Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
suseSuseSUSE-SA:2009:001
HistoryJan 09, 2009 - 3:49 p.m.

remote code execution in Sun Java

2009-01-0915:49:38
lists.opensuse.org
25

0.972 High

EPSS

Percentile

99.8%

JSON

Sun Java received several security fixes and was updated to: - Sun Java 1.6.0 to Update 11-b03 - Sun Java 1.5.0 to Update 17 - Sun Java 1.4.2 to Update 19 Numerous security issues such as privilege escalations, and sandbox breakouts were fixed. (CVE-2008-5360, CVE-2008-5359, CVE-2008-5358, CVE-2008-5357, CVE-2008-5356, CVE-2008-5344, CVE-2008-5343, CVE-2008-5342, CVE-2008-5341, CVE-2008-5340, CVE-2008-5339, CVE-2008-2086, CVE-2008-5355, CVE-2008-5354, CVE-2008-5353, CVE-2008-5352, CVE-2008-5351, CVE-2008-5350, CVE-2008-5349, CVE-2008-5348, CVE-2008-5347, CVE-2008-5345, CVE-2008-5346)

Solution

There is no known workaround, please install the update packages.

OSVersionArchitecturePackageVersionFilename
openSUSE11.0i586java-1_6_0-sun-plugin< 1.6.0.u11-0.1java-1_6_0-sun-plugin-1.6.0.u11-0.1.i586.rpm
SUSE Linux Enterprise Server10.2i586java-1_4_2-sun< 1.4.2.19-0.3java-1_4_2-sun-1.4.2.19-0.3.i586.rpm
openSUSE11.0i586java-1_6_0-sun-alsa< 1.6.0.u11-0.1java-1_6_0-sun-alsa-1.6.0.u11-0.1.i586.rpm
openSUSE10.3i586java-1_5_0-sun-src< 1.5.0_update17-0.1java-1_5_0-sun-src-1.5.0_update17-0.1.i586.rpm
SUSE Linux Enterprise Server10.2i586java-1_4_2-sun-devel< 1.4.2.19-0.3java-1_4_2-sun-devel-1.4.2.19-0.3.i586.rpm
openSUSE10.3i586java-1_5_0-sun-jdbc< 1.5.0_update17-0.1java-1_5_0-sun-jdbc-1.5.0_update17-0.1.i586.rpm
openSUSE11.0i586java-1_6_0-sun< 1.6.0.u11-0.1java-1_6_0-sun-1.6.0.u11-0.1.i586.rpm
SUSE Linux Enterprise Server10.2ia64java-1_4_2-sun-devel< 1.4.2.19-0.3java-1_4_2-sun-devel-1.4.2.19-0.3.ia64.rpm
openSUSE11.0i586java-1_6_0-sun-demo< 1.6.0.u11-0.1java-1_6_0-sun-demo-1.6.0.u11-0.1.i586.rpm
SUSE Linux Enterprise Server10.2ia64java-1_4_2-sun< 1.4.2.19-0.3java-1_4_2-sun-1.4.2.19-0.3.ia64.rpm
Rows per page:
1-10 of 491

