CVE-2013-4041: Undefined Security Weakness

Unspecified vulnerability in IBM Java SDK 5.0.0 before SR16 FP4, 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to access restricted classes via unspecified vectors...

CVE-2013-5458: Undefined Security Weakness

Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2013-5457: Undefined Security Weakness

Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2013-5375: Undefined Security Weakness

Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, 6.0.0 before SR15, and 5.0.0 before SR16 FP4 allows remote attackers to access restricted classes via unspecified vectors related to XML and XSL...

CVE-2013-5456: Undefined Security Weakness

The com.ibm.rmi.io.SunSerializableFactory class in IBM Java SDK 7.0.0 before SR6 allows remote attackers to bypass a sandbox protection mechanism and execute arbitrary code via vectors related to deserialization inside the AccessController doPrivileged block...

JDK: unspecified sandbox bypass (ORB)

Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to execute arbitrary code via unspecified vectors...

PT-2013-4809

Name of the Vulnerable Software and Affected Versions IBM Java SDK versions 5.0.0 before SR16 FP4 IBM Java SDK versions 7.0.0 before SR6 IBM Java SDK versions 6.0.1 before SR7 IBM Java SDK versions 6.0.0 before SR15 Description The issue allows remote attackers to access restricted classes via...

PT-2013-5500

Name of the Vulnerable Software and Affected Versions IBM Java SDK versions 5.0.0 before SR16 FP4 IBM Java SDK versions 6.0.0 before SR15 IBM Java SDK versions 6.0.1 before SR7 IBM Java SDK versions 7.0.0 before SR6 Description The issue allows remote attackers to access restricted classes via...

PT-2013-5555

Name of the Vulnerable Software and Affected Versions IBM Java SDK version 7.0.0 before SR6 Description The issue allows remote attackers to execute arbitrary code via unspecified vectors. It also enables code running under a security manager to escalate its privileges by modifying or removing th...

PT-2013-5554

Name of the Vulnerable Software and Affected Versions IBM Java SDK versions 6.0.0 through 6.0.0 before SR15 IBM Java SDK versions 6.0.1 through 6.0.1 before SR7 IBM Java SDK versions 7.0.0 through 7.0.0 before SR6 Description The issue allows remote attackers to execute arbitrary code via...

PT-2013-5553

Name of the Vulnerable Software and Affected Versions IBM Java SDK version 7.0.0 before SR6 Description The issue allows remote attackers to bypass a sandbox protection mechanism and execute arbitrary code via vectors related to deserialization inside the AccessController doPrivileged block...

IBM Domino 8.5.x < 8.5.3 FP 5 Multiple Vulnerabilities

According to its banner, the version of IBM Domino formerly IBM Lotus Domino on the remote host is 8.5.x earlier than 8.5.3 FP5. It is, therefore, affected by the following vulnerabilities : - The included version of the IBM Java SDK contains a version of the IBM JRE that contains numerous securi...

IBM Domino 8.5.x < 8.5.3 FP5 Multiple Vulnerabilities

The remote host has a version of IBM Domino formerly Lotus Domino 8.5.x prior to 8.5.3 Fix Pack 5 installed. It is, therefore, reportedly affected by the following vulnerabilities : - The included version of the IBM Java SDK contains a version of the IBM JRE that contains numerous security issues...

IBM Notes 8.5.x < 8.5.3 FP5 Multiple Vulnerabilities

The remote host has a version of IBM Notes formerly Lotus Notes 8.5.x prior to 8.5.3 Fix Pack 5 installed. It is, therefore, reportedly affected by the following vulnerabilities : - The included version of the IBM Java SDK contains a version of the IBM JRE that contains numerous security issues...

Oracle Java SE CVE-2013-5838 Remote Security Vulnerability

Description Oracle Java SE is prone to a remote security vulnerability. The vulnerability can be exploited over multiple protocols. This issue affects the 'Libraries' sub-component. This vulnerability affects the following supported versions: Java SE 7u25, Java SE Embedded 7u25 Technologies...

Oracle Java SE CVE-2013-1488 Remote Code Execution Vulnerability

Description Oracle Java SE is prone to a remote code execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the current process. Technologies Affected Avaya Aura Communication Manager Utility Services 6.0 Avaya Aura Communication Manager Utility...

Oracle Java SE CVE-2013-0431 Remote Java Runtime Environment Vulnerability

Description Oracle Java SE is prone to a remote vulnerability in Java Runtime Environment. The vulnerability can be exploited over multiple protocols. This issue affects the 'JMX' sub-component. This vulnerability affects the following supported versions: 7 Update 11 and prior Note: This issue wa...

Sun Java SE November 2009 Multiple Security Vulnerabilities

Description Sun has released updates to address multiple security vulnerabilities in Java SE. Successful exploits may allow attackers to bypass certain security restrictions, run untrusted applets with elevated privileges, execute arbitrary code, and cause denial-of-service conditions. Other...

Multiple Java Products Detection (Linux/Unix SSH Login)

Detects the installed version of Java products on Linux systems. It covers the following: - Sun Java - Oracle Java - IBM Java - GCJ The script logs in via ssh, searches for executables SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, a...

[SA18092] IBM Java SDK JRE Sandbox Security Bypass Vulnerabilities

TITLE: IBM Java SDK JRE Sandbox Security Bypass Vulnerabilities SECUNIA ADVISORY ID: SA18092 VERIFY ADVISORY: http://secunia.com/advisories/18092/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: IBM Java SDK 1.4.x http://secunia.com/product/6539/ IBM Java SDK 1.3.x...