Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
suseSuseSUSE-SA:2009:007
HistoryJan 29, 2009 - 2:08 p.m.

local privilege escalation in IBMJava5-JRE,java-1_5_0-ibm

2009-01-2914:08:00
lists.opensuse.org
37

0.972 High

EPSS

Percentile

99.8%

JSON

The IBM Java JRE 5 was brought to Service Release 9 fixing quite a number of security issues and bugs.

Solution

There is no known workaround, please install the update packages.

OSVersionArchitecturePackageVersionFilename
SUSE Linux Enterprise Server10.2ppcjava-1_5_0-ibm-64bit< 1.5.0_sr9-2.4java-1_5_0-ibm-64bit-1.5.0_sr9-2.4.ppc.rpm
SUSE Linux Enterprise Server10.2i586java-1_5_0-ibm-fonts< 1.5.0_sr9-2.4java-1_5_0-ibm-fonts-1.5.0_sr9-2.4.i586.rpm
SUSE Linux Enterprise Server10.2s390xjava-1_5_0-ibm-devel-32bit< 1.5.0_sr9-2.4java-1_5_0-ibm-devel-32bit-1.5.0_sr9-2.4.s390x.rpm
SUSE Linux Enterprise Server10.2x86_64java-1_5_0-ibm-alsa-32bit< 1.5.0_sr9-2.4java-1_5_0-ibm-alsa-32bit-1.5.0_sr9-2.4.x86_64.rpm
Novell Open Enterprise Server (OES)anyi586ibmjava5-sdk< 1.5.0-0.57IBMJava5-SDK-1.5.0-0.57.i586.rpm
SUSE Linux Enterprise Server10.2x86_64java-1_5_0-ibm-fonts< 1.5.0_sr9-2.4java-1_5_0-ibm-fonts-1.5.0_sr9-2.4.x86_64.rpm
Novell Open Enterprise Server (OES)anyi586ibmjava5-jre< 1.5.0-0.57IBMJava5-JRE-1.5.0-0.57.i586.rpm
SUSE Linux Enterprise Server10.2x86_64java-1_5_0-ibm< 1.5.0_sr9-2.4java-1_5_0-ibm-1.5.0_sr9-2.4.x86_64.rpm
SUSE Linux Enterprise Server10.2i586java-1_5_0-ibm< 1.5.0_sr9-2.4java-1_5_0-ibm-1.5.0_sr9-2.4.i586.rpm
SUSE Linux Enterprise Server10.2s390xjava-1_5_0-ibm< 1.5.0_sr9-2.4java-1_5_0-ibm-1.5.0_sr9-2.4.s390x.rpm
Rows per page:
1-10 of 271

