Red Hat Security AdvisoryRHSA-2008:0595
java-1.5.0-sun security update
Released 2008-07-14 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 4 Extras java-1.5.0-sun-1.5.0.16-1jpp.2.el4, java-1.5.0-sun-1.5.0.16-1jpp.2.el4.i586, java-1.5.0-sun-demo-1.5.0.16-1jpp.2.el4 +8
- Red Hat Enterprise Linux AS version 4 Extras java-1.5.0-sun-1.5.0.16-1jpp.2.el4, java-1.5.0-sun-1.5.0.16-1jpp.2.el4.i586, java-1.5.0-sun-demo-1.5.0.16-1jpp.2.el4 +8
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.5.0-sun-1.5.0.16-1jpp.2.el5, java-1.5.0-sun-1.5.0.16-1jpp.2.el5.i586, java-1.5.0-sun-demo-1.5.0.16-1jpp.2.el5 +8
- Red Hat Enterprise Linux ES version 4 Extras java-1.5.0-sun-1.5.0.16-1jpp.2.el4, java-1.5.0-sun-1.5.0.16-1jpp.2.el4.i586, java-1.5.0-sun-demo-1.5.0.16-1jpp.2.el4 +8
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.5.0-sun-1.5.0.16-1jpp.2.el5, java-1.5.0-sun-1.5.0.16-1jpp.2.el5.i586, java-1.5.0-sun-demo-1.5.0.16-1jpp.2.el5 +8
- Red Hat Enterprise Linux WS version 4 Extras java-1.5.0-sun-1.5.0.16-1jpp.2.el4, java-1.5.0-sun-1.5.0.16-1jpp.2.el4.i586, java-1.5.0-sun-demo-1.5.0.16-1jpp.2.el4 +8
Fixes 7 records
Priority MEDIUM 64
Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.25727 · Published 2008-07-09 · Fixed CWE-264
Priority MEDIUM 52
Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create or delete arbitrary files via an untrusted application, aka CR 6…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06443 · Published 2008-07-09 · Fixed CWE-264
Priority MEDIUM 50
Multiple buffer overflows in Sun Java Web Start in JDK and JRE 6 before Update 4, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allow context-dependent attackers to gain privileges via an untrus…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.04267 · Published 2008-07-09 · Fixed CWE-119
Priority MEDIUM 49
Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent at…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03644 · Published 2008-07-09 · Fixed CWE-264
Priority MEDIUM 48
Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier, when local monitor…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05066 · Published 2008-07-09 · Fixed CWE-264
Priority LOW 36
Multiple unspecified vulnerabilities in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allo…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03597 · Published 2008-07-09 · Fixed CWE-264
Priority LOW 28
Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to obtain sensitive information…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03058 · Published 2008-07-09 · Fixed CWE-200
THREATIST.IORead the docs