The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0139 advisory.

  - OpenJDK: JavaSound incorrect bounds check (Sound, 7088367) (CVE-2011-3563)

  - OpenJDK: AtomicReferenceArray insufficient array type check (Concurrency, 7082299) (CVE-2011-3571,     CVE-2012-0507)

  - GlassFish: hash table collisions CPU usage DoS (oCERT-2011-003) (CVE-2011-5035)

  - Oracle JDK: unspecified vulnerability fixed in 6u31 and 7u3 (2D) (CVE-2012-0498, CVE-2012-0499)

  - Oracle JDK: unspecified vulnerability fixed in 6u31 and 7u3 (Deployment) (CVE-2012-0500)

  - OpenJDK: off-by-one bug in ZIP reading code (JRE, 7118283) (CVE-2012-0501)

  - OpenJDK: KeyboardFocusManager focus stealing (AWT, 7110683) (CVE-2012-0502)

  - OpenJDK: unrestricted use of TimeZone.setDefault() (i18n, 7110687) (CVE-2012-0503)

  - OpenJDK: incomplete info in the deserialization exception (Serialization, 7110700) (CVE-2012-0505)

  - OpenJDK: mutable repository identifiers (CORBA, 7110704) (CVE-2012-0506)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 5 / 6 : java-1.6.0-sun (RHSA-2012:0139)

critical Nessus Plugin ID 57991

Version 1.39