Related

nessus 38
openvas 47
redhat 8
suse 2
seebug 7
fedora 2
securityvulns 3
ubuntu 1
vmware 2
prion 19
cve 19
zdi 2
saint 4
canvas 2
packetstorm 2
ubuntucve 11
checkpoint_advisories 6
threatpost 3
metasploit 1
exploitpack 2
symantec 1
gentoo 1
exploitdb 4
oracle 1
ibm 1
nessus
nessus
SuSE9 Security Update : IBM Java5 JRE and SDK (YOU Patch Number 12336)
2009-09-24 00:00:00
SuSE 11 Security Update : IBM Java 1.4.2 (SAT Patch Number 735)
2009-09-24 00:00:00
SuSE9 Security Update : IBM Java2 JRE and SDK (YOU Patch Number 12387)
2009-09-24 00:00:00
openvas
openvas
SLES9: Security update for IBM Java5 JRE and SDK
2009-10-10 00:00:00
SLES9: Security update for IBM Java5 JRE and SDK
2009-10-10 00:00:00
SLES10: Security update for IBM Java 1.5.0
2009-10-13 00:00:00
redhat
redhat
(RHSA-2009:0445) Critical: java-1.4.2-ibm security update
2009-04-23 00:00:00
(RHSA-2009:0016) Critical: java-1.5.0-ibm security update
2009-01-13 00:00:00
(RHSA-2008:1025) Critical: java-1.5.0-sun security update
2008-12-04 00:00:00
suse
suse
remote code execution in IBM Java 1.4.2 and 6
2009-04-07 14:51:07
remote code execution in Sun Java
2009-01-09 15:49:38
seebug
seebug
Sun Java JDK/JRE安全更新修复多个漏洞
2008-12-09 00:00:00
Mac OS X - Java applet Remote Deserialization Remote PoC (updated)
2014-07-01 00:00:00
Sun Java Runtime and Development Kit &lt;= 6 update 10 Calendar Deserialization Exploit
2008-12-03 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: java-1.6.0-openjdk-1.6.0.0-0.20.b09.fc9
2008-12-07 04:27:51
[SECURITY] Fedora 10 Update: java-1.6.0-openjdk-1.6.0.0-7.b12.fc10
2008-12-07 04:33:22
securityvulns
securityvulns
Sun Java JRE / JDK / Web Start multiple security vulnerabilities
2009-04-23 00:00:00
[USN-713-1] openjdk-6 vulnerabilities
2009-01-31 00:00:00
[Full-disclosure] CVE-2008-2086: Java Web Start File Inclusion via System Properties Override
2008-12-04 00:00:00
ubuntu
ubuntu
openjdk-6 vulnerabilities
2009-01-27 00:00:00
vmware
vmware
VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues
2009-10-16 00:00:00
VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues
2009-10-16 00:00:00
prion
prion
Authentication flaw
2008-12-05 11:30:00
Buffer overflow
2008-12-05 11:30:00
Integer overflow
2008-12-05 11:30:00
cve
cve
CVE-2008-5359
2008-12-05 11:30:00
CVE-2008-5348
2008-12-05 11:30:00
CVE-2008-5353
2008-12-05 11:30:00
zdi
zdi
Sun Java AWT Library Sandbox Violation Vulnerability
2008-12-04 00:00:00
Sun Java Web Start and Applet Multiple Sandbox Bypass Vulnerabilities
2008-12-04 00:00:00
saint
saint
Java Runtime Environment JAR manifest Main Class buffer overflow
2009-02-26 00:00:00
Java Runtime Environment JAR manifest Main Class buffer overflow
2009-02-26 00:00:00
Java Runtime Environment JAR manifest Main Class buffer overflow
2009-02-26 00:00:00
canvas
canvas
Immunity Canvas: JAVA_DESERIALIZE
2008-12-05 06:30:00
Immunity Canvas: JAVA_DESERIALIZE_WIN32
2008-12-05 11:30:00
packetstorm
packetstorm
Sun Java Calendar Deserialization
2009-10-27 00:00:00
Signed Applet Social Engineering Code Exec
2010-02-05 00:00:00
ubuntucve
ubuntucve
CVE-2008-5350
2008-12-05 00:00:00
CVE-2008-5360
2008-12-05 00:00:00
CVE-2008-5354
2008-12-05 00:00:00
checkpoint_advisories
checkpoint_advisories
Sun Java Runtime Environment Abstract Windowing Toolkit Memory Corruption (CVE-2008-5359)
2010-06-23 00:00:00
Sun Java Web Start Splashscreen GIF Decoding Buffer Overflow (CVE-2008-2086)
2009-12-28 00:00:00
Sun Java Runtime Environment JAR File Processing Stack Buffer Overflow (CVE-2008-5354)
2010-07-13 00:00:00
threatpost
threatpost
Serious Mac OS X Java vulnerability disclosed
2009-05-20 17:37:46
Chorus Grows Louder to Disable Java 7 After Exploit Hits Mainstream
2012-08-30 02:03:14
Java Still a Favorite Target of Attackers
2011-11-30 19:39:18
metasploit
metasploit
Sun Java Calendar Deserialization Privilege Escalation
2009-12-15 20:37:15
exploitpack
exploitpack
Sun Java Runtime and Development Kit 6 Update 10 - Calendar Deserialization (Metasploit)
2008-12-03 00:00:00
Apple Mac OSX - Java applet Remote Deserialization Remote (2)
2009-05-20 00:00:00
symantec
symantec
Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities
2008-12-03 00:00:00
gentoo
gentoo
Sun JDK/JRE: Multiple vulnerabilities
2009-11-17 00:00:00
exploitdb
exploitdb
Sun Java Runtime and Development Kit 6 Update 10 - Calendar Deserialization (Metasploit)
2008-12-03 00:00:00
Apple Mac OSX - Java applet Remote Deserialization Remote (2)
2009-05-20 00:00:00
Signed Applet Social Engineering - Code Execution (Metasploit)
2011-01-08 00:00:00
oracle
oracle
cpuapr2009.html
2009-04-14 00:00:00
ibm
ibm
Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to multiple CVEs
2023-03-08 18:05:21

0.972 High

EPSS

Percentile

99.8%

JSON
Related for SUSE-SA:2009:007
nessus38openvas47redhat8suse2seebug7fedora2securityvulns3ubuntu1vmware2prion19cve19zdi2saint4canvas2packetstorm2ubuntucve11checkpoint_advisories6threatpost3metasploit1exploitpack2symantec1gentoo1exploitdb4oracle1ibm1