0849)

Please also see http://www.ibm.com/developerworks/java/jdk/alerts/ for a more up to date list on what was fixed

This update of IBM Java 6 to Service Request 8 to fixes the following security issues :

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality via unknown     vectors. (CVE-2010-0084)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0085)

  - Unspecified vulnerability in the Java Web Start, Java     Plug-in component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0087)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0088)

  - Unspecified vulnerability in the Java Web Start, Java     Plug-in component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect availability via unknown     vectors. (CVE-2010-0089)

  - Unspecified vulnerability in the Java Web Start, Java     Plug-in component in Oracle Java SE and Java for     Business 6 Update 18 allows remote attackers to affect     integrity and availability via unknown vectors.
    (CVE-2010-0090)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality via unknown     vectors. (CVE-2010-0091)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, and 5.0 Update 23 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. (CVE-2010-0092)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18 and 5.0 Update 23 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is due to missing privilege checks during     deserialization of RMIConnectionImpl objects, which     allows remote attackers to call system-level Java     functions via the class loader of a constructor that is     being deserialized. (CVE-2010-0094)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality, integrity,     and availability via unknown vectors. (CVE-2010-0095)

  - Unspecified vulnerability in the Pack200 component in     Oracle Java SE and Java for Business 6 Update 18, 5.0,     Update, and 23 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0837)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0,     Update, and 23 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. NOTE: the previous information was obtained     from the March 2010 CPU. Oracle has not commented on     claims from a reliable researcher that this is a     stack-based buffer overflow using an untrusted size     value in the readMabCurveData function in the CMM module     of the JVM. (CVE-2010-0838)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. (CVE-2010-0839)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality, integrity,     and availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is related to improper checks when executing     privileged methods in the Java Runtime Environment     (JRE), which allows attackers to execute arbitrary code     via (1) an untrusted object that extends the trusted     class but has not modified a certain method, or (2) 'a     similar trust issue with interfaces,' aka 'Trusted     Methods Chaining Remote Code Execution Vulnerability.'.
    (CVE-2010-0840)

  - Unspecified vulnerability in the ImageIO component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, and 1.4.2_25 allows remote attackers to     affect confidentiality, integrity, and availability via     unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is an integer overflow in the Java Runtime Environment     that allows remote attackers to execute arbitrary code     via a JPEG image that contains subsample dimensions with     large values, related to JPEGImageReader and 'stepX'.
    (CVE-2010-0841)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is an uncontrolled array index that allows remote     attackers to execute arbitrary code via a MIDI file with     a crafted MixerSequencer object, related to the GM_Song     structure. (CVE-2010-0842)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is related to XNewPtr and improper handling of an     integer parameter when allocating heap memory in the     com.sun.media.sound libraries, which allows remote     attackers to execute arbitrary code. (CVE-2010-0843)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is for improper parsing of a crafted MIDI stream when     creating a MixerSequencer object, which causes a pointer     to be corrupted and allows a NULL byte to be written to     arbitrary memory. (CVE-2010-0844)

  - Unspecified vulnerability in the ImageIO component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow that allows     remote attackers to execute arbitrary code, related to     an 'invalid assignment' and inconsistent length values     in a JPEG image encoder (JPEGImageEncoderImpl).
    (CVE-2010-0846)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow that allows     arbitrary code execution via a crafted image.
    (CVE-2010-0847)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. (CVE-2010-0848)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow in a decoding     routine used by the JPEGImageDecoderImpl interface,     which allows code execution via a crafted JPEG image.
    (CVE-2010-0849)

Please also see http://www.ibm.com/developerworks/java/jdk/alerts/ for a more up to date list on what was fixed.

The remote VMware ESX / ESXi host is missing a security-related patch.
It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries :

  - Apache Tomcat 
  - Apache Tomcat Manager
  - cURL 
  - Java Runtime Environment (JRE)
  - Kernel 
  - Microsoft SQL Express
  - OpenSSL
  - pam_krb5

The version of Oracle (formerly Sun) Java Runtime Environment (JRE) installed on the remote host is earlier than 6 Update 19 / 5.0 Update 24 / 1.4.2_26. Such versions are potentially affected by security issues in the following components :

  - ImageIO
   - Java 2D
   - JRE
   - Java Web Start, Java Plug-in
   - Pack200
   - Sound
   - JSSE
   - HotSpot Server

Sun Java 6 was updated to Update 19, fixing a large number of security issues.

CVE-2009-3555 CVE-2010-0082 CVE-2010-0084 CVE-2010-0085 CVE-2010-0087 CVE-2010-0088 CVE-2010-0089 CVE-2010-0090 CVE-2010-0091 CVE-2010-0092 CVE-2010-0093 CVE-2010-0094 CVE-2010-0095 CVE-2010-0837 CVE-2010-0838 CVE-2010-0839 CVE-2010-0840 CVE-2010-0841 CVE-2010-0842 CVE-2010-0843 CVE-2010-0844 CVE-2010-0845 CVE-2010-0846 CVE-2010-0847 CVE-2010-0848 CVE-2010-0849 CVE-2010-0850

This update of IBM Java 1.5.0 to SR11 FP2 to fixes the following security issues :

  - Various unspecified and undocumented vulnerabilities     that allows remote attackers to affect confidentiality,     integrity and availability via various unknown vectors.
    (CVE-2010-0084, CVE-2010-0085, CVE-2010-0087,     CVE-2010-0088, CVE-2010-0089, CVE-2010-0091,     CVE-2010-0092, CVE-2010-0095, CVE-2010-0837,     CVE-2010-0839)

