CVE ID:	CVE-2011-0706
Description:	The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attackers to gain privileges via unknown vectors related to multiple signers and the assignment of "an inappropriate security descriptor."
Test IDs:	1.3.6.1.4.1.25623.1.0.69567
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0706 43350 http://secunia.com/advisories/43350 46439 http://www.securityfocus.com/bid/46439 DSA-2224 http://www.debian.org/security/2011/dsa-2224 FEDORA-2011-1631 http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054115.html FEDORA-2011-1645 http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054134.html GLSA-201406-32 http://security.gentoo.org/glsa/glsa-201406-32.xml MDVSA-2011:054 http://www.mandriva.com/security/advisories?name=MDVSA-2011:054 http://dbhole.wordpress.com/2011/02/15/icedtea-web-1-0-1-released/ http://dbhole.wordpress.com/2011/02/15/icedtea-web-1-0-1-released/ https://bugzilla.redhat.com/show_bug.cgi?id=677332 https://bugzilla.redhat.com/show_bug.cgi?id=677332 icedtea-jnlpclassloader-priv-esc(65534) https://exchange.xforce.ibmcloud.com/vulnerabilities/65534 oval:org.mitre.oval:def:14117 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14117