The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is earlier than 7 Update 1 / 6 Update 29 / 5.0 Update 32 / 1.4.2_34 and is potentially affected by security issues in the following components :

  - 2D
  - AWT
  - Deployment
  - Deserialization
  - Hotspot
  - Java Runtime Environment
  - JAXWS
  - JSSE
  - Networking
  - RMI
  - Scripting
  - Sound
  - Swing

The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is earlier than 7 Update 1 / 6 Update 29 / 5.0 Update 32 / 1.4.2_34.  As such, it is potentially affected by security issues in the following components :

  - 2D
  - AWT
  - Deployment
  - Deserialization
  - Hotspot
  - Java Runtime Environment
  - JAXWS
  - JSSE
  - Networking
  - RMI
  - Scripting
  - Sound
  - Swing

Oracle/Sun Java 1.6.0 was updated to the u26 release, fixing lots of bugs and security issues.

Please see http://www.oracle.com/technetwork/topics/security/javacpuoct2011-44343 1.html

for more details.

The remote VMware ESX / ESXi host is missing a security-related patch.
It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in the following components :

  - Apache Tomcat
  - bzip2 library
  - JRE
  - WDDM display driver
  - XPDM display driver

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1384 advisory.

    The Sun 1.6.0 Java release includes the Sun Java 6 Runtime Environment and     the Sun Java 6 Software Development Kit.

    This update fixes several vulnerabilities in the Sun Java 6 Runtime     Environment and the Sun Java 6 Software Development Kit. Further     information about these flaws can be found on the Oracle Java SE Critical     Patch page, listed in the References section. (CVE-2011-3389,     CVE-2011-3516, CVE-2011-3521, CVE-2011-3544, CVE-2011-3545, CVE-2011-3546,     CVE-2011-3547, CVE-2011-3548, CVE-2011-3549, CVE-2011-3550, CVE-2011-3551,     CVE-2011-3552, CVE-2011-3553, CVE-2011-3554, CVE-2011-3555, CVE-2011-3556,     CVE-2011-3557, CVE-2011-3558, CVE-2011-3560, CVE-2011-3561)

    All users of java-1.6.0-sun are advised to upgrade to these updated     packages, which provide JDK and JRE 6 Update 29 and resolve these issues.
    All running instances of Sun Java must be restarted for the update to take     effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

IBM Java 1.6.0 SR10 has been released fixing the following CVE's :

  - CVE-2011-3389

  - CVE-2011-3516

  - CVE-2011-3521

  - CVE-2011-3544

  - CVE-2011-3545

  - CVE-2011-3546

  - CVE-2011-3547

  - CVE-2011-3548

  - CVE-2011-3549

  - CVE-2011-3550

  - CVE-2011-3551

  - CVE-2011-3552

  - CVE-2011-3553

  - CVE-2011-3554

  - CVE-2011-3556

  - CVE-2011-3557

  - CVE-2011-3560

  - CVE-2011-3561

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0034 advisory.

    The IBM Java SE version 6 release includes the IBM Java 6 Runtime     Environment and the IBM Java 6 Software Development Kit.

    This update fixes several vulnerabilities in the IBM Java 6 Runtime     Environment and the IBM Java 6 Software Development Kit. Detailed     vulnerability descriptions are linked from the IBM Security alerts page,     listed in the References section. (CVE-2011-3389, CVE-2011-3516,     CVE-2011-3521, CVE-2011-3544, CVE-2011-3545, CVE-2011-3546, CVE-2011-3547,     CVE-2011-3548, CVE-2011-3549, CVE-2011-3550, CVE-2011-3551, CVE-2011-3552,     CVE-2011-3553, CVE-2011-3554, CVE-2011-3556, CVE-2011-3557, CVE-2011-3560,     CVE-2011-3561)

    All users of java-1.6.0-ibm are advised to upgrade to these updated     packages, containing the IBM Java 6 SR10 release. All running instances     of IBM Java must be restarted for the update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Oracle/Sun OpenJDK 1.6.0 was updated to the 1.10.4release, fixing lots of bugs and security issues.

Please see http://www.oracle.com/technetwork/topics/security/javacpuoct2011-44343 1.html

for more details.

The Sun 1.6.0 Java release includes the Sun Java 6 Runtime Environment and the Sun Java 6 Software Development Kit.

This update fixes several vulnerabilities in the Sun Java 6 Runtime Environment and the Sun Java 6 Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch page, listed in the References section. (CVE-2011-3389, CVE-2011-3516, CVE-2011-3521, CVE-2011-3544, CVE-2011-3545, CVE-2011-3546, CVE-2011-3547, CVE-2011-3548, CVE-2011-3549, CVE-2011-3550, CVE-2011-3551, CVE-2011-3552, CVE-2011-3553, CVE-2011-3554, CVE-2011-3555, CVE-2011-3556, CVE-2011-3557, CVE-2011-3558, CVE-2011-3560, CVE-2011-3561)

All users of java-1.6.0-sun are advised to upgrade to these updated packages, which provide JDK and JRE 6 Update 29 and resolve these issues. All running instances of Sun Java must be restarted for the update to take effect.

Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Network Satellite Server 5.4.

The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

This update corrects several security vulnerabilities in the IBM Java Runtime Environment shipped as part of Red Hat Network Satellite Server 5.4. In a typical operating environment, these are of low security risk as the runtime is not used on untrusted applets.

