The java-1.5.0-sun packages as shipped in Red Hat Enterprise Linux 4 Extras and 5 Supplementary contain security flaws and should not be used.

The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The Sun 1.5.0 Java release includes the Sun Java 5 Runtime Environment and the Sun Java 5 Software Development Kit.

The java-1.5.0-sun packages are vulnerable to a number of security flaws and should no longer be used. (CVE-2009-3555, CVE-2010-0082, CVE-2010-0084, CVE-2010-0085, CVE-2010-0087, CVE-2010-0088, CVE-2010-0089, CVE-2010-0091, CVE-2010-0092, CVE-2010-0093, CVE-2010-0094, CVE-2010-0095, CVE-2010-0837, CVE-2010-0838, CVE-2010-0839, CVE-2010-0840, CVE-2010-0841, CVE-2010-0842, CVE-2010-0843, CVE-2010-0844, CVE-2010-0845, CVE-2010-0846, CVE-2010-0847, CVE-2010-0848, CVE-2010-0849)

The Sun Java SE Release family 5.0 reached its End of Service Life on November 3, 2009. The RHSA-2009:1571 update provided the final publicly available update of version 5.0 (Update 22). Users interested in continuing to receive critical fixes for Sun Java SE 5.0 should contact Oracle :

http://www.sun.com/software/javaforbusiness/index.jsp

An alternative to Sun Java SE 5.0 is the Java 2 Technology Edition of the IBM Developer Kit for Linux, which is available from the Extras and Supplementary channels on the Red Hat Network.

Applications capable of using the Java 6 runtime can be migrated to Java 6 on: OpenJDK (java-1.6.0-openjdk), an open source JDK included in Red Hat Enterprise Linux 5, since 5.3; the IBM JDK, java-1.6.0-ibm;
or the Sun JDK, java-1.6.0-sun.

This update removes the java-1.5.0-sun packages as they have reached their End of Service Life.

The remote Mac OS X host is running a version of Java for Mac OS X 10.5 that is missing Update 7.

The remote version of this software contains several security vulnerabilities, including some that may allow untrusted Java applets to obtain elevated privileges and lead to execution of arbitrary code with the privileges of the current user.

Add latest security updates.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Sun Java 6 was updated to Update 19, fixing a large number of security issues.

CVE-2009-3555 CVE-2010-0082 CVE-2010-0084 CVE-2010-0085 CVE-2010-0087 CVE-2010-0088 CVE-2010-0089 CVE-2010-0090 CVE-2010-0091 CVE-2010-0092 CVE-2010-0093 CVE-2010-0094 CVE-2010-0095 CVE-2010-0837 CVE-2010-0838 CVE-2010-0839 CVE-2010-0840 CVE-2010-0841 CVE-2010-0842 CVE-2010-0843 CVE-2010-0844 CVE-2010-0845 CVE-2010-0846 CVE-2010-0847 CVE-2010-0848 CVE-2010-0849 CVE-2010-0850

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0471 advisory.

    This update corrects several security vulnerabilities in the IBM Java     Runtime Environment shipped as part of Red Hat Network Satellite Server     5.3. In a typical operating environment, these are of low security risk as     the runtime is not used on untrusted applets.

    Several flaws were fixed in the IBM Java 2 Runtime Environment.
    (CVE-2010-0084, CVE-2010-0085, CVE-2010-0087, CVE-2010-0088, CVE-2010-0089,     CVE-2010-0090, CVE-2010-0091, CVE-2010-0092, CVE-2010-0094, CVE-2010-0095,     CVE-2010-0837, CVE-2010-0838, CVE-2010-0839, CVE-2010-0840, CVE-2010-0841,     CVE-2010-0842, CVE-2010-0843, CVE-2010-0844, CVE-2010-0846, CVE-2010-0848,     CVE-2010-0849)

    Users of Red Hat Network Satellite Server 5.3 are advised to upgrade to     these updated java-1.6.0-ibm packages, which resolve these issues. For this     update to take effect, Red Hat Network Satellite Server must be restarted     (/usr/sbin/rhn-satellite restart), as well as all running instances of     IBM Java.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

a. vCenter Server and vCenter Update Manager update Microsoft    SQL Server 2005 Express Edition to Service Pack 3

   Microsoft SQL Server 2005 Express Edition (SQL Express)    distributed with vCenter Server 4.1 Update 1 and vCenter Update    Manager 4.1 Update 1 is upgraded from  SQL Express Service Pack 2    to SQL Express Service Pack 3, to address multiple security    issues that exist in the earlier releases of Microsoft SQL Express.

   Customers using other database solutions need not update for    these issues.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2008-5416, CVE-2008-0085, CVE-2008-0086,    CVE-2008-0107 and CVE-2008-0106 to the issues addressed in MS SQL    Express Service Pack 3.

b. vCenter Apache Tomcat Management Application Credential Disclosure

   The Apache Tomcat Manager application configuration file contains    logon credentials that can be read by unprivileged local users.

   The issue is resolved by removing the Manager application in    vCenter 4.1 Update 1.

   If vCenter 4.1 is updated to vCenter 4.1 Update 1 the logon    credentials are not present in the configuration file after the    update.

   VMware would like to thank Claudio Criscione of Secure Networking    for reporting this issue to us.

   The Common Vulnerabilities and Exposures Project (cve.mitre.org)    has assigned the name CVE-2010-2928 to this issue.

c. vCenter Server and ESX, Oracle (Sun) JRE is updated to version    1.6.0_21

   Oracle (Sun) JRE update to version 1.6.0_21, which addresses    multiple security issues that existed in earlier releases of    Oracle (Sun) JRE.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the following names to the security issues fixed in    Oracle (Sun) JRE 1.6.0_19: CVE-2009-3555, CVE-2010-0082,    CVE-2010-0084, CVE-2010-0085, CVE-2010-0087, CVE-2010-0088,    CVE-2010-0089, CVE-2010-0090, CVE-2010-0091, CVE-2010-0092,    CVE-2010-0093, CVE-2010-0094, CVE-2010-0095, CVE-2010-0837,    CVE-2010-0838, CVE-2010-0839, CVE-2010-0840, CVE-2010-0841,    CVE-2010-0842, CVE-2010-0843, CVE-2010-0844, CVE-2010-0845,    CVE-2010-0846, CVE-2010-0847, CVE-2010-0848, CVE-2010-0849,    CVE-2010-0850.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the following name to the security issue fixed in    Oracle (Sun) JRE 1.6.0_20: CVE-2010-0886.

d. vCenter Update Manager Oracle (Sun) JRE is updated to version   1.5.0_26

   Oracle (Sun) JRE update to version 1.5.0_26, which addresses    multiple security issues that existed in earlier releases of    Oracle (Sun) JRE.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the following names to the security issues fixed in    Oracle (Sun) JRE 1.5.0_26: CVE-2010-3556, CVE-2010-3566,    CVE-2010-3567, CVE-2010-3550, CVE-2010-3561, CVE-2010-3573,    CVE-2010-3565,CVE-2010-3568, CVE-2010-3569,  CVE-2009-3555,    CVE-2010-1321, CVE-2010-3548, CVE-2010-3551, CVE-2010-3562,    CVE-2010-3571, CVE-2010-3554, CVE-2010-3559, CVE-2010-3572,    CVE-2010-3553, CVE-2010-3549, CVE-2010-3557, CVE-2010-3541,    CVE-2010-3574.

e. vCenter Server and ESX Apache Tomcat updated to version 6.0.28

   Apache Tomcat updated to version 6.0.28, which addresses multiple    security issues that existed in earlier releases of Apache Tomcat

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the following names to the security issues fixed in    Apache Tomcat 6.0.24: CVE-2009-2693, CVE-2009-2901, CVE-2009-2902,i    and CVE-2009-3548.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the following names to the security issues fixed in    Apache Tomcat 6.0.28: CVE-2010-2227, CVE-2010-1157.

f. vCenter Server third-party component OpenSSL updated to version    0.9.8n

   The version of the OpenSSL library in vCenter Server is updated to    0.9.8n.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2010-0740 and CVE-2010-0433 to the    issues addressed in this version of OpenSSL.

g. ESX third-party component OpenSSL updated to version 0.9.8p

   The version of the ESX OpenSSL library is updated to 0.9.8p.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2010-3864 and CVE-2010-2939 to the    issues addressed in this update.

h. ESXi third-party component cURL updated

   The version of cURL library in ESXi is updated.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2010-0734 to the issues addressed in    this update.

i. ESX third-party component pam_krb5 updated

   The version of pam_krb5 library is updated.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2008-3825 and CVE-2009-1384 to the    issues addressed in the update.

j. ESX third-party update for Service Console kernel

   The Service Console kernel is updated to include kernel version    2.6.18-194.11.1.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2010-1084, CVE-2010-2066, CVE-2010-2070,    CVE-2010-2226, CVE-2010-2248, CVE-2010-2521, CVE-2010-2524,    CVE-2010-0008, CVE-2010-0415, CVE-2010-0437, CVE-2009-4308,    CVE-2010-0003, CVE-2010-0007, CVE-2010-0307, CVE-2010-1086,    CVE-2010-0410, CVE-2010-0730, CVE-2010-1085, CVE-2010-0291,    CVE-2010-0622, CVE-2010-1087, CVE-2010-1173, CVE-2010-1437,    CVE-2010-1088, CVE-2010-1187, CVE-2010-1436, CVE-2010-1641, and    CVE-2010-3081 to the issues addressed in the update.

   Notes :
   - The update also addresses the 64-bit compatibility mode    stack pointer underflow issue identified by CVE-2010-3081. This    issue was patched in an ESX 4.1 patch prior to the release of    ESX 4.1 Update 1 and in a previous ESX 4.0 patch release.
   - The update also addresses CVE-2010-2240 for ESX 4.0.

The version of Oracle (formerly Sun) Java Runtime Environment (JRE) installed on the remote host is earlier than 6 Update 19 / 5.0 Update 24 / 1.4.2_26.  Such versions are potentially affected by security issues in the following components :

  - ImageIO
  - Java 2D
  - JRE
  - Java Web Start, Java Plug-in
  - Pack200
  - Sound
  - JSSE
  - HotSpot Server

This update of IBM Java 1.5.0 to SR11 FP2 to fixes the following security issues :

  - Various unspecified and undocumented vulnerabilities     that allows remote attackers to affect confidentiality,     integrity and availability via various unknown vectors.
    (CVE-2010-0084 / CVE-2010-0085 / CVE-2010-0087 /     CVE-2010-0088 / CVE-2010-0089 / CVE-2010-0091 /     CVE-2010-0092 / CVE-2010-0095 / CVE-2010-0837 /     CVE-2010-0839)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18 and 5.0 Update 23 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is due to missing privilege checks during     deserialization of RMIConnectionImpl objects, which     allows remote attackers to call system-level Java     functions via the class loader of a constructor that is     being deserialized. (CVE-2010-0094)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0,     Update, and 23 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. NOTE: the previous information was obtained     from the March 2010 CPU. Oracle has not commented on     claims from a reliable researcher that this is a     stack-based buffer overflow using an untrusted size     value in the readMabCurveData function in the CMM module     of the JVM. (CVE-2010-0838)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality, integrity,     and availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is related to improper checks when executing     privileged methods in the Java Runtime Environment     (JRE), which allows attackers to execute arbitrary code     via (1) an untrusted object that extends the trusted     class but has not modified a certain method, or (2) 'a     similar trust issue with interfaces,' aka 'Trusted     Methods Chaining Remote Code Execution Vulnerability.'.
    (CVE-2010-0840)

  - Unspecified vulnerability in the ImageIO component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, and 1.4.2_25 allows remote attackers to     affect confidentiality, integrity, and availability via     unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is an integer overflow in the Java Runtime Environment     that allows remote attackers to execute arbitrary code     via a JPEG image that contains subsample dimensions with     large values, related to JPEGImageReader and 'stepX'.
    (CVE-2010-0841)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is an uncontrolled array index that allows remote     attackers to execute arbitrary code via a MIDI file with     a crafted MixerSequencer object, related to the GM_Song     structure. (CVE-2010-0842)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is related to XNewPtr and improper handling of an     integer parameter when allocating heap memory in the     com.sun.media.sound libraries, which allows remote     attackers to execute arbitrary code. (CVE-2010-0843)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is for improper parsing of a crafted MIDI stream when     creating a MixerSequencer object, which causes a pointer     to be corrupted and allows a NULL byte to be written to     arbitrary memory. (CVE-2010-0844)

  - Unspecified vulnerability in the ImageIO component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow that allows     remote attackers to execute arbitrary code, related to     an 'invalid assignment' and inconsistent length values     in a JPEG image encoder (JPEGImageEncoderImpl).
    (CVE-2010-0846)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow that allows     arbitrary code execution via a crafted image.
    (CVE-2010-0847)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. (CVE-2010-0848)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow in a decoding     routine used by the JPEGImageDecoderImpl interface,     which allows code execution via a crafted JPEG image.
    (CVE-2010-0849)

  - The TLS protocol, and the SSL protocol 3.0 and possibly     earlier, as used in Microsoft Internet Information     Services (IIS) 7.0, mod_ssl in the Apache HTTP Server     2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5     and earlier, Mozilla Network Security Services (NSS)     3.12.4 and earlier, multiple Cisco products, and other     products, does not properly associate renegotiation     handshakes with an existing connection, which allows     man-in-the-middle attackers to insert data into HTTPS     sessions, and possibly other types of sessions protected     by TLS or SSL, by sending an unauthenticated request     that is processed retroactively by a server in a     post-renegotiation context, related to a 'plaintext     injection' attack, aka the 'Project Mogul' issue.
    (CVE-2009-3555). (CVE-2009-3555)

This update of IBM Java 1.5.0 to SR11 FP2 brings various bug and lots of security fixes.

The following security issues were fixed: CVE-2010-0084: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0085)

  - Unspecified vulnerability in the Java Web Start, Java     Plug-in component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0087)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0088)

  - Unspecified vulnerability in the Java Web Start, Java     Plug-in component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect availability via unknown     vectors. (CVE-2010-0089)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality via unknown     vectors. (CVE-2010-0091)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, and 5.0 Update 23 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. (CVE-2010-0092)

  - The TLS protocol, and the SSL protocol 3.0 and possibly     earlier, as used in Microsoft Internet Information     Services (IIS) 7.0, mod_ssl in the Apache HTTP Server     2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5     and earlier, Mozilla Network Security Services (NSS)     3.12.4 and earlier, multiple Cisco products, and other     products, does not properly associate renegotiation     handshakes with an existing connection, which allows     man-in-the-middle attackers to insert data into HTTPS     sessions, and possibly other types of sessions protected     by TLS or SSL, by sending an unauthenticated request     that is processed retroactively by a server in a     post-renegotiation context, related to a 'plaintext     injection' attack, aka the 'Project Mogul' issue.
    (CVE-2009-3555)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18 and 5.0 Update 23 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is due to missing privilege checks during     deserialization of RMIConnectionImpl objects, which     allows remote attackers to call system-level Java     functions via the ClassLoader of a constructor that is     being deserialized. (CVE-2010-0094)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality, integrity,     and availability via unknown vectors. (CVE-2010-0095)

  - Unspecified vulnerability in the Pack200 component in     Oracle Java SE and Java for Business 6 Update 18, 5.0,     Update, and 23 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0837)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0,     Update, and 23 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. NOTE: the previous information was obtained     from the March 2010 CPU. Oracle has not commented on     claims from a reliable researcher that this is a     stack-based buffer overflow using an untrusted size     value in the readMabCurveData function in the CMM module     in the JVM. (CVE-2010-0838)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.127 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. (CVE-2010-0839)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality, integrity,     and availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is related to improper checks when executing     privileged methods in the Java Runtime Environment     (JRE), which allows attackers to execute arbitrary code     via (1) an untrusted object that extends the trusted     class but has not modified a certain method, or (2) 'a     similar trust issue with interfaces,' aka 'Trusted     Methods Chaining Remote Code Execution Vulnerability.'.
    (CVE-2010-0840)

  - Unspecified vulnerability in the ImageIO component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, and 1.4.2_25 allows remote attackers to     affect confidentiality, integrity, and availability via     unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is an integer overflow in the Java Runtime Environment     that allows remote attackers to execute arbitrary code     via a JPEG image that contains subsample dimensions with     large values, related to JPEGImageReader and 'stepX'.
    (CVE-2010-0841)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.127 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is an uncontrolled array index that allows remote     attackers to execute arbitrary code via a MIDI file with     a crafted MixerSequencer object, related to the GM_Song     structure. (CVE-2010-0842)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.127 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is related to XNewPtr and improper handling of an     integer parameter when allocating heap memory in the     com.sun.media.sound libraries, which allows remote     attackers to execute arbitrary code. (CVE-2010-0843)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.127 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is for improper parsing of a crafted MIDI stream when     creating a MixerSequencer object, which causes a pointer     to be corrupted and allows a NULL byte to be written to     arbitrary memory. (CVE-2010-0844)

  - Unspecified vulnerability in the ImageIO component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow that allows     remote attackers to execute arbitrary code, related to     an 'invalid assignment' and inconsistent length values     in a JPEG image encoder (JPEGImageEncoderImpl).
    (CVE-2010-0846)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow that allows     arbitrary code execution via a crafted image.
    (CVE-2010-0847)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. (CVE-2010-0848)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow in a decoding     routine used by the JPEGImageDecoderImpl interface,     which allows code execution via a crafted JPEG image.
    (CVE-2010-0849)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0337 advisory.

    The Sun 1.6.0 Java release includes the Sun Java 6 Runtime Environment and     the Sun Java 6 Software Development Kit.

    This update fixes several vulnerabilities in the Sun Java 6 Runtime     Environment and the Sun Java 6 Software Development Kit. Further     information about these flaws can be found on the Oracle Java SE and Java     for Business Critical Patch Update Advisory page, listed in the     References section. (CVE-2009-3555, CVE-2010-0082, CVE-2010-0084,     CVE-2010-0085, CVE-2010-0087, CVE-2010-0088, CVE-2010-0089, CVE-2010-0090,     CVE-2010-0091, CVE-2010-0092, CVE-2010-0093, CVE-2010-0094, CVE-2010-0095,     CVE-2010-0837, CVE-2010-0838, CVE-2010-0839, CVE-2010-0840, CVE-2010-0841,     CVE-2010-0842, CVE-2010-0843, CVE-2010-0844, CVE-2010-0845, CVE-2010-0846,     CVE-2010-0847, CVE-2010-0848, CVE-2010-0849)

    For the CVE-2009-3555 issue, this update disables renegotiation in the Java     Secure Socket Extension (JSSE) component. Unsafe renegotiation can be     re-enabled using the sun.security.ssl.allowUnsafeRenegotiation property.
    Refer to the following Knowledgebase article for details:
    http://kbase.redhat.com/faq/docs/DOC-20491

    Users of java-1.6.0-sun should upgrade to these updated packages, which     correct these issues. All running instances of Sun Java must be restarted     for the update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated java-1.5.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary.

The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The IBM 1.5.0 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit.

