RHEL 4 / 5 : java-1.5.0-sun (RHSA-2008:0186)

High Nessus Plugin ID 40717

Synopsis

The remote Red Hat host is missing one or more security updates.

Description

Updated java-1.5.0-sun packages that correct several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

The Java Runtime Environment (JRE) contains the software and tools that users need to run applets and applications written using the Java programming language.

Flaws in the JRE allowed an untrusted application or applet to elevate its privileges. This could be exploited by a remote attacker to access local files or execute local applications accessible to the user running the JRE (CVE-2008-1185, CVE-2008-1186)

A flaw was found in the Java XSLT processing classes. An untrusted application or applet could cause a denial of service, or execute arbitrary code with the permissions of the user running the JRE.
(CVE-2008-1187)

Several buffer overflow flaws were found in Java Web Start (JWS). An untrusted JNLP application could access local files or execute local applications accessible to the user running the JRE. (CVE-2008-1188, CVE-2008-1189, CVE-2008-1190, CVE-2008-1191, CVE-2008-1196)

A flaw was found in the Java Plug-in. A remote attacker could bypass the same origin policy, executing arbitrary code with the permissions of the user running the JRE. (CVE-2008-1192)

A flaw was found in the JRE image parsing libraries. An untrusted application or applet could cause a denial of service, or possible execute arbitrary code with the permissions of the user running the JRE. (CVE-2008-1193)

A flaw was found in the JRE color management library. An untrusted application or applet could trigger a denial of service (JVM crash).
(CVE-2008-1194)

The JRE allowed untrusted JavaScript code to create local network connections by the use of Java APIs. A remote attacker could use these flaws to access local network services. (CVE-2008-1195)

This update also fixes an issue where the Java Plug-in is not available for browser use after successful installation.

Users of java-1.5.0-sun should upgrade to these updated packages, which correct these issues.

Solution

Update the affected packages.

See Also

https://access.redhat.com/security/cve/cve-2008-1185

https://access.redhat.com/security/cve/cve-2008-1186

https://access.redhat.com/security/cve/cve-2008-1187

https://access.redhat.com/security/cve/cve-2008-1188

https://access.redhat.com/security/cve/cve-2008-1189

https://access.redhat.com/security/cve/cve-2008-1190

https://access.redhat.com/security/cve/cve-2008-1192

https://access.redhat.com/security/cve/cve-2008-1193

https://access.redhat.com/security/cve/cve-2008-1194

https://access.redhat.com/security/cve/cve-2008-1195

https://access.redhat.com/security/cve/cve-2008-1196

http://www.nessus.org/u?ecc5fe32

http://www.nessus.org/u?7d0f90a5

http://www.nessus.org/u?1259b9b1

http://www.nessus.org/u?0d8d3953

http://www.nessus.org/u?5e329ebd

http://www.nessus.org/u?4755491e

http://www.nessus.org/u?f802ba78

https://access.redhat.com/errata/RHSA-2008:0186

Plugin Details

Severity: High

ID: 40717

File Name: redhat-RHSA-2008-0186.nasl

Version: 1.28

Type: local

Agent: unix

Published: 2009/08/24

Updated: 2019/10/25

Dependencies: 12634

Risk Information

Risk Factor: High

CVSS v2.0

Base Score: 9.3

Temporal Score: 8.1

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:H/RL:OF/RC:C

Vulnerability Information

CPE: p-cpe:/a:redhat:enterprise_linux:java-1.5.0-sun, p-cpe:/a:redhat:enterprise_linux:java-1.5.0-sun-demo, p-cpe:/a:redhat:enterprise_linux:java-1.5.0-sun-devel, p-cpe:/a:redhat:enterprise_linux:java-1.5.0-sun-jdbc, p-cpe:/a:redhat:enterprise_linux:java-1.5.0-sun-plugin, p-cpe:/a:redhat:enterprise_linux:java-1.5.0-sun-src, cpe:/o:redhat:enterprise_linux:4, cpe:/o:redhat:enterprise_linux:4.6, cpe:/o:redhat:enterprise_linux:5, cpe:/o:redhat:enterprise_linux:5.1

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2008/03/06

Vulnerability Publication Date: 2008/03/06

Exploitable With

CANVAS (D2ExploitPack)

Reference Information

CVE: CVE-2008-1185, CVE-2008-1186, CVE-2008-1187, CVE-2008-1188, CVE-2008-1189, CVE-2008-1190, CVE-2008-1191, CVE-2008-1192, CVE-2008-1193, CVE-2008-1194, CVE-2008-1195, CVE-2008-1196

BID: 28083, 28125

RHSA: 2008:0186

CWE: 119, 264