OpenJDK vulnerabilities

2011-02-0100:00:00

ubuntu.com

9.3 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.016 Low

EPSS

Percentile

87.0%

JSON

Releases

Ubuntu 10.10
Ubuntu 10.04
Ubuntu 9.10

Packages

openjdk-6 -
openjdk-6b18 -

Details

It was discovered that IcedTea for Java did not properly verify
signatures when handling multiply signed or partially signed JAR files,
allowing an attacker to cause code to execute that appeared to come
from a verified source. (CVE-2011-0025)

USN 1052-1 fixed a vulnerability in OpenJDK for Ubuntu 9.10 and Ubuntu
10.04 LTS on all architectures, and Ubuntu 10.10 for all architectures
except for the armel (ARM) architecture. This update provides the
corresponding update for Ubuntu 10.10 on the armel (ARM) architecture.

Original advisory details:

It was discovered that the JNLP SecurityManager in IcedTea for Java
OpenJDK in some instances failed to properly apply the intended
scurity policy in its checkPermission method. This could allow
an attacker to execute code with privileges that should have been
prevented. (CVE-2010-4351)

OSVersionArchitecturePackageVersionFilename
Ubuntu9.10noarchicedtea6-plugin< 6b20-1.9.5-0ubuntu1~9.10.1UNKNOWN
Ubuntu9.10noarchicedtea-6-jre-cacao< 6b20-1.9.5-0ubuntu1~9.10.1UNKNOWN
Ubuntu9.10noarchopenjdk-6-dbg< 6b20-1.9.5-0ubuntu1~9.10.1UNKNOWN
Ubuntu9.10noarchopenjdk-6-demo< 6b20-1.9.5-0ubuntu1~9.10.1UNKNOWN
Ubuntu9.10noarchopenjdk-6-jdk< 6b20-1.9.5-0ubuntu1~9.10.1UNKNOWN
Ubuntu9.10noarchopenjdk-6-jre< 6b20-1.9.5-0ubuntu1~9.10.1UNKNOWN
Ubuntu9.10noarchopenjdk-6-jre-headless< 6b20-1.9.5-0ubuntu1~9.10.1UNKNOWN
Ubuntu9.10noarchopenjdk-6-jre-zero< 6b20-1.9.5-0ubuntu1~9.10.1UNKNOWN
Ubuntu10.10noarchicedtea6-plugin< 6b20-1.9.5-0ubuntu1UNKNOWN
Ubuntu10.10noarchicedtea-6-jre-cacao< 6b20-1.9.5-0ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	9.10	noarch	icedtea6-plugin	< 6b20-1.9.5-0ubuntu1~9.10.1	UNKNOWN
Ubuntu	9.10	noarch	icedtea-6-jre-cacao	< 6b20-1.9.5-0ubuntu1~9.10.1	UNKNOWN
Ubuntu	9.10	noarch	openjdk-6-dbg	< 6b20-1.9.5-0ubuntu1~9.10.1	UNKNOWN
Ubuntu	9.10	noarch	openjdk-6-demo	< 6b20-1.9.5-0ubuntu1~9.10.1	UNKNOWN
Ubuntu	9.10	noarch	openjdk-6-jdk	< 6b20-1.9.5-0ubuntu1~9.10.1	UNKNOWN
Ubuntu	9.10	noarch	openjdk-6-jre	< 6b20-1.9.5-0ubuntu1~9.10.1	UNKNOWN
Ubuntu	9.10	noarch	openjdk-6-jre-headless	< 6b20-1.9.5-0ubuntu1~9.10.1	UNKNOWN
Ubuntu	9.10	noarch	openjdk-6-jre-zero	< 6b20-1.9.5-0ubuntu1~9.10.1	UNKNOWN
Ubuntu	10.10	noarch	icedtea6-plugin	< 6b20-1.9.5-0ubuntu1	UNKNOWN
Ubuntu	10.10	noarch	icedtea-6-jre-cacao	< 6b20-1.9.5-0ubuntu1	UNKNOWN