Red Hat Security AdvisoryRHSA-2008:0100
java-1.4.2-bea security update
Released 2008-03-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 Extras java-1.4.2-bea-1.4.2.16-1jpp.1.el3, java-1.4.2-bea-devel-1.4.2.16-1jpp.1.el3, java-1.4.2-bea-jdbc-1.4.2.16-1jpp.1.el3
- Red Hat Enterprise Linux AS version 3 Extras java-1.4.2-bea-1.4.2.16-1jpp.1.el3, java-1.4.2-bea-1.4.2.16-1jpp.1.el3.ia64, java-1.4.2-bea-devel-1.4.2.16-1jpp.1.el3 +3
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.4.2-bea-1.4.2.16-1jpp.1.el5, java-1.4.2-bea-demo-1.4.2.16-1jpp.1.el5, java-1.4.2-bea-devel-1.4.2.16-1jpp.1.el5 +3
- Red Hat Enterprise Linux ES version 3 Extras java-1.4.2-bea-1.4.2.16-1jpp.1.el3, java-1.4.2-bea-1.4.2.16-1jpp.1.el3.ia64, java-1.4.2-bea-devel-1.4.2.16-1jpp.1.el3 +3
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.4.2-bea-1.4.2.16-1jpp.1.el5, java-1.4.2-bea-1.4.2.16-1jpp.1.el5.ia64, java-1.4.2-bea-demo-1.4.2.16-1jpp.1.el5 +8
- Red Hat Enterprise Linux WS version 3 Extras java-1.4.2-bea-1.4.2.16-1jpp.1.el3, java-1.4.2-bea-1.4.2.16-1jpp.1.el3.ia64, java-1.4.2-bea-devel-1.4.2.16-1jpp.1.el3 +3
Fixes 8 records
Priority MEDIUM 48
Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to perform unauthorized actions via an applet that g…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05424 · Published 2007-08-17 · Fixed
Priority MEDIUM 48
Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.18185 · Published 2007-05-22 · Fixed CWE-189
Priority MEDIUM 41
The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1 and earlier, JDK and JRE 5.0 Updates 7 through 11, and SDK and JRE 1.4.2_11 through 1.4.2_14, when using JSSE for SSL/TLS support, allows remote attac…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.03822 · Published 2007-07-11 · Fixed
Priority LOW 28
Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier all…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02956 · Published 2007-10-06 · Fixed
Priority LOW 26
The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03485 · Published 2007-05-22 · Fixed CWE-399
Priority LOW 25
Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when applet caching is enabled, all…
CVSS 2.0MEDIUM 4.0· Network · No auth · Interaction — · EPSS 0.03418 · Published 2007-10-05 · Fixed
Priority LOW 24
Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier does not properly enforce access restrictions for un…
CVSS 2.0MEDIUM 4.0· Network · No auth · Interaction — · EPSS 0.02544 · Published 2007-10-06 · Fixed CWE-264
Priority LOW 18
Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when an HTTP proxy server is used,…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.02678 · Published 2007-10-08 · Fixed
THREATIST.IORead the docs