Related

nessus 40
openvas 47
redhat 8
seebug 7
suse 2
fedora 2
securityvulns 3
ubuntu 1
vmware 2
prion 23
cve 23
zdi 2
gentoo 1
ubuntucve 15
saint 4
canvas 2
packetstorm 2
checkpoint_advisories 4
threatpost 2
oracle 1
exploitpack 2
symantec 1
metasploit 1
exploitdb 4
nessus
nessus
openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-376)
2009-07-21 00:00:00
Sun Java JRE Multiple Vulnerabilities (244986 et al)
2008-12-04 00:00:00
openSUSE Security Update : java-1_5_0-sun (java-1_5_0-sun-375)
2009-07-21 00:00:00
openvas
openvas
SLES9: Security update for Sun Java
2009-10-10 00:00:00
SuSE Security Advisory SUSE-SA:2009:001 (Sun Java)
2009-01-13 00:00:00
SuSE Security Advisory SUSE-SA:2009:001 (Sun Java)
2009-01-13 00:00:00
redhat
redhat
(RHSA-2008:1018) Critical: java-1.6.0-sun security update
2008-12-04 00:00:00
(RHSA-2009:0016) Critical: java-1.5.0-ibm security update
2009-01-13 00:00:00
(RHSA-2008:1025) Critical: java-1.5.0-sun security update
2008-12-04 00:00:00
seebug
seebug
Sun Java JDK/JRE安全更新修复多个漏洞
2008-12-09 00:00:00
Mac OS X - Java applet Remote Deserialization Remote PoC (updated)
2014-07-01 00:00:00
Sun Java Runtime and Development Kit &lt;= 6 update 10 Calendar Deserialization Exploit
2008-12-03 00:00:00
suse
suse
remote code execution in IBM Java 1.4.2 and 6
2009-04-07 14:51:07
local privilege escalation in IBMJava5-JRE,java-1_5_0-ibm
2009-01-29 14:08:00
fedora
fedora
[SECURITY] Fedora 10 Update: java-1.6.0-openjdk-1.6.0.0-7.b12.fc10
2008-12-07 04:33:22
[SECURITY] Fedora 9 Update: java-1.6.0-openjdk-1.6.0.0-0.20.b09.fc9
2008-12-07 04:27:51
securityvulns
securityvulns
Sun Java JRE / JDK / Web Start multiple security vulnerabilities
2009-04-23 00:00:00
[USN-713-1] openjdk-6 vulnerabilities
2009-01-31 00:00:00
[Full-disclosure] CVE-2008-2086: Java Web Start File Inclusion via System Properties Override
2008-12-04 00:00:00
ubuntu
ubuntu
openjdk-6 vulnerabilities
2009-01-27 00:00:00
vmware
vmware
VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues
2009-10-16 00:00:00
VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues
2009-10-16 00:00:00
prion
prion
Design/Logic Flaw
2008-12-05 11:30:00
Authentication flaw
2008-12-05 11:30:00
Design/Logic Flaw
2008-12-05 11:30:00
cve
cve
CVE-2008-5349
2008-12-05 11:30:00
CVE-2008-5359
2008-12-05 11:30:00
CVE-2008-5348
2008-12-05 11:30:00
zdi
zdi
Sun Java AWT Library Sandbox Violation Vulnerability
2008-12-04 00:00:00
Sun Java Web Start and Applet Multiple Sandbox Bypass Vulnerabilities
2008-12-04 00:00:00
gentoo
gentoo
Sun JDK/JRE: Multiple vulnerabilities
2009-11-17 00:00:00
ubuntucve
ubuntucve
CVE-2008-5347
2008-12-05 00:00:00
CVE-2008-5349
2008-12-05 00:00:00
CVE-2008-5358
2008-12-05 00:00:00
saint
saint
Java Runtime Environment JAR manifest Main Class buffer overflow
2009-02-26 00:00:00
Java Runtime Environment JAR manifest Main Class buffer overflow
2009-02-26 00:00:00
Java Runtime Environment JAR manifest Main Class buffer overflow
2009-02-26 00:00:00
canvas
canvas
Immunity Canvas: JAVA_DESERIALIZE
2008-12-05 06:30:00
Immunity Canvas: JAVA_DESERIALIZE_WIN32
2008-12-05 11:30:00
packetstorm
packetstorm
Sun Java Calendar Deserialization
2009-10-27 00:00:00
Signed Applet Social Engineering Code Exec
2010-02-05 00:00:00
checkpoint_advisories
checkpoint_advisories
Sun Java Runtime Environment Abstract Windowing Toolkit Memory Corruption (CVE-2008-5359)
2010-06-23 00:00:00
Sun Java Runtime Environment JAR File Processing Stack Buffer Overflow (CVE-2008-5354)
2010-07-13 00:00:00
Sun Java Web Start Splashscreen GIF Decoding Buffer Overflow (CVE-2008-2086)
2009-12-28 00:00:00
threatpost
threatpost
Serious Mac OS X Java vulnerability disclosed
2009-05-20 17:37:46
Chorus Grows Louder to Disable Java 7 After Exploit Hits Mainstream
2012-08-30 02:03:14
oracle
oracle
cpuapr2009.html
2009-04-14 00:00:00
exploitpack
exploitpack
Apple Mac OSX - Java applet Remote Deserialization Remote (2)
2009-05-20 00:00:00
Sun Java Runtime and Development Kit 6 Update 10 - Calendar Deserialization (Metasploit)
2008-12-03 00:00:00
symantec
symantec
Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities
2008-12-03 00:00:00
metasploit
metasploit
Sun Java Calendar Deserialization Privilege Escalation
2009-12-15 20:37:15
exploitdb
exploitdb
Sun Java Runtime and Development Kit 6 Update 10 - Calendar Deserialization (Metasploit)
2008-12-03 00:00:00
Apple Mac OSX - Java applet Remote Deserialization Remote (2)
2009-05-20 00:00:00
Signed Applet Social Engineering - Code Execution (Metasploit)
2011-01-08 00:00:00

0.972 High

EPSS

Percentile

99.8%

JSON
Related for SUSE-SA:2009:001
nessus40openvas47redhat8seebug7suse2fedora2securityvulns3ubuntu1vmware2prion23cve23zdi2gentoo1ubuntucve15saint4canvas2packetstorm2checkpoint_advisories4threatpost2oracle1exploitpack2symantec1metasploit1exploitdb4