The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0734 advisory.

  - Oracle JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment) (CVE-2012-0551, CVE-2012-1721,     CVE-2012-1722)

  - OpenJDK: improper protection of CORBA data models (CORBA, 7079902) (CVE-2012-1711)

  - OpenJDK: fontmanager layout lookup code memory corruption (2D, 7143617) (CVE-2012-1713)

  - OpenJDK: SynthLookAndFeel application context bypass (Swing, 7143614) (CVE-2012-1716)

  - OpenJDK: insecure temporary file permissions (JRE, 7143606) (CVE-2012-1717)

  - OpenJDK: CRL and certificate extensions handling improvements (Security, 7143872) (CVE-2012-1718)

  - OpenJDK: mutable repository identifiers in generated stub code (CORBA, 7143851) (CVE-2012-1719)

  - OpenJDK: insufficient field accessibility checks (HotSpot, 7152811) (CVE-2012-1723)

  - OpenJDK: XML parsing infinite loop (JAXP, 7157609) (CVE-2012-1724)

  - OpenJDK: insufficient invokespecial <init> verification (HotSpot, 7160757) (CVE-2012-1725)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 5 / 6 : java-1.6.0-sun (RHSA-2012:0734)

medium Nessus Plugin ID 59492

Version 1.28