Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18 allows remote attackers to affect integrity and availability via unknown vectors.

The remote VMware ESX / ESXi host is missing a security-related patch.
It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries :

  - Apache Tomcat 
  - Apache Tomcat Manager
  - cURL 
  - Java Runtime Environment (JRE)
  - Kernel 
  - Microsoft SQL Express
  - OpenSSL
  - pam_krb5

The version of Oracle (formerly Sun) Java Runtime Environment (JRE) installed on the remote host is earlier than 6 Update 19 / 5.0 Update 24 / 1.4.2_26.  Such versions are potentially affected by security issues in the following components :

  - ImageIO
  - Java 2D
  - JRE
  - Java Web Start, Java Plug-in
  - Pack200
  - Sound
  - JSSE
  - HotSpot Server

CVE-2009-3555 TLS: MITM attacks via session renegotiation

CVE-2010-0082 OpenJDK Loader-constraint table allows arrays instead of only the base-classes (6626217)

CVE-2010-0084 OpenJDK Policy/PolicyFile leak dynamic ProtectionDomains. (6633872)

CVE-2010-0085 OpenJDK File TOCTOU deserialization vulnerability (6736390)

CVE-2010-0088 OpenJDK Inflater/Deflater clone issues (6745393)

CVE-2010-0091 OpenJDK Unsigned applet can retrieve the dragged information before drop action occurs(6887703)

CVE-2010-0092 OpenJDK AtomicReferenceArray causes SIGSEGV -> SEGV_MAPERR error (6888149)

CVE-2010-0093 OpenJDK System.arraycopy unable to reference elements beyond Integer.MAX_VALUE bytes (6892265)

CVE-2010-0094 OpenJDK Deserialization of RMIConnectionImpl objects should enforce stricter checks (6893947)

CVE-2010-0095 OpenJDK Subclasses of InetAddress may incorrectly interpret network addresses (6893954)

CVE-2010-0845 OpenJDK No ClassCastException for HashAttributeSet constructors if run with -Xcomp (6894807)

CVE-2010-0838 OpenJDK CMM readMabCurveData Buffer Overflow Vulnerability (6899653)

CVE-2010-0837 OpenJDK JAR 'unpack200' must verify input parameters (6902299)

CVE-2010-0840 OpenJDK Applet Trusted Methods Chaining Privilege Escalation Vulnerability (6904691)

CVE-2010-0841 OpenJDK JPEGImageReader stepX Integer Overflow Vulnerability (6909597)

CVE-2010-0848 OpenJDK AWT Library Invalid Index Vulnerability (6914823)

CVE-2010-0847 OpenJDK ImagingLib arbitrary code execution vulnerability (6914866)

CVE-2010-0846 JDK unspecified vulnerability in ImageIO component

CVE-2010-0849 JDK unspecified vulnerability in Java2D component

CVE-2010-0087 JDK unspecified vulnerability in JWS/Plugin component

CVE-2010-0839 CVE-2010-0842 CVE-2010-0843 CVE-2010-0844 JDK multiple unspecified vulnerabilities

CVE-2010-0090 JDK unspecified vulnerability in JavaWS/Plugin component

CVE-2010-0089 JDK unspecified vulnerability in JavaWS/Plugin component

This update fixes several vulnerabilities in the Sun Java 6 Runtime Environment and the Sun Java 6 Software Development Kit. Further information about these flaws can be found on the 'Oracle Java SE and Java for Business Critical Patch Update Advisory' page, listed in the References section. (CVE-2009-3555, CVE-2010-0082, CVE-2010-0084,

CVE-2010-0085, CVE-2010-0087, CVE-2010-0088, CVE-2010-0089,

CVE-2010-0090, CVE-2010-0091, CVE-2010-0092, CVE-2010-0093,

CVE-2010-0094, CVE-2010-0095, CVE-2010-0837, CVE-2010-0838,

CVE-2010-0839, CVE-2010-0840, CVE-2010-0841, CVE-2010-0842,

CVE-2010-0843, CVE-2010-0844, CVE-2010-0845, CVE-2010-0846,

CVE-2010-0847, CVE-2010-0848, CVE-2010-0849)

For the CVE-2009-3555 issue, this update disables renegotiation in the Java Secure Socket Extension (JSSE) component. Unsafe renegotiation can be re-enabled using the sun.security.ssl.allowUnsafeRenegotiation property.

