Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JavaFX 2.0 allows remote attackers to affect confidentiality via unknown vectors related to Deployment.

The remote VMware ESX / ESXi host is missing a security-related patch.
It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in the following components :

  - Apache Tomcat
  - bzip2 library
  - JRE
  - WDDM display driver
  - XPDM display driver

Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Network Satellite Server 5.4.

The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

This update corrects several security vulnerabilities in the IBM Java Runtime Environment shipped as part of Red Hat Network Satellite Server 5.4. In a typical operating environment, these are of low security risk as the runtime is not used on untrusted applets.

Several flaws were fixed in the IBM Java 2 Runtime Environment.
(CVE-2011-0802, CVE-2011-0814, CVE-2011-0862, CVE-2011-0863, CVE-2011-0865, CVE-2011-0867, CVE-2011-0868, CVE-2011-0869, CVE-2011-0871, CVE-2011-0873, CVE-2011-3389, CVE-2011-3516, CVE-2011-3521, CVE-2011-3544, CVE-2011-3545, CVE-2011-3546, CVE-2011-3547, CVE-2011-3548, CVE-2011-3549, CVE-2011-3550, CVE-2011-3551, CVE-2011-3552, CVE-2011-3553, CVE-2011-3554, CVE-2011-3556, CVE-2011-3557, CVE-2011-3560, CVE-2011-3561, CVE-2011-3563, CVE-2011-5035, CVE-2012-0497, CVE-2012-0498, CVE-2012-0499, CVE-2012-0500, CVE-2012-0501, CVE-2012-0502, CVE-2012-0503, CVE-2012-0505, CVE-2012-0506, CVE-2012-0507, CVE-2012-0547, CVE-2012-0551, CVE-2012-1531, CVE-2012-1532, CVE-2012-1533, CVE-2012-1541, CVE-2012-1682, CVE-2012-1713, CVE-2012-1716, CVE-2012-1717, CVE-2012-1718, CVE-2012-1719, CVE-2012-1721, CVE-2012-1722, CVE-2012-1725, CVE-2012-3143, CVE-2012-3159, CVE-2012-3213, CVE-2012-3216, CVE-2012-3342, CVE-2012-4820, CVE-2012-4822, CVE-2012-4823, CVE-2012-5068, CVE-2012-5069, CVE-2012-5071, CVE-2012-5072, CVE-2012-5073, CVE-2012-5075, CVE-2012-5079, CVE-2012-5081, CVE-2012-5083, CVE-2012-5084, CVE-2012-5089, CVE-2013-0169, CVE-2013-0351, CVE-2013-0401, CVE-2013-0409, CVE-2013-0419, CVE-2013-0423, CVE-2013-0424, CVE-2013-0425, CVE-2013-0426, CVE-2013-0427, CVE-2013-0428, CVE-2013-0432, CVE-2013-0433, CVE-2013-0434, CVE-2013-0435, CVE-2013-0438, CVE-2013-0440, CVE-2013-0441, CVE-2013-0442, CVE-2013-0443, CVE-2013-0445, CVE-2013-0446, CVE-2013-0450, CVE-2013-0809, CVE-2013-1473, CVE-2013-1476, CVE-2013-1478, CVE-2013-1480, CVE-2013-1481, CVE-2013-1486, CVE-2013-1487, CVE-2013-1491, CVE-2013-1493, CVE-2013-1500, CVE-2013-1537, CVE-2013-1540, CVE-2013-1557, CVE-2013-1563, CVE-2013-1569, CVE-2013-1571, CVE-2013-2383, CVE-2013-2384, CVE-2013-2394, CVE-2013-2407, CVE-2013-2412, CVE-2013-2417, CVE-2013-2418, CVE-2013-2419, CVE-2013-2420, CVE-2013-2422, CVE-2013-2424, CVE-2013-2429, CVE-2013-2430, CVE-2013-2432, CVE-2013-2433, CVE-2013-2435, CVE-2013-2437, CVE-2013-2440, CVE-2013-2442, CVE-2013-2443, CVE-2013-2444, CVE-2013-2446, CVE-2013-2447, CVE-2013-2448, CVE-2013-2450, CVE-2013-2451, CVE-2013-2452, CVE-2013-2453, CVE-2013-2454, CVE-2013-2455, CVE-2013-2456, CVE-2013-2457, CVE-2013-2459, CVE-2013-2463, CVE-2013-2464, CVE-2013-2465, CVE-2013-2466, CVE-2013-2468, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, CVE-2013-2472, CVE-2013-2473, CVE-2013-3743)

Users of Red Hat Network Satellite Server 5.4 are advised to upgrade to these updated packages, which contain the IBM Java SE 6 SR14 release. For this update to take effect, Red Hat Network Satellite Server must be restarted ('/usr/sbin/rhn-satellite restart'), as well as all running instances of IBM Java.

Oracle/Sun Java 1.6.0 was updated to the u26 release, fixing lots of bugs and security issues.

Please see http://www.oracle.com/technetwork/topics/security/javacpuoct2011-44343 1.html

for more details.

Oracle/Sun OpenJDK 1.6.0 was updated to the 1.10.4release, fixing lots of bugs and security issues.

Please see http://www.oracle.com/technetwork/topics/security/javacpuoct2011-44343 1.html

for more details.

The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is earlier than 7 Update 1 / 6 Update 29 / 5.0 Update 32 / 1.4.2_34.  As such, it is potentially affected by security issues in the following components :

  - 2D
  - AWT
  - Deployment
  - Deserialization
  - Hotspot
  - Java Runtime Environment
  - JAXWS
  - JSSE
  - Networking
  - RMI
  - Scripting
  - Sound
  - Swing

The Sun 1.6.0 Java release includes the Sun Java 6 Runtime Environment and the Sun Java 6 Software Development Kit.

