The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-13:01 advisory.

    The OpenJDK runtime environment.
    Security issues fixed with this release:
    CVE-2011-3389     The SSL protocol, as used in certain configurations in Microsoft Windowsand Microsoft Internet Explorer,     Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained     initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a     blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses     (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a     BEAST attack.
    CVE-2011-3521     Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, 7, 6     Update 27 and earlier, and 5.0 Update 31 earlier allows remote untrusted Java Web Start applications and     untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related     to Deserialization.
    CVE-2011-3544     Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6     Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to     affect confidentiality, integrity, and availability via unknown vectors related to Scripting.
    CVE-2011-3547     Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6     Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java     Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to     Networking.
    CVE-2011-3548     Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6     Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java     Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability,     related to AWT.
    CVE-2011-3551     Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6     Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality,     integrity, and availability via unknown vectors related to 2D.
    CVE-2011-3552     Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6     Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote attackers to     affect integrity via unknown vectors related to Networking.
    CVE-2011-3553     Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6     Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote authenticated users to affect     confidentiality, related to JAXWS.
    CVE-2011-3554     Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6     Update 27 and earlier, 5.0 Update 31 and earlier allows remote untrusted Java Web Start applications and     untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors.
    CVE-2011-3556     Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6     Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier     allows remote attackers to affect confidentiality, integrity, and availability, related to RMI.
    CVE-2011-3557     Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6     Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier     allows remote attackers to affect confidentiality, integrity, and availability, related to RMI.
    CVE-2011-3558     Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6     Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to     affect confidentiality via unknown vectors related to HotSpot.
    CVE-2011-3560     Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6     Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java     Web Start applications and untrusted Java applets to affect confidentiality and integrity, related to     JSSE.
    Fixed bugs:
     - Relaxed some security restrictions introduced in the RMI registry by the patches to fix aboce CVEs.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

MiracleLinux 4 : java-1.6.0-openjdk-1.6.0.0-1.42.1.10.4.AXS4 (AXSA:2012-13:01)

critical Nessus Plugin ID 284034

Version 1.3

Version 1.1

Version 1.3 Jan 16, 2026, 10:12 PM CEA reference CISA reference Exploit attributes ("Exploit framework metasploit" set to "True". "Exploited by malware" set to "True") Plugin Feed: 202601162212
Version 1.1 Jan 14, 2026, 9:57 PM New Plugin Feed: 202601142157