The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0337 advisory.

    The Sun 1.6.0 Java release includes the Sun Java 6 Runtime Environment and     the Sun Java 6 Software Development Kit.

    This update fixes several vulnerabilities in the Sun Java 6 Runtime     Environment and the Sun Java 6 Software Development Kit. Further     information about these flaws can be found on the Oracle Java SE and Java     for Business Critical Patch Update Advisory page, listed in the     References section. (CVE-2009-3555, CVE-2010-0082, CVE-2010-0084,     CVE-2010-0085, CVE-2010-0087, CVE-2010-0088, CVE-2010-0089, CVE-2010-0090,     CVE-2010-0091, CVE-2010-0092, CVE-2010-0093, CVE-2010-0094, CVE-2010-0095,     CVE-2010-0837, CVE-2010-0838, CVE-2010-0839, CVE-2010-0840, CVE-2010-0841,     CVE-2010-0842, CVE-2010-0843, CVE-2010-0844, CVE-2010-0845, CVE-2010-0846,     CVE-2010-0847, CVE-2010-0848, CVE-2010-0849)

    For the CVE-2009-3555 issue, this update disables renegotiation in the Java     Secure Socket Extension (JSSE) component. Unsafe renegotiation can be     re-enabled using the sun.security.ssl.allowUnsafeRenegotiation property.
    Refer to the following Knowledgebase article for details:
    http://kbase.redhat.com/faq/docs/DOC-20491

    Users of java-1.6.0-sun should upgrade to these updated packages, which     correct these issues. All running instances of Sun Java must be restarted     for the update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update of IBM Java 1.5.0 to SR11 FP2 to fixes the following security issues :

  - Various unspecified and undocumented vulnerabilities     that allows remote attackers to affect confidentiality,     integrity and availability via various unknown vectors.
    (CVE-2010-0084 / CVE-2010-0085 / CVE-2010-0087 /     CVE-2010-0088 / CVE-2010-0089 / CVE-2010-0091 /     CVE-2010-0092 / CVE-2010-0095 / CVE-2010-0837 /     CVE-2010-0839)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18 and 5.0 Update 23 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is due to missing privilege checks during     deserialization of RMIConnectionImpl objects, which     allows remote attackers to call system-level Java     functions via the class loader of a constructor that is     being deserialized. (CVE-2010-0094)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0,     Update, and 23 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. NOTE: the previous information was obtained     from the March 2010 CPU. Oracle has not commented on     claims from a reliable researcher that this is a     stack-based buffer overflow using an untrusted size     value in the readMabCurveData function in the CMM module     of the JVM. (CVE-2010-0838)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality, integrity,     and availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is related to improper checks when executing     privileged methods in the Java Runtime Environment     (JRE), which allows attackers to execute arbitrary code     via (1) an untrusted object that extends the trusted     class but has not modified a certain method, or (2) 'a     similar trust issue with interfaces,' aka 'Trusted     Methods Chaining Remote Code Execution Vulnerability.'.
    (CVE-2010-0840)

  - Unspecified vulnerability in the ImageIO component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, and 1.4.2_25 allows remote attackers to     affect confidentiality, integrity, and availability via     unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is an integer overflow in the Java Runtime Environment     that allows remote attackers to execute arbitrary code     via a JPEG image that contains subsample dimensions with     large values, related to JPEGImageReader and 'stepX'.
    (CVE-2010-0841)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is an uncontrolled array index that allows remote     attackers to execute arbitrary code via a MIDI file with     a crafted MixerSequencer object, related to the GM_Song     structure. (CVE-2010-0842)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is related to XNewPtr and improper handling of an     integer parameter when allocating heap memory in the     com.sun.media.sound libraries, which allows remote     attackers to execute arbitrary code. (CVE-2010-0843)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is for improper parsing of a crafted MIDI stream when     creating a MixerSequencer object, which causes a pointer     to be corrupted and allows a NULL byte to be written to     arbitrary memory. (CVE-2010-0844)

  - Unspecified vulnerability in the ImageIO component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow that allows     remote attackers to execute arbitrary code, related to     an 'invalid assignment' and inconsistent length values     in a JPEG image encoder (JPEGImageEncoderImpl).
    (CVE-2010-0846)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow that allows     arbitrary code execution via a crafted image.
    (CVE-2010-0847)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. (CVE-2010-0848)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow in a decoding     routine used by the JPEGImageDecoderImpl interface,     which allows code execution via a crafted JPEG image.
    (CVE-2010-0849)

  - The TLS protocol, and the SSL protocol 3.0 and possibly     earlier, as used in Microsoft Internet Information     Services (IIS) 7.0, mod_ssl in the Apache HTTP Server     2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5     and earlier, Mozilla Network Security Services (NSS)     3.12.4 and earlier, multiple Cisco products, and other     products, does not properly associate renegotiation     handshakes with an existing connection, which allows     man-in-the-middle attackers to insert data into HTTPS     sessions, and possibly other types of sessions protected     by TLS or SSL, by sending an unauthenticated request     that is processed retroactively by a server in a     post-renegotiation context, related to a 'plaintext     injection' attack, aka the 'Project Mogul' issue.
    (CVE-2009-3555). (CVE-2009-3555)

This update of IBM Java 1.5.0 to SR11 FP2 brings various bug and lots of security fixes.

The following security issues were fixed: CVE-2010-0084: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0085)

  - Unspecified vulnerability in the Java Web Start, Java     Plug-in component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0087)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0088)

  - Unspecified vulnerability in the Java Web Start, Java     Plug-in component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect availability via unknown     vectors. (CVE-2010-0089)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality via unknown     vectors. (CVE-2010-0091)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, and 5.0 Update 23 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. (CVE-2010-0092)

  - The TLS protocol, and the SSL protocol 3.0 and possibly     earlier, as used in Microsoft Internet Information     Services (IIS) 7.0, mod_ssl in the Apache HTTP Server     2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5     and earlier, Mozilla Network Security Services (NSS)     3.12.4 and earlier, multiple Cisco products, and other     products, does not properly associate renegotiation     handshakes with an existing connection, which allows     man-in-the-middle attackers to insert data into HTTPS     sessions, and possibly other types of sessions protected     by TLS or SSL, by sending an unauthenticated request     that is processed retroactively by a server in a     post-renegotiation context, related to a 'plaintext     injection' attack, aka the 'Project Mogul' issue.
    (CVE-2009-3555)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18 and 5.0 Update 23 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is due to missing privilege checks during     deserialization of RMIConnectionImpl objects, which     allows remote attackers to call system-level Java     functions via the ClassLoader of a constructor that is     being deserialized. (CVE-2010-0094)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality, integrity,     and availability via unknown vectors. (CVE-2010-0095)

  - Unspecified vulnerability in the Pack200 component in     Oracle Java SE and Java for Business 6 Update 18, 5.0,     Update, and 23 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0837)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0,     Update, and 23 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. NOTE: the previous information was obtained     from the March 2010 CPU. Oracle has not commented on     claims from a reliable researcher that this is a     stack-based buffer overflow using an untrusted size     value in the readMabCurveData function in the CMM module     in the JVM. (CVE-2010-0838)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.127 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. (CVE-2010-0839)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality, integrity,     and availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is related to improper checks when executing     privileged methods in the Java Runtime Environment     (JRE), which allows attackers to execute arbitrary code     via (1) an untrusted object that extends the trusted     class but has not modified a certain method, or (2) 'a     similar trust issue with interfaces,' aka 'Trusted     Methods Chaining Remote Code Execution Vulnerability.'.
    (CVE-2010-0840)

  - Unspecified vulnerability in the ImageIO component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, and 1.4.2_25 allows remote attackers to     affect confidentiality, integrity, and availability via     unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is an integer overflow in the Java Runtime Environment     that allows remote attackers to execute arbitrary code     via a JPEG image that contains subsample dimensions with     large values, related to JPEGImageReader and 'stepX'.
    (CVE-2010-0841)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.127 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is an uncontrolled array index that allows remote     attackers to execute arbitrary code via a MIDI file with     a crafted MixerSequencer object, related to the GM_Song     structure. (CVE-2010-0842)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.127 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is related to XNewPtr and improper handling of an     integer parameter when allocating heap memory in the     com.sun.media.sound libraries, which allows remote     attackers to execute arbitrary code. (CVE-2010-0843)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.127 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is for improper parsing of a crafted MIDI stream when     creating a MixerSequencer object, which causes a pointer     to be corrupted and allows a NULL byte to be written to     arbitrary memory. (CVE-2010-0844)

