Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier, when running on Windows, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Java Runtime Environment.

Oracle Java 6 Update 26 fixes several security vulnerabilities.

Please refer to Oracle's site for further information:
http://www.oracle.com/technetwork/topics/security/javacpujun e2011-313339.html

(CVE-2011-0862, CVE-2011-0873, CVE-2011-0815, CVE-2011-0817, CVE-2011-0863, CVE-2011-0864, CVE-2011-0802, CVE-2011-0814, CVE-2011-0871, CVE-2011-0786, CVE-2011-0788, CVE-2011-0866, CVE-2011-0868, CVE-2011-0872, CVE-2011-0867, CVE-2011-0869, CVE-2011-0865)

According to the version of one or more Juniper NSM servers running on the remote host, it is potentially affected by multiple vulnerabilities affecting the Java software running on the host.

The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is earlier than 6 Update 26 / 5.0 Update 30 / 1.4.2_32.  Such versions are potentially affected by security issues in the following components :

  - AWT
  - Deployment
  - Deserialization
  - Hotspot
  - Java Runtime Environment
  - Networking
  - NIO
  - SAAJ
  - Sound
  - Swing

The version of HP Systems Insight Manager installed on the remote Windows host is affected by vulnerabilities in the following components :

  - TLS and SSL protocols
  - Apache Tomcat
  - Java
  - Flash Player
  - BlazeDS/GraniteDS
  - Adobe LiveCycle
  - Adobe Flex SDK
  - Systems Insight Manager

Oracle Java 6 Update 26 fixes several security vulnerabilities.

Please refer to Oracle's site for further information:
http://www.oracle.com/technetwork/topics/security/javacpujune2011-3133 39.html

IBM Java 1.6.0 SR9-FP2 fixes several of bugs and thew following security issues :

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     integrity via unknown vectors related to     Deserialization. (CVE-2011-0865)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier, when running on Windows, allows remote     untrusted Java Web Start applications and untrusted Java     applets to affect confidentiality, integrity, and     availability via unknown vectors related to Java Runtime     Environment. (CVE-2011-0866)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, when running on Windows, allows remote     untrusted Java Web Start applications and untrusted Java     applets to affect confidentiality, integrity, and     availability via unknown vectors related to Deployment,     a different vulnerability than CVE-2011-0788.
    (CVE-2011-0786)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, when running on Windows, allows remote     untrusted Java Web Start applications and untrusted Java     applets to affect confidentiality, integrity, and     availability via unknown vectors related to Deployment,     a different vulnerability than CVE-2011-0786.
    (CVE-2011-0788)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, when running on Windows, allows remote     untrusted Java Web Start applications and untrusted Java     applets to affect confidentiality, integrity, and     availability via unknown vectors related to Deployment,     a different vulnerability than CVE-2011-0786.
    (CVE-2011-0802)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors related to Sound, a different vulnerability than     CVE-2011-0802. (CVE-2011-0814)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality, integrity, and availability via unknown     vectors related to AWT. (CVE-2011-0815)

  - Multiple unspecified vulnerabilities in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allow remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors related to 2D. (CVE-2011-0862)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality via unknown vectors related to     Networking. (CVE-2011-0867)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     26 and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality via unknown vectors related to SAAJ.
    (CVE-2011-0869)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, when running on Windows, allows remote     untrusted Java Web Start applications and untrusted Java     applets to affect confidentiality, integrity, and     availability via unknown vectors related to Deployment.
    (CVE-2011-0817)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality, integrity, and availability via unknown     vectors related to Deployment. (CVE-2011-0863)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier allows remote attackers to affect     confidentiality via unknown vectors related to 2D.
    (CVE-2011-0868)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality, integrity, and availability via unknown     vectors related to Swing. (CVE-2011-0871)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier allows remote attackers to affect     availability via unknown vectors related to NIO.
    (CVE-2011-0872)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, and 5.0 Update 29 and earlier, allows     remote attackers to affect confidentiality, integrity,     and availability via unknown vectors related to 2D.
    (CVE-2011-0873)

IBM Java 1.5.0 SR12 FP5 has been released fixing bugs and security issues.

The following security issues were fixed :

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     integrity via unknown vectors related to     Deserialization. (CVE-2011-0865)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier, when running on Windows, allows remote     untrusted Java Web Start applications and untrusted Java     applets to affect confidentiality, integrity, and     availability via unknown vectors related to Java Runtime     Environment. (CVE-2011-0866)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, when running on Windows, allows remote     untrusted Java Web Start applications and untrusted Java     applets to affect confidentiality, integrity, and     availability via unknown vectors related to Deployment,     a different vulnerability than CVE-2011-0786.
    (CVE-2011-0802)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors related to Sound, a different vulnerability than     CVE-2011-0802. (CVE-2011-0814)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality, integrity, and availability via unknown     vectors related to AWT. (CVE-2011-0815)

  - Multiple unspecified vulnerabilities in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allow remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors related to 2D. (CVE-2011-0862)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality via unknown vectors related to     Networking. (CVE-2011-0867)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality, integrity, and availability via unknown     vectors related to Swing. (CVE-2011-0871)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier allows remote attackers to affect     availability via unknown vectors related to NIO.
    (CVE-2011-0872)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, and 5.0 Update 29 and earlier, allows     remote attackers to affect confidentiality, integrity,     and availability via unknown vectors related to 2D.
    (CVE-2011-0873)

IBM Java 1.4.2 SR 13 Fixpack 10 has been released and fixes various bugs and security issues.

The following security issues have been fixed :

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     integrity via unknown vectors related to     Deserialization. (CVE-2011-0865)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier, when running on Windows, allows remote     untrusted Java Web Start applications and untrusted Java     applets to affect confidentiality, integrity, and     availability via unknown vectors related to Java Runtime     Environment. (CVE-2011-0866)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, when running on Windows, allows remote     untrusted Java Web Start applications and untrusted Java     applets to affect confidentiality, integrity, and     availability via unknown vectors related to Deployment,     a different vulnerability than CVE-2011-0786.
    (CVE-2011-0802)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors related to Sound, a different vulnerability than     CVE-2011-0802. (CVE-2011-0814)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality, integrity, and availability via unknown     vectors related to AWT. (CVE-2011-0815)

  - Multiple unspecified vulnerabilities in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allow remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors related to 2D. (CVE-2011-0862)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality via unknown vectors related to     Networking. (CVE-2011-0867)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality, integrity, and availability via unknown     vectors related to Swing. (CVE-2011-0871)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier allows remote attackers to affect     availability via unknown vectors related to NIO.
    (CVE-2011-0872)

IBM Java 1.4.2 SR 13 Fixpack 10 has been released and fixes various bugs and security issues.

The following security issues were fixed :

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     integrity via unknown vectors related to     Deserialization. (CVE-2011-0865)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier, when running on Windows, allows remote     untrusted Java Web Start applications and untrusted Java     applets to affect confidentiality, integrity, and     availability via unknown vectors related to Java Runtime     Environment. (CVE-2011-0866)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, when running on Windows, allows remote     untrusted Java Web Start applications and untrusted Java     applets to affect confidentiality, integrity, and     availability via unknown vectors related to Deployment,     a different vulnerability than CVE-2011-0786.
    (CVE-2011-0802)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors related to Sound, a different vulnerability than     CVE-2011-0802. (CVE-2011-0814)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality, integrity, and availability via unknown     vectors related to AWT. (CVE-2011-0815)

  - Multiple unspecified vulnerabilities in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allow remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors related to 2D. (CVE-2011-0862)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality via unknown vectors related to     Networking. (CVE-2011-0867)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality, integrity, and availability via unknown     vectors related to Swing. (CVE-2011-0871)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier allows remote attackers to affect     availability via unknown vectors related to NIO.
    (CVE-2011-0872)

ID	Name	Product	Family	Severity
75873	openSUSE Security Update : java-1_6_0-sun (openSUSE-SU-2011:0633-1)	Nessus	SuSE Local Security Checks	critical
75542	openSUSE Security Update : java-1_6_0-sun (openSUSE-SU-2011:0633-1)	Nessus	SuSE Local Security Checks	critical
69874	Juniper NSM Servers Multiple Java JDK/JRE Vulnerabilities (PSN-2012-08-689)	Nessus	Misc.	critical
64845	Oracle Java SE Multiple Vulnerabilities (June 2011 CPU) (Unix)	Nessus	Misc.	critical
59684	HP Systems Insight Manager < 7.0 Multiple Vulnerabilities	Nessus	Windows	critical
57211	SuSE 10 Security Update : Sun/Oracle Java (ZYPP Patch Number 7569)	Nessus	SuSE Local Security Checks	critical
57210	SuSE 10 Security Update : IBM Java (ZYPP Patch Number 7627)	Nessus	SuSE Local Security Checks	critical
57207	SuSE 10 Security Update : IBM Java (ZYPP Patch Number 7650)	Nessus	SuSE Local Security Checks	critical
57205	SuSE 10 Security Update : IBM Java (ZYPP Patch Number 7698)	Nessus	SuSE Local Security Checks	critical
56006	SuSE 10 Security Update : IBM Java (ZYPP Patch Number 7697)	Nessus	SuSE Local Security Checks	critical
56004	SuSE 11.1 Security Update : IBM Java (SAT Patch Number 5014)	Nessus	SuSE Local Security Checks	critical
56002	SuSE9 Security Update : IBM Java JRE and SDK (YOU Patch Number 12819)	Nessus	SuSE Local Security Checks	critical
55768	SuSE9 Security Update : IBM Java5 JRE and SDK (YOU Patch Number 12810)	Nessus	SuSE Local Security Checks	critical
55757	SuSE 10 Security Update : IBM Java (ZYPP Patch Number 7649)	Nessus	SuSE Local Security Checks	critical
55622	SuSE 10 Security Update : IBM Java (ZYPP Patch Number 7626)	Nessus	SuSE Local Security Checks	critical
55619	SuSE 11.1 Security Update : IBM Java (SAT Patch Number 4875)	Nessus	SuSE Local Security Checks	critical
55137	SuSE 11.1 Security Update : Sun/Oracle Java (SAT Patch Number 4698)	Nessus	SuSE Local Security Checks	critical
54997	Oracle Java SE Multiple Vulnerabilities (June 2011 CPU)	Nessus	Windows	critical

Detections

Analytics

CVE-2011-0866

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical