SLES11: Security update for IBM Java 1.6.0
🗓️ 11 Nov 2009 00:00:00Reported by Copyright (C) 2009 E-Soft Inc.Type
openvas🔗 plugins.openvas.org👁 39 Views
| Reporter | Title | Published | Views | Family All 1080 |
|---|---|---|---|---|
| Java Web Start Buffer unpack200 processing integer overflow (6830335) | 14 Jan 201016:32 | – | redhat | |
| JRE applet launcher vulnerability | 14 Jan 201016:32 | – | redhat | |
| Moderate: Red Hat Security Advisory: xerces-j2 security update | 8 Jun 201114:36 | – | redhat | |
| JDK: XML parsing Denial-Of-Service (6845701) | 8 Jun 201114:36 | – | redhat | |
| Moderate: Red Hat Security Advisory: JBoss Operations Network 3.1.0 update | 12 Jun 201223:19 | – | redhat | |
| JDK: XML parsing Denial-Of-Service (6845701) | 12 Jun 201223:19 | – | redhat | |
| Important: Red Hat Security Advisory: JBoss Enterprise Portal Platform 5.2.2 update | 5 Sep 201216:26 | – | redhat | |
| JDK: XML parsing Denial-Of-Service (6845701) | 5 Sep 201216:26 | – | redhat | |
| Moderate: Red Hat Security Advisory: jasperreports-server-pro security and bug fix update | 4 Dec 201218:59 | – | redhat | |
| JDK: XML parsing Denial-Of-Service (6845701) | 4 Dec 201218:59 | – | redhat |
10
| Source | Link |
|---|---|
| download | www.download.novell.com/patch/finder/ |
| bugzilla | www.bugzilla.novell.com/show_bug.cgi |
# SPDX-FileCopyrightText: 2009 E-Soft Inc.
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=548655");
script_oid("1.3.6.1.4.1.25623.1.0.66230");
script_version("2023-07-18T05:05:36+0000");
script_tag(name:"last_modification", value:"2023-07-18 05:05:36 +0000 (Tue, 18 Jul 2023)");
script_tag(name:"creation_date", value:"2009-11-11 15:56:44 +0100 (Wed, 11 Nov 2009)");
script_cve_id("CVE-2009-2676", "CVE-2009-2493", "CVE-2009-2670", "CVE-2009-0217", "CVE-2009-2671", "CVE-2009-2672", "CVE-2009-2673", "CVE-2009-2674", "CVE-2009-2675", "CVE-2009-2625");
script_tag(name:"cvss_base", value:"10.0");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:C/I:C/A:C");
script_name("SLES11: Security update for IBM Java 1.6.0");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2009 E-Soft Inc.");
script_family("SuSE Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/suse_sles", "ssh/login/rpms", re:"ssh/login/release=SLES11\.0");
script_tag(name:"solution", value:"Please install the updates provided by SuSE.");
script_tag(name:"summary", value:"The remote host is missing updates to packages that affect
the security of your system. One or more of the following packages
are affected:
java-1_6_0-ibm
java-1_6_0-ibm-alsa
java-1_6_0-ibm-fonts
java-1_6_0-ibm-jdbc
java-1_6_0-ibm-plugin
More details may also be found by searching for the SuSE
Enterprise Server 11 patch database linked in the references.");
script_xref(name:"URL", value:"http://download.novell.com/patch/finder/");
script_tag(name:"qod_type", value:"package");
script_tag(name:"solution_type", value:"VendorFix");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-rpm.inc");
res = "";
report = "";
if ((res = isrpmvuln(pkg:"java-1_6_0-ibm", rpm:"java-1_6_0-ibm~1.6.0_sr6~1.1.1", rls:"SLES11.0")) != NULL) {
report += res;
}
if ((res = isrpmvuln(pkg:"java-1_6_0-ibm-alsa", rpm:"java-1_6_0-ibm-alsa~1.6.0_sr6~1.1.1", rls:"SLES11.0")) != NULL) {
report += res;
}
if ((res = isrpmvuln(pkg:"java-1_6_0-ibm-fonts", rpm:"java-1_6_0-ibm-fonts~1.6.0_sr6~1.1.1", rls:"SLES11.0")) != NULL) {
report += res;
}
if ((res = isrpmvuln(pkg:"java-1_6_0-ibm-jdbc", rpm:"java-1_6_0-ibm-jdbc~1.6.0_sr6~1.1.1", rls:"SLES11.0")) != NULL) {
report += res;
}
if ((res = isrpmvuln(pkg:"java-1_6_0-ibm-plugin", rpm:"java-1_6_0-ibm-plugin~1.6.0_sr6~1.1.1", rls:"SLES11.0")) != NULL) {
report += res;
}
if (report != "") {
security_message(data:report);
} else if (__pkg_match) {
exit(99);
}
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
18 Jul 2023 00:00Current
7.3High risk
Vulners AI Score7.3
CVSS 210
CVSS 3.18.8
EPSS0.3776
SSVC