Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect availability via unknown vectors related to NIO.

The remote host is affected by the vulnerability described in GLSA-201406-32 (IcedTea JDK: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in the IcedTea JDK. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, cause a Denial of Service condition, obtain       sensitive information, bypass intended security policies, or have other       unspecified impact.
  Workaround :

    There is no known workaround at this time.

Oracle Java 6 Update 26 fixes several security vulnerabilities.

Please refer to Oracle's site for further information:
http://www.oracle.com/technetwork/topics/security/javacpujun e2011-313339.html

(CVE-2011-0862, CVE-2011-0873, CVE-2011-0815, CVE-2011-0817, CVE-2011-0863, CVE-2011-0864, CVE-2011-0802, CVE-2011-0814, CVE-2011-0871, CVE-2011-0786, CVE-2011-0788, CVE-2011-0866, CVE-2011-0868, CVE-2011-0872, CVE-2011-0867, CVE-2011-0869, CVE-2011-0865)

Icedtea as included in java-1_6_0-openjdk was updated to fix several security issues :

dbg114-icedtea-web-4788 icedtea-web-4788 new_updateinfo S6213702, CVE-2011-0872: (so) non-blocking sockets with TCP urgent disabled get still selected for read ops (win) dbg114-icedtea-web-4788 icedtea-web-4788 new_updateinfo S6618658, CVE-2011-0865: Vulnerability in deserialization dbg114-icedtea-web-4788 icedtea-web-4788 new_updateinfo S7012520, CVE-2011-0815: Heap overflow vulnerability in FileDialog.show() dbg114-icedtea-web-4788 icedtea-web-4788 new_updateinfo S7013519, CVE-2011-0822, CVE-2011-0862: Integer overflows in 2D code dbg114-icedtea-web-4788 icedtea-web-4788 new_updateinfo S7013969, CVE-2011-0867: NetworkInterface.toString can reveal bindings dbg114-icedtea-web-4788 icedtea-web-4788 new_updateinfo S7013971, CVE-2011-0869: Vulnerability in SAAJ dbg114-icedtea-web-4788 icedtea-web-4788 new_updateinfo S7016340, CVE-2011-0870: Vulnerability in SAAJ dbg114-icedtea-web-4788 icedtea-web-4788 new_updateinfo S7016495, CVE-2011-0868: Crash in Java 2D transforming an image with scale close to zero dbg114-icedtea-web-4788 icedtea-web-4788 new_updateinfo S7020198, CVE-2011-0871: ImageIcon creates Component with null acc dbg114-icedtea-web-4788 icedtea-web-4788 new_updateinfo S7020373, CVE-2011-0864: JSR rewriting can overflow memory address size

Icedtea as included in java-1_6_0-openjdk was updated to fix several security issues :

  - S6213702, CVE-2011-0872: (so) non-blocking sockets with     TCP urgent disabled get still selected for read ops     (win)

  - S6618658, CVE-2011-0865: Vulnerability in     deserialization

  - S7012520, CVE-2011-0815: Heap overflow vulnerability in     FileDialog.show()

  - S7013519, CVE-2011-0822, CVE-2011-0862: Integer     overflows in 2D code

  - S7013969, CVE-2011-0867: NetworkInterface.toString can     reveal bindings

  - S7013971, CVE-2011-0869: Vulnerability in SAAJ

  - S7016340, CVE-2011-0870: Vulnerability in SAAJ

  - S7016495, CVE-2011-0868: Crash in Java 2D transforming     an image with scale close to zero

  - S7020198, CVE-2011-0871: ImageIcon creates Component     with null acc

  - S7020373, CVE-2011-0864: JSR rewriting can overflow     memory address size

According to the version of one or more Juniper NSM servers running on the remote host, it is potentially affected by multiple vulnerabilities affecting the Java software running on the host.

The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is earlier than 6 Update 26 / 5.0 Update 30 / 1.4.2_32.  Such versions are potentially affected by security issues in the following components :

  - AWT
  - Deployment
  - Deserialization
  - Hotspot
  - Java Runtime Environment
  - Networking
  - NIO
  - SAAJ
  - Sound
  - Swing

The version of HP Systems Insight Manager installed on the remote Windows host is affected by vulnerabilities in the following components :

  - TLS and SSL protocols
  - Apache Tomcat
  - Java
  - Flash Player
  - BlazeDS/GraniteDS
  - Adobe LiveCycle
  - Adobe Flex SDK
  - Systems Insight Manager

Oracle Java 6 Update 26 fixes several security vulnerabilities.

Please refer to Oracle's site for further information:
http://www.oracle.com/technetwork/topics/security/javacpujune2011-3133 39.html

IBM Java 1.6.0 SR9-FP2 fixes several of bugs and thew following security issues :

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     integrity via unknown vectors related to     Deserialization. (CVE-2011-0865)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier, when running on Windows, allows remote     untrusted Java Web Start applications and untrusted Java     applets to affect confidentiality, integrity, and     availability via unknown vectors related to Java Runtime     Environment. (CVE-2011-0866)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, when running on Windows, allows remote     untrusted Java Web Start applications and untrusted Java     applets to affect confidentiality, integrity, and     availability via unknown vectors related to Deployment,     a different vulnerability than CVE-2011-0788.
    (CVE-2011-0786)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, when running on Windows, allows remote     untrusted Java Web Start applications and untrusted Java     applets to affect confidentiality, integrity, and     availability via unknown vectors related to Deployment,     a different vulnerability than CVE-2011-0786.
    (CVE-2011-0788)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, when running on Windows, allows remote     untrusted Java Web Start applications and untrusted Java     applets to affect confidentiality, integrity, and     availability via unknown vectors related to Deployment,     a different vulnerability than CVE-2011-0786.
    (CVE-2011-0802)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors related to Sound, a different vulnerability than     CVE-2011-0802. (CVE-2011-0814)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality, integrity, and availability via unknown     vectors related to AWT. (CVE-2011-0815)

  - Multiple unspecified vulnerabilities in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allow remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors related to 2D. (CVE-2011-0862)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality via unknown vectors related to     Networking. (CVE-2011-0867)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     26 and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality via unknown vectors related to SAAJ.
    (CVE-2011-0869)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, when running on Windows, allows remote     untrusted Java Web Start applications and untrusted Java     applets to affect confidentiality, integrity, and     availability via unknown vectors related to Deployment.
    (CVE-2011-0817)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality, integrity, and availability via unknown     vectors related to Deployment. (CVE-2011-0863)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier allows remote attackers to affect     confidentiality via unknown vectors related to 2D.
    (CVE-2011-0868)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality, integrity, and availability via unknown     vectors related to Swing. (CVE-2011-0871)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier allows remote attackers to affect     availability via unknown vectors related to NIO.
    (CVE-2011-0872)

  - An unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, and 5.0 Update 29 and earlier, allows     remote attackers to affect confidentiality, integrity,     and availability via unknown vectors related to 2D.
    (CVE-2011-0873)

IBM Java 1.5.0 SR12 FP5 has been released fixing bugs and security issues.

The following security issues were fixed :

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     integrity via unknown vectors related to     Deserialization. (CVE-2011-0865)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier, when running on Windows, allows remote     untrusted Java Web Start applications and untrusted Java     applets to affect confidentiality, integrity, and     availability via unknown vectors related to Java Runtime     Environment. (CVE-2011-0866)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, when running on Windows, allows remote     untrusted Java Web Start applications and untrusted Java     applets to affect confidentiality, integrity, and     availability via unknown vectors related to Deployment,     a different vulnerability than CVE-2011-0786.
    (CVE-2011-0802)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors related to Sound, a different vulnerability than     CVE-2011-0802. (CVE-2011-0814)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality, integrity, and availability via unknown     vectors related to AWT. (CVE-2011-0815)

  - Multiple unspecified vulnerabilities in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allow remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors related to 2D. (CVE-2011-0862)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality via unknown vectors related to     Networking. (CVE-2011-0867)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality, integrity, and availability via unknown     vectors related to Swing. (CVE-2011-0871)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier allows remote attackers to affect     availability via unknown vectors related to NIO.
    (CVE-2011-0872)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, and 5.0 Update 29 and earlier, allows     remote attackers to affect confidentiality, integrity,     and availability via unknown vectors related to 2D.
    (CVE-2011-0873)

IBM Java 1.4.2 SR 13 Fixpack 10 has been released and fixes various bugs and security issues.

