This script is Copyright (C) 2012-2013 Tenable Network Security, Inc.
The remote Scientific Linux host is missing one or more security
This update fixes several vulnerabilities in the Java 6 Software
Development Kit. Further information about these flaws can be found on
the 'Oracle Java SE and Java for Business Critical Patch Update
Advisory' page. (CVE-2010-1321, CVE-2010-3541, CVE-2010-3548,
CVE-2010-3549, CVE-2010-3550, CVE-2010-3551, CVE-2010-3552,
CVE-2010-3553, CVE-2010-3554, CVE-2010-3555, CVE-2010-3556,
CVE-2010-3557, CVE-2010-3558, CVE-2010-3559, CVE-2010-3560,
CVE-2010-3561, CVE-2010-3562, CVE-2010-3563, CVE-2010-3565,
CVE-2010-3566, CVE-2010-3567, CVE-2010-3568, CVE-2010-3569,
CVE-2010-3570, CVE-2010-3571, CVE-2010-3572, CVE-2010-3573,
The RHSA-2010:0337 update mitigated a man-in-the-middle attack in the
way the TLS/SSL (Transport Layer Security/Secure Sockets Layer)
protocols handle session renegotiation by disabling renegotiation.
This update implements the TLS Renegotiation Indication Extension as
defined in RFC 5746, allowing secure renegotiation between updated
clients and servers. (CVE-2009-3555)
All running instances of Sun Java must be restarted for the update to
NOTE: jdk-1.6.0_20-fcs.x86_64.rpm has not been signed. We cannot sign
this package without breaking it.
See also :
Update the affected java-1.6.0-sun-compat and / or jdk packages.
Risk factor :
Critical / CVSS Base Score : 10.0
Public Exploit Available : true
Family: Scientific Linux Local Security Checks
Nessus Plugin ID: 60869 ()
CVE ID: CVE-2009-3555CVE-2010-1321CVE-2010-3541CVE-2010-3548CVE-2010-3549CVE-2010-3550CVE-2010-3551CVE-2010-3552CVE-2010-3553CVE-2010-3554CVE-2010-3555CVE-2010-3556CVE-2010-3557CVE-2010-3558CVE-2010-3559CVE-2010-3560CVE-2010-3561CVE-2010-3562CVE-2010-3563CVE-2010-3565CVE-2010-3566CVE-2010-3567CVE-2010-3568CVE-2010-3569CVE-2010-3570CVE-2010-3571CVE-2010-3572CVE-2010-3573CVE-2010-3574
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.