ID de Prueba:	1.3.6.1.4.1.25623.1.0.69862
Categoría:	Fedora Local Security Checks
Título:	Fedora Core 14 FEDORA-2011-8003 (java-1.6.0-openjdk)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to java-1.6.0-openjdk announced via advisory FEDORA-2011-8003. Update Information: http://blog.fuseyism.com/index.php/2011/06/08/icedtea6-188-198-and-1102-released/ References: [ 1 ] Bug #706139 - CVE-2011-0862 OpenJDK: integer overflows in JPEGImageReader and font SunLayoutEngine (2D, 7013519) https://bugzilla.redhat.com/show_bug.cgi?id=706139 [ 2 ] Bug #706245 - CVE-2011-0864 OpenJDK: JVM memory corruption via certain bytecode (HotSpot, 7020373) https://bugzilla.redhat.com/show_bug.cgi?id=706245 [ 3 ] Bug #706106 - CVE-2011-0865 OpenJDK: Deserialization allows creation of mutable SignedObject (Deserialization, 6618658) https://bugzilla.redhat.com/show_bug.cgi?id=706106 [ 4 ] Bug #706153 - CVE-2011-0867 OpenJDK: NetworkInterface information leak (Networking, 7013969) https://bugzilla.redhat.com/show_bug.cgi?id=706153 [ 5 ] Bug #706241 - CVE-2011-0868 OpenJDK: incorrect numeric type conversion in TransformHelper (2D, 7016495) https://bugzilla.redhat.com/show_bug.cgi?id=706241 [ 6 ] Bug #706234 - CVE-2011-0869 OpenJDK: unprivileged proxy settings change via SOAPConnection (SAAJ, 7013971) https://bugzilla.redhat.com/show_bug.cgi?id=706234 [ 7 ] Bug #706248 - CVE-2011-0871 OpenJDK: MediaTracker created Component instances with unnecessary privileges (Swing, 7020198) https://bugzilla.redhat.com/show_bug.cgi?id=706248 Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update java-1.6.0-openjdk' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2011-8003 Risk factor : Critical CVSS Score: 10.0
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0872 Cert/CC Advisory: TA11-201A http://www.us-cert.gov/cas/techalerts/TA11-201A.html http://security.gentoo.org/glsa/glsa-201406-32.xml HPdes Security Advisory: HPSBMU02797 http://marc.info/?l=bugtraq&m=134254957702612&w=2 HPdes Security Advisory: HPSBMU02799 http://marc.info/?l=bugtraq&m=134254866602253&w=2 HPdes Security Advisory: HPSBUX02697 http://marc.info/?l=bugtraq&m=132439520301822&w=2 HPdes Security Advisory: SSRT100591 HPdes Security Advisory: SSRT100867 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14241 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14915 http://secunia.com/advisories/44930 SuSE Security Announcement: SUSE-SA:2011:030 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00003.html SuSE Security Announcement: SUSE-SA:2011:032 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00002.html SuSE Security Announcement: SUSE-SA:2011:036 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00022.html SuSE Security Announcement: SUSE-SU-2011:0807 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00009.html SuSE Security Announcement: SUSE-SU-2011:0863 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00001.html SuSE Security Announcement: SUSE-SU-2011:0966 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00025.html SuSE Security Announcement: openSUSE-SU-2011:0633 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.html Common Vulnerability Exposure (CVE) ID: CVE-2011-0865 Debian Security Information: DSA-2311 (Google Search) http://www.debian.org/security/2011/dsa-2311 HPdes Security Advisory: HPSBUX02777 http://marc.info/?l=bugtraq&m=133728004526190&w=2 HPdes Security Advisory: SSRT100854 http://www.mandriva.com/security/advisories?name=MDVSA-2011:126 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14081 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14463 http://www.redhat.com/support/errata/RHSA-2011-0856.html http://www.redhat.com/support/errata/RHSA-2011-0857.html http://www.redhat.com/support/errata/RHSA-2011-0860.html http://www.redhat.com/support/errata/RHSA-2011-0938.html http://www.redhat.com/support/errata/RHSA-2011-1087.html http://www.redhat.com/support/errata/RHSA-2011-1159.html http://www.redhat.com/support/errata/RHSA-2011-1265.html RedHat Security Advisories: RHSA-2013:1455 http://rhn.redhat.com/errata/RHSA-2013-1455.html http://secunia.com/advisories/44818 http://secunia.com/advisories/49198 Common Vulnerability Exposure (CVE) ID: CVE-2011-0815 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14335 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14896 Common Vulnerability Exposure (CVE) ID: CVE-2011-0822 Common Vulnerability Exposure (CVE) ID: CVE-2011-0862 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13317 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14541 Common Vulnerability Exposure (CVE) ID: CVE-2011-0867 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14240 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14693 Common Vulnerability Exposure (CVE) ID: CVE-2011-0869 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14338 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14644 Common Vulnerability Exposure (CVE) ID: CVE-2011-0870 Common Vulnerability Exposure (CVE) ID: CVE-2011-0868 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14264 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14827 Common Vulnerability Exposure (CVE) ID: CVE-2011-0871 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14112 Common Vulnerability Exposure (CVE) ID: CVE-2011-0864 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14225 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14632 Common Vulnerability Exposure (CVE) ID: CVE-2010-4465 Debian Security Information: DSA-2224 (Google Search) http://www.debian.org/security/2011/dsa-2224 http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054115.html http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054134.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:054 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12925 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14034 http://www.redhat.com/support/errata/RHSA-2011-0281.html http://www.redhat.com/support/errata/RHSA-2011-0282.html http://www.redhat.com/support/errata/RHSA-2011-0880.html http://secunia.com/advisories/43350 http://secunia.com/advisories/44954 SuSE Security Announcement: SUSE-SA:2011:024 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html SuSE Security Announcement: SUSE-SU-2011:0823 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html Common Vulnerability Exposure (CVE) ID: CVE-2010-4469 BugTraq ID: 46400 http://www.securityfocus.com/bid/46400 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12833 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13639 XForce ISS Database: oracle-hotspot-code-exec(65399) https://exchange.xforce.ibmcloud.com/vulnerabilities/65399 Common Vulnerability Exposure (CVE) ID: CVE-2010-4470 BugTraq ID: 46387 http://www.securityfocus.com/bid/46387 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12887 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14076 XForce ISS Database: oracle-runtime-dos(65404) https://exchange.xforce.ibmcloud.com/vulnerabilities/65404 Common Vulnerability Exposure (CVE) ID: CVE-2010-4448 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12906 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14045 Common Vulnerability Exposure (CVE) ID: CVE-2010-4450 BugTraq ID: 46397 http://www.securityfocus.com/bid/46397 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12420 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14135 XForce ISS Database: oracle-java-launcher-code-exec(65406) https://exchange.xforce.ibmcloud.com/vulnerabilities/65406 Common Vulnerability Exposure (CVE) ID: CVE-2010-4471 BugTraq ID: 46399 http://www.securityfocus.com/bid/46399 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12089 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14417 XForce ISS Database: oracle-runtime-information-disclosure(65405) https://exchange.xforce.ibmcloud.com/vulnerabilities/65405 Common Vulnerability Exposure (CVE) ID: CVE-2010-4472 BugTraq ID: 46404 http://www.securityfocus.com/bid/46404 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12903 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14118 XForce ISS Database: oracle-java-xml-dos(65411) https://exchange.xforce.ibmcloud.com/vulnerabilities/65411 Common Vulnerability Exposure (CVE) ID: CVE-2011-0706 BugTraq ID: 46439 http://www.securityfocus.com/bid/46439 https://bugzilla.redhat.com/show_bug.cgi?id=677332 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14117 XForce ISS Database: icedtea-jnlpclassloader-priv-esc(65534) https://exchange.xforce.ibmcloud.com/vulnerabilities/65534 Common Vulnerability Exposure (CVE) ID: CVE-2010-4476 AIX APAR: IZ94423 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ94423 AIX APAR: PM31983 http://www-01.ibm.com/support/docview.wss?uid=swg1PM31983 Debian Security Information: DSA-2161 (Google Search) http://www.debian.org/security/2011/dsa-2161 http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053926.html http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053934.html HPdes Security Advisory: HPSBMA02642 http://marc.info/?l=bugtraq&m=130514352726432&w=2 HPdes Security Advisory: HPSBMU02690 http://marc.info/?l=bugtraq&m=131041767210772&w=2 HPdes Security Advisory: HPSBNS02633 http://www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02720715&admit=109447627+1298159618320+28353475 HPdes Security Advisory: HPSBOV02634 http://marc.info/?l=bugtraq&m=130497132406206&w=2 HPdes Security Advisory: HPSBOV02762 http://marc.info/?l=bugtraq&m=133469267822771&w=2 HPdes Security Advisory: HPSBTU02684 http://marc.info/?l=bugtraq&m=130497185606818&w=2 HPdes Security Advisory: HPSBUX02633 http://marc.info/?l=bugtraq&m=129899347607632&w=2 HPdes Security Advisory: HPSBUX02641 http://marc.info/?l=bugtraq&m=129960314701922&w=2 HPdes Security Advisory: HPSBUX02642 http://marc.info/?l=bugtraq&m=130270785502599&w=2 HPdes Security Advisory: HPSBUX02645 http://marc.info/?l=bugtraq&m=130168502603566&w=2 HPdes Security Advisory: HPSBUX02725 http://marc.info/?l=bugtraq&m=132215163318824&w=2 HPdes Security Advisory: HPSBUX02860 http://marc.info/?l=bugtraq&m=136485229118404&w=2 HPdes Security Advisory: SSRT100387 HPdes Security Advisory: SSRT100390 HPdes Security Advisory: SSRT100412 HPdes Security Advisory: SSRT100415 HPdes Security Advisory: SSRT100569 HPdes Security Advisory: SSRT100627 HPdes Security Advisory: SSRT100825 HPdes Security Advisory: SSRT101146 http://blog.fortify.com/blog/2011/02/08/Double-Trouble http://www.exploringbinary.com/java-hangs-when-converting-2-2250738585072012e-308/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12662 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12745 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14328 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14589 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19493 http://www.redhat.com/support/errata/RHSA-2011-0210.html http://www.redhat.com/support/errata/RHSA-2011-0211.html http://www.redhat.com/support/errata/RHSA-2011-0212.html http://www.redhat.com/support/errata/RHSA-2011-0213.html http://www.redhat.com/support/errata/RHSA-2011-0214.html http://www.redhat.com/support/errata/RHSA-2011-0333.html http://www.redhat.com/support/errata/RHSA-2011-0334.html http://www.securitytracker.com/id?1025062 http://secunia.com/advisories/43048 http://secunia.com/advisories/43280 http://secunia.com/advisories/43295 http://secunia.com/advisories/43304 http://secunia.com/advisories/43333 http://secunia.com/advisories/43378 http://secunia.com/advisories/43400 http://secunia.com/advisories/43659 http://secunia.com/advisories/45022 http://secunia.com/advisories/45555 http://www.vupen.com/english/advisories/2011/0365 http://www.vupen.com/english/advisories/2011/0377 http://www.vupen.com/english/advisories/2011/0379 http://www.vupen.com/english/advisories/2011/0422 http://www.vupen.com/english/advisories/2011/0434 http://www.vupen.com/english/advisories/2011/0605 Common Vulnerability Exposure (CVE) ID: CVE-2011-0025 BugTraq ID: 46110 http://www.securityfocus.com/bid/46110 http://icedtea.classpath.org/hg/release/icedtea-web-1.0?cmd=changeset;node=3bd328e4b515 http://secunia.com/advisories/43135 http://www.ubuntu.com/usn/USN-1055-1 XForce ISS Database: icedtea-jar-security-bypass(65151) https://exchange.xforce.ibmcloud.com/vulnerabilities/65151
Copyright	Copyright (c) 2011 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.