Test ID:	1.3.6.1.4.1.25623.1.0.58623
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 200709-15 (jrockit-jdk-bin)
Summary:	The remote host is missing updates announced in;advisory GLSA 200709-15.
Description:	Summary: The remote host is missing updates announced in advisory GLSA 200709-15. Vulnerability Insight: BEA JRockit contains several vulnerabilities, some of which may allow the execution of arbitrary code. Solution: All BEA JRockit users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-java/jrockit-jdk-bin-1.5.0.11_p1' CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-3922 http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html http://dev2dev.bea.com/pub/advisory/248 BugTraq ID: 25054 http://www.securityfocus.com/bid/25054 http://www.gentoo.org/security/en/glsa/glsa-200709-15.xml HPdes Security Advisory: HPSBMA02288 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01269450 HPdes Security Advisory: SSRT071465 http://docs.info.apple.com/article.html?artnum=307177 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10387 http://www.redhat.com/support/errata/RHSA-2007-0818.html http://www.redhat.com/support/errata/RHSA-2007-0829.html http://www.redhat.com/support/errata/RHSA-2008-0133.html http://www.securitytracker.com/id?1018428 http://secunia.com/advisories/26314 http://secunia.com/advisories/26369 http://secunia.com/advisories/26631 http://secunia.com/advisories/26645 http://secunia.com/advisories/26933 http://secunia.com/advisories/27266 http://secunia.com/advisories/27635 http://secunia.com/advisories/28115 http://secunia.com/advisories/30805 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.486841 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102995-1 SuSE Security Announcement: SUSE-SA:2007:056 (Google Search) http://www.novell.com/linux/security/advisories/2007_56_ibmjava.html http://www.vupen.com/english/advisories/2007/2573 http://www.vupen.com/english/advisories/2007/3009 http://www.vupen.com/english/advisories/2007/3861 http://www.vupen.com/english/advisories/2007/4224 XForce ISS Database: sun-java-class-unauthorized-access(35491) https://exchange.xforce.ibmcloud.com/vulnerabilities/35491 Common Vulnerability Exposure (CVE) ID: CVE-2007-4381 BugTraq ID: 25340 http://www.securityfocus.com/bid/25340 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10290 http://www.redhat.com/support/errata/RHSA-2007-0956.html http://www.redhat.com/support/errata/RHSA-2007-1086.html http://www.redhat.com/support/errata/RHSA-2008-0100.html http://www.redhat.com/support/errata/RHSA-2008-0132.html http://www.securitytracker.com/id?1018576 http://secunia.com/advisories/26402 http://secunia.com/advisories/27203 http://secunia.com/advisories/27716 http://secunia.com/advisories/28056 http://secunia.com/advisories/28777 http://secunia.com/advisories/28880 http://secunia.com/advisories/29340 http://secunia.com/advisories/29897 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103024-1 SuSE Security Announcement: SUSE-SA:2008:025 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html http://www.vupen.com/english/advisories/2007/2910 XForce ISS Database: sun-java-font-privilege-escalation(36061) https://exchange.xforce.ibmcloud.com/vulnerabilities/36061 Common Vulnerability Exposure (CVE) ID: CVE-2007-3503 BugTraq ID: 24690 http://www.securityfocus.com/bid/24690 http://osvdb.org/36488 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10704 http://www.securitytracker.com/id?1018327 http://secunia.com/advisories/25769 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102958-1 http://www.vupen.com/english/advisories/2007/2383 XForce ISS Database: sun-jdk-javadoc-xss(35168) https://exchange.xforce.ibmcloud.com/vulnerabilities/35168 Common Vulnerability Exposure (CVE) ID: CVE-2007-3698 http://dev2dev.bea.com/pub/advisory/249 BugTraq ID: 24846 http://www.securityfocus.com/bid/24846 Cisco Security Advisory: 20070725 Vulnerability in Java Secure Socket Extension http://www.cisco.com/en/US/products/products_security_response09186a008088bd19.html http://osvdb.org/36663 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10634 http://www.securitytracker.com/id?1018357 http://secunia.com/advisories/26015 http://secunia.com/advisories/26221 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102997-1 http://www.vupen.com/english/advisories/2007/2495 http://www.vupen.com/english/advisories/2007/2660 XForce ISS Database: sun-jsse-ssltls-dos(35333) https://exchange.xforce.ibmcloud.com/vulnerabilities/35333 Common Vulnerability Exposure (CVE) ID: CVE-2007-3716 Bugtraq: 20070712 Command Injection in XML Digital Signatures (Google Search) http://www.securityfocus.com/archive/1/473552/100/0/threaded Bugtraq: 20070712 Whitepaper: Command Injection in XML Digital Signatures and Encryption (Google Search) http://www.securityfocus.com/archive/1/473553/100/0/threaded http://www.isecpartners.com/advisories/2007-04-dsig.txt http://www.isecpartners.com/files/XMLDSIG_Command_Injection.pdf http://osvdb.org/36664 http://www.securitytracker.com/id?1018365 http://secunia.com/advisories/26031 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102993-1 http://www.vupen.com/english/advisories/2007/2492 Common Vulnerability Exposure (CVE) ID: CVE-2007-2789 BugTraq ID: 24004 http://www.securityfocus.com/bid/24004 http://www.gentoo.org/security/en/glsa/glsa-200705-23.xml http://security.gentoo.org/glsa/glsa-200706-08.xml http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml http://security.gentoo.org/glsa/glsa-200804-28.xml http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml http://scary.beasts.org/security/CESA-2006-004.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10800 http://www.redhat.com/support/errata/RHSA-2007-0817.html http://www.redhat.com/support/errata/RHSA-2008-0261.html http://www.securitytracker.com/id?1018182 http://secunia.com/advisories/25295 http://secunia.com/advisories/25474 http://secunia.com/advisories/25832 http://secunia.com/advisories/26049 http://secunia.com/advisories/26119 http://secunia.com/advisories/26311 http://secunia.com/advisories/29858 http://secunia.com/advisories/30780 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102934-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-200856-1 SuSE Security Announcement: SUSE-SA:2007:045 (Google Search) http://www.novell.com/linux/security/advisories/2007_45_java.html http://www.attrition.org/pipermail/vim/2007-July/001696.html http://www.attrition.org/pipermail/vim/2007-July/001697.html http://www.attrition.org/pipermail/vim/2007-July/001708.html http://www.attrition.org/pipermail/vim/2007-December/001862.html http://www.vupen.com/english/advisories/2007/1836 XForce ISS Database: sun-java-virtual-machine-dos(34654) https://exchange.xforce.ibmcloud.com/vulnerabilities/34654 XForce ISS Database: sunjava-bmp-dos(34320) https://exchange.xforce.ibmcloud.com/vulnerabilities/34320 Common Vulnerability Exposure (CVE) ID: CVE-2007-2788 BugTraq ID: 24267 http://www.securityfocus.com/bid/24267 CERT/CC vulnerability note: VU#138545 http://www.kb.cert.org/vuls/id/138545 http://lists.vmware.com/pipermail/security-announce/2008/000003.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11700 http://secunia.com/advisories/28365 http://www.vupen.com/english/advisories/2008/0065 XForce ISS Database: sun-java-image-bo(34652) https://exchange.xforce.ibmcloud.com/vulnerabilities/34652 XForce ISS Database: sunjava-iccprofile-overflow(34318) https://exchange.xforce.ibmcloud.com/vulnerabilities/34318
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.