The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0963 advisory.

  - OpenJDK: Insecure shared memory permissions (2D, 8001034) (CVE-2013-1500)

  - OpenJDK: Frame injection in generated HTML (Javadoc, 8012375) (CVE-2013-1571)

  - Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment) (CVE-2013-2400, CVE-2013-2437,     CVE-2013-2442, CVE-2013-2462, CVE-2013-2466, CVE-2013-2468, CVE-2013-3744)

  - OpenJDK: Integrate Apache Santuario, rework class loader (Libraries, 6741606, 8008744) (CVE-2013-2407)

  - OpenJDK: JConsole SSL support (Serviceability, 8003703) (CVE-2013-2412)

  - OpenJDK: AccessControlContext check order issue (Libraries, 8001330) (CVE-2013-2443)

  - OpenJDK: Resource denial of service (AWT, 8001038) (CVE-2013-2444)

  - OpenJDK: Better handling of memory allocation errors (Hotspot, 7158805) (CVE-2013-2445)

  - OpenJDK: output stream access restrictions (CORBA, 8000642) (CVE-2013-2446)

  - OpenJDK: Prevent revealing the local address (Networking, 8001318) (CVE-2013-2447)

  - OpenJDK: Better access restrictions (Sound, 8006328) (CVE-2013-2448)

  - OpenJDK: GnomeFileTypeDetector path access check (Libraries, 8004288) (CVE-2013-2449)

  - OpenJDK: ObjectStreamClass circular reference denial of service (Serialization, 8000638) (CVE-2013-2450)

  - OpenJDK: exclusive port binding (Networking, 7170730) (CVE-2013-2451)

  - OpenJDK: Unique VMIDs (Libraries, 8001033) (CVE-2013-2452)

  - OpenJDK: MBeanServer Introspector package access (JMX, 8008124) (CVE-2013-2453)

  - OpenJDK: SerialJavaObject package restriction (JDBC, 8009554) (CVE-2013-2454)

  - OpenJDK: getEnclosing* checks (Libraries, 8007812) (CVE-2013-2455)

  - OpenJDK: ObjectOutputStream access checks (Serialization, 8008132) (CVE-2013-2456)

  - OpenJDK: Proper class checking (JMX, 8008120) (CVE-2013-2457)

  - OpenJDK: Method handles (Libraries, 8009424) (CVE-2013-2458)

  - OpenJDK: Various AWT integer overflow checks (AWT, 8009071) (CVE-2013-2459)

  - OpenJDK: tracing insufficient access checks (Serviceability, 8010209) (CVE-2013-2460)

  - OpenJDK: Missing check for valid DOMCanonicalizationMethod canonicalization algorithm (Libraries, 8014281)     (CVE-2013-2461)

  - OpenJDK: Incorrect image attribute verification (2D, 8012438) (CVE-2013-2463)

  - Oracle JDK: unspecified vulnerability fixed in 7u25 (2D) (CVE-2013-2464)

  - OpenJDK: Incorrect image channel verification (2D, 8012597) (CVE-2013-2465)

  - OpenJDK: Incorrect image layout verification (2D, 8012601) (CVE-2013-2469)

  - OpenJDK: ImagingLib byte lookup processing (2D, 8011243) (CVE-2013-2470)

  - OpenJDK: Incorrect IntegerComponentRaster size checks (2D, 8011248) (CVE-2013-2471)

  - OpenJDK: Incorrect ShortBandedRaster size checks (2D, 8011253) (CVE-2013-2472)

  - OpenJDK: Incorrect ByteBandedRaster size checks (2D, 8011257) (CVE-2013-2473)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host has a version of IBM Notes (formerly Lotus Notes) 8.5.x prior to 8.5.3 Fix Pack 5 installed.  It is, therefore, reportedly affected by the following vulnerabilities :

