Red Hat Security AdvisoryRHSA-2011:1100
icedtea-web security update
Released 2011-07-27 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 6) icedtea-web-1.0.4-2.el6_1
- Red Hat Enterprise Linux Server Optional (v. 6) icedtea-web-1.0.4-2.el6_1, icedtea-web-javadoc-1.0.4-2.el6_1
Fixes 2 records
Priority LOW 35
The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to trick victims into granting acces…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02397 · Published 2014-05-14 · Fixed CWE-264
Priority LOW 28
The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to obtain the username and full path…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02497 · Published 2014-05-14 · Fixed CWE-200
