It was discovered that the Java HttpServer class did not limit the number of headers read from a HTTP request. A remote attacker could cause a denial of service by sending special requests that trigger hash collisions predictably. (CVE-2011-5035)

ATTENTION: this update changes previous Java HttpServer class behavior by limiting the number of request headers to 200. This may be increased by adjusting the sun.net.httpserver.maxReqHeaders property.

It was discovered that the Java Sound component did not properly check buffer boundaries. A remote attacker could use this to cause a denial of service or view confidential data. (CVE-2011-3563)

It was discovered that the Java2D implementation does not properly check graphics rendering objects before passing them to the native renderer. A remote attacker could use this to cause a denial of service or to bypass Java sandbox restrictions. (CVE-2012-0497)

It was discovered that an off-by-one error exists in the Java ZIP file processing code. An attacker could us this to cause a denial of service through a maliciously crafted ZIP file. (CVE-2012-0501)

It was discovered that the Java AWT KeyboardFocusManager did not properly enforce keyboard focus security policy. A remote attacker could use this with an untrusted application or applet to grab keyboard focus and possibly expose confidential data. (CVE-2012-0502)

It was discovered that the Java TimeZone class did not properly enforce security policy around setting the default time zone. A remote attacker could use this with an untrusted application or applet to set a new default time zone and bypass Java sandbox restrictions.
(CVE-2012-0503)

It was discovered the Java ObjectStreamClass did not throw an accurately identifiable exception when a deserialization failure occurred. A remote attacker could use this with an untrusted application or applet to bypass Java sandbox restrictions.
(CVE-2012-0505)

It was discovered that the Java CORBA implementation did not properly protect repository identifiers on certain CORBA objects. A remote attacker could use this to corrupt object data. (CVE-2012-0506)

It was discovered that the Java AtomicReferenceArray class implementation did not properly check if an array was of the expected Object[] type. A remote attacker could use this with a malicious application or applet to bypass Java sandbox restrictions.
(CVE-2012-0507).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0514 advisory.

  - OpenJDK: JavaSound incorrect bounds check (Sound, 7088367) (CVE-2011-3563)

  - GlassFish: hash table collisions CPU usage DoS (oCERT-2011-003) (CVE-2011-5035)

  - OpenJDK: insufficient checking of the graphics rendering object (2D, 7112642) (CVE-2012-0497)

  - Oracle JDK: unspecified vulnerability fixed in 6u31 and 7u3 (2D) (CVE-2012-0498, CVE-2012-0499)

  - Oracle JDK: unspecified vulnerability fixed in 6u31 and 7u3 (Deployment) (CVE-2012-0500)

  - OpenJDK: off-by-one bug in ZIP reading code (JRE, 7118283) (CVE-2012-0501)

  - OpenJDK: KeyboardFocusManager focus stealing (AWT, 7110683) (CVE-2012-0502)

  - OpenJDK: unrestricted use of TimeZone.setDefault() (i18n, 7110687) (CVE-2012-0503)

  - OpenJDK: incomplete info in the deserialization exception (Serialization, 7110700) (CVE-2012-0505)

  - OpenJDK: mutable repository identifiers (CORBA, 7110704) (CVE-2012-0506)

  - OpenJDK: AtomicReferenceArray insufficient array type check (Concurrency, 7082299) (CVE-2012-0507)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0322 advisory.

    [1.6.0.0-1.25.1.10.6.0.1.el5_8]
    - Add oracle-enterprise.patch

    [1:1.6.0.0-1.25.1.10.6]
    - Updated to IcedTea6 1.10.6
    - Resolves: rhbz#787142
    - Security fixes
      - S7082299: Fix in AtomicReferenceArray
      - S7088367: Fix issues in java sound
      - S7110683: Issues with some KeyboardFocusManager method
      - S7110687: Issues with TimeZone class
      - S7110700: Enhance exception throwing mechanism in ObjectStreamClass
      - S7110704: Issues with some method in corba
      - S7112642: Incorrect checking for graphics rendering object
      - S7118283: Better input parameter checking in zip file processing
      - S7126960: Add property to limit number of request headers to the HTTP Server
    - Bug fixes
      - RH580478: Desktop files should not use hardcoded path
    - Removed and deleted upstreamed  patch7 - name-rmi-fix.patch
    - Removed and deleted upstreamed Hugepages patches:
      - Source100: 7034464-hugepage.patch
      - Source101: 7037939-hugepage.patch
      - Source102: 7043564-hugepage.patch

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-315:02 advisory.

