SUSE-SA:2005:032: java2

high Nessus Plugin ID 19241

Synopsis

The remote host is missing a vendor-supplied security patch

Description

The remote host is missing the patch for the advisory SUSE-SA:2005:032 (java2).

Two security bugs in the SUN Java implementation have been fixed.

Java Web Start can be exploited remotely due to an error in input validation of tags in JNLP files, so an attacker can pass arbitrary command-line options to the virtual machine to disable the sandbox and get access to files.

This is tracked by the Mitre CVE ID CVE-2005-0836.

The second bug is equal to the first one but can also triggered by untrusted applets.

This is tracked by the Mitre CVE ID CVE-2005-1974.

Solution

http://www.suse.de/security/advisories/2005_32_java2.html

Plugin Details

Severity: High

ID: 19241

File Name: suse_SA_2005_032.nasl

Version: 1.11

Agent: unix

Family: SuSE Local Security Checks

Published: 7/20/2005

Updated: 1/14/2021

Supported Sensors: Continuous Assessment, Nessus Agent, Nessus

Vulnerability Information

Required KB Items: Host/SuSE/rpm-list

Detections

Analytics