SuSE 11.2 Security Update : java-1_4_2-ibm (SAT Patch Number 8109)

critical Nessus Plugin ID 69090

Language:

Synopsis

The remote SuSE 11 host is missing one or more security updates.

Description

IBM Java 1.4.2 was updated to SR13-FP18 to fix bugs and security issues.

Please see also http://www.ibm.com/developerworks/java/jdk/alerts/

Also the following bug has been fixed :

 - mark files in jre/bin and bin/ as executable (bnc#823034)

Solution

Apply SAT patch number 8109.

See Also

https://bugzilla.novell.com/show_bug.cgi?id=823034

https://bugzilla.novell.com/show_bug.cgi?id=829212

http://support.novell.com/security/cve/CVE-2013-1500.html

http://support.novell.com/security/cve/CVE-2013-2446.html

http://support.novell.com/security/cve/CVE-2013-2447.html

http://support.novell.com/security/cve/CVE-2013-2450.html

http://support.novell.com/security/cve/CVE-2013-2452.html

http://support.novell.com/security/cve/CVE-2013-2456.html

http://support.novell.com/security/cve/CVE-2013-2459.html

http://support.novell.com/security/cve/CVE-2013-2463.html

http://support.novell.com/security/cve/CVE-2013-2464.html

http://support.novell.com/security/cve/CVE-2013-2465.html

http://support.novell.com/security/cve/CVE-2013-2469.html

http://support.novell.com/security/cve/CVE-2013-2470.html

http://support.novell.com/security/cve/CVE-2013-2471.html

http://support.novell.com/security/cve/CVE-2013-2472.html

http://support.novell.com/security/cve/CVE-2013-2473.html

http://support.novell.com/security/cve/CVE-2013-3009.html

http://support.novell.com/security/cve/CVE-2013-3011.html

http://support.novell.com/security/cve/CVE-2013-3012.html

Plugin Details

Severity: Critical

ID: 69090

File Name: suse_11_java-1_4_2-ibm-130723.nasl

Version: 1.13

Type: local

Agent: unix

Published: 7/28/2013

Updated: 3/29/2022

Supported Sensors: Nessus Agent

Risk Information

VPR

Risk Factor: Critical

Score: 9.8

CVSS v2

Risk Factor: Critical

Base Score: 10

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:novell:suse_linux:11:java-1_4_2-ibm, p-cpe:/a:novell:suse_linux:11:java-1_4_2-ibm-jdbc, p-cpe:/a:novell:suse_linux:11:java-1_4_2-ibm-plugin, cpe:/o:novell:suse_linux:11

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 7/23/2013

CISA Known Exploited Dates: 4/18/2022

Exploitable With

Core Impact

Metasploit (Java storeImageArray() Invalid Array Indexing Vulnerability)

Reference Information

CVE: CVE-2013-1500, CVE-2013-2446, CVE-2013-2447, CVE-2013-2450, CVE-2013-2452, CVE-2013-2456, CVE-2013-2459, CVE-2013-2463, CVE-2013-2464, CVE-2013-2465, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, CVE-2013-2472, CVE-2013-2473, CVE-2013-3009, CVE-2013-3011, CVE-2013-3012