    The OpenJDK runtime environment.
    Security issues fixed with this release:
    CVE-2011-3571     Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle Virtualization     3.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related     to Session.
    CVE-2011-5035     Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System     Application Server 8.1 and 8.2, and possibly other products, computes hash values for form parameters     without restricting the ability to trigger hash collisions predictably, which allows remote attackers to     cause a denial of service (CPU consumption) by sending many crafted parameters, aka Oracle security ticket     S0104869.
    CVE-2011-3563     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and     earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote     attackers to affect confidentiality and availability via unknown vectors related to Sound.
    CVE-2012-0497     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and     earlier, and 6 Update 30 and earlier, allows remote attackers to affect confidentiality, integrity, and     availability via unknown vectors related to 2D.
    CVE-2012-0501     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and     earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect     availability via unknown vectors.
    CVE-2012-0502     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and     earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote     untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and     availability, related to AWT.
    CVE-2012-0503     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and     earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote     untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and     availability, related to I18n.
    CVE-2012-0505     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and     earlier, 6 Update 30 and earlier, 5 Update 33 and earlier, and 1.4.2_35 and earlier allows remote     untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and     availability via unknown vectors related to Serialization.
    CVE-2012-0506     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and     earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote     untrusted Java Web Start applications and untrusted Java applets to affect integrity via unknown vectors     related to CORBA.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 9.2.4, 10.0.2, 10.3.5, 10.3.6 and 12.1.1. Easily exploitable vulnerability allows successful unauthenticated network attacks via HTTP. Successful attack of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server.

The remote Mac OS X host is running a version of Java for Mac OS X 10.7 that is missing update 2012-001, which updates the Java version to 1.6.0_31.  As such, it is affected by several security vulnerabilities, the most serious of which may allow an untrusted Java applet to execute arbitrary code with the privileges of the current user outside the Java sandbox.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0135 advisory.

    [1:1.6.0.0-1.43.1.10.6]
    - Updated to IcedTea6 1.10.6
    - Resolves: rhbz#787144
    - Security fixes
      - S7082299: Fix in AtomicReferenceArray
      - S7088367: Fix issues in java sound
      - S7110683: Issues with some KeyboardFocusManager method
      - S7110687: Issues with TimeZone class
      - S7110700: Enhance exception throwing mechanism in ObjectStreamClass
      - S7110704: Issues with some method in corba
      - S7112642: Incorrect checking for graphics rendering object
      - S7118283: Better input parameter checking in zip file processing
      - S7126960: Add property to limit number of request headers to the HTTP Server
    - Bug fixes
      - RH580478: Desktop files should not use hardcoded path
    - Removed upstreamed patch7 - java-1.6.0-openjdk-6_2-Z-rmi-fix.patch

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
58130	Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : openjdk-6 vulnerabilities (USN-1373-1)	Nessus	Ubuntu Local Security Checks	2/27/2012	3/8/2022	critical
58866	RHEL 5 / 6 : java-1.6.0-ibm (RHSA-2012:0514)	Nessus	Red Hat Local Security Checks	4/25/2012	4/21/2024	critical
68487	Oracle Linux 5 : java-1.6.0-openjdk (ELSA-2012-0322)	Nessus	Oracle Linux Local Security Checks	7/12/2013	10/22/2024	high
284221	MiracleLinux 4 : java-1.6.0-openjdk-1.6.0.0-1.43.1.10.6.AXS4 (AXSA:2012-315:02)	Nessus	Miracle Linux Local Security Checks	1/14/2026	2/12/2026	high
107968	Solaris 10 (x86) : 128641-30	Nessus	Solaris Local Security Checks	3/12/2018	1/14/2021	medium
58606	Mac OS X : Java for OS X Lion 2012-001	Nessus	MacOS X Local Security Checks	4/5/2012	11/27/2023	critical
68459	Oracle Linux 6 : java-1.6.0-openjdk (ELSA-2012-0135)	Nessus	Oracle Linux Local Security Checks	7/12/2013	10/22/2024	high

Detections

Analytics

Plugins Search

critical

critical

high

high

medium

critical

high