Mandriva Linux Security Advisory : java-1.6.0-openjdk (MDVSA-2013:014)

Critical Nessus Plugin ID 64861


The remote Mandriva Linux host is missing one or more security updates.


Multiple security issues were identified and fixed in OpenJDK (icedtea6) :

- S8006446: Restrict MBeanServer access

- S8006777: Improve TLS handling of invalid messages

- S8007688: Blacklist known bad certificate

- S7123519: problems with certification path

- S8007393: Possible race condition after JDK-6664509

- S8007611: logging behavior in applet changed

The updated packages provides icedtea6-1.11.8 which is not vulnerable to these issues.


Update the affected packages.

See Also

Plugin Details

Severity: Critical

ID: 64861

File Name: mandriva_MDVSA-2013-014.nasl

Version: $Revision: 1.13 $

Type: local

Published: 2013/02/24

Modified: 2014/04/12

Dependencies: 12634

Risk Information

Risk Factor: Critical


Base Score: 10

Temporal Score: 8.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:ND/RL:OF/RC:C

Vulnerability Information

CPE: p-cpe:/a:mandriva:linux:java-1.6.0-openjdk, p-cpe:/a:mandriva:linux:java-1.6.0-openjdk-demo, p-cpe:/a:mandriva:linux:java-1.6.0-openjdk-devel, p-cpe:/a:mandriva:linux:java-1.6.0-openjdk-javadoc, p-cpe:/a:mandriva:linux:java-1.6.0-openjdk-src, cpe:/o:mandriva:linux:2011

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/Mandrake/release, Host/Mandrake/rpm-list

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2013/02/22

Reference Information

CVE: CVE-2013-0169, CVE-2013-1486, CVE-2013-1487

BID: 57778, 58029, 58031

MDVSA: 2013:014