Red Hat Security AdvisoryRHSA-2008:0790
java-1.5.0-ibm security update
Released 2008-07-31 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 4 Extras java-1.5.0-ibm-1:1.5.0.8-1jpp.1.el4, java-1.5.0-ibm-1:1.5.0.8-1jpp.1.el4.i386, java-1.5.0-ibm-demo-1:1.5.0.8-1jpp.1.el4 +9
- Red Hat Enterprise Linux AS version 4 Extras java-1.5.0-ibm-1:1.5.0.8-1jpp.1.el4, java-1.5.0-ibm-1:1.5.0.8-1jpp.1.el4.i386, java-1.5.0-ibm-1:1.5.0.8-1jpp.1.el4.ppc +17
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.5.0-ibm-1:1.5.0.8-1jpp.1.el5, java-1.5.0-ibm-1:1.5.0.8-1jpp.1.el5.i386, java-1.5.0-ibm-accessibility-1:1.5.0.8-1jpp.1.el5 +11
- Red Hat Enterprise Linux ES version 4 Extras java-1.5.0-ibm-1:1.5.0.8-1jpp.1.el4, java-1.5.0-ibm-1:1.5.0.8-1jpp.1.el4.i386, java-1.5.0-ibm-demo-1:1.5.0.8-1jpp.1.el4 +9
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.5.0-ibm-1:1.5.0.8-1jpp.1.el5, java-1.5.0-ibm-1:1.5.0.8-1jpp.1.el5.i386, java-1.5.0-ibm-1:1.5.0.8-1jpp.1.el5.ppc +20
- Red Hat Enterprise Linux WS version 4 Extras java-1.5.0-ibm-1:1.5.0.8-1jpp.1.el4, java-1.5.0-ibm-1:1.5.0.8-1jpp.1.el4.i386, java-1.5.0-ibm-demo-1:1.5.0.8-1jpp.1.el4 +9
Fixes 7 records
Priority MEDIUM 64
Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.25727 · Published 2008-07-09 · Fixed CWE-264
Priority MEDIUM 52
Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create or delete arbitrary files via an untrusted application, aka CR 6…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06443 · Published 2008-07-09 · Fixed CWE-264
Priority MEDIUM 50
Multiple buffer overflows in Sun Java Web Start in JDK and JRE 6 before Update 4, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allow context-dependent attackers to gain privileges via an untrus…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.04267 · Published 2008-07-09 · Fixed CWE-119
Priority MEDIUM 50
Buffer overflow in Sun Java Runtime Environment (JRE) in JDK and JRE 5.0 before Update 10, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allows context-dependent attackers to gain privileges vi…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.04614 · Published 2008-07-09 · Fixed CWE-119
Priority LOW 36
Multiple unspecified vulnerabilities in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allo…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03597 · Published 2008-07-09 · Fixed CWE-264
Priority LOW 28
Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to obtain sensitive information…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03058 · Published 2008-07-09 · Fixed CWE-200
Priority LOW 26
Unspecified vulnerability in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier allows remote attackers to access URLs via unknown vectors involving process…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03342 · Published 2008-07-09 · Fixed CWE-264
THREATIST.IORead the docs