Detections
Analytics

Mandriva Linux Security Advisory : java-1.6.0-openjdk (MDVSA-2013:014)

critical Nessus Plugin ID 64861

Language:

Synopsis

The remote Mandriva Linux host is missing one or more security updates.

Description

Multiple security issues were identified and fixed in OpenJDK (icedtea6) :

 - S8006446: Restrict MBeanServer access

 - S8006777: Improve TLS handling of invalid messages

 - S8007688: Blacklist known bad certificate

 - S7123519: problems with certification path

 - S8007393: Possible race condition after JDK-6664509

 - S8007611: logging behavior in applet changed

The updated packages provides icedtea6-1.11.8 which is not vulnerable to these issues.

Solution

Update the affected packages.

See Also

http://www.nessus.org/u?65b1d787

http://www.nessus.org/u?31376144

Plugin Details

Severity: Critical

ID: 64861

File Name: mandriva_MDVSA-2013-014.nasl

Version: 1.18

Type: local

Published: 2/24/2013

Updated: 12/5/2022

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.0

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:mandriva:linux:java-1.6.0-openjdk, p-cpe:/a:mandriva:linux:java-1.6.0-openjdk-demo, p-cpe:/a:mandriva:linux:java-1.6.0-openjdk-devel, p-cpe:/a:mandriva:linux:java-1.6.0-openjdk-javadoc, p-cpe:/a:mandriva:linux:java-1.6.0-openjdk-src, cpe:/o:mandriva:linux:2011

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/Mandrake/release, Host/Mandrake/rpm-list

Exploit Ease: No known exploits are available

Patch Publication Date: 2/22/2013

Reference Information

CVE: CVE-2013-0169, CVE-2013-1486, CVE-2013-1487

BID: 57778, 58029, 58031

MDVSA: 2013:014