According to its version, there is at least one install of Oracle (formerly Sun) Java JRE on the remote host that is potentially under either Premier Support or Extended Support.
Note that both support programs require vendor contracts. Premier Support provides upgrades and security fixes for five years after the general availability (GA) date. Extended Support provides upgrades and security fixes for three years after Premier Support ends.
{"id": "ORACLE_JAVA_JRE_LONGTERMSUPPORT_UNIX.NASL", "vendorId": null, "type": "nessus", "bulletinFamily": "scanner", "title": "Oracle Java JRE Premier Support and Extended Support Version Detection (Unix)", "description": "According to its version, there is at least one install of Oracle (formerly Sun) Java JRE on the remote host that is potentially under either Premier Support or Extended Support.\n\nNote that both support programs require vendor contracts. Premier Support provides upgrades and security fixes for five years after the general availability (GA) date. Extended Support provides upgrades and security fixes for three years after Premier Support ends.", "published": "2013-12-16T00:00:00", "modified": "2022-04-11T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "cvss2": {}, "cvss3": {}, "href": "https://www.tenable.com/plugins/nessus/71463", "reporter": "This script is Copyright (C) 2013-2022 Tenable Network Security, Inc.", "references": ["https://www.oracle.com/support/lifetime-support/", "http://www.oracle.com/us/support/lifetime-support-068561.html", "http://www.oracle.com/technetwork/java/eol-135779.html"], "cvelist": [], "immutableFields": [], "lastseen": "2022-04-12T15:56:59", "viewCount": 85, "enchantments": {"dependencies": {}, "score": {"value": -0.1, "vector": "NONE"}, "backreferences": {"references": [{"type": "nessus", "idList": ["ORACLE_JAVA_JRE_UNSUPPORTED_UNIX.NASL"]}]}, "exploitation": null, "vulnersScore": -0.1}, "_state": {"dependencies": 0, "score": 0}, "_internal": {}, "pluginID": "71463", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(71463);\n script_version(\"1.7\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2022/04/11\");\n\n script_name(english:\"Oracle Java JRE Premier Support and Extended Support Version Detection (Unix)\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote host contains one or more versions of the Oracle Java JRE\nthat require long-term support.\");\n script_set_attribute(attribute:\"description\", value:\n\"According to its version, there is at least one install of Oracle\n(formerly Sun) Java JRE on the remote host that is potentially under\neither Premier Support or Extended Support.\n\nNote that both support programs require vendor contracts. Premier\nSupport provides upgrades and security fixes for five years after the\ngeneral availability (GA) date. Extended Support provides upgrades and\nsecurity fixes for three years after Premier Support ends.\");\n script_set_attribute(attribute:\"see_also\", value:\"http://www.oracle.com/technetwork/java/eol-135779.html\");\n script_set_attribute(attribute:\"see_also\", value:\"http://www.oracle.com/us/support/lifetime-support-068561.html\");\n script_set_attribute(attribute:\"see_also\", value:\"https://www.oracle.com/support/lifetime-support/\");\n script_set_attribute(attribute:\"solution\", value:\n\"To continue receiving updates and security fixes, contact the vendor\nregarding Premier Support or Extended Support contracts.\");\n script_set_attribute(attribute:\"agent\", value:\"unix\");\n script_set_attribute(attribute:\"risk_factor\", value:\"None\");\n\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2013/12/16\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:oracle:jre\");\n script_set_attribute(attribute:\"thorough_tests\", value:\"true\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Misc.\");\n\n script_copyright(english:\"This script is Copyright (C) 2013-2022 Tenable Network Security, Inc.\");\n\n script_dependencies(\"oracle_java_jre_unsupported_unix.nasl\");\n script_require_keys(\"Host/Java/JRE/Installed\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\n\nvar info = \"\";\n\n# This plugin should ignore non-Oracle Java installs\nvar oracle_installs = get_kb_list(\"installed_sw/Oracle Java/*/version\");\nif (empty_or_null(oracle_installs))\n audit(AUDIT_NOT_INST, \"Oracle Java JRE under Premier Support or Extended Support\");\n\n# Check Premier Support versions first\nvar jre_premier_support_installs = get_kb_list(\"Java/JRE/premier_support/*\");\nif (jre_premier_support_installs)\n{\n foreach var path_ver (keys(jre_premier_support_installs))\n {\n var pv = path_ver - \"Java/JRE/premier_support/\";\n var pieces = pregmatch(string:pv, pattern:\"^(.*)/([0-9._]+)$\");\n if (info != \"\") info += '\\n';\n if (pieces)\n info +=\n '\\n Path : ' + str_replace(string:pieces[1], find:\"\\\", replace:\"/\") +\n '\\n Version : ' + pieces[2] +\n '\\n Support dates : ' + jre_premier_support_installs[path_ver];\n }\n}\n\nif (info)\n info = '\\n' + 'The following Java JRE installs are in Premier Support status : \\n' + info + '\\n';\n\n# Check Extended Support versions next\nvar extended_info = \"\";\nvar jre_extended_support_installs = get_kb_list(\"Java/JRE/extended_support/*\");\nif (jre_extended_support_installs)\n{\n foreach var path_ver (keys(jre_extended_support_installs))\n {\n pv = path_ver - \"Java/JRE/extended_support/\";\n pieces = pregmatch(string:pv, pattern:\"^(.*)/([0-9._]+)$\");\n if (extended_info != \"\") extended_info += '\\n';\n if (pieces)\n extended_info +=\n '\\n Path : ' + str_replace(string:pieces[1], find:\"\\\", replace:\"/\") +\n '\\n Version : ' + pieces[2] +\n '\\n Support dates : ' + jre_extended_support_installs[path_ver];\n }\n}\n\nif (extended_info)\n info += '\\n' +\n '\\n' + 'The following Java JRE installs are in Extended Support status : ' +\n '\\n' +\n extended_info +\n '\\n';\n\nif (info)\n{\n var port = 0;\n\n if (report_verbosity > 0)\n security_note(port:port, extra:info);\n else\n security_note(port);\n}\nelse audit(AUDIT_NOT_INST, \"Oracle Java JRE under Premier Support or Extended Support\");\n", "naslFamily": "Misc.", "cpe": ["cpe:/a:oracle:jre"], "solution": "To continue receiving updates and security fixes, contact the vendor regarding Premier Support or Extended Support contracts.", "nessusSeverity": "Info", "cvssScoreSource": "", "vpr": {}, "exploitAvailable": false, "exploitEase": "", "patchPublicationDate": null, "vulnerabilityPublicationDate": null, "exploitableWith": []}