  - Unspecified vulnerability in the ImageIO component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow that allows     remote attackers to execute arbitrary code, related to     an 'invalid assignment' and inconsistent length values     in a JPEG image encoder (JPEGImageEncoderImpl).
    (CVE-2010-0846)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow that allows     arbitrary code execution via a crafted image.
    (CVE-2010-0847)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. (CVE-2010-0848)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow in a decoding     routine used by the JPEGImageDecoderImpl interface,     which allows code execution via a crafted JPEG image.
    (CVE-2010-0849)

The version of Oracle (formerly Sun) Java Runtime Environment (JRE) installed on the remote host is earlier than 6 Update 19 / 5.0 Update 24 / 1.4.2_26.  Such versions are potentially affected by security issues in the following components :

  - ImageIO
  - Java 2D
  - JRE
  - Java Web Start, Java Plug-in
  - Pack200
  - Sound
  - JSSE
  - HotSpot Server

The remote host is affected by the vulnerability described in GLSA-201006-18 (Oracle JRE/JDK: Multiple vulnerabilities)

    Multiple vulnerabilities have been reported in the Oracle Java     implementation. Please review the CVE identifiers referenced below and     the associated Oracle Critical Patch Update Advisory for details.
  Impact :

    A remote attacker could exploit these vulnerabilities to cause     unspecified impact, possibly including remote execution of arbitrary     code.
  Workaround :

    There is no known workaround at this time.

This update of IBM Java 6 to SR 8 to fixes the following security issues :

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality via unknown     vectors. (CVE-2010-0084)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0085)

  - Unspecified vulnerability in the Java Web Start, Java     Plug-in component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0087)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0088)

  - Unspecified vulnerability in the Java Web Start, Java     Plug-in component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect availability via unknown     vectors. (CVE-2010-0089)

  - Unspecified vulnerability in the Java Web Start, Java     Plug-in component in Oracle Java SE and Java for     Business 6 Update 18 allows remote attackers to affect     integrity and availability via unknown vectors.
    (CVE-2010-0090)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality via unknown     vectors. (CVE-2010-0091)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, and 5.0 Update 23 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. (CVE-2010-0092)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18 and 5.0 Update 23 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is due to missing privilege checks during     deserialization of RMIConnectionImpl objects, which     allows remote attackers to call system-level Java     functions via the class loader of a constructor that is     being deserialized. (CVE-2010-0094)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality, integrity,     and availability via unknown vectors. (CVE-2010-0095)

  - Unspecified vulnerability in the Pack200 component in     Oracle Java SE and Java for Business 6 Update 18, 5.0,     Update, and 23 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0837)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0,     Update, and 23 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. NOTE: the previous information was obtained     from the March 2010 CPU. Oracle has not commented on     claims from a reliable researcher that this is a     stack-based buffer overflow using an untrusted size     value in the readMabCurveData function in the CMM module     of the JVM. (CVE-2010-0838)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. (CVE-2010-0839)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality, integrity,     and availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is related to improper checks when executing     privileged methods in the Java Runtime Environment     (JRE), which allows attackers to execute arbitrary code     via (1) an untrusted object that extends the trusted     class but has not modified a certain method, or (2) 'a     similar trust issue with interfaces,' aka 'Trusted     Methods Chaining Remote Code Execution Vulnerability.'.
    (CVE-2010-0840)

