Test Kennung:	1.3.6.1.4.1.25623.1.0.58623
Kategorie:	Gentoo Local Security Checks
Titel:	Gentoo Security Advisory GLSA 200709-15 (jrockit-jdk-bin)
Zusammenfassung:	The remote host is missing updates announced in;advisory GLSA 200709-15.
Beschreibung:	Summary: The remote host is missing updates announced in advisory GLSA 200709-15. Vulnerability Insight: BEA JRockit contains several vulnerabilities, some of which may allow the execution of arbitrary code. Solution: All BEA JRockit users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-java/jrockit-jdk-bin-1.5.0.11_p1' CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2007-3922 http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html http://dev2dev.bea.com/pub/advisory/248 BugTraq ID: 25054 http://www.securityfocus.com/bid/25054 http://www.gentoo.org/security/en/glsa/glsa-200709-15.xml HPdes Security Advisory: HPSBMA02288 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01269450 HPdes Security Advisory: SSRT071465 http://docs.info.apple.com/article.html?artnum=307177 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10387 http://www.redhat.com/support/errata/RHSA-2007-0818.html http://www.redhat.com/support/errata/RHSA-2007-0829.html http://www.redhat.com/support/errata/RHSA-2008-0133.html http://www.securitytracker.com/id?1018428 http://secunia.com/advisories/26314 http://secunia.com/advisories/26369 http://secunia.com/advisories/26631 http://secunia.com/advisories/26645 http://secunia.com/advisories/26933 http://secunia.com/advisories/27266 http://secunia.com/advisories/27635 http://secunia.com/advisories/28115 http://secunia.com/advisories/30805 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.486841 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102995-1 SuSE Security Announcement: SUSE-SA:2007:056 (Google Search) http://www.novell.com/linux/security/advisories/2007_56_ibmjava.html http://www.vupen.com/english/advisories/2007/2573 http://www.vupen.com/english/advisories/2007/3009 http://www.vupen.com/english/advisories/2007/3861 http://www.vupen.com/english/advisories/2007/4224 XForce ISS Database: sun-java-class-unauthorized-access(35491) https://exchange.xforce.ibmcloud.com/vulnerabilities/35491 Common Vulnerability Exposure (CVE) ID: CVE-2007-4381 BugTraq ID: 25340 http://www.securityfocus.com/bid/25340 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10290 http://www.redhat.com/support/errata/RHSA-2007-0956.html http://www.redhat.com/support/errata/RHSA-2007-1086.html http://www.redhat.com/support/errata/RHSA-2008-0100.html http://www.redhat.com/support/errata/RHSA-2008-0132.html http://www.securitytracker.com/id?1018576 http://secunia.com/advisories/26402 http://secunia.com/advisories/27203 http://secunia.com/advisories/27716 http://secunia.com/advisories/28056 http://secunia.com/advisories/28777 http://secunia.com/advisories/28880 http://secunia.com/advisories/29340 http://secunia.com/advisories/29897 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103024-1 SuSE Security Announcement: SUSE-SA:2008:025 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html http://www.vupen.com/english/advisories/2007/2910 XForce ISS Database: sun-java-font-privilege-escalation(36061) https://exchange.xforce.ibmcloud.com/vulnerabilities/36061 Common Vulnerability Exposure (CVE) ID: CVE-2007-3503 BugTraq ID: 24690 http://www.securityfocus.com/bid/24690 http://osvdb.org/36488 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10704 http://www.securitytracker.com/id?1018327 http://secunia.com/advisories/25769 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102958-1 http://www.vupen.com/english/advisories/2007/2383 XForce ISS Database: sun-jdk-javadoc-xss(35168) https://exchange.xforce.ibmcloud.com/vulnerabilities/35168 Common Vulnerability Exposure (CVE) ID: CVE-2007-3698 http://dev2dev.bea.com/pub/advisory/249 BugTraq ID: 24846 http://www.securityfocus.com/bid/24846 Cisco Security Advisory: 20070725 Vulnerability in Java Secure Socket Extension http://www.cisco.com/en/US/products/products_security_response09186a008088bd19.html http://osvdb.org/36663 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10634 http://www.securitytracker.com/id?1018357 http://secunia.com/advisories/26015 http://secunia.com/advisories/26221 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102997-1 http://www.vupen.com/english/advisories/2007/2495 http://www.vupen.com/english/advisories/2007/2660 XForce ISS Database: sun-jsse-ssltls-dos(35333) https://exchange.xforce.ibmcloud.com/vulnerabilities/35333 Common Vulnerability Exposure (CVE) ID: CVE-2007-3716 Bugtraq: 20070712 Command Injection in XML Digital Signatures (Google Search) http://www.securityfocus.com/archive/1/473552/100/0/threaded Bugtraq: 20070712 Whitepaper: Command Injection in XML Digital Signatures and Encryption (Google Search) http://www.securityfocus.com/archive/1/473553/100/0/threaded http://www.isecpartners.com/advisories/2007-04-dsig.txt http://www.isecpartners.com/files/XMLDSIG_Command_Injection.pdf http://osvdb.org/36664 http://www.securitytracker.com/id?1018365 http://secunia.com/advisories/26031 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102993-1 http://www.vupen.com/english/advisories/2007/2492 Common Vulnerability Exposure (CVE) ID: CVE-2007-2789 BugTraq ID: 24004 http://www.securityfocus.com/bid/24004 http://www.gentoo.org/security/en/glsa/glsa-200705-23.xml http://security.gentoo.org/glsa/glsa-200706-08.xml http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml http://security.gentoo.org/glsa/glsa-200804-28.xml http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml http://scary.beasts.org/security/CESA-2006-004.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10800 http://www.redhat.com/support/errata/RHSA-2007-0817.html http://www.redhat.com/support/errata/RHSA-2008-0261.html http://www.securitytracker.com/id?1018182 http://secunia.com/advisories/25295 http://secunia.com/advisories/25474 http://secunia.com/advisories/25832 http://secunia.com/advisories/26049 http://secunia.com/advisories/26119 http://secunia.com/advisories/26311 http://secunia.com/advisories/29858 http://secunia.com/advisories/30780 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102934-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-200856-1 SuSE Security Announcement: SUSE-SA:2007:045 (Google Search) http://www.novell.com/linux/security/advisories/2007_45_java.html http://www.attrition.org/pipermail/vim/2007-July/001696.html http://www.attrition.org/pipermail/vim/2007-July/001697.html http://www.attrition.org/pipermail/vim/2007-July/001708.html http://www.attrition.org/pipermail/vim/2007-December/001862.html http://www.vupen.com/english/advisories/2007/1836 XForce ISS Database: sun-java-virtual-machine-dos(34654) https://exchange.xforce.ibmcloud.com/vulnerabilities/34654 XForce ISS Database: sunjava-bmp-dos(34320) https://exchange.xforce.ibmcloud.com/vulnerabilities/34320 Common Vulnerability Exposure (CVE) ID: CVE-2007-2788 BugTraq ID: 24267 http://www.securityfocus.com/bid/24267 CERT/CC vulnerability note: VU#138545 http://www.kb.cert.org/vuls/id/138545 http://lists.vmware.com/pipermail/security-announce/2008/000003.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11700 http://secunia.com/advisories/28365 http://www.vupen.com/english/advisories/2008/0065 XForce ISS Database: sun-java-image-bo(34652) https://exchange.xforce.ibmcloud.com/vulnerabilities/34652 XForce ISS Database: sunjava-iccprofile-overflow(34318) https://exchange.xforce.ibmcloud.com/vulnerabilities/34318
Copyright	Copyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.