The following security issues have been fixed :

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     integrity via unknown vectors related to     Deserialization. (CVE-2011-0865)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier, when running on Windows, allows remote     untrusted Java Web Start applications and untrusted Java     applets to affect confidentiality, integrity, and     availability via unknown vectors related to Java Runtime     Environment. (CVE-2011-0866)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, when running on Windows, allows remote     untrusted Java Web Start applications and untrusted Java     applets to affect confidentiality, integrity, and     availability via unknown vectors related to Deployment,     a different vulnerability than CVE-2011-0786.
    (CVE-2011-0802)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors related to Sound, a different vulnerability than     CVE-2011-0802. (CVE-2011-0814)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality, integrity, and availability via unknown     vectors related to AWT. (CVE-2011-0815)

  - Multiple unspecified vulnerabilities in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allow remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors related to 2D. (CVE-2011-0862)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality via unknown vectors related to     Networking. (CVE-2011-0867)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality, integrity, and availability via unknown     vectors related to Swing. (CVE-2011-0871)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier allows remote attackers to affect     availability via unknown vectors related to NIO.
    (CVE-2011-0872)

The remote host is affected by the vulnerability described in GLSA-201111-02 (Oracle JRE/JDK: Multiple vulnerabilities)

    Multiple vulnerabilities have been reported in the Oracle Java       implementation. Please review the CVE identifiers referenced below and       the associated Oracle Critical Patch Update Advisory for details.
  Impact :

    A remote attacker could exploit these vulnerabilities to cause       unspecified impact, possibly including remote execution of arbitrary       code.
  Workaround :

    There is no known workaround at this time.

IBM Java 1.4.2 SR 13 Fixpack 10 has been released and fixes various bugs and security issues.

The following security issues were fixed :

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     integrity via unknown vectors related to     Deserialization. (CVE-2011-0865)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier, when running on Windows, allows remote     untrusted Java Web Start applications and untrusted Java     applets to affect confidentiality, integrity, and     availability via unknown vectors related to Java Runtime     Environment. (CVE-2011-0866)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, when running on Windows, allows remote     untrusted Java Web Start applications and untrusted Java     applets to affect confidentiality, integrity, and     availability via unknown vectors related to Deployment,     a different vulnerability than CVE-2011-0786.
    (CVE-2011-0802)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors related to Sound, a different vulnerability than     CVE-2011-0802. (CVE-2011-0814)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality, integrity, and availability via unknown     vectors related to AWT. (CVE-2011-0815)

  - Multiple unspecified vulnerabilities in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allow remote attackers to affect     confidentiality, integrity, and availability via unknown     vectors related to 2D. (CVE-2011-0862)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality via unknown vectors related to     Networking. (CVE-2011-0867)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31     and earlier allows remote untrusted Java Web Start     applications and untrusted Java applets to affect     confidentiality, integrity, and availability via unknown     vectors related to Swing. (CVE-2011-0871)

  - Unspecified vulnerability in the Java Runtime     Environment (JRE) component in Oracle Java SE 6 Update     25 and earlier allows remote attackers to affect     availability via unknown vectors related to NIO.
    (CVE-2011-0872)

It was discovered that a heap overflow in the AWT FileDialog.show() method could allow an attacker to cause a denial of service through an application crash or possibly execute arbitrary code. (CVE-2011-0815)

It was dicovered that integer overflows in the JPEGImageReader readImage() function and the SunLayoutEngine nativeLayout() function could allow an attacker to cause a denial of service through an application crash or possibly execute arbitrary code. (CVE-2011-0822, CVE-2011-0862)

It was discovered that memory corruption could occur when interpreting bytecode in the HotSpot VM. This could allow an attacker to cause a denial of service through an application crash or possibly execute arbitrary code. (CVE-2011-0864)

It was discovered that the deserialization code allowed the creation of mutable SignedObjects. This could allow an attacker to possibly execute code with elevated privileges. (CVE-2011-0865)

It was discovered that the toString method in the NetworkInterface class would reveal multiple addresses if they were bound to the interface. This could give an attacker more information about the networking environment. (CVE-2011-0867)