This update fixes several vulnerabilities in the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. Detailed vulnerability descriptions are linked from the IBM 'Security alerts' page, listed in the References section. (CVE-2010-0840, CVE-2010-0841, CVE-2010-0842, CVE-2010-0843, CVE-2010-0844, CVE-2010-0846, CVE-2010-0847, CVE-2010-0848, CVE-2010-0849)

All users of java-1.5.0-ibm are advised to upgrade to these updated packages, containing the IBM 1.5.0 SR11-FP2 Java release. All running instances of IBM Java must be restarted for this update to take effect.

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0574 advisory.

    The IBM 1.4.2 SR13-FP5 Java release includes the IBM Java 2 Runtime     Environment and the IBM Java 2 Software Development Kit.

    This update fixes several vulnerabilities in the IBM Java 2 Runtime     Environment and the IBM Java 2 Software Development Kit. These     vulnerabilities are summarized on the IBM Security alerts page listed in     the References section. (CVE-2010-0084, CVE-2010-0085, CVE-2010-0087,     CVE-2010-0088, CVE-2010-0089, CVE-2010-0091, CVE-2010-0095, CVE-2010-0839,     CVE-2010-0840, CVE-2010-0841, CVE-2010-0842, CVE-2010-0843, CVE-2010-0844,     CVE-2010-0846, CVE-2010-0847, CVE-2010-0848, CVE-2010-0849)

    All users of java-1.4.2-ibm are advised to upgrade to these updated     packages, which contain the IBM 1.4.2 SR13-FP5 Java release. All running     instances of IBM Java must be restarted for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Mac OS X host is running a version of Java for Mac OS X 10.6 that is missing Update 2.

The remote version of this software contains several security vulnerabilities, including some that may allow untrusted Java applets to obtain elevated privileges and lead to execution of arbitrary code with the privileges of the current user.

This update brings IBM Java 1.4.2 to SR13 FP5, fixing various bugs and security issues :

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality via unknown     vectors. (CVE-2010-0084)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0085)

  - Unspecified vulnerability in the Java Web Start, Java     Plug-in component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0087)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0088)

  - Unspecified vulnerability in the Java Web Start, Java     Plug-in component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect availability via unknown     vectors. (CVE-2010-0089)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality via unknown     vectors. (CVE-2010-0091)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality, integrity,     and availability via unknown vectors. (CVE-2010-0095)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. (CVE-2010-0839)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality, integrity,     and availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is related to improper checks when executing     privileged methods in the Java Runtime Environment     (JRE), which allows attackers to execute arbitrary code     via (1) an untrusted object that extends the trusted     class but has not modified a certain method, or (2) 'a     similar trust issue with interfaces,' aka 'Trusted     Methods Chaining Remote Code Execution Vulnerability.'.
    (CVE-2010-0840)

  - Unspecified vulnerability in the ImageIO component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, and 1.4.2_25 allows remote attackers to     affect confidentiality, integrity, and availability via     unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is an integer overflow in the Java Runtime Environment     that allows remote attackers to execute arbitrary code     via a JPEG image that contains subsample dimensions with     large values, related to JPEGImageReader and 'stepX'.
    (CVE-2010-0841)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is an uncontrolled array index that allows     remote attackers to execute arbitrary code via a MIDI     file with a crafted MixerSequencer object, related to     the GM_Song structure. (CVE-2010-0842)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is related to XNewPtr and improper handling of     an integer parameter when allocating heap memory in the     com.sun.media.sound libraries, which allows remote     attackers to execute arbitrary code. (CVE-2010-0843)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is for improper parsing of a crafted MIDI     stream when creating a MixerSequencer object, which     causes a pointer to be corrupted and allows a NULL byte     to be written to arbitrary memory. (CVE-2010-0844)

