Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, and 7 allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity and availability via unknown vectors.

The remote VMware ESX / ESXi host is missing a security-related patch.
It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in the following components :

  - Apache Tomcat
  - bzip2 library
  - JRE
  - WDDM display driver
  - XPDM display driver

Oracle/Sun Java 1.6.0 was updated to the u26 release, fixing lots of bugs and security issues.

Please see http://www.oracle.com/technetwork/topics/security/javacpuoct2011-44343 1.html

for more details.

Oracle/Sun OpenJDK 1.6.0 was updated to the 1.10.4release, fixing lots of bugs and security issues.

Please see http://www.oracle.com/technetwork/topics/security/javacpuoct2011-44343 1.html

for more details.

The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is earlier than 7 Update 1 / 6 Update 29 / 5.0 Update 32 / 1.4.2_34.  As such, it is potentially affected by security issues in the following components :

  - 2D
  - AWT
  - Deployment
  - Deserialization
  - Hotspot
  - Java Runtime Environment
  - JAXWS
  - JSSE
  - Networking
  - RMI
  - Scripting
  - Sound
  - Swing

The Sun 1.6.0 Java release includes the Sun Java 6 Runtime Environment and the Sun Java 6 Software Development Kit.

This update fixes several vulnerabilities in the Sun Java 6 Runtime Environment and the Sun Java 6 Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch page, listed in the References section. (CVE-2011-3389, CVE-2011-3516, CVE-2011-3521, CVE-2011-3544, CVE-2011-3545, CVE-2011-3546, CVE-2011-3547, CVE-2011-3548, CVE-2011-3549, CVE-2011-3550, CVE-2011-3551, CVE-2011-3552, CVE-2011-3553, CVE-2011-3554, CVE-2011-3555, CVE-2011-3556, CVE-2011-3557, CVE-2011-3558, CVE-2011-3560, CVE-2011-3561)

All users of java-1.6.0-sun are advised to upgrade to these updated packages, which provide JDK and JRE 6 Update 29 and resolve these issues. All running instances of Sun Java must be restarted for the update to take effect.

a. VirtualCenter and ESX, Oracle (Sun) JRE update 1.5.0_32

   Oracle (Sun) JRE is updated to version 1.5.0_32, which addresses    multiple security issues that existed in earlier releases of Oracle    (Sun) JRE.

   Oracle has documented the CVE identifiers that are addressed in    JRE 1.5.0_32 in the Oracle Java SE Critical Patch Update Advisory of    October 2011.

The remote host is affected by the vulnerability described in GLSA-201111-02 (Oracle JRE/JDK: Multiple vulnerabilities)

    Multiple vulnerabilities have been reported in the Oracle Java       implementation. Please review the CVE identifiers referenced below and       the associated Oracle Critical Patch Update Advisory for details.
  Impact :

    A remote attacker could exploit these vulnerabilities to cause       unspecified impact, possibly including remote execution of arbitrary       code.
  Workaround :

    There is no known workaround at this time.

The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is earlier than 7 Update 1 / 6 Update 29 / 5.0 Update 32 / 1.4.2_34 and is potentially affected by security issues in the following components :

  - 2D
  - AWT
  - Deployment
  - Deserialization
  - Hotspot
  - Java Runtime Environment
  - JAXWS
  - JSSE
  - Networking
  - RMI
  - Scripting
  - Sound
  - Swing

ID	Name	Product	Family	Severity
89106	VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2012-0005) (BEAST) (remote check)	Nessus	Misc.	critical
75874	openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-5320) (BEAST)	Nessus	SuSE Local Security Checks	critical
75870	openSUSE Security Update : java-1_6_0-openjdk (java-1_6_0-openjdk-5329) (BEAST)	Nessus	SuSE Local Security Checks	critical
75543	openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-5320) (BEAST)	Nessus	SuSE Local Security Checks	critical
75539	openSUSE Security Update : java-1_6_0-openjdk (java-1_6_0-openjdk-5329) (BEAST)	Nessus	SuSE Local Security Checks	critical
64846	Oracle Java SE Multiple Vulnerabilities (October 2011 CPU) (BEAST) (Unix)	Nessus	Misc.	critical
61158	Scientific Linux Security Update : java-1.6.0-sun on SL5.x i386/x86_64 (BEAST)	Nessus	Scientific Linux Local Security Checks	critical
58302	VMSA-2012-0003 : VMware VirtualCenter Update and ESX 3.5 patch update JRE	Nessus	VMware ESX Local Security Checks	critical
56724	GLSA-201111-02 : Oracle JRE/JDK: Multiple vulnerabilities (BEAST)	Nessus	Gentoo Local Security Checks	critical
56566	Oracle Java SE Multiple Vulnerabilities (October 2011 CPU) (BEAST)	Nessus	Windows	critical

Detections

Analytics

CVE-2011-3555

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical