CVE ID:	CVE-2009-3884
Description:	The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3884 37386 http://secunia.com/advisories/37386 37581 http://secunia.com/advisories/37581 APPLE-SA-2009-12-03-1 http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html APPLE-SA-2009-12-03-2 http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html GLSA-200911-02 http://security.gentoo.org/glsa/glsa-200911-02.xml MDVSA-2010:084 http://www.mandriva.com/security/advisories?name=MDVSA-2010:084 http://java.sun.com/j2se/1.5.0/ReleaseNotes.html http://java.sun.com/j2se/1.5.0/ReleaseNotes.html http://java.sun.com/javase/6/webnotes/6u17.html http://java.sun.com/javase/6/webnotes/6u17.html http://support.apple.com/kb/HT3969 http://support.apple.com/kb/HT3969 http://support.apple.com/kb/HT3970 http://support.apple.com/kb/HT3970 https://bugzilla.redhat.com/show_bug.cgi?id=530300 https://bugzilla.redhat.com/show_bug.cgi?id=530300 oval:org.mitre.oval:def:11686 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11686 oval:org.mitre.oval:def:6960 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6960