  - Unspecified vulnerability in the ImageIO component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow that allows     remote attackers to execute arbitrary code, related to     an 'invalid assignment' and inconsistent length values     in a JPEG image encoder (JPEGImageEncoderImpl).
    (CVE-2010-0846)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow that allows     arbitrary code execution via a crafted image.
    (CVE-2010-0847)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. (CVE-2010-0848)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow in a decoding     routine used by the JPEGImageDecoderImpl interface,     which allows code execution via a crafted JPEG image.
    (CVE-2010-0849)

CVE-2009-3555 TLS: MITM attacks via session renegotiation

CVE-2010-0082 OpenJDK Loader-constraint table allows arrays instead of only the base-classes (6626217)

CVE-2010-0084 OpenJDK Policy/PolicyFile leak dynamic ProtectionDomains. (6633872)

CVE-2010-0085 OpenJDK File TOCTOU deserialization vulnerability (6736390)

CVE-2010-0088 OpenJDK Inflater/Deflater clone issues (6745393)

CVE-2010-0091 OpenJDK Unsigned applet can retrieve the dragged information before drop action occurs(6887703)

CVE-2010-0092 OpenJDK AtomicReferenceArray causes SIGSEGV -> SEGV_MAPERR error (6888149)

CVE-2010-0093 OpenJDK System.arraycopy unable to reference elements beyond Integer.MAX_VALUE bytes (6892265)

CVE-2010-0094 OpenJDK Deserialization of RMIConnectionImpl objects should enforce stricter checks (6893947)

CVE-2010-0095 OpenJDK Subclasses of InetAddress may incorrectly interpret network addresses (6893954)

CVE-2010-0845 OpenJDK No ClassCastException for HashAttributeSet constructors if run with -Xcomp (6894807)

CVE-2010-0838 OpenJDK CMM readMabCurveData Buffer Overflow Vulnerability (6899653)

CVE-2010-0837 OpenJDK JAR 'unpack200' must verify input parameters (6902299)

CVE-2010-0840 OpenJDK Applet Trusted Methods Chaining Privilege Escalation Vulnerability (6904691)

CVE-2010-0841 OpenJDK JPEGImageReader stepX Integer Overflow Vulnerability (6909597)

CVE-2010-0848 OpenJDK AWT Library Invalid Index Vulnerability (6914823)

CVE-2010-0847 OpenJDK ImagingLib arbitrary code execution vulnerability (6914866)

CVE-2010-0846 JDK unspecified vulnerability in ImageIO component

CVE-2010-0849 JDK unspecified vulnerability in Java2D component

CVE-2010-0087 JDK unspecified vulnerability in JWS/Plugin component

CVE-2010-0839 CVE-2010-0842 CVE-2010-0843 CVE-2010-0844 JDK multiple unspecified vulnerabilities

CVE-2010-0090 JDK unspecified vulnerability in JavaWS/Plugin component

CVE-2010-0089 JDK unspecified vulnerability in JavaWS/Plugin component

This update fixes several vulnerabilities in the Sun Java 6 Runtime Environment and the Sun Java 6 Software Development Kit. Further information about these flaws can be found on the 'Oracle Java SE and Java for Business Critical Patch Update Advisory' page, listed in the References section. (CVE-2009-3555, CVE-2010-0082, CVE-2010-0084,

CVE-2010-0085, CVE-2010-0087, CVE-2010-0088, CVE-2010-0089,

CVE-2010-0090, CVE-2010-0091, CVE-2010-0092, CVE-2010-0093,

CVE-2010-0094, CVE-2010-0095, CVE-2010-0837, CVE-2010-0838,

CVE-2010-0839, CVE-2010-0840, CVE-2010-0841, CVE-2010-0842,

CVE-2010-0843, CVE-2010-0844, CVE-2010-0845, CVE-2010-0846,

CVE-2010-0847, CVE-2010-0848, CVE-2010-0849)

For the CVE-2009-3555 issue, this update disables renegotiation in the Java Secure Socket Extension (JSSE) component. Unsafe renegotiation can be re-enabled using the sun.security.ssl.allowUnsafeRenegotiation property.

