Red Hat Security Advisory

RHSA-2008:0638

Red Hat Network Satellite Server IBM Java Runtime security update

Released 2008-08-13 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Satellite 5.1 (RHEL v.4 AS) java-1.5.0-ibm-1:1.5.0.8-1jpp.1.el4, java-1.5.0-ibm-devel-1:1.5.0.8-1jpp.1.el4

Fixes 17 records

TI-2008-02976 CVE-2008-3112 · GHSA-f5xr-w782-5rg9

Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7…

MEDIUM 64

Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.25727 Published 2008-07-09 Fixed CWE-264

TI-2008-01142 CVE-2008-1190 · GHSA-m6g6-6pj7-xcc2

Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier…

MEDIUM 57

Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to gain privileges via an untrusted application,…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.16899 Published 2008-03-06 Fixed CWE-264

TI-2008-01145 CVE-2008-1193 · GHSA-85h9-hqf9-8hc6

Unspecified vulnerability in Java Runtime Environment Image Parsing Library in Sun JDK…

MEDIUM 54

Unspecified vulnerability in Java Runtime Environment Image Parsing Library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allows remote attackers to gain privileges via an untrusted applicatio…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.12501 Published 2008-03-06 Fixed CWE-264

TI-2008-01140 CVE-2008-1188 · GHSA-x67m-cmr9-2j82

Multiple buffer overflows in the useEncodingDecl function in Java Web Start in Sun JDK…

MEDIUM 54

Multiple buffer overflows in the useEncodingDecl function in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allow remote attackers to execute arbitrary code via a JNLP file with…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.1248 Published 2008-03-06 Fixed CWE-119

TI-2008-02977 CVE-2008-3113 · GHSA-32mg-gg62-gfq3

Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and…

MEDIUM 52

Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create or delete arbitrary files via an untrusted application, aka CR 6…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06443 Published 2008-07-09 Fixed CWE-264

TI-2008-02975 CVE-2008-3111 · GHSA-984m-qj9q-3464

Multiple buffer overflows in Sun Java Web Start in JDK and JRE 6 before Update 4, JDK and…

MEDIUM 50

Multiple buffer overflows in Sun Java Web Start in JDK and JRE 6 before Update 4, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allow context-dependent attackers to gain privileges via an untrus…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04267 Published 2008-07-09 Fixed CWE-119

TI-2008-02972 CVE-2008-3108 · GHSA-8wxg-8gj7-8j93

Buffer overflow in Sun Java Runtime Environment (JRE) in JDK and JRE 5.0 before Update…

MEDIUM 50

Buffer overflow in Sun Java Runtime Environment (JRE) in JDK and JRE 5.0 before Update 10, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allows context-dependent attackers to gain privileges vi…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04614 Published 2008-07-09 Fixed CWE-119

TI-2008-01147 CVE-2008-1195 · GHSA-hqpc-pj99-85gx

Unspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and…

MEDIUM 49

Unspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to access arbitrary network serv…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05684 Published 2008-03-06 Fixed CWE-254

TI-2008-00625 CVE-2008-0657 · GHSA-2jgq-w4vv-qrcg

Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6…

MEDIUM 48

Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) app…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02839 Published 2008-02-07 Fixed CWE-264

TI-2008-01148 CVE-2008-1196 · GHSA-qjqr-g4rx-gjw2

Stack-based buffer overflow in Java Web Start (javaws.exe) in Sun JDK and JRE 6 Update 4…

MEDIUM 40

Stack-based buffer overflow in Java Web Start (javaws.exe) in Sun JDK and JRE 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to execute arbitrary code…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.07255 Published 2008-03-06 Fixed CWE-119

TI-2008-01141 CVE-2008-1189 · GHSA-hppm-r8m5-wmwp

Buffer overflow in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update…

MEDIUM 40

Buffer overflow in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.07186 Published 2008-03-06 Fixed CWE-119

TI-2008-01139 CVE-2008-1187 · GHSA-8m64-fhc9-rr82

Unspecified vulnerability in Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and…

LOW 38

Unspecified vulnerability in Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to cause a denial of service (JRE crash)…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.05422 Published 2008-03-06 Fixed CWE-264

TI-2008-01144 CVE-2008-1192 · GHSA-p6r7-6fjq-fqmc

Unspecified vulnerability in the Java Plug-in for Sun JDK and JRE 6 Update 4 and earlier…

LOW 37

Unspecified vulnerability in the Java Plug-in for Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier, and 1.3.1_21 and earlier; allows remote attackers to bypass t…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04458 Published 2008-03-06 Fixed CWE-254

TI-2008-02968 CVE-2008-3104 · GHSA-6cq4-9r5q-c4x7

Multiple unspecified vulnerabilities in Sun Java Runtime Environment (JRE) in JDK and JRE…

LOW 36

Multiple unspecified vulnerabilities in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allo…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03597 Published 2008-07-09 Fixed CWE-264

TI-2008-02978 CVE-2008-3114 · GHSA-82jf-vh7j-48rv

Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and…

LOW 28

Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to obtain sensitive information…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03058 Published 2008-07-09 Fixed CWE-200

TI-2008-01146 CVE-2008-1194 · GHSA-9778-59qc-w9g9

Multiple unspecified vulnerabilities in the color management library in Sun JDK and JRE 6…

LOW 27

Multiple unspecified vulnerabilities in the color management library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allows remote attackers to cause a denial of service (crash) via unknown vect…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04234 Published 2008-03-06 Fixed

TI-2008-02970 CVE-2008-3106 · GHSA-vjpx-8gm7-4pxc

Unspecified vulnerability in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6…

LOW 26

Unspecified vulnerability in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier allows remote attackers to access URLs via unknown vectors involving process…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03342 Published 2008-07-09 Fixed CWE-264