The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0348 advisory.

  - JDK Double.parseDouble Denial-Of-Service (CVE-2010-4476)

  - tomcat: remote DoS via NIO connector (CVE-2011-0534)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0214 advisory.

    These packages provide the OpenJDK 6 Java Runtime Environment and the     OpenJDK 6 Software Development Kit.

    A denial of service flaw was found in the way certain strings were     converted to Double objects. A remote attacker could use this flaw to cause     Java-based applications to hang, for instance if they parse Double values     in a specially-crafted HTTP request. (CVE-2010-4476)

    All users of java-1.6.0-openjdk are advised to upgrade to these updated     packages, which resolve this issue. All running instances of OpenJDK Java     must be restarted for the update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0291 advisory.

    The IBM 1.5.0 Java release includes the IBM Java 2 Runtime Environment and     the IBM Java 2 Software Development Kit.

    A denial of service flaw was found in the way certain strings were     converted to Double objects. A remote attacker could use this flaw to cause     Java based applications to hang, for example, if they parsed Double values     in a specially-crafted HTTP request. (CVE-2010-4476)

    All users of java-1.5.0-ibm are advised to upgrade to these updated     packages, containing the IBM 1.5.0 SR12-FP3 Java release. All running     instances of IBM Java must be restarted for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201406-32 (IcedTea JDK: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in the IcedTea JDK. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, cause a Denial of Service condition, obtain       sensitive information, bypass intended security policies, or have other       unspecified impact.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Published	Updated	Severity
193667	RHEL 5 : tomcat6 (RHSA-2011:0348)	Nessus	Red Hat Local Security Checks	4/21/2024	4/22/2024	medium
51952	RHEL 6 : java-1.6.0-openjdk (RHSA-2011:0214)	Nessus	Red Hat Local Security Checks	2/11/2011	4/14/2025	high
52064	RHEL 6 : java-1.5.0-ibm (RHSA-2011:0291)	Nessus	Red Hat Local Security Checks	2/23/2011	4/14/2025	high
76303	GLSA-201406-32 : IcedTea JDK: Multiple vulnerabilities (BEAST) (ROBOT)	Nessus	Gentoo Local Security Checks	6/30/2014	12/5/2022	critical

Detections

Analytics

Plugins Search

medium

high

high

critical