Test ID:	1.3.6.1.4.1.25623.1.0.800386
Category:	Denial of Service
Title:	Sun Java JRE Multiple Vulnerabilities - Linux
Summary:	Sun Java JRE is prone to Multiple Vulnerabilities.
Description:	Summary: Sun Java JRE is prone to Multiple Vulnerabilities. Vulnerability Insight: For more information about vulnerabilities on Sun Java go through reference. Vulnerability Impact: Successful exploitation allows remote attacker to cause XSS, arbitrary code execution, various buffer overflows, bypass security restrictions and can cause denial of service attacks inside the context of the affected system. Affected Software/OS: Sun Java JRE 6 Update 12 and prior. Sun Java JRE 5.0 Update 17 and prior. Sun Java JRE 1.4.2_19 and prior. Sun Java JRE 1.3.1_24 and prior. Solution: Upgrade to JDK/JRE version 6 Update 13 Upgrade to JDK/JRE version 5 Update 18 Upgrade to SDK/JRE version 1.4.2_20 Upgrade to SDK/JRE version 1.3.1_25. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1093 BugTraq ID: 34240 http://www.securityfocus.com/bid/34240 Bugtraq: 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components (Google Search) http://www.securityfocus.com/archive/1/507985/100/0/threaded Debian Security Information: DSA-1769 (Google Search) http://www.debian.org/security/2009/dsa-1769 http://security.gentoo.org/glsa/glsa-200911-02.xml HPdes Security Advisory: HPSBMA02429 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 HPdes Security Advisory: HPSBUX02429 http://marc.info/?l=bugtraq&m=124344236532162&w=2 HPdes Security Advisory: SSRT090058 http://www.mandriva.com/security/advisories?name=MDVSA-2009:137 http://www.mandriva.com/security/advisories?name=MDVSA-2009:162 http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-19-1 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11343 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6676 RedHat Security Advisories: RHSA-2009:0377 https://rhn.redhat.com/errata/RHSA-2009-0377.html http://www.redhat.com/support/errata/RHSA-2009-0392.html http://www.redhat.com/support/errata/RHSA-2009-0394.html http://www.redhat.com/support/errata/RHSA-2009-1038.html RedHat Security Advisories: RHSA-2009:1198 https://rhn.redhat.com/errata/RHSA-2009-1198.html http://www.securitytracker.com/id?1021893 http://secunia.com/advisories/34489 http://secunia.com/advisories/34495 http://secunia.com/advisories/34496 http://secunia.com/advisories/34632 http://secunia.com/advisories/34675 http://secunia.com/advisories/35156 http://secunia.com/advisories/35223 http://secunia.com/advisories/35255 http://secunia.com/advisories/35416 http://secunia.com/advisories/35776 http://secunia.com/advisories/36185 http://secunia.com/advisories/37386 http://secunia.com/advisories/37460 http://sunsolve.sun.com/search/document.do?assetkey=1-66-254569-1 SuSE Security Announcement: SUSE-SA:2009:016 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html SuSE Security Announcement: SUSE-SA:2009:029 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html SuSE Security Announcement: SUSE-SA:2009:036 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html SuSE Security Announcement: SUSE-SR:2009:011 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html http://www.ubuntu.com/usn/usn-748-1 http://www.vupen.com/english/advisories/2009/1426 http://www.vupen.com/english/advisories/2009/3316 Common Vulnerability Exposure (CVE) ID: CVE-2009-1094 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11064 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6598 http://www.vupen.com/english/advisories/2009/1900 Common Vulnerability Exposure (CVE) ID: CVE-2009-1095 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=781 http://sunsolve.sun.com/search/document.do?assetkey=1-21-125137-14-1 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10124 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6643 http://www.securitytracker.com/id?1021894 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020225.1-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-254570-1 Common Vulnerability Exposure (CVE) ID: CVE-2009-1096 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6659 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8844 Common Vulnerability Exposure (CVE) ID: CVE-2009-1097 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=779 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=780 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11241 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6288 http://www.securitytracker.com/id?1021913 http://sunsolve.sun.com/search/document.do?assetkey=1-26-254571-1 XForce ISS Database: jre-gif-file-bo(49475) https://exchange.xforce.ibmcloud.com/vulnerabilities/49475 Common Vulnerability Exposure (CVE) ID: CVE-2009-1098 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6008 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9956 Common Vulnerability Exposure (CVE) ID: CVE-2009-1099 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=777 http://sunsolve.sun.com/search/document.do?assetkey=1-21-118669-19-1 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5726 Common Vulnerability Exposure (CVE) ID: CVE-2009-1100 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6224 http://www.securitytracker.com/id?1021917 http://sunsolve.sun.com/search/document.do?assetkey=1-66-254608-1 Common Vulnerability Exposure (CVE) ID: CVE-2009-1101 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10152 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6412 http://www.securitytracker.com/id?1021918 http://sunsolve.sun.com/search/document.do?assetkey=1-66-254609-1 Common Vulnerability Exposure (CVE) ID: CVE-2009-1102 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10300 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6722 http://www.securitytracker.com/id?1021919 http://sunsolve.sun.com/search/document.do?assetkey=1-66-254610-1 Common Vulnerability Exposure (CVE) ID: CVE-2009-1103 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6542 http://www.securitytracker.com/id?1021920 http://sunsolve.sun.com/search/document.do?assetkey=1-66-254611-1 XForce ISS Database: jre-javaplugin-privilege-escalation(49456) https://exchange.xforce.ibmcloud.com/vulnerabilities/49456 Common Vulnerability Exposure (CVE) ID: CVE-2009-1104 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6584 XForce ISS Database: jre-plugin-javascriptcode-unauthorized-access(49457) https://exchange.xforce.ibmcloud.com/vulnerabilities/49457 Common Vulnerability Exposure (CVE) ID: CVE-2009-1105 http://lists.apple.com/archives/security-announce/2010//May/msg00001.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6642 http://secunia.com/advisories/39819 http://www.vupen.com/english/advisories/2010/1191 XForce ISS Database: jre-plugin-weak-security(49458) https://exchange.xforce.ibmcloud.com/vulnerabilities/49458 Common Vulnerability Exposure (CVE) ID: CVE-2009-1106 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6619 XForce ISS Database: jre-plugin-crossdomain-info-disclosure(49459) https://exchange.xforce.ibmcloud.com/vulnerabilities/49459 Common Vulnerability Exposure (CVE) ID: CVE-2009-1107 http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-14-1 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6585 XForce ISS Database: jre-plugin-signedapplet-unauth-access(49460) https://exchange.xforce.ibmcloud.com/vulnerabilities/49460
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.