Red Hat Security AdvisoryRHSA-2008:0594
java-1.6.0-sun security update
Released 2008-07-14 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 4 Extras java-1.6.0-sun-1:1.6.0.7-1jpp.2.el4, java-1.6.0-sun-1:1.6.0.7-1jpp.2.el4.i586, java-1.6.0-sun-demo-1:1.6.0.7-1jpp.2.el4 +8
- Red Hat Enterprise Linux AS version 4 Extras java-1.6.0-sun-1:1.6.0.7-1jpp.2.el4, java-1.6.0-sun-1:1.6.0.7-1jpp.2.el4.i586, java-1.6.0-sun-demo-1:1.6.0.7-1jpp.2.el4 +8
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-sun-1:1.6.0.7-1jpp.1.el5, java-1.6.0-sun-1:1.6.0.7-1jpp.1.el5.i586, java-1.6.0-sun-demo-1:1.6.0.7-1jpp.1.el5 +8
- Red Hat Enterprise Linux ES version 4 Extras java-1.6.0-sun-1:1.6.0.7-1jpp.2.el4, java-1.6.0-sun-1:1.6.0.7-1jpp.2.el4.i586, java-1.6.0-sun-demo-1:1.6.0.7-1jpp.2.el4 +8
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-sun-1:1.6.0.7-1jpp.1.el5, java-1.6.0-sun-1:1.6.0.7-1jpp.1.el5.i586, java-1.6.0-sun-demo-1:1.6.0.7-1jpp.1.el5 +8
- Red Hat Enterprise Linux WS version 4 Extras java-1.6.0-sun-1:1.6.0.7-1jpp.2.el4, java-1.6.0-sun-1:1.6.0.7-1jpp.2.el4.i586, java-1.6.0-sun-demo-1:1.6.0.7-1jpp.2.el4 +8
Fixes 9 records
Priority MEDIUM 64
Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.25727 · Published 2008-07-09 · Fixed CWE-264
Priority MEDIUM 49
Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent at…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03644 · Published 2008-07-09 · Fixed CWE-264
Priority MEDIUM 48
Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier, when local monitor…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05066 · Published 2008-07-09 · Fixed CWE-264
Priority MEDIUM 43
Unspecified vulnerability in the JAX-WS client and service in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows remote attackers to access URLs or cause a denial of service via unknown vecto…
CVSS 2.0HIGH 8.3· Network · No auth · Interaction — · EPSS 0.04042 · Published 2008-07-09 · Fixed CWE-264
Priority LOW 39
Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows context-dependent attackers to gain privileges via an untrusted (1) application o…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03564 · Published 2008-07-09 · Fixed CWE-264
Priority LOW 36
Multiple unspecified vulnerabilities in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allo…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03597 · Published 2008-07-09 · Fixed CWE-264
Priority LOW 28
Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to obtain sensitive information…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03058 · Published 2008-07-09 · Fixed CWE-200
Priority LOW 26
Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows remote attackers to obtain sensitive information by using an applet to read infor…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03342 · Published 2008-07-09 · Fixed CWE-264
Priority LOW 26
Unspecified vulnerability in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier allows remote attackers to access URLs via unknown vectors involving process…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03342 · Published 2008-07-09 · Fixed CWE-264
THREATIST.IORead the docs