  - Unspecified vulnerability that allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is due to missing privilege checks during     deserialization of RMIConnectionImpl objects, which     allows remote attackers to call system-level Java     functions via the class loader of a constructor that is     being deserialized. (CVE-2010-0094)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0,     Update, and 23 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. NOTE: the previous information was obtained     from the March 2010 CPU. Oracle has not commented on     claims from a reliable researcher that this is a     stack-based buffer overflow using an untrusted size     value in the readMabCurveData function in the CMM module     of the JVM. (CVE-2010-0838)

  - Unspecified vulnerability that allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is related to improper checks when executing privileged     methods in the Java Runtime Environment (JRE), which     allows attackers to execute arbitrary code via (1) an     untrusted object that extends the trusted class but has     not modified a certain method, or (2) 'a similar trust     issue with interfaces,' aka 'Trusted Methods Chaining     Remote Code Execution Vulnerability.'. (CVE-2010-0840)

  - Unspecified vulnerability in the ImageIO component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, and 1.4.2_25 allows remote attackers to     affect confidentiality, integrity, and availability via     unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is an integer overflow in the Java Runtime Environment     that allows remote attackers to execute arbitrary code     via a JPEG image that contains subsample dimensions with     large values, related to JPEGImageReader and 'stepX'.
    (CVE-2010-0841)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is an uncontrolled array index that allows remote     attackers to execute arbitrary code via a MIDI file with     a crafted MixerSequencer object, related to the GM_Song     structure. (CVE-2010-0842)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is related to XNewPtr and improper handling of an     integer parameter when allocating heap memory in the     com.sun.media.sound libraries, which allows remote     attackers to execute arbitrary code. (CVE-2010-0843)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is for improper parsing of a crafted MIDI stream when     creating a MixerSequencer object, which causes a pointer     to be corrupted and allows a NULL byte to be written to     arbitrary memory. (CVE-2010-0844)

  - Unspecified vulnerability in the ImageIO component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow that allows     remote attackers to execute arbitrary code, related to     an 'invalid assignment' and inconsistent length values     in a JPEG image encoder (JPEGImageEncoderImpl).
    (CVE-2010-0846)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow that allows     arbitrary code execution via a crafted image.
    (CVE-2010-0847)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. (CVE-2010-0848)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow in a decoding     routine used by the JPEGImageDecoderImpl interface,     which allows code execution via a crafted JPEG image.
    (CVE-2010-0849)

  - The TLS protocol, and the SSL protocol 3.0 and possibly     earlier, as used in Microsoft Internet Information     Services (IIS) 7.0, mod_ssl in the Apache HTTP Server     2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5     and earlier, Mozilla Network Security Services (NSS)     3.12.4 and earlier, multiple Cisco products, and other     products, does not properly associate renegotiation     handshakes with an existing connection, which allows     man-in-the-middle attackers to insert data into HTTPS     sessions, and possibly other types of sessions protected     by TLS or SSL, by sending an unauthenticated request     that is processed retroactively by a server in a     post-renegotiation context, related to a 'plaintext     injection' attack, aka the 'Project Mogul' issue.
    (CVE-2009-3555)

Sun Java 6 was updated to Update 19, fixing a large number of security issues: CVE-2009-3555 / CVE-2010-0082 / CVE-2010-0084 / CVE-2010-0085 / CVE-2010-0087 / CVE-2010-0088 / CVE-2010-0089 / CVE-2010-0090 / CVE-2010-0091 / CVE-2010-0092 / CVE-2010-0093 / CVE-2010-0094 / CVE-2010-0095 / CVE-2010-0837 / CVE-2010-0838 / CVE-2010-0839 / CVE-2010-0840 / CVE-2010-0841 / CVE-2010-0842 / CVE-2010-0843 / CVE-2010-0844 / CVE-2010-0845 / CVE-2010-0846 / CVE-2010-0847 / CVE-2010-0848 / CVE-2010-0849 / CVE-2010-0850.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
47017	RHEL 5 : Red Hat Network Satellite Server IBM Java Runtime (RHSA-2010:0471)	Nessus	Red Hat Local Security Checks	2010/6/15	2024/11/4	critical
51971	VMSA-2011-0003 : Third-party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX	Nessus	VMware ESX Local Security Checks	2011/2/14	2022/5/25	high
44974	RHEL 4 / 5 : java-1.5.0-ibm (RHSA-2010:0130)	Nessus	Red Hat Local Security Checks	2010/3/4	2021/1/14	high
46807	GLSA-201006-18 : Oracle JRE/JDK: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2010/6/4	2022/5/25	critical
50916	SuSE 11 Security Update : IBM Java 6 (SAT Patch Number 2548)	Nessus	SuSE Local Security Checks	2010/12/2	2022/5/25	high
51606	SuSE 11.1 Security Update : IBM Java 6 (SAT Patch Number 2553)	Nessus	SuSE Local Security Checks	2011/1/21	2022/5/25	high
89674	VMware ESX / ESXi Third-Party Libraries Multiple Vulnerabilities (VMSA-2011-0003) (remote check)	Nessus	Misc.	2016/3/4	2022/5/25	high
45379	Oracle Java SE Multiple Vulnerabilities (March 2010 CPU)	Nessus	Windows	2010/3/30	2022/5/25	high
45465	openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-2228)	Nessus	SuSE Local Security Checks	2010/4/9	2022/5/25	high
47617	SuSE9 Security Update : IBM Java 1.5.0 (YOU Patch Number 12623)	Nessus	SuSE Local Security Checks	2010/7/7	2022/5/25	high
50917	SuSE 11 Security Update : Sun Java 6 (SAT Patch Number 2225)	Nessus	SuSE Local Security Checks	2010/12/2	2022/5/25	high

检测

插件搜索

critical

high

high

critical

high

high

high

high

high

high

high