It was discovered that the Java 2D code to transform an image with a scale close to 0 could trigger an integer overflow. This could allow an attacker to cause a denial of service through an application crash or possibly execute arbitrary code. (CVE-2011-0868)

It was discovered that the SOAP with Attachments API for Java (SAAJ) implementation allowed the modification of proxy settings via unprivileged SOAP messages. (CVE-2011-0869, CVE-2011-0870)

It was the discovered that the Swing ImageIcon class created MediaTracker objects that potentially leaked privileged ApplicationContexts. This could possibly allow an attacker access to restricted resources or services. (CVE-2011-0871)

It was discovered that non-blocking sockets marked as not urgent could still get selected for read operations. This could allow an attacker to cause a denial of service. (CVE-2011-0872).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
76303	GLSA-201406-32 : IcedTea JDK: Multiple vulnerabilities (BEAST) (ROBOT)	Nessus	Gentoo Local Security Checks	critical
75873	openSUSE Security Update : java-1_6_0-sun (openSUSE-SU-2011:0633-1)	Nessus	SuSE Local Security Checks	critical
75863	openSUSE Security Update : icedtea-web (openSUSE-SU-2011:0706-1)	Nessus	SuSE Local Security Checks	critical
75542	openSUSE Security Update : java-1_6_0-sun (openSUSE-SU-2011:0633-1)	Nessus	SuSE Local Security Checks	critical
75527	openSUSE Security Update : icedtea-web (openSUSE-SU-2011:0706-1)	Nessus	SuSE Local Security Checks	critical
69874	Juniper NSM Servers Multiple Java JDK/JRE Vulnerabilities (PSN-2012-08-689)	Nessus	Misc.	critical
64845	Oracle Java SE Multiple Vulnerabilities (June 2011 CPU) (Unix)	Nessus	Misc.	critical
59684	HP Systems Insight Manager < 7.0 Multiple Vulnerabilities	Nessus	Windows	critical
57211	SuSE 10 Security Update : Sun/Oracle Java (ZYPP Patch Number 7569)	Nessus	SuSE Local Security Checks	critical
57210	SuSE 10 Security Update : IBM Java (ZYPP Patch Number 7627)	Nessus	SuSE Local Security Checks	critical
57207	SuSE 10 Security Update : IBM Java (ZYPP Patch Number 7650)	Nessus	SuSE Local Security Checks	critical
57205	SuSE 10 Security Update : IBM Java (ZYPP Patch Number 7698)	Nessus	SuSE Local Security Checks	critical
56724	GLSA-201111-02 : Oracle JRE/JDK: Multiple vulnerabilities (BEAST)	Nessus	Gentoo Local Security Checks	critical
56006	SuSE 10 Security Update : IBM Java (ZYPP Patch Number 7697)	Nessus	SuSE Local Security Checks	critical
56004	SuSE 11.1 Security Update : IBM Java (SAT Patch Number 5014)	Nessus	SuSE Local Security Checks	critical
56002	SuSE9 Security Update : IBM Java JRE and SDK (YOU Patch Number 12819)	Nessus	SuSE Local Security Checks	critical
55768	SuSE9 Security Update : IBM Java5 JRE and SDK (YOU Patch Number 12810)	Nessus	SuSE Local Security Checks	critical
55757	SuSE 10 Security Update : IBM Java (ZYPP Patch Number 7649)	Nessus	SuSE Local Security Checks	critical
55622	SuSE 10 Security Update : IBM Java (ZYPP Patch Number 7626)	Nessus	SuSE Local Security Checks	critical
55619	SuSE 11.1 Security Update : IBM Java (SAT Patch Number 4875)	Nessus	SuSE Local Security Checks	critical
55172	Ubuntu 10.04 LTS / 10.10 / 11.04 : openjdk-6, openjdk-6b18 vulnerabilities (USN-1154-1)	Nessus	Ubuntu Local Security Checks	critical
55137	SuSE 11.1 Security Update : Sun/Oracle Java (SAT Patch Number 4698)	Nessus	SuSE Local Security Checks	critical
54997	Oracle Java SE Multiple Vulnerabilities (June 2011 CPU)	Nessus	Windows	critical

Detections

Analytics

CVE-2011-0872

high

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical