Red Hat Security Advisory

RHSA-2008:0132

java-1.4.2-ibm security update

Released 2008-02-14 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Desktop version 3 Extras java-1.4.2-ibm-1.4.2.10-1jpp.2.el3, java-1.4.2-ibm-1.4.2.10-1jpp.2.el3.i386, java-1.4.2-ibm-demo-1.4.2.10-1jpp.2.el3 +7
Red Hat Desktop version 4 Extras java-1.4.2-ibm-1.4.2.10-1jpp.2.el4, java-1.4.2-ibm-1.4.2.10-1jpp.2.el4.i386, java-1.4.2-ibm-demo-1.4.2.10-1jpp.2.el4 +9
Red Hat Enterprise Linux AS version 3 Extras java-1.4.2-ibm-1.4.2.10-1jpp.2.el3, java-1.4.2-ibm-1.4.2.10-1jpp.2.el3.i386, java-1.4.2-ibm-1.4.2.10-1jpp.2.el3.ia64 +17
Red Hat Enterprise Linux AS version 4 Extras java-1.4.2-ibm-1.4.2.10-1jpp.2.el4, java-1.4.2-ibm-1.4.2.10-1jpp.2.el4.i386, java-1.4.2-ibm-1.4.2.10-1jpp.2.el4.ia64 +20
Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.4.2-ibm-1.4.2.10-1jpp.2.el5, java-1.4.2-ibm-1.4.2.10-1jpp.2.el5.i386, java-1.4.2-ibm-demo-1.4.2.10-1jpp.2.el5 +9
Red Hat Enterprise Linux ES version 3 Extras java-1.4.2-ibm-1.4.2.10-1jpp.2.el3, java-1.4.2-ibm-1.4.2.10-1jpp.2.el3.i386, java-1.4.2-ibm-1.4.2.10-1jpp.2.el3.ia64 +11
Red Hat Enterprise Linux ES version 4 Extras java-1.4.2-ibm-1.4.2.10-1jpp.2.el4, java-1.4.2-ibm-1.4.2.10-1jpp.2.el4.i386, java-1.4.2-ibm-1.4.2.10-1jpp.2.el4.ia64 +13
Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.4.2-ibm-1.4.2.10-1jpp.2.el5, java-1.4.2-ibm-1.4.2.10-1jpp.2.el5.i386, java-1.4.2-ibm-1.4.2.10-1jpp.2.el5.ia64 +20
Red Hat Enterprise Linux WS version 3 Extras java-1.4.2-ibm-1.4.2.10-1jpp.2.el3, java-1.4.2-ibm-1.4.2.10-1jpp.2.el3.i386, java-1.4.2-ibm-1.4.2.10-1jpp.2.el3.ia64 +11
Red Hat Enterprise Linux WS version 4 Extras java-1.4.2-ibm-1.4.2.10-1jpp.2.el4, java-1.4.2-ibm-1.4.2.10-1jpp.2.el4.i386, java-1.4.2-ibm-1.4.2.10-1jpp.2.el4.ia64 +13

Fixes 12 records

TI-2008-01142 CVE-2008-1190 · GHSA-m6g6-6pj7-xcc2

Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier…

MEDIUM 57

Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to gain privileges via an untrusted application,…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.16899 Published 2008-03-06 Fixed CWE-264

TI-2008-01147 CVE-2008-1195 · GHSA-hqpc-pj99-85gx

Unspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and…

MEDIUM 49

Unspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to access arbitrary network serv…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05684 Published 2008-03-06 Fixed CWE-254

TI-2007-04241 CVE-2007-4381 · GHSA-265x-54h3-3643

Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0…

MEDIUM 48

Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to perform unauthorized actions via an applet that g…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05424 Published 2007-08-17 Fixed

TI-2007-03588 CVE-2007-3698 · GHSA-5p3v-g8h5-7gg9

The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1 and earlier, JDK…

MEDIUM 41

The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1 and earlier, JDK and JRE 5.0 Updates 7 through 11, and SDK and JRE 1.4.2_11 through 1.4.2_14, when using JSSE for SSL/TLS support, allows remote attac…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.03822 Published 2007-07-11 Fixed

TI-2008-01141 CVE-2008-1189 · GHSA-hppm-r8m5-wmwp

Buffer overflow in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update…

MEDIUM 40

Buffer overflow in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.07186 Published 2008-03-06 Fixed CWE-119

TI-2008-01144 CVE-2008-1192 · GHSA-p6r7-6fjq-fqmc

Unspecified vulnerability in the Java Plug-in for Sun JDK and JRE 6 Update 4 and earlier…

LOW 37

Unspecified vulnerability in the Java Plug-in for Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier, and 1.3.1_21 and earlier; allows remote attackers to bypass t…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04458 Published 2008-03-06 Fixed CWE-254

TI-2007-05045 CVE-2007-5240 · GHSA-9xph-fqp4-xrxv

Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6…

LOW 28

Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier all…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02956 Published 2007-10-06 Fixed

TI-2007-05037 CVE-2007-5232 · GHSA-jx69-94fj-8m45

Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0…

LOW 25

Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when applet caching is enabled, all…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.03418 Published 2007-10-05 Fixed

TI-2007-05044 CVE-2007-5239 · GHSA-336j-w8p8-49cp

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and…

LOW 24

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier does not properly enforce access restrictions for un…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.02544 Published 2007-10-06 Fixed CWE-264

TI-2007-05079 CVE-2007-5274 · GHSA-8686-7jv2-5qvr

Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0…

LOW 18

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02678 Published 2007-10-08 Fixed

TI-2007-05078 CVE-2007-5273 · GHSA-7mgj-mxcg-g7rv

Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0…

LOW 18

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02678 Published 2007-10-08 Fixed

TI-2007-05043 CVE-2007-5238 · GHSA-p44h-q76r-8467

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and…

LOW 18

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier does not properly enforce access restrictions for untrusted applications, which allows…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02663 Published 2007-10-06 Fixed CWE-264