This update fixes several vulnerabilities in the Sun Java 6 Runtime Environment and the Sun Java 6 Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch page, listed in the References section. (CVE-2011-3389, CVE-2011-3516, CVE-2011-3521, CVE-2011-3544, CVE-2011-3545, CVE-2011-3546, CVE-2011-3547, CVE-2011-3548, CVE-2011-3549, CVE-2011-3550, CVE-2011-3551, CVE-2011-3552, CVE-2011-3553, CVE-2011-3554, CVE-2011-3555, CVE-2011-3556, CVE-2011-3557, CVE-2011-3558, CVE-2011-3560, CVE-2011-3561)

All users of java-1.6.0-sun are advised to upgrade to these updated packages, which provide JDK and JRE 6 Update 29 and resolve these issues. All running instances of Sun Java must be restarted for the update to take effect.

a. VirtualCenter and ESX, Oracle (Sun) JRE update 1.5.0_32

   Oracle (Sun) JRE is updated to version 1.5.0_32, which addresses    multiple security issues that existed in earlier releases of Oracle    (Sun) JRE.

   Oracle has documented the CVE identifiers that are addressed in    JRE 1.5.0_32 in the Oracle Java SE Critical Patch Update Advisory of    October 2011.

IBM Java 1.6.0 SR10 has been released fixing the following CVE's/security Issues :

  - CVE-2011-3389

  - CVE-2011-3516

  - CVE-2011-3521

  - CVE-2011-3544

  - CVE-2011-3545

  - CVE-2011-3546

  - CVE-2011-3547

  - CVE-2011-3548

  - CVE-2011-3549

  - CVE-2011-3550

  - CVE-2011-3551

  - CVE-2011-3552

  - CVE-2011-3553

  - CVE-2011-3554

  - CVE-2011-3556

  - CVE-2011-3557

  - CVE-2011-3560

  - CVE-2011-3561

IBM Java 1.6.0 SR10 has been released fixing the following CVE's :

  - CVE-2011-3389

  - CVE-2011-3516

  - CVE-2011-3521

  - CVE-2011-3544

  - CVE-2011-3545

  - CVE-2011-3546

  - CVE-2011-3547

  - CVE-2011-3548

  - CVE-2011-3549

  - CVE-2011-3550

  - CVE-2011-3551

  - CVE-2011-3552

  - CVE-2011-3553

  - CVE-2011-3554

  - CVE-2011-3556

  - CVE-2011-3557

  - CVE-2011-3560

  - CVE-2011-3561

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0034 advisory.

  - HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST) (CVE-2011-3389)

  - Oracle/IBM JDK: unspecified vulnerability fixed in 6u29 (Deployment) (CVE-2011-3516, CVE-2011-3546,     CVE-2011-3561)

  - OpenJDK: IIOP deserialization code execution (Deserialization, 7055902) (CVE-2011-3521)

  - OpenJDK: missing SecurityManager checks in scripting engine (Scripting, 7046823) (CVE-2011-3544)

  - Oracle/IBM JDK: unspecified vulnerability fixed in 6u29 (Sound) (CVE-2011-3545)

  - OpenJDK: InputStream skip() information leak (Networking/IO, 7000600) (CVE-2011-3547)

  - OpenJDK: mutable static AWTKeyStroke.ctor (AWT, 7019773) (CVE-2011-3548)

  - Oracle/IBM JDK: unspecified vulnerability fixed in 6u29 (Swing) (CVE-2011-3549)

  - Oracle/IBM JDK: unspecified vulnerability fixed in 6u29 (AWT) (CVE-2011-3550)

  - OpenJDK: Java2D TransformHelper integer overflow (2D, 7023640) (CVE-2011-3551)

  - OpenJDK: excessive default UDP socket limit under SecurityManager (Networking, 7032417) (CVE-2011-3552)

  - OpenJDK: JAX-WS stack-traces information leak (JAX-WS, 7046794) (CVE-2011-3553)

  - OpenJDK: insufficient pack200 JAR files uncompress error checks (Runtime, 7057857) (CVE-2011-3554)

  - OpenJDK: RMI DGC server remote code execution (RMI, 7077466) (CVE-2011-3556)

  - OpenJDK: RMI registry privileged code execution (RMI, 7083012) (CVE-2011-3557)

  - OpenJDK: missing checkSetFactory calls in HttpsURLConnection (JSSE, 7096936) (CVE-2011-3560)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Mac OS X host is running a version of Java for Mac OS X 10.7 that is missing Update 1, which updates the Java version to 1.6.0_29. It is, therefore, affected by multiple security vulnerabilities, the most serious of which may allow an untrusted Java applet to execute arbitrary code with the privileges of the current user outside the Java sandbox.

The remote Mac OS X host is running a version of Java for Mac OS X 10.6 that is missing Update 6, which updates the Java version to 1.6.0_29. It is, therefore, affected by multiple security vulnerabilities, the most serious of which may allow an untrusted Java applet to execute arbitrary code with the privileges of the current user outside the Java sandbox.

The remote host is affected by the vulnerability described in GLSA-201111-02 (Oracle JRE/JDK: Multiple vulnerabilities)

    Multiple vulnerabilities have been reported in the Oracle Java       implementation. Please review the CVE identifiers referenced below and       the associated Oracle Critical Patch Update Advisory for details.
  Impact :

    A remote attacker could exploit these vulnerabilities to cause       unspecified impact, possibly including remote execution of arbitