Red Hat Security AdvisoryRHSA-2008:0955
java-1.4.2-ibm security update
Released 2008-11-25 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 Extras java-1.4.2-ibm-1.4.2.12-1jpp.1.el3, java-1.4.2-ibm-1.4.2.12-1jpp.1.el3.i386, java-1.4.2-ibm-demo-1.4.2.12-1jpp.1.el3 +7
- Red Hat Desktop version 4 Extras java-1.4.2-ibm-1.4.2.12-1jpp.1.el4, java-1.4.2-ibm-1.4.2.12-1jpp.1.el4.i386, java-1.4.2-ibm-demo-1.4.2.12-1jpp.1.el4 +9
- Red Hat Enterprise Linux AS version 3 Extras java-1.4.2-ibm-1.4.2.12-1jpp.1.el3, java-1.4.2-ibm-1.4.2.12-1jpp.1.el3.i386, java-1.4.2-ibm-1.4.2.12-1jpp.1.el3.ia64 +17
- Red Hat Enterprise Linux AS version 4 Extras java-1.4.2-ibm-1.4.2.12-1jpp.1.el4, java-1.4.2-ibm-1.4.2.12-1jpp.1.el4.i386, java-1.4.2-ibm-1.4.2.12-1jpp.1.el4.ia64 +20
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.4.2-ibm-1.4.2.12-1jpp.1.el5, java-1.4.2-ibm-1.4.2.12-1jpp.1.el5.i386, java-1.4.2-ibm-demo-1.4.2.12-1jpp.1.el5 +9
- Red Hat Enterprise Linux ES version 3 Extras java-1.4.2-ibm-1.4.2.12-1jpp.1.el3, java-1.4.2-ibm-1.4.2.12-1jpp.1.el3.i386, java-1.4.2-ibm-1.4.2.12-1jpp.1.el3.ia64 +11
- Red Hat Enterprise Linux ES version 4 Extras java-1.4.2-ibm-1.4.2.12-1jpp.1.el4, java-1.4.2-ibm-1.4.2.12-1jpp.1.el4.i386, java-1.4.2-ibm-1.4.2.12-1jpp.1.el4.ia64 +13
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.4.2-ibm-1.4.2.12-1jpp.1.el5, java-1.4.2-ibm-1.4.2.12-1jpp.1.el5.i386, java-1.4.2-ibm-1.4.2.12-1jpp.1.el5.ia64 +20
- Red Hat Enterprise Linux WS version 3 Extras java-1.4.2-ibm-1.4.2.12-1jpp.1.el3, java-1.4.2-ibm-1.4.2.12-1jpp.1.el3.i386, java-1.4.2-ibm-1.4.2.12-1jpp.1.el3.ia64 +11
- Red Hat Enterprise Linux WS version 4 Extras java-1.4.2-ibm-1.4.2.12-1jpp.1.el4, java-1.4.2-ibm-1.4.2.12-1jpp.1.el4.i386, java-1.4.2-ibm-1.4.2.12-1jpp.1.el4.ia64 +13
Fixes 4 records
Priority MEDIUM 64
Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.25727 · Published 2008-07-09 · Fixed CWE-264
Priority MEDIUM 52
Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create or delete arbitrary files via an untrusted application, aka CR 6…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06443 · Published 2008-07-09 · Fixed CWE-264
Priority LOW 36
Multiple unspecified vulnerabilities in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allo…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03597 · Published 2008-07-09 · Fixed CWE-264
Priority LOW 28
Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to obtain sensitive information…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03058 · Published 2008-07-09 · Fixed CWE-200
THREATIST.IORead the docs