All running instances of Sun Java must be restarted for the update to take effect.

a. vCenter Server and vCenter Update Manager update Microsoft    SQL Server 2005 Express Edition to Service Pack 3

   Microsoft SQL Server 2005 Express Edition (SQL Express)    distributed with vCenter Server 4.1 Update 1 and vCenter Update    Manager 4.1 Update 1 is upgraded from  SQL Express Service Pack 2    to SQL Express Service Pack 3, to address multiple security    issues that exist in the earlier releases of Microsoft SQL Express.

   Customers using other database solutions need not update for    these issues.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2008-5416, CVE-2008-0085, CVE-2008-0086,    CVE-2008-0107 and CVE-2008-0106 to the issues addressed in MS SQL    Express Service Pack 3.

b. vCenter Apache Tomcat Management Application Credential Disclosure

   The Apache Tomcat Manager application configuration file contains    logon credentials that can be read by unprivileged local users.

   The issue is resolved by removing the Manager application in    vCenter 4.1 Update 1.

   If vCenter 4.1 is updated to vCenter 4.1 Update 1 the logon    credentials are not present in the configuration file after the    update.

   VMware would like to thank Claudio Criscione of Secure Networking    for reporting this issue to us.

   The Common Vulnerabilities and Exposures Project (cve.mitre.org)    has assigned the name CVE-2010-2928 to this issue.

c. vCenter Server and ESX, Oracle (Sun) JRE is updated to version    1.6.0_21

   Oracle (Sun) JRE update to version 1.6.0_21, which addresses    multiple security issues that existed in earlier releases of    Oracle (Sun) JRE.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the following names to the security issues fixed in    Oracle (Sun) JRE 1.6.0_19: CVE-2009-3555, CVE-2010-0082,    CVE-2010-0084, CVE-2010-0085, CVE-2010-0087, CVE-2010-0088,    CVE-2010-0089, CVE-2010-0090, CVE-2010-0091, CVE-2010-0092,    CVE-2010-0093, CVE-2010-0094, CVE-2010-0095, CVE-2010-0837,    CVE-2010-0838, CVE-2010-0839, CVE-2010-0840, CVE-2010-0841,    CVE-2010-0842, CVE-2010-0843, CVE-2010-0844, CVE-2010-0845,    CVE-2010-0846, CVE-2010-0847, CVE-2010-0848, CVE-2010-0849,    CVE-2010-0850.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the following name to the security issue fixed in    Oracle (Sun) JRE 1.6.0_20: CVE-2010-0886.

d. vCenter Update Manager Oracle (Sun) JRE is updated to version   1.5.0_26

   Oracle (Sun) JRE update to version 1.5.0_26, which addresses    multiple security issues that existed in earlier releases of    Oracle (Sun) JRE.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the following names to the security issues fixed in    Oracle (Sun) JRE 1.5.0_26: CVE-2010-3556, CVE-2010-3566,    CVE-2010-3567, CVE-2010-3550, CVE-2010-3561, CVE-2010-3573,    CVE-2010-3565,CVE-2010-3568, CVE-2010-3569,  CVE-2009-3555,    CVE-2010-1321, CVE-2010-3548, CVE-2010-3551, CVE-2010-3562,    CVE-2010-3571, CVE-2010-3554, CVE-2010-3559, CVE-2010-3572,    CVE-2010-3553, CVE-2010-3549, CVE-2010-3557, CVE-2010-3541,    CVE-2010-3574.

e. vCenter Server and ESX Apache Tomcat updated to version 6.0.28

   Apache Tomcat updated to version 6.0.28, which addresses multiple    security issues that existed in earlier releases of Apache Tomcat

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the following names to the security issues fixed in    Apache Tomcat 6.0.24: CVE-2009-2693, CVE-2009-2901, CVE-2009-2902,i    and CVE-2009-3548.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the following names to the security issues fixed in    Apache Tomcat 6.0.28: CVE-2010-2227, CVE-2010-1157.

f. vCenter Server third-party component OpenSSL updated to version    0.9.8n

   The version of the OpenSSL library in vCenter Server is updated to    0.9.8n.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2010-0740 and CVE-2010-0433 to the    issues addressed in this version of OpenSSL.

g. ESX third-party component OpenSSL updated to version 0.9.8p

   The version of the ESX OpenSSL library is updated to 0.9.8p.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2010-3864 and CVE-2010-2939 to the    issues addressed in this update.

h. ESXi third-party component cURL updated

   The version of cURL library in ESXi is updated.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2010-0734 to the issues addressed in    this update.

i. ESX third-party component pam_krb5 updated

   The version of pam_krb5 library is updated.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2008-3825 and CVE-2009-1384 to the    issues addressed in the update.

j. ESX third-party update for Service Console kernel

   The Service Console kernel is updated to include kernel version    2.6.18-194.11.1.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2010-1084, CVE-2010-2066, CVE-2010-2070,    CVE-2010-2226, CVE-2010-2248, CVE-2010-2521, CVE-2010-2524,    CVE-2010-0008, CVE-2010-0415, CVE-2010-0437, CVE-2009-4308,    CVE-2010-0003, CVE-2010-0007, CVE-2010-0307, CVE-2010-1086,    CVE-2010-0410, CVE-2010-0730, CVE-2010-1085, CVE-2010-0291,    CVE-2010-0622, CVE-2010-1087, CVE-2010-1173, CVE-2010-1437,    CVE-2010-1088, CVE-2010-1187, CVE-2010-1436, CVE-2010-1641, and    CVE-2010-3081 to the issues addressed in the update.

   Notes :
   - The update also addresses the 64-bit compatibility mode    stack pointer underflow issue identified by CVE-2010-3081. This    issue was patched in an ESX 4.1 patch prior to the release of    ESX 4.1 Update 1 and in a previous ESX 4.0 patch release.
   - The update also addresses CVE-2010-2240 for ESX 4.0.

This update of IBM Java 6 to Service Request 8 to fixes the following security issues :

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality via unknown     vectors. (CVE-2010-0084)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0085)

  - Unspecified vulnerability in the Java Web Start, Java     Plug-in component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0087)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0088)

  - Unspecified vulnerability in the Java Web Start, Java     Plug-in component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect availability via unknown     vectors. (CVE-2010-0089)

  - Unspecified vulnerability in the Java Web Start, Java     Plug-in component in Oracle Java SE and Java for     Business 6 Update 18 allows remote attackers to affect     integrity and availability via unknown vectors.
    (CVE-2010-0090)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality via unknown     vectors. (CVE-2010-0091)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, and 5.0 Update 23 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. (CVE-2010-0092)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18 and 5.0 Update 23 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is due to missing privilege checks during     deserialization of RMIConnectionImpl objects, which     allows remote attackers to call system-level Java     functions via the class loader of a constructor that is     being deserialized. (CVE-2010-0094)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality, integrity,     and availability via unknown vectors. (CVE-2010-0095)

  - Unspecified vulnerability in the Pack200 component in     Oracle Java SE and Java for Business 6 Update 18, 5.0,     Update, and 23 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0837)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0,     Update, and 23 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. NOTE: the previous information was obtained     from the March 2010 CPU. Oracle has not commented on     claims from a reliable researcher that this is a     stack-based buffer overflow using an untrusted size     value in the readMabCurveData function in the CMM module     of the JVM. (CVE-2010-0838)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. (CVE-2010-0839)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality, integrity,     and availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is related to improper checks when executing     privileged methods in the Java Runtime Environment     (JRE), which allows attackers to execute arbitrary code     via (1) an untrusted object that extends the trusted     class but has not modified a certain method, or (2) 'a     similar trust issue with interfaces,' aka 'Trusted     Methods Chaining Remote Code Execution Vulnerability.'.
    (CVE-2010-0840)

  - Unspecified vulnerability in the ImageIO component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, and 1.4.2_25 allows remote attackers to     affect confidentiality, integrity, and availability via     unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is an integer overflow in the Java Runtime Environment     that allows remote attackers to execute arbitrary code     via a JPEG image that contains subsample dimensions with     large values, related to JPEGImageReader and 'stepX'.
    (CVE-2010-0841)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is an uncontrolled array index that allows remote     attackers to execute arbitrary code via a MIDI file with     a crafted MixerSequencer object, related to the GM_Song     structure. (CVE-2010-0842)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is related to XNewPtr and improper handling of an     integer parameter when allocating heap memory in the     com.sun.media.sound libraries, which allows remote     attackers to execute arbitrary code. (CVE-2010-0843)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is for improper parsing of a crafted MIDI stream when     creating a MixerSequencer object, which causes a pointer     to be corrupted and allows a NULL byte to be written to     arbitrary memory. (CVE-2010-0844)

  - Unspecified vulnerability in the ImageIO component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow that allows     remote attackers to execute arbitrary code, related to     an 'invalid assignment' and inconsistent length values     in a JPEG image encoder (JPEGImageEncoderImpl).
    (CVE-2010-0846)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow that allows     arbitrary code execution via a crafted image.
    (CVE-2010-0847)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. (CVE-2010-0848)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow in a decoding     routine used by the JPEGImageDecoderImpl interface,     which allows code execution via a crafted JPEG image.
    (CVE-2010-0849)

Please also see http://www.ibm.com/developerworks/java/jdk/alerts/ for a more up to date list on what was fixed.