Several flaws were fixed in the IBM Java 2 Runtime Environment.
(CVE-2011-0802, CVE-2011-0814, CVE-2011-0862, CVE-2011-0863, CVE-2011-0865, CVE-2011-0867, CVE-2011-0868, CVE-2011-0869, CVE-2011-0871, CVE-2011-0873, CVE-2011-3389, CVE-2011-3516, CVE-2011-3521, CVE-2011-3544, CVE-2011-3545, CVE-2011-3546, CVE-2011-3547, CVE-2011-3548, CVE-2011-3549, CVE-2011-3550, CVE-2011-3551, CVE-2011-3552, CVE-2011-3553, CVE-2011-3554, CVE-2011-3556, CVE-2011-3557, CVE-2011-3560, CVE-2011-3561, CVE-2011-3563, CVE-2011-5035, CVE-2012-0497, CVE-2012-0498, CVE-2012-0499, CVE-2012-0500, CVE-2012-0501, CVE-2012-0502, CVE-2012-0503, CVE-2012-0505, CVE-2012-0506, CVE-2012-0507, CVE-2012-0547, CVE-2012-0551, CVE-2012-1531, CVE-2012-1532, CVE-2012-1533, CVE-2012-1541, CVE-2012-1682, CVE-2012-1713, CVE-2012-1716, CVE-2012-1717, CVE-2012-1718, CVE-2012-1719, CVE-2012-1721, CVE-2012-1722, CVE-2012-1725, CVE-2012-3143, CVE-2012-3159, CVE-2012-3213, CVE-2012-3216, CVE-2012-3342, CVE-2012-4820, CVE-2012-4822, CVE-2012-4823, CVE-2012-5068, CVE-2012-5069, CVE-2012-5071, CVE-2012-5072, CVE-2012-5073, CVE-2012-5075, CVE-2012-5079, CVE-2012-5081, CVE-2012-5083, CVE-2012-5084, CVE-2012-5089, CVE-2013-0169, CVE-2013-0351, CVE-2013-0401, CVE-2013-0409, CVE-2013-0419, CVE-2013-0423, CVE-2013-0424, CVE-2013-0425, CVE-2013-0426, CVE-2013-0427, CVE-2013-0428, CVE-2013-0432, CVE-2013-0433, CVE-2013-0434, CVE-2013-0435, CVE-2013-0438, CVE-2013-0440, CVE-2013-0441, CVE-2013-0442, CVE-2013-0443, CVE-2013-0445, CVE-2013-0446, CVE-2013-0450, CVE-2013-0809, CVE-2013-1473, CVE-2013-1476, CVE-2013-1478, CVE-2013-1480, CVE-2013-1481, CVE-2013-1486, CVE-2013-1487, CVE-2013-1491, CVE-2013-1493, CVE-2013-1500, CVE-2013-1537, CVE-2013-1540, CVE-2013-1557, CVE-2013-1563, CVE-2013-1569, CVE-2013-1571, CVE-2013-2383, CVE-2013-2384, CVE-2013-2394, CVE-2013-2407, CVE-2013-2412, CVE-2013-2417, CVE-2013-2418, CVE-2013-2419, CVE-2013-2420, CVE-2013-2422, CVE-2013-2424, CVE-2013-2429, CVE-2013-2430, CVE-2013-2432, CVE-2013-2433, CVE-2013-2435, CVE-2013-2437, CVE-2013-2440, CVE-2013-2442, CVE-2013-2443, CVE-2013-2444, CVE-2013-2446, CVE-2013-2447, CVE-2013-2448, CVE-2013-2450, CVE-2013-2451, CVE-2013-2452, CVE-2013-2453, CVE-2013-2454, CVE-2013-2455, CVE-2013-2456, CVE-2013-2457, CVE-2013-2459, CVE-2013-2463, CVE-2013-2464, CVE-2013-2465, CVE-2013-2466, CVE-2013-2468, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, CVE-2013-2472, CVE-2013-2473, CVE-2013-3743)

Users of Red Hat Network Satellite Server 5.4 are advised to upgrade to these updated packages, which contain the IBM Java SE 6 SR14 release. For this update to take effect, Red Hat Network Satellite Server must be restarted ('/usr/sbin/rhn-satellite restart'), as well as all running instances of IBM Java.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
56566	Oracle Java SE Multiple Vulnerabilities (October 2011 CPU) (BEAST)	Nessus	Windows	2011/10/20	2022/12/5	critical
64846	Oracle Java SE Multiple Vulnerabilities (October 2011 CPU) (BEAST) (Unix)	Nessus	Misc.	2013/2/22	2022/12/5	critical
75874	openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-5320) (BEAST)	Nessus	SuSE Local Security Checks	2014/6/13	2022/12/5	critical
89106	VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2012-0005) (BEAST) (remote check)	Nessus	Misc.	2016/3/3	2022/12/5	critical
56560	RHEL 5 / 6 : java-1.6.0-sun (RHSA-2011:1384)	Nessus	Red Hat Local Security Checks	2011/10/20	2025/3/21	critical
57658	SuSE 10 Security Update : IBM Java (ZYPP Patch Number 7926) (BEAST)	Nessus	SuSE Local Security Checks	2012/1/24	2022/12/5	critical
57595	RHEL 6 : java-1.6.0-ibm (RHSA-2012:0034)	Nessus	Red Hat Local Security Checks	2012/1/19	2025/4/15	critical
75870	openSUSE Security Update : java-1_6_0-openjdk (java-1_6_0-openjdk-5329) (BEAST)	Nessus	SuSE Local Security Checks	2014/6/13	2022/12/5	critical
61158	Scientific Linux Security Update : java-1.6.0-sun on SL5.x i386/x86_64 (BEAST)	Nessus	Scientific Linux Local Security Checks	2012/8/1	2022/12/5	critical
78975	RHEL 5 / 6 : IBM Java Runtime in Satellite Server (RHSA-2013:1455) (BEAST) (ROBOT)	Nessus	Red Hat Local Security Checks	2014/11/8	2022/12/5	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical