ID de Prueba:	1.3.6.1.4.1.25623.1.0.65988
Categoría:	SuSE Local Security Checks
Título:	SLES10: Security update for IBM Java 1.4.2
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java-1_4_2-ibm java-1_4_2-ibm-devel java-1_4_2-ibm-jdbc java-1_4_2-ibm-plugin More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ Solution: Please install the updates provided by SuSE. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1196 http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html Cert/CC Advisory: TA08-066A http://www.us-cert.gov/cas/techalerts/TA08-066A.html CERT/CC vulnerability note: VU#223028 http://www.kb.cert.org/vuls/id/223028 http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml http://security.gentoo.org/glsa/glsa-200804-28.xml http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10412 http://www.redhat.com/support/errata/RHSA-2008-0186.html http://www.redhat.com/support/errata/RHSA-2008-0210.html http://www.redhat.com/support/errata/RHSA-2008-0267.html http://www.redhat.com/support/errata/RHSA-2008-0555.html http://www.securitytracker.com/id?1019552 http://secunia.com/advisories/29239 http://secunia.com/advisories/29273 http://secunia.com/advisories/29498 http://secunia.com/advisories/29582 http://secunia.com/advisories/29858 http://secunia.com/advisories/29897 http://secunia.com/advisories/30676 http://secunia.com/advisories/30780 http://secunia.com/advisories/31067 http://secunia.com/advisories/31497 http://secunia.com/advisories/31580 http://secunia.com/advisories/31586 http://secunia.com/advisories/32018 http://sunsolve.sun.com/search/document.do?assetkey=1-26-233327-1 SuSE Security Announcement: SUSE-SA:2008:018 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html SuSE Security Announcement: SUSE-SA:2008:025 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html http://www.vupen.com/english/advisories/2008/0770/references http://www.vupen.com/english/advisories/2008/1856/references XForce ISS Database: sun-java-webstart-javaws-bo(41026) https://exchange.xforce.ibmcloud.com/vulnerabilities/41026 Common Vulnerability Exposure (CVE) ID: CVE-2008-1195 Bugtraq: 20080327 rPSA-2008-0128-1 firefox (Google Search) http://www.securityfocus.com/archive/1/490196/100/0/threaded Cert/CC Advisory: TA08-087A http://www.us-cert.gov/cas/techalerts/TA08-087A.html http://www.mandriva.com/security/advisories?name=MDVSA-2008:080 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9486 http://www.securitytracker.com/id?1019553 http://secunia.com/advisories/29526 http://secunia.com/advisories/29541 http://secunia.com/advisories/29547 http://secunia.com/advisories/29560 http://secunia.com/advisories/29645 http://secunia.com/advisories/30620 http://sunsolve.sun.com/search/document.do?assetkey=1-26-233326-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 SuSE Security Announcement: SUSE-SA:2008:019 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html http://www.ubuntu.com/usn/usn-592-1 http://www.vupen.com/english/advisories/2008/0998/references http://www.vupen.com/english/advisories/2008/1793/references XForce ISS Database: sun-jre-javascript-unauthorized-access(41030) https://exchange.xforce.ibmcloud.com/vulnerabilities/41030 Common Vulnerability Exposure (CVE) ID: CVE-2008-1192 http://dev2dev.bea.com/pub/advisory/277 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11813 http://www.securitytracker.com/id?1019550 http://secunia.com/advisories/29841 http://sunsolve.sun.com/search/document.do?assetkey=1-26-233324-1 http://www.vupen.com/english/advisories/2008/1252 XForce ISS Database: java-plugin-unspecified-security-bypass(41031) https://exchange.xforce.ibmcloud.com/vulnerabilities/41031 Common Vulnerability Exposure (CVE) ID: CVE-2008-1190 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9914 http://www.securitytracker.com/id?1019549 http://sunsolve.sun.com/search/document.do?assetkey=1-26-233323-1 XForce ISS Database: javawebstart-application-priv-escalation(41029) https://exchange.xforce.ibmcloud.com/vulnerabilities/41029 Common Vulnerability Exposure (CVE) ID: CVE-2008-1189 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9582 XForce ISS Database: javawebstart-multiple-unspecified-bo(41133) https://exchange.xforce.ibmcloud.com/vulnerabilities/41133 XForce ISS Database: javawebstart-unspecified-bo(41135) https://exchange.xforce.ibmcloud.com/vulnerabilities/41135 Common Vulnerability Exposure (CVE) ID: CVE-2008-1187 http://jvn.jp/en/jp/JVN04032535/index.html http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000016.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10278 http://www.redhat.com/support/errata/RHSA-2008-0243.html http://www.redhat.com/support/errata/RHSA-2008-0244.html http://www.redhat.com/support/errata/RHSA-2008-0245.html http://www.securitytracker.com/id?1019548 http://secunia.com/advisories/29999 http://secunia.com/advisories/30003 http://sunsolve.sun.com/search/document.do?assetkey=1-26-233322-1 XForce ISS Database: java-virtualmachine-multiple-priv-escalation(41025) https://exchange.xforce.ibmcloud.com/vulnerabilities/41025 Common Vulnerability Exposure (CVE) ID: CVE-2007-5232 http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html http://dev2dev.bea.com/pub/advisory/272 BugTraq ID: 25918 http://www.securityfocus.com/bid/25918 Bugtraq: 20071029 FLEA-2007-0061-1 sun-jre sun-jdk (Google Search) http://www.securityfocus.com/archive/1/482926/100/0/threaded CERT/CC vulnerability note: VU#336105 http://www.kb.cert.org/vuls/id/336105 HPdes Security Advisory: HPSBUX02284 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533 HPdes Security Advisory: SSRT071483 http://conference.hitb.org/hitbsecconf2007kl/?page_id=148 http://conference.hitb.org/hitbsecconf2007kl/materials/D2T1%20-%20Billy%20Rios%20-%20Slipping%20Past%20the%20Firewall.pdf http://docs.info.apple.com/article.html?artnum=307177 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9331 http://www.redhat.com/support/errata/RHSA-2007-0963.html http://www.redhat.com/support/errata/RHSA-2007-1041.html http://www.redhat.com/support/errata/RHSA-2008-0100.html http://www.redhat.com/support/errata/RHSA-2008-0132.html http://www.redhat.com/support/errata/RHSA-2008-0156.html http://www.securitytracker.com/id?1018768 http://secunia.com/advisories/27206 http://secunia.com/advisories/27261 http://secunia.com/advisories/27693 http://secunia.com/advisories/27716 http://secunia.com/advisories/27804 http://secunia.com/advisories/28115 http://secunia.com/advisories/28777 http://secunia.com/advisories/28880 http://secunia.com/advisories/29042 http://secunia.com/advisories/29214 http://secunia.com/advisories/29340 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103079-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-201519-1 SuSE Security Announcement: SUSE-SA:2007:055 (Google Search) http://www.novell.com/linux/security/advisories/2007_55_java.html http://www.vupen.com/english/advisories/2007/3895 http://www.vupen.com/english/advisories/2007/4224 http://www.vupen.com/english/advisories/2008/0609 XForce ISS Database: sun-java-appletcaching-security-bypass(36941) https://exchange.xforce.ibmcloud.com/vulnerabilities/36941 Common Vulnerability Exposure (CVE) ID: CVE-2007-5274 http://crypto.stanford.edu/dns/dns-rebinding.pdf https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10908 http://securitytracker.com/id?1018771 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103078-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-200041-1 Common Vulnerability Exposure (CVE) ID: CVE-2007-5273 http://seclists.org/fulldisclosure/2007/Jul/0159.html http://osvdb.org/45527 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10340 Common Vulnerability Exposure (CVE) ID: CVE-2007-5236 BugTraq ID: 25920 http://www.securityfocus.com/bid/25920 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6115 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103073-1 XForce ISS Database: javaweb-cache-information-disclosure(36946) https://exchange.xforce.ibmcloud.com/vulnerabilities/36946 Common Vulnerability Exposure (CVE) ID: CVE-2007-5238 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11592 http://www.securitytracker.com/id?1018770 Common Vulnerability Exposure (CVE) ID: CVE-2007-5239 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8758 http://securitytracker.com/id?1018814 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103072-1 XForce ISS Database: sun-java-dragdrop-weak-security(36950) https://exchange.xforce.ibmcloud.com/vulnerabilities/36950 Common Vulnerability Exposure (CVE) ID: CVE-2007-5240 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10783 http://www.securitytracker.com/id?1018769 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103071-1 XForce ISS Database: sun-javawarning-weak-security(36942) https://exchange.xforce.ibmcloud.com/vulnerabilities/36942 Common Vulnerability Exposure (CVE) ID: CVE-2007-4381 http://dev2dev.bea.com/pub/advisory/248 BugTraq ID: 25340 http://www.securityfocus.com/bid/25340 http://www.gentoo.org/security/en/glsa/glsa-200709-15.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10290 http://www.redhat.com/support/errata/RHSA-2007-0956.html http://www.redhat.com/support/errata/RHSA-2007-1086.html http://www.securitytracker.com/id?1018576 http://secunia.com/advisories/26402 http://secunia.com/advisories/26631 http://secunia.com/advisories/26933 http://secunia.com/advisories/27203 http://secunia.com/advisories/28056 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103024-1 http://www.vupen.com/english/advisories/2007/2910 http://www.vupen.com/english/advisories/2007/3009 XForce ISS Database: sun-java-font-privilege-escalation(36061) https://exchange.xforce.ibmcloud.com/vulnerabilities/36061 Common Vulnerability Exposure (CVE) ID: CVE-2007-3698 http://dev2dev.bea.com/pub/advisory/249 BugTraq ID: 24846 http://www.securityfocus.com/bid/24846 Cisco Security Advisory: 20070725 Vulnerability in Java Secure Socket Extension http://www.cisco.com/en/US/products/products_security_response09186a008088bd19.html HPdes Security Advisory: HPSBMA02288 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01269450 HPdes Security Advisory: SSRT071465 http://osvdb.org/36663 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10634 http://www.redhat.com/support/errata/RHSA-2007-0818.html http://www.securitytracker.com/id?1018357 http://secunia.com/advisories/26015 http://secunia.com/advisories/26221 http://secunia.com/advisories/26314 http://secunia.com/advisories/26645 http://secunia.com/advisories/27635 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102997-1 http://www.vupen.com/english/advisories/2007/2495 http://www.vupen.com/english/advisories/2007/2660 http://www.vupen.com/english/advisories/2007/3861 XForce ISS Database: sun-jsse-ssltls-dos(35333) https://exchange.xforce.ibmcloud.com/vulnerabilities/35333
Copyright	Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.