All running instances of Sun Java must be restarted for the update to take effect.

Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary.

The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The IBM 1.6.0 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit.

This update fixes several vulnerabilities in the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. These vulnerabilities are summarized on the IBM 'Security alerts' page listed in the References section. (CVE-2010-0084, CVE-2010-0085, CVE-2010-0087, CVE-2010-0088, CVE-2010-0089, CVE-2010-0090, CVE-2010-0091, CVE-2010-0092, CVE-2010-0094, CVE-2010-0095, CVE-2010-0837, CVE-2010-0838, CVE-2010-0839, CVE-2010-0840, CVE-2010-0841, CVE-2010-0842, CVE-2010-0843, CVE-2010-0844, CVE-2010-0846, CVE-2010-0848, CVE-2010-0849)

All users of java-1.6.0-ibm are advised to upgrade to these updated packages, containing the IBM 1.6.0 SR8 Java release. All running instances of IBM Java must be restarted for the update to take effect.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
46294	RHEL 4 / 5 : java-1.5.0-sun (RHSA-2010:0338)	Nessus	Red Hat Local Security Checks	2010/5/11	2022/5/25	high
46673	Mac OS X : Java for Mac OS X 10.5 Update 7	Nessus	MacOS X Local Security Checks	2010/5/19	2024/7/24	critical
47410	Fedora 12 : java-1.6.0-openjdk-1.6.0.0-37.b17.fc12 (2010-6025)	Nessus	Fedora Local Security Checks	2010/7/1	2022/5/25	high
47426	Fedora 13 : java-1.6.0-openjdk-1.6.0.0-37.b17.fc13 (2010-6279)	Nessus	Fedora Local Security Checks	2010/7/1	2022/5/25	high
45459	openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-2228)	Nessus	SuSE Local Security Checks	2010/4/9	2022/5/25	high
47017	RHEL 5 : Red Hat Network Satellite Server IBM Java Runtime (RHSA-2010:0471)	Nessus	Red Hat Local Security Checks	2010/6/15	2024/11/4	critical
51971	VMSA-2011-0003 : Third-party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX	Nessus	VMware ESX Local Security Checks	2011/2/14	2022/5/25	high
64842	Oracle Java SE Multiple Vulnerabilities (March 2010 CPU) (Unix)	Nessus	Misc.	2013/2/22	2022/5/25	high
49864	SuSE 10 Security Update : IBM Java 1.5.0 (ZYPP Patch Number 7077)	Nessus	SuSE Local Security Checks	2010/10/11	2022/5/25	high
46293	RHEL 5 : java-1.6.0-sun (RHSA-2010:0337)	Nessus	Red Hat Local Security Checks	2010/5/11	2024/11/4	critical
47043	RHEL 4 / 5 : java-1.5.0-ibm (RHSA-2010:0489)	Nessus	Red Hat Local Security Checks	2010/6/18	2022/5/25	high
47905	RHEL 5 : java-1.4.2-ibm (RHSA-2010:0574)	Nessus	Red Hat Local Security Checks	2010/7/30	2024/11/4	critical
46674	Mac OS X : Java for Mac OS X 10.6 Update 2	Nessus	MacOS X Local Security Checks	2010/5/19	2024/7/24	critical
50915	SuSE 11 / 11.1 Security Update : IBM Java / Java (SAT Patch Numbers 2812 / 2813)	Nessus	SuSE Local Security Checks	2010/12/2	2022/5/25	high
45454	openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-2228)	Nessus	SuSE Local Security Checks	2010/4/9	2022/5/25	high
60777	Scientific Linux Security Update : java (jdk 1.6.0) on SL4.x, SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2022/5/25	high
46304	RHEL 4 / 5 : java-1.6.0-ibm (RHSA-2010:0383)	Nessus	Red Hat Local Security Checks	2010/5/11	2022/5/25	high

检测

插件搜索

high

critical

high

high

high

critical

high

high

high

critical

high

critical

critical

high

high

high

high