Read the docs
TI-2006-06489 Aliases CVE-2006-6745GHSA-xhqx-5mvc-wmcf

Multiple unspecified vulnerabilities in Sun Java Development Kit (JDK) and Java Runtime…

Priority MEDIUM 46Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

Multiple unspecified vulnerabilities in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, and Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, allow attackers to develop Java applets or applications that are able to gain privileges, related to serialization in JRE.

Why it matters now

EPSS 0.03239 88th percentileScored 2026-11-07
Fix Fixed Red Hat: 2 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 46

CPEVersionsRoleVendor
cpe:2.3:a:sun:j2se:1.4:*:sdk:*:*:*:*:*1.4VulnerableSun
cpe:2.3:a:sun:j2se:1.4.1:*:sdk:*:*:*:*:*1.4.1VulnerableSun
cpe:2.3:a:sun:j2se:1.4.2:*:sdk:*:*:*:*:*1.4.2VulnerableSun
cpe:2.3:a:sun:j2se:1.4.2_01:*:sdk:*:*:*:*:*1.4.2_01VulnerableSun
cpe:2.3:a:sun:j2se:1.4.2_02:*:sdk:*:*:*:*:*1.4.2_02VulnerableSun
cpe:2.3:a:sun:j2se:1.4.2_03:*:sdk:*:*:*:*:*1.4.2_03VulnerableSun
cpe:2.3:a:sun:j2se:1.4.2_04:*:sdk:*:*:*:*:*1.4.2_04VulnerableSun
cpe:2.3:a:sun:j2se:1.4.2_05:*:sdk:*:*:*:*:*1.4.2_05VulnerableSun
cpe:2.3:a:sun:j2se:1.4.2_06:*:sdk:*:*:*:*:*1.4.2_06VulnerableSun
cpe:2.3:a:sun:j2se:1.4.2_07:*:sdk:*:*:*:*:*1.4.2_07VulnerableSun
  • cpe:2.3:a:sun:j2se:1.4:*:sdk:*:*:*:*:* Versions 1.4 Vulnerable ·Sun
  • cpe:2.3:a:sun:j2se:1.4.1:*:sdk:*:*:*:*:* Versions 1.4.1 Vulnerable ·Sun
  • cpe:2.3:a:sun:j2se:1.4.2:*:sdk:*:*:*:*:* Versions 1.4.2 Vulnerable ·Sun
  • cpe:2.3:a:sun:j2se:1.4.2_01:*:sdk:*:*:*:*:* Versions 1.4.2_01 Vulnerable ·Sun
  • cpe:2.3:a:sun:j2se:1.4.2_02:*:sdk:*:*:*:*:* Versions 1.4.2_02 Vulnerable ·Sun
  • cpe:2.3:a:sun:j2se:1.4.2_03:*:sdk:*:*:*:*:* Versions 1.4.2_03 Vulnerable ·Sun
  • cpe:2.3:a:sun:j2se:1.4.2_04:*:sdk:*:*:*:*:* Versions 1.4.2_04 Vulnerable ·Sun
  • cpe:2.3:a:sun:j2se:1.4.2_05:*:sdk:*:*:*:*:* Versions 1.4.2_05 Vulnerable ·Sun
  • cpe:2.3:a:sun:j2se:1.4.2_06:*:sdk:*:*:*:*:* Versions 1.4.2_06 Vulnerable ·Sun
  • cpe:2.3:a:sun:j2se:1.4.2_07:*:sdk:*:*:*:*:* Versions 1.4.2_07 Vulnerable ·Sun
Show 36 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:sun:j2se:1.4.2_08:*:*:*:*:*:*:*1.4.2_08VulnerableSun
cpe:2.3:a:sun:j2se:1.4.2_09:*:*:*:*:*:*:*1.4.2_09VulnerableSun
cpe:2.3:a:sun:j2se:1.4.2_10:*:*:*:*:*:*:*1.4.2_10VulnerableSun
cpe:2.3:a:sun:j2se:1.4.2_11:*:*:*:*:*:*:*1.4.2_11VulnerableSun
cpe:2.3:a:sun:j2se:1.4.2_12:*:*:*:*:*:*:*1.4.2_12VulnerableSun
cpe:2.3:a:sun:j2se:5.0:*:sdk:*:*:*:*:*5.0VulnerableSun
cpe:2.3:a:sun:j2se:5.0_update1:*:sdk:*:*:*:*:*5.0_update1VulnerableSun
cpe:2.3:a:sun:j2se:5.0_update2:*:sdk:*:*:*:*:*5.0_update2VulnerableSun
cpe:2.3:a:sun:j2se:5.0_update3:*:*:*:*:*:*:*5.0_update3VulnerableSun
cpe:2.3:a:sun:j2se:5.0_update4:*:*:*:*:*:*:*5.0_update4VulnerableSun
cpe:2.3:a:sun:j2se:5.0_update5:*:*:*:*:*:*:*5.0_update5VulnerableSun
cpe:2.3:a:sun:j2se:5.0_update6:*:*:*:*:*:*:*5.0_update6VulnerableSun
cpe:2.3:a:sun:j2se:5.0_update7:*:*:*:*:*:*:*5.0_update7VulnerableSun
cpe:2.3:a:sun:jre:1.4.1:*:*:*:*:*:*:*1.4.1VulnerableSun
cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*1.4.2VulnerableSun
cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*1.4.2_1VulnerableSun
cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*1.4.2_2VulnerableSun
cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*1.4.2_3VulnerableSun
cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*1.4.2_4VulnerableSun
cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*1.4.2_5VulnerableSun
cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*1.4.2_6VulnerableSun
cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*1.4.2_7VulnerableSun
cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*1.4.2_8VulnerableSun
cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*1.4.2_9VulnerableSun
cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*1.4.2_10VulnerableSun
cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*1.4.2_11VulnerableSun
cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*1.4.2_12VulnerableSun
cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*1.4.2_13VulnerableSun
cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*1.5.0VulnerableSun
cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*1.5.0 update1VulnerableSun
cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*1.5.0 update2VulnerableSun
cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*1.5.0 update3VulnerableSun
cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*1.5.0 update4VulnerableSun
cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*1.5.0 update5VulnerableSun
cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*1.5.0 update6VulnerableSun
cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*1.5.0 update7VulnerableSun
  • cpe:2.3:a:sun:j2se:1.4.2_08:*:*:*:*:*:*:* Versions 1.4.2_08 Vulnerable ·Sun
  • cpe:2.3:a:sun:j2se:1.4.2_09:*:*:*:*:*:*:* Versions 1.4.2_09 Vulnerable ·Sun
  • cpe:2.3:a:sun:j2se:1.4.2_10:*:*:*:*:*:*:* Versions 1.4.2_10 Vulnerable ·Sun
  • cpe:2.3:a:sun:j2se:1.4.2_11:*:*:*:*:*:*:* Versions 1.4.2_11 Vulnerable ·Sun
  • cpe:2.3:a:sun:j2se:1.4.2_12:*:*:*:*:*:*:* Versions 1.4.2_12 Vulnerable ·Sun
  • cpe:2.3:a:sun:j2se:5.0:*:sdk:*:*:*:*:* Versions 5.0 Vulnerable ·Sun
  • cpe:2.3:a:sun:j2se:5.0_update1:*:sdk:*:*:*:*:* Versions 5.0_update1 Vulnerable ·Sun
  • cpe:2.3:a:sun:j2se:5.0_update2:*:sdk:*:*:*:*:* Versions 5.0_update2 Vulnerable ·Sun
  • cpe:2.3:a:sun:j2se:5.0_update3:*:*:*:*:*:*:* Versions 5.0_update3 Vulnerable ·Sun
  • cpe:2.3:a:sun:j2se:5.0_update4:*:*:*:*:*:*:* Versions 5.0_update4 Vulnerable ·Sun
  • cpe:2.3:a:sun:j2se:5.0_update5:*:*:*:*:*:*:* Versions 5.0_update5 Vulnerable ·Sun
  • cpe:2.3:a:sun:j2se:5.0_update6:*:*:*:*:*:*:* Versions 5.0_update6 Vulnerable ·Sun
  • cpe:2.3:a:sun:j2se:5.0_update7:*:*:*:*:*:*:* Versions 5.0_update7 Vulnerable ·Sun
  • cpe:2.3:a:sun:jre:1.4.1:*:*:*:*:*:*:* Versions 1.4.1 Vulnerable ·Sun
  • cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·Sun
  • cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:* Versions 1.4.2_1 Vulnerable ·Sun
  • cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:* Versions 1.4.2_2 Vulnerable ·Sun
  • cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:* Versions 1.4.2_3 Vulnerable ·Sun
  • cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:* Versions 1.4.2_4 Vulnerable ·Sun
  • cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:* Versions 1.4.2_5 Vulnerable ·Sun
  • cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:* Versions 1.4.2_6 Vulnerable ·Sun
  • cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:* Versions 1.4.2_7 Vulnerable ·Sun
  • cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:* Versions 1.4.2_8 Vulnerable ·Sun
  • cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:* Versions 1.4.2_9 Vulnerable ·Sun
  • cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:* Versions 1.4.2_10 Vulnerable ·Sun
  • cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:* Versions 1.4.2_11 Vulnerable ·Sun
  • cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:* Versions 1.4.2_12 Vulnerable ·Sun
  • cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:* Versions 1.4.2_13 Vulnerable ·Sun
  • cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:* Versions 1.5.0 Vulnerable ·Sun
  • cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:* Versions 1.5.0 update1 Vulnerable ·Sun
  • cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:* Versions 1.5.0 update2 Vulnerable ·Sun
  • cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:* Versions 1.5.0 update3 Vulnerable ·Sun
  • cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:* Versions 1.5.0 update4 Vulnerable ·Sun
  • cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:* Versions 1.5.0 update5 Vulnerable ·Sun
  • cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:* Versions 1.5.0 update6 Vulnerable ·Sun
  • cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:* Versions 1.5.0 update7 Vulnerable ·Sun

Remediation

Red Hat 2 advisories

  • RHSA-2007:0073 Released 2007-02-09 · Red Hat rating Critical
    java-1.5.0-ibm security update
    • Red Hat Desktop version 4 Extras java-1.5.0-ibm-1:1.5.0.3-1jpp.3.el4, java-1.5.0-ibm-1:1.5.0.3-1jpp.3.el4.i386, java-1.5.0-ibm-demo-1:1.5.0.3-1jpp.3.el4 +9
    • Red Hat Enterprise Linux AS version 4 Extras java-1.5.0-ibm-1:1.5.0.3-1jpp.3.el4, java-1.5.0-ibm-1:1.5.0.3-1jpp.3.el4.i386, java-1.5.0-ibm-1:1.5.0.3-1jpp.3.el4.ppc +17
    • Red Hat Enterprise Linux ES version 4 Extras java-1.5.0-ibm-1:1.5.0.3-1jpp.3.el4, java-1.5.0-ibm-1:1.5.0.3-1jpp.3.el4.i386, java-1.5.0-ibm-demo-1:1.5.0.3-1jpp.3.el4 +9
    • Red Hat Enterprise Linux WS version 4 Extras java-1.5.0-ibm-1:1.5.0.3-1jpp.3.el4, java-1.5.0-ibm-1:1.5.0.3-1jpp.3.el4.i386, java-1.5.0-ibm-demo-1:1.5.0.3-1jpp.3.el4 +9
  • RHSA-2007:0062 Released 2007-02-07 · Red Hat rating Critical
    java-1.4.2-ibm security update
    • Red Hat Desktop version 3 Extras java-1.4.2-ibm-1.4.2.7-1jpp.4.el3, java-1.4.2-ibm-1.4.2.7-1jpp.4.el3.i386, java-1.4.2-ibm-demo-1.4.2.7-1jpp.4.el3 +7
    • Red Hat Desktop version 4 Extras java-1.4.2-ibm-1.4.2.7-1jpp.4.el4, java-1.4.2-ibm-1.4.2.7-1jpp.4.el4.i386, java-1.4.2-ibm-demo-1.4.2.7-1jpp.4.el4 +9
    • Red Hat Enterprise Linux AS version 3 Extras java-1.4.2-ibm-1.4.2.7-1jpp.4.el3, java-1.4.2-ibm-1.4.2.7-1jpp.4.el3.i386, java-1.4.2-ibm-1.4.2.7-1jpp.4.el3.ia64 +17
    • Red Hat Enterprise Linux AS version 4 Extras java-1.4.2-ibm-1.4.2.7-1jpp.4.el4, java-1.4.2-ibm-1.4.2.7-1jpp.4.el4.i386, java-1.4.2-ibm-1.4.2.7-1jpp.4.el4.ia64 +20
    • Red Hat Enterprise Linux ES version 3 Extras java-1.4.2-ibm-1.4.2.7-1jpp.4.el3, java-1.4.2-ibm-1.4.2.7-1jpp.4.el3.i386, java-1.4.2-ibm-1.4.2.7-1jpp.4.el3.ia64 +11
    • Red Hat Enterprise Linux ES version 4 Extras java-1.4.2-ibm-1.4.2.7-1jpp.4.el4, java-1.4.2-ibm-1.4.2.7-1jpp.4.el4.i386, java-1.4.2-ibm-1.4.2.7-1jpp.4.el4.ia64 +13
    • Red Hat Enterprise Linux WS version 3 Extras java-1.4.2-ibm-1.4.2.7-1jpp.4.el3, java-1.4.2-ibm-1.4.2.7-1jpp.4.el3.i386, java-1.4.2-ibm-1.4.2.7-1jpp.4.el3.ia64 +11
    • Red Hat Enterprise Linux WS version 4 Extras java-1.4.2-ibm-1.4.2.7-1jpp.4.el4, java-1.4.2-ibm-1.4.2.7-1jpp.4.el4.i386, java-1.4.2-ibm-1.4.2.7-1jpp.4.el4.ia64 +13

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2006-6745
  2. 2026-10-03 Alias added: GHSA-xhqx-5mvc-wmcf
  3. 2026-10-30 Affected versions changed · Red Hat

References

Advisory 14

Other 8

  • TI-2005-00780 Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06 allows… CVSS 2.0HIGH 10.0
  • TI-2005-00376 Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06, on Mac… CVSS 2.0HIGH 7.5
  • TI-2006-04155 The Java Plug-in J2SE 1.3.0_02 through 5.0 Update 5, and Java Web Start 1.0 through 1.2… CVSS 2.0MEDIUM 5.0
  • TI-2005-01868 Unspecified vulnerability in Java 2 Platform, Standard Edition (J2SE) 5.0 and 5.0 Update… CVSS 2.0MEDIUM 5.1
  • TI-2005-01867 Java Web Start in Java 2 Platform Standard Edition (J2SE) 5.0 and 5.0 Update 1 allows… CVSS 2.0MEDIUM 5.1
  • TI-2006-00592 Unspecified vulnerability in Java Web Start after 1.0.1_02, as used in J2SE 5.0 Update 5… CVSS 2.0MEDIUM 4.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences