https://access.redhat.com/security/cve/cve-2009-2409
https://access.redhat.com/security/cve/cve-2009-3728
https://access.redhat.com/security/cve/cve-2009-3729
https://access.redhat.com/security/cve/cve-2009-3865
https://access.redhat.com/security/cve/cve-2009-3866
https://access.redhat.com/security/cve/cve-2009-3867
https://access.redhat.com/security/cve/cve-2009-3868
https://access.redhat.com/security/cve/cve-2009-3869
https://access.redhat.com/security/cve/cve-2009-3871
https://access.redhat.com/security/cve/cve-2009-3886
http://www.nessus.org/u?6212b694
https://access.redhat.com/errata/RHSA-2009:1560
https://access.redhat.com/security/cve/cve-2009-3872
https://access.redhat.com/security/cve/cve-2009-3873
https://access.redhat.com/security/cve/cve-2009-3874
https://access.redhat.com/security/cve/cve-2009-3875
https://access.redhat.com/security/cve/cve-2009-3876
https://access.redhat.com/security/cve/cve-2009-3877
https://access.redhat.com/security/cve/cve-2009-3879
https://access.redhat.com/security/cve/cve-2009-3880
https://access.redhat.com/security/cve/cve-2009-3881
https://access.redhat.com/security/cve/cve-2009-3882
Severity: Critical
ID: 42431
File Name: redhat-RHSA-2009-1560.nasl
Version: 1.34
Type: local
Agent: unix
Family: Red Hat Local Security Checks
Published: 11/10/2009
Updated: 1/14/2021
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus
Risk Factor: Critical
Score: 9.8
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CPE: p-cpe:/a:redhat:enterprise_linux:java-1.6.0-sun, p-cpe:/a:redhat:enterprise_linux:java-1.6.0-sun-demo, p-cpe:/a:redhat:enterprise_linux:java-1.6.0-sun-devel, p-cpe:/a:redhat:enterprise_linux:java-1.6.0-sun-jdbc, p-cpe:/a:redhat:enterprise_linux:java-1.6.0-sun-plugin, p-cpe:/a:redhat:enterprise_linux:java-1.6.0-sun-src, cpe:/o:redhat:enterprise_linux:4, cpe:/o:redhat:enterprise_linux:4.8, cpe:/o:redhat:enterprise_linux:5, cpe:/o:redhat:enterprise_linux:5.4
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 11/9/2009
Vulnerability Publication Date: 7/30/2009
CANVAS (CANVAS)
Core Impact
Metasploit (Sun Java JRE AWT setDiffICM Buffer Overflow)
CVE: CVE-2009-2409, CVE-2009-3728, CVE-2009-3729, CVE-2009-3865, CVE-2009-3866, CVE-2009-3867, CVE-2009-3868, CVE-2009-3869, CVE-2009-3871, CVE-2009-3872, CVE-2009-3873, CVE-2009-3874, CVE-2009-3875, CVE-2009-3876, CVE-2009-3877, CVE-2009-3879, CVE-2009-3880, CVE-2009-3881, CVE-2009-3882, CVE-2009-3883, CVE-2009-3884, CVE-2009-3886, CVE-2010-0079
BID: 36881