The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-662:03 advisory.

    The OpenJDK runtime environment.
    Security issues fixed with this release:
     CVE-2012-1711     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and     earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote     attackers to affect confidentiality, integrity, and availability, related to CORBA.
     CVE-2012-1713     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and     earlier, 6 update 32 and earlier, 5 update 35 and earlier, 1.4.2_37 and earlier, and JavaFX 2.1 and     earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors     related to 2D.
     CVE-2012-1716     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and     earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect     confidentiality, integrity, and availability via unknown vectors related to Swing.
     CVE-2012-1717     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and     earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows local users to     affect confidentiality via unknown vectors related to printing on Solaris or Linux.
     CVE-2012-1718     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and     earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote     attackers to affect availability via unknown vectors related to Security.
     CVE-2012-1719     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and     earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote     attackers to affect integrity, related to CORBA.
     CVE-2012-1723     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and     earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote     attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
     CVE-2012-1724     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and     earlier, and 6 update 32 and earlier, allows remote attackers to affect availability, related to JAXP.
     CVE-2012-1725     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and     earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect     confidentiality, integrity, and availability via unknown vectors related to Hotspot.
    Fixed bugs:
     Starting with java-1.6.0-openjdk-1.6.0.0-1.42.1.10.4.AXS4, rmiregisty, the Java Remote Object Registry,     would only start if run with the java.rmi.server.codebase argument. This has been fixed and the registry     can started without argument.
     Fixed the implementation of channel binding for the Kerberos protocol: OpenJDK now process Kerberos     General Security Services contexts and handles unset channel binding correctly, fixing interopability     problems with Internet Explorer on Windows Server 2008.
     The SystemTap script translator sometimes crashed when used with jstack() systemtap support with an error     message similar to:
    ERROR: kernel read fault at 0x0000000000000018 (addr) near identifier '@cast' at     /usr/share/systemtap/tapset/x86_64/jstack.stp:362:29     The jstack code has been imprved and is now more reliable.
     Fixed many problems when using signed jar files.
    Enhancement:
     Added support for huge.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

MiracleLinux 4 : java-1.6.0-openjdk-1.6.0.0-1.48.1.11.3.AXS4 (AXSA:2012-662:03)

critical Nessus Plugin ID 284083

Version 1.2

Version 1.1

Version 1.2 Jan 16, 2026, 10:12 PM CISA reference Exploit attributes ("Exploit framework metasploit" set to "True") Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202601162212
Version 1.1 Jan 14, 2026, 9:57 PM New Plugin Feed: 202601142157