  - Unspecified vulnerability in the ImageIO component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, and 1.4.2_25 allows remote attackers to     affect confidentiality, integrity, and availability via     unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is an integer overflow in the Java Runtime Environment     that allows remote attackers to execute arbitrary code     via a JPEG image that contains subsample dimensions with     large values, related to JPEGImageReader and 'stepX'.
    (CVE-2010-0841)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is an uncontrolled array index that allows remote     attackers to execute arbitrary code via a MIDI file with     a crafted MixerSequencer object, related to the GM_Song     structure. (CVE-2010-0842)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is related to XNewPtr and improper handling of an     integer parameter when allocating heap memory in the     com.sun.media.sound libraries, which allows remote     attackers to execute arbitrary code. (CVE-2010-0843)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is for improper parsing of a crafted MIDI stream when     creating a MixerSequencer object, which causes a pointer     to be corrupted and allows a NULL byte to be written to     arbitrary memory. (CVE-2010-0844)

  - Unspecified vulnerability in the ImageIO component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow that allows     remote attackers to execute arbitrary code, related to     an 'invalid assignment' and inconsistent length values     in a JPEG image encoder (JPEGImageEncoderImpl).
    (CVE-2010-0846)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow that allows     arbitrary code execution via a crafted image.
    (CVE-2010-0847)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. (CVE-2010-0848)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow in a decoding     routine used by the JPEGImageDecoderImpl interface,     which allows code execution via a crafted JPEG image.
    (CVE-2010-0849)

Please also see http://www.ibm.com/developerworks/java/jdk/alerts/ for a more up to date list on what was fixed

This update of IBM Java 6 to Service Request 8 to fixes the following security issues :

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality via unknown     vectors. (CVE-2010-0084)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0085)

  - Unspecified vulnerability in the Java Web Start, Java     Plug-in component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0087)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0088)

  - Unspecified vulnerability in the Java Web Start, Java     Plug-in component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect availability via unknown     vectors. (CVE-2010-0089)

  - Unspecified vulnerability in the Java Web Start, Java     Plug-in component in Oracle Java SE and Java for     Business 6 Update 18 allows remote attackers to affect     integrity and availability via unknown vectors.
    (CVE-2010-0090)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality via unknown     vectors. (CVE-2010-0091)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, and 5.0 Update 23 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. (CVE-2010-0092)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18 and 5.0 Update 23 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is due to missing privilege checks during     deserialization of RMIConnectionImpl objects, which     allows remote attackers to call system-level Java     functions via the class loader of a constructor that is     being deserialized. (CVE-2010-0094)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality, integrity,     and availability via unknown vectors. (CVE-2010-0095)

  - Unspecified vulnerability in the Pack200 component in     Oracle Java SE and Java for Business 6 Update 18, 5.0,     Update, and 23 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0837)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0,     Update, and 23 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. NOTE: the previous information was obtained     from the March 2010 CPU. Oracle has not commented on     claims from a reliable researcher that this is a     stack-based buffer overflow using an untrusted size     value in the readMabCurveData function in the CMM module     of the JVM. (CVE-2010-0838)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. (CVE-2010-0839)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality, integrity,     and availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is related to improper checks when executing     privileged methods in the Java Runtime Environment     (JRE), which allows attackers to execute arbitrary code     via (1) an untrusted object that extends the trusted     class but has not modified a certain method, or (2) 'a     similar trust issue with interfaces,' aka 'Trusted     Methods Chaining Remote Code Execution Vulnerability.'.
    (CVE-2010-0840)

  - Unspecified vulnerability in the ImageIO component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, and 1.4.2_25 allows remote attackers to     affect confidentiality, integrity, and availability via     unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is an integer overflow in the Java Runtime Environment     that allows remote attackers to execute arbitrary code     via a JPEG image that contains subsample dimensions with     large values, related to JPEGImageReader and 'stepX'.
    (CVE-2010-0841)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is an uncontrolled array index that allows remote     attackers to execute arbitrary code via a MIDI file with     a crafted MixerSequencer object, related to the GM_Song     structure. (CVE-2010-0842)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is related to XNewPtr and improper handling of an     integer parameter when allocating heap memory in the     com.sun.media.sound libraries, which allows remote     attackers to execute arbitrary code. (CVE-2010-0843)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is for improper parsing of a crafted MIDI stream when     creating a MixerSequencer object, which causes a pointer     to be corrupted and allows a NULL byte to be written to     arbitrary memory. (CVE-2010-0844)

  - Unspecified vulnerability in the ImageIO component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow that allows     remote attackers to execute arbitrary code, related to     an 'invalid assignment' and inconsistent length values     in a JPEG image encoder (JPEGImageEncoderImpl).
    (CVE-2010-0846)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow that allows     arbitrary code execution via a crafted image.
    (CVE-2010-0847)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. (CVE-2010-0848)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow in a decoding     routine used by the JPEGImageDecoderImpl interface,     which allows code execution via a crafted JPEG image.
    (CVE-2010-0849)

Please also see http://www.ibm.com/developerworks/java/jdk/alerts/ for a more up to date list on what was fixed.

The remote VMware ESX / ESXi host is missing a security-related patch.
It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries :

  - Apache Tomcat 
  - Apache Tomcat Manager
  - cURL 
  - Java Runtime Environment (JRE)
  - Kernel 
  - Microsoft SQL Express
  - OpenSSL
  - pam_krb5

The version of Oracle (formerly Sun) Java Runtime Environment (JRE) installed on the remote host is earlier than 6 Update 19 / 5.0 Update 24 / 1.4.2_26. Such versions are potentially affected by security issues in the following components :

  - ImageIO
   - Java 2D
   - JRE
   - Java Web Start, Java Plug-in
   - Pack200
   - Sound
   - JSSE
   - HotSpot Server

Sun Java 6 was updated to Update 19, fixing a large number of security issues.

CVE-2009-3555 CVE-2010-0082 CVE-2010-0084 CVE-2010-0085 CVE-2010-0087 CVE-2010-0088 CVE-2010-0089 CVE-2010-0090 CVE-2010-0091 CVE-2010-0092 CVE-2010-0093 CVE-2010-0094 CVE-2010-0095 CVE-2010-0837 CVE-2010-0838 CVE-2010-0839 CVE-2010-0840 CVE-2010-0841 CVE-2010-0842 CVE-2010-0843 CVE-2010-0844 CVE-2010-0845 CVE-2010-0846 CVE-2010-0847 CVE-2010-0848 CVE-2010-0849 CVE-2010-0850

This update of IBM Java 1.5.0 to SR11 FP2 to fixes the following security issues :

  - Various unspecified and undocumented vulnerabilities     that allows remote attackers to affect confidentiality,     integrity and availability via various unknown vectors.
    (CVE-2010-0084, CVE-2010-0085, CVE-2010-0087,     CVE-2010-0088, CVE-2010-0089, CVE-2010-0091,     CVE-2010-0092, CVE-2010-0095, CVE-2010-0837,     CVE-2010-0839)

  - Unspecified vulnerability that allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is due to missing privilege checks during     deserialization of RMIConnectionImpl objects, which     allows remote attackers to call system-level Java     functions via the class loader of a constructor that is     being deserialized. (CVE-2010-0094)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0,     Update, and 23 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. NOTE: the previous information was obtained     from the March 2010 CPU. Oracle has not commented on     claims from a reliable researcher that this is a     stack-based buffer overflow using an untrusted size     value in the readMabCurveData function in the CMM module     of the JVM. (CVE-2010-0838)

  - Unspecified vulnerability that allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is related to improper checks when executing privileged     methods in the Java Runtime Environment (JRE), which     allows attackers to execute arbitrary code via (1) an     untrusted object that extends the trusted class but has     not modified a certain method, or (2) 'a similar trust     issue with interfaces,' aka 'Trusted Methods Chaining     Remote Code Execution Vulnerability.'. (CVE-2010-0840)

  - Unspecified vulnerability in the ImageIO component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, and 1.4.2_25 allows remote attackers to     affect confidentiality, integrity, and availability via     unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is an integer overflow in the Java Runtime Environment     that allows remote attackers to execute arbitrary code     via a JPEG image that contains subsample dimensions with     large values, related to JPEGImageReader and 'stepX'.
    (CVE-2010-0841)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is an uncontrolled array index that allows remote     attackers to execute arbitrary code via a MIDI file with     a crafted MixerSequencer object, related to the GM_Song     structure. (CVE-2010-0842)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is related to XNewPtr and improper handling of an     integer parameter when allocating heap memory in the     com.sun.media.sound libraries, which allows remote     attackers to execute arbitrary code. (CVE-2010-0843)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is for improper parsing of a crafted MIDI stream when     creating a MixerSequencer object, which causes a pointer     to be corrupted and allows a NULL byte to be written to     arbitrary memory. (CVE-2010-0844)

  - Unspecified vulnerability in the ImageIO component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow that allows     remote attackers to execute arbitrary code, related to     an 'invalid assignment' and inconsistent length values     in a JPEG image encoder (JPEGImageEncoderImpl).
    (CVE-2010-0846)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow that allows     arbitrary code execution via a crafted image.
    (CVE-2010-0847)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. (CVE-2010-0848)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow in a decoding     routine used by the JPEGImageDecoderImpl interface,     which allows code execution via a crafted JPEG image.
    (CVE-2010-0849)

  - The TLS protocol, and the SSL protocol 3.0 and possibly     earlier, as used in Microsoft Internet Information     Services (IIS) 7.0, mod_ssl in the Apache HTTP Server     2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5     and earlier, Mozilla Network Security Services (NSS)     3.12.4 and earlier, multiple Cisco products, and other     products, does not properly associate renegotiation     handshakes with an existing connection, which allows     man-in-the-middle attackers to insert data into HTTPS     sessions, and possibly other types of sessions protected     by TLS or SSL, by sending an unauthenticated request     that is processed retroactively by a server in a     post-renegotiation context, related to a 'plaintext     injection' attack, aka the 'Project Mogul' issue.
    (CVE-2009-3555)

Sun Java 6 was updated to Update 19, fixing a large number of security issues: CVE-2009-3555 / CVE-2010-0082 / CVE-2010-0084 / CVE-2010-0085 / CVE-2010-0087 / CVE-2010-0088 / CVE-2010-0089 / CVE-2010-0090 / CVE-2010-0091 / CVE-2010-0092 / CVE-2010-0093 / CVE-2010-0094 / CVE-2010-0095 / CVE-2010-0837 / CVE-2010-0838 / CVE-2010-0839 / CVE-2010-0840 / CVE-2010-0841 / CVE-2010-0842 / CVE-2010-0843 / CVE-2010-0844 / CVE-2010-0845 / CVE-2010-0846 / CVE-2010-0847 / CVE-2010-0848 / CVE-2010-0849 / CVE-2010-0850.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
46293	RHEL 5 : java-1.6.0-sun (RHSA-2010:0337)	Nessus	Red Hat Local Security Checks	2010/5/11	2024/11/4	critical
49864	SuSE 10 Security Update : IBM Java 1.5.0 (ZYPP Patch Number 7077)	Nessus	SuSE Local Security Checks	2010/10/11	2022/5/25	high
64842	Oracle Java SE Multiple Vulnerabilities (March 2010 CPU) (Unix)	Nessus	Misc.	2013/2/22	2022/5/25	high
46807	GLSA-201006-18 : Oracle JRE/JDK: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2010/6/4	2022/5/25	critical
50916	SuSE 11 Security Update : IBM Java 6 (SAT Patch Number 2548)	Nessus	SuSE Local Security Checks	2010/12/2	2022/5/25	high
51606	SuSE 11.1 Security Update : IBM Java 6 (SAT Patch Number 2553)	Nessus	SuSE Local Security Checks	2011/1/21	2022/5/25	high
89674	VMware ESX / ESXi Third-Party Libraries Multiple Vulnerabilities (VMSA-2011-0003) (remote check)	Nessus	Misc.	2016/3/4	2022/5/25	high
45379	Oracle Java SE Multiple Vulnerabilities (March 2010 CPU)	Nessus	Windows	2010/3/30	2022/5/25	high
45465	openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-2228)	Nessus	SuSE Local Security Checks	2010/4/9	2022/5/25	high
47617	SuSE9 Security Update : IBM Java 1.5.0 (YOU Patch Number 12623)	Nessus	SuSE Local Security Checks	2010/7/7	2022/5/25	high
50917	SuSE 11 Security Update : Sun Java 6 (SAT Patch Number 2225)	Nessus	SuSE Local Security Checks	2010/12/2	2022/5/25	high

检测

插件搜索

critical

high

high

critical

high

high

high

high

high

high

high