Sun Java 6 was updated to Update 19, fixing a large number of security issues: CVE-2009-3555 / CVE-2010-0082 / CVE-2010-0084 / CVE-2010-0085 / CVE-2010-0087 / CVE-2010-0088 / CVE-2010-0089 / CVE-2010-0090 / CVE-2010-0091 / CVE-2010-0092 / CVE-2010-0093 / CVE-2010-0094 / CVE-2010-0095 / CVE-2010-0837 / CVE-2010-0838 / CVE-2010-0839 / CVE-2010-0840 / CVE-2010-0841 / CVE-2010-0842 / CVE-2010-0843 / CVE-2010-0844 / CVE-2010-0845 / CVE-2010-0846 / CVE-2010-0847 / CVE-2010-0848 / CVE-2010-0849 / CVE-2010-0850.

This update of IBM Java 6 to SR 8 to fixes the following security issues :

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality via unknown     vectors. (CVE-2010-0084)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0085)

  - Unspecified vulnerability in the Java Web Start, Java     Plug-in component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0087)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, 1.4.225, and     1.3.127 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0088)

  - Unspecified vulnerability in the Java Web Start, Java     Plug-in component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect availability via unknown     vectors. (CVE-2010-0089)

  - Unspecified vulnerability in the Java Web Start, Java     Plug-in component in Oracle Java SE and Java for     Business 6 Update 18 allows remote attackers to affect     integrity and availability via unknown vectors.
    (CVE-2010-0090)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality via unknown     vectors. (CVE-2010-0091)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, and 5.0 Update 23 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. (CVE-2010-0092)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18 and 5.0 Update 23 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is due to missing privilege checks during     deserialization of RMIConnectionImpl objects, which     allows remote attackers to call system-level Java     functions via the class loader of a constructor that is     being deserialized. (CVE-2010-0094)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality, integrity,     and availability via unknown vectors. (CVE-2010-0095)

  - Unspecified vulnerability in the Pack200 component in     Oracle Java SE and Java for Business 6 Update 18, 5.0,     Update, and 23 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. (CVE-2010-0837)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0,     Update, and 23 allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors. NOTE: the previous information was obtained     from the March 2010 CPU. Oracle has not commented on     claims from a reliable researcher that this is a     stack-based buffer overflow using an untrusted size     value in the readMabCurveData function in the CMM module     of the JVM. (CVE-2010-0838)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. (CVE-2010-0839)

  - Unspecified vulnerability in the Java Runtime     Environment component in Oracle Java SE and Java for     Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows     remote attackers to affect confidentiality, integrity,     and availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is related to improper checks when executing     privileged methods in the Java Runtime Environment     (JRE), which allows attackers to execute arbitrary code     via (1) an untrusted object that extends the trusted     class but has not modified a certain method, or (2) 'a     similar trust issue with interfaces,' aka 'Trusted     Methods Chaining Remote Code Execution Vulnerability.'.
    (CVE-2010-0840)

  - Unspecified vulnerability in the ImageIO component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, and 1.4.2_25 allows remote attackers to     affect confidentiality, integrity, and availability via     unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is an integer overflow in the Java Runtime Environment     that allows remote attackers to execute arbitrary code     via a JPEG image that contains subsample dimensions with     large values, related to JPEGImageReader and 'stepX'.
    (CVE-2010-0841)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is an uncontrolled array index that allows remote     attackers to execute arbitrary code via a MIDI file with     a crafted MixerSequencer object, related to the GM_Song     structure. (CVE-2010-0842)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is related to XNewPtr and improper handling of an     integer parameter when allocating heap memory in the     com.sun.media.sound libraries, which allows remote     attackers to execute arbitrary code. (CVE-2010-0843)

  - Unspecified vulnerability in the Sound component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.225, and 1.3.1 27 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors. NOTE: the previous information was     obtained from the March 2010 CPU. Oracle has not     commented on claims from a reliable researcher that this     is for improper parsing of a crafted MIDI stream when     creating a MixerSequencer object, which causes a pointer     to be corrupted and allows a NULL byte to be written to     arbitrary memory. (CVE-2010-0844)

  - Unspecified vulnerability in the ImageIO component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow that allows     remote attackers to execute arbitrary code, related to     an 'invalid assignment' and inconsistent length values     in a JPEG image encoder (JPEGImageEncoderImpl).
    (CVE-2010-0846)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow that allows     arbitrary code execution via a crafted image.
    (CVE-2010-0847)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. (CVE-2010-0848)

  - Unspecified vulnerability in the Java 2D component in     Oracle Java SE and Java for Business 6 Update 18, 5.0     Update 23, 1.4.2_25, and 1.3.1_27 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the March 2010 CPU. Oracle     has not commented on claims from a reliable researcher     that this is a heap-based buffer overflow in a decoding     routine used by the JPEGImageDecoderImpl interface,     which allows code execution via a crafted JPEG image.
    (CVE-2010-0849)

Please also see http://www.ibm.com/developerworks/java/jdk/alerts/ for a more up to date list on what was fixed

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0471 advisory.

    This update corrects several security vulnerabilities in the IBM Java     Runtime Environment shipped as part of Red Hat Network Satellite Server     5.3. In a typical operating environment, these are of low security risk as     the runtime is not used on untrusted applets.

    Several flaws were fixed in the IBM Java 2 Runtime Environment.
    (CVE-2010-0084, CVE-2010-0085, CVE-2010-0087, CVE-2010-0088, CVE-2010-0089,     CVE-2010-0090, CVE-2010-0091, CVE-2010-0092, CVE-2010-0094, CVE-2010-0095,     CVE-2010-0837, CVE-2010-0838, CVE-2010-0839, CVE-2010-0840, CVE-2010-0841,     CVE-2010-0842, CVE-2010-0843, CVE-2010-0844, CVE-2010-0846, CVE-2010-0848,     CVE-2010-0849)

    Users of Red Hat Network Satellite Server 5.3 are advised to upgrade to     these updated java-1.6.0-ibm packages, which resolve these issues. For this     update to take effect, Red Hat Network Satellite Server must be restarted     (/usr/sbin/rhn-satellite restart), as well as all running instances of     IBM Java.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201006-18 (Oracle JRE/JDK: Multiple vulnerabilities)

    Multiple vulnerabilities have been reported in the Oracle Java     implementation. Please review the CVE identifiers referenced below and     the associated Oracle Critical Patch Update Advisory for details.
  Impact :

    A remote attacker could exploit these vulnerabilities to cause     unspecified impact, possibly including remote execution of arbitrary     code.
  Workaround :

    There is no known workaround at this time.

The remote Mac OS X host is running a version of Java for Mac OS X 10.6 that is missing Update 2.

The remote version of this software contains several security vulnerabilities, including some that may allow untrusted Java applets to obtain elevated privileges and lead to execution of arbitrary code with the privileges of the current user.

The remote Mac OS X host is running a version of Java for Mac OS X 10.5 that is missing Update 7.

The remote version of this software contains several security vulnerabilities, including some that may allow untrusted Java applets to obtain elevated privileges and lead to execution of arbitrary code with the privileges of the current user.

Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary.

The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The IBM 1.6.0 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit.

This update fixes several vulnerabilities in the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. These vulnerabilities are summarized on the IBM 'Security alerts' page listed in the References section. (CVE-2010-0084, CVE-2010-0085, CVE-2010-0087, CVE-2010-0088, CVE-2010-0089, CVE-2010-0090, CVE-2010-0091, CVE-2010-0092, CVE-2010-0094, CVE-2010-0095, CVE-2010-0837, CVE-2010-0838, CVE-2010-0839, CVE-2010-0840, CVE-2010-0841, CVE-2010-0842, CVE-2010-0843, CVE-2010-0844, CVE-2010-0846, CVE-2010-0848, CVE-2010-0849)

All users of java-1.6.0-ibm are advised to upgrade to these updated packages, containing the IBM 1.6.0 SR8 Java release. All running instances of IBM Java must be restarted for the update to take effect.

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0337 advisory.

    The Sun 1.6.0 Java release includes the Sun Java 6 Runtime Environment and     the Sun Java 6 Software Development Kit.

