6.12 Update the Java Runtime Environment (JRE) regularly if Java is in use

Information

Sybase ASE supports interaction with Java through standards such as JSQL. Sun
Microsystems JRE implementation is installed by default although a user with the sa_role
must enable Java before it can be used in the database.

Sun Microsystems regularly ship updated versions of the JRE to resolve security issues.
Whilst many of these updates address technologies that have no bearing on Sybase (such as
Java applets), some updates address security flaws in core JRE classes.

If Java is enabled it is recommended that the JRE is updated periodically.

Rationale:

Security flaws in core JRE classes may allow a low privileged user to elevate privilege.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

1. Download the latest JRE from the Java download site. It is typically most convenient
to download the offline, multi-language installer.

2. Open a command prompt and execute the following command to make a backup of
the existing JRE installation folder:

C:\>xcopy /F /E /-Y /I '%SYBASE%/_jvm' '%SYBASE%\_jvm.old'

3. Open a command prompt and execute the following command to delete the existing
JRE installation folder. Press Y to confirm deletion after thoroughly checking the
path has been typed as shown below:

C:\>rmdir /S '%SYBASE%/_jvm'

4. If the above command fails, stop the Sybase ASE server and execute the command
again.

5. Run the downloaded JRE installer. Select the Advanced Installation Options check
box and configure the following options:

a. Set the installation path to be equivalent to %SYBASE%\_jvm. Note that it is
not possible to supply a path in this form (i.e. using the %SYBASE%
environment variable); the full path must be entered instead. The %SYBASE%
environment variable corresponds to the ASE installation directory, typically
C:\Sybase so in this case the installation path would be C:\Sybase\_jvm.
b. Deselect integration with Internet Explorer.
c. Select installation of additional language support if required.

6. Complete the JRE installation process and restart the Sybase ASE server if it was
stopped in step 4.

See Also

https://workbench.cisecurity.org/files/1612