ID de Prueba:	1.3.6.1.4.1.25623.1.0.62804
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2008:1018
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2008:1018. The Java Runtime Environment (JRE) contains the software and tools that users need to run applets and applications written using the Java programming language. A vulnerability was found in in Java Web Start. If a user visits a malicious website, an attacker could misuse this flaw to execute arbitrary code. (CVE-2008-2086) Additionally, these packages fix several other critical vulnerabilities. These are summarized in the Advance notification of Security Updates for Java SE from Sun Microsystems. Users of java-1.6.0-sun should upgrade to these updated packages, which correct these issues. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2008-1018.html http://www.redhat.com/security/updates/classification/#critical http://blogs.sun.com/security/entry/advance_notification_of_security_updates3 Risk factor : Critical CVSS Score: 9.3
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-2086 http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html BugTraq ID: 32620 http://www.securityfocus.com/bid/32620 Bugtraq: 20081204 CVE-2008-2086: Java Web Start File Inclusion via System PropertiesOverride (Google Search) http://www.securityfocus.com/archive/1/498907/100/0/threaded Cert/CC Advisory: TA08-340A http://www.us-cert.gov/cas/techalerts/TA08-340A.html http://security.gentoo.org/glsa/glsa-200911-02.xml HPdes Security Advisory: HPSBMA02486 http://marc.info/?l=bugtraq&m=126583436323697&w=2 HPdes Security Advisory: HPSBUX02411 http://marc.info/?l=bugtraq&m=123678756409861&w=2 HPdes Security Advisory: SSRT080111 HPdes Security Advisory: SSRT090049 http://www.vsecurity.com/bulletins/advisories/2008/JWS-props.txt http://osvdb.org/50510 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5601 http://www.redhat.com/support/errata/RHSA-2008-1018.html RedHat Security Advisories: RHSA-2008:1025 http://rhn.redhat.com/errata/RHSA-2008-1025.html http://www.redhat.com/support/errata/RHSA-2009-0015.html http://www.redhat.com/support/errata/RHSA-2009-0016.html http://www.redhat.com/support/errata/RHSA-2009-0445.html http://www.securitytracker.com/id?1021318 http://secunia.com/advisories/32991 http://secunia.com/advisories/33015 http://secunia.com/advisories/33528 http://secunia.com/advisories/33710 http://secunia.com/advisories/34233 http://secunia.com/advisories/34605 http://secunia.com/advisories/34889 http://secunia.com/advisories/35065 http://secunia.com/advisories/37386 http://secunia.com/advisories/38539 http://securityreason.com/securityalert/4693 http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1 SuSE Security Announcement: SUSE-SA:2009:007 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html SuSE Security Announcement: SUSE-SA:2009:018 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html SuSE Security Announcement: SUSE-SR:2009:010 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html http://www.vupen.com/english/advisories/2009/0424 http://www.vupen.com/english/advisories/2009/0672
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.