  - The included version of the IBM Java SDK contains a     version of the IBM JRE that contains numerous security     issues. (CVE-2013-0809, CVE-2013-1493, CVE-2013-2436,     CVE-2013-2455, CVE-2013-3006, CVE-2013-3007,     CVE-2013-3008, CVE-2013-3009, CVE-2013-3010,     CVE-2013-3011, CVE-2013-3012)

  - Note also that fixes in the Oracle Java CPUs for     February, April and June 2013 are included in the     fixed IBM Java release, which is included in the     fixed IBM Notes release.
    (CVE-2012-1541, CVE-2012-3213, CVE-2012-3342,     CVE-2013-0351, CVE-2013-0401, CVE-2013-0402,     CVE-2013-0409, CVE-2013-0419, CVE-2013-0423,     CVE-2013-0424, CVE-2013-0425, CVE-2013-0426,     CVE-2013-0427, CVE-2013-0428, CVE-2013-0429,     CVE-2013-0430, CVE-2013-0431, CVE-2013-0432,     CVE-2013-0433, CVE-2013-0434, CVE-2013-0435,     CVE-2013-0437, CVE-2013-0438, CVE-2013-0440,     CVE-2013-0441, CVE-2013-0442, CVE-2013-0443,     CVE-2013-0444, CVE-2013-0445, CVE-2013-0446,     CVE-2013-0448, CVE-2013-0449, CVE-2013-0450,     CVE-2013-1473, CVE-2013-1475, CVE-2013-1476,     CVE-2013-1478, CVE-2013-1479, CVE-2013-1480,     CVE-2013-1481, CVE-2013-1488, CVE-2013-1489,     CVE-2013-1491, CVE-2013-1500, CVE-2013-1518,     CVE-2013-1537, CVE-2013-1540, CVE-2013-1557,     CVE-2013-1558, CVE-2013-1561, CVE-2013-1563,     CVE-2013-1564, CVE-2013-1569, CVE-2013-1571,     CVE-2013-2383, CVE-2013-2384, CVE-2013-2394,     CVE-2013-2400, CVE-2013-2407, CVE-2013-2412,     CVE-2013-2414, CVE-2013-2415, CVE-2013-2416,     CVE-2013-2417, CVE-2013-2418, CVE-2013-2419,     CVE-2013-2420, CVE-2013-2421, CVE-2013-2422,     CVE-2013-2423, CVE-2013-2424, CVE-2013-2425,     CVE-2013-2426, CVE-2013-2427, CVE-2013-2428,     CVE-2013-2429, CVE-2013-2430, CVE-2013-2431,     CVE-2013-2432, CVE-2013-2433, CVE-2013-2434,     CVE-2013-2435, CVE-2013-2437, CVE-2013-2438,     CVE-2013-2439, CVE-2013-2440, CVE-2013-2442,     CVE-2013-2443, CVE-2013-2444, CVE-2013-2445,     CVE-2013-2446, CVE-2013-2447, CVE-2013-2448,     CVE-2013-2449, CVE-2013-2450, CVE-2013-2451,     CVE-2013-2452, CVE-2013-2453, CVE-2013-2454,     CVE-2013-2456, CVE-2013-2457, CVE-2013-2458,     CVE-2013-2459, CVE-2013-2460, CVE-2013-2461,     CVE-2013-2462, CVE-2013-2463, CVE-2013-2464,     CVE-2013-2465, CVE-2013-2466, CVE-2013-2467,     CVE-2013-2468, CVE-2013-2469, CVE-2013-2470,     CVE-2013-2471, CVE-2013-2472, CVE-2013-2473,     CVE-2013-3743, CVE-2013-3744, CVE-2013-4002)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
66948	RHEL 5 / 6 : java-1.7.0-oracle (RHSA-2013:0963)	Nessus	Red Hat Local Security Checks	2013/6/21	2024/4/21	low
70744	IBM Notes 8.5.x < 8.5.3 FP5 Multiple Vulnerabilities	Nessus	Windows	2013/11/4	2022/5/25	critical

检测

插件搜索

low

critical