    This update fixes several vulnerabilities in the Sun Java 6 Runtime     Environment and the Sun Java 6 Software Development Kit. Further     information about these flaws can be found on the Oracle Java SE and Java     for Business Critical Patch Update Advisory page, listed in the     References section. (CVE-2009-3555, CVE-2010-0082, CVE-2010-0084,     CVE-2010-0085, CVE-2010-0087, CVE-2010-0088, CVE-2010-0089, CVE-2010-0090,     CVE-2010-0091, CVE-2010-0092, CVE-2010-0093, CVE-2010-0094, CVE-2010-0095,     CVE-2010-0837, CVE-2010-0838, CVE-2010-0839, CVE-2010-0840, CVE-2010-0841,     CVE-2010-0842, CVE-2010-0843, CVE-2010-0844, CVE-2010-0845, CVE-2010-0846,     CVE-2010-0847, CVE-2010-0848, CVE-2010-0849)

    For the CVE-2009-3555 issue, this update disables renegotiation in the Java     Secure Socket Extension (JSSE) component. Unsafe renegotiation can be     re-enabled using the sun.security.ssl.allowUnsafeRenegotiation property.
    Refer to the following Knowledgebase article for details:
    http://kbase.redhat.com/faq/docs/DOC-20491

    Users of java-1.6.0-sun should upgrade to these updated packages, which     correct these issues. All running instances of Sun Java must be restarted     for the update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Sun Java 6 was updated to Update 19, fixing a large number of security issues.

CVE-2009-3555 CVE-2010-0082 CVE-2010-0084 CVE-2010-0085 CVE-2010-0087 CVE-2010-0088 CVE-2010-0089 CVE-2010-0090 CVE-2010-0091 CVE-2010-0092 CVE-2010-0093 CVE-2010-0094 CVE-2010-0095 CVE-2010-0837 CVE-2010-0838 CVE-2010-0839 CVE-2010-0840 CVE-2010-0841 CVE-2010-0842 CVE-2010-0843 CVE-2010-0844 CVE-2010-0845 CVE-2010-0846 CVE-2010-0847 CVE-2010-0848 CVE-2010-0849 CVE-2010-0850

The version of Oracle (formerly Sun) Java Runtime Environment (JRE) installed on the remote host is earlier than 6 Update 19 / 5.0 Update 24 / 1.4.2_26. Such versions are potentially affected by security issues in the following components :

  - ImageIO
   - Java 2D
   - JRE
   - Java Web Start, Java Plug-in
   - Pack200
   - Sound
   - JSSE
   - HotSpot Server

ID	Name	Product	Family	Severity
89674	VMware ESX / ESXi Third-Party Libraries Multiple Vulnerabilities (VMSA-2011-0003) (remote check)	Nessus	Misc.	high
64842	Oracle Java SE Multiple Vulnerabilities (March 2010 CPU) (Unix)	Nessus	Misc.	high
60777	Scientific Linux Security Update : java (jdk 1.6.0) on SL4.x, SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	high
51971	VMSA-2011-0003 : Third-party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX	Nessus	VMware ESX Local Security Checks	high
51606	SuSE 11.1 Security Update : IBM Java 6 (SAT Patch Number 2553)	Nessus	SuSE Local Security Checks	high
50917	SuSE 11 Security Update : Sun Java 6 (SAT Patch Number 2225)	Nessus	SuSE Local Security Checks	high
50916	SuSE 11 Security Update : IBM Java 6 (SAT Patch Number 2548)	Nessus	SuSE Local Security Checks	high
47017	RHEL 5 : Red Hat Network Satellite Server IBM Java Runtime (RHSA-2010:0471)	Nessus	Red Hat Local Security Checks	critical
46807	GLSA-201006-18 : Oracle JRE/JDK: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
46674	Mac OS X : Java for Mac OS X 10.6 Update 2	Nessus	MacOS X Local Security Checks	critical
46673	Mac OS X : Java for Mac OS X 10.5 Update 7	Nessus	MacOS X Local Security Checks	critical
46304	RHEL 4 / 5 : java-1.6.0-ibm (RHSA-2010:0383)	Nessus	Red Hat Local Security Checks	high
46293	RHEL 5 : java-1.6.0-sun (RHSA-2010:0337)	Nessus	Red Hat Local Security Checks	critical
45465	openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-2228)	Nessus	SuSE Local Security Checks	high
45459	openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-2228)	Nessus	SuSE Local Security Checks	high
45454	openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-2228)	Nessus	SuSE Local Security Checks	high
45379	Oracle Java SE Multiple Vulnerabilities (March 2010 CPU)	Nessus	Windows	high

Detections

Analytics

CVE-2010-0090

critical

Tenable Plugins

high

high

high

high

high

high

high

critical

critical

critical

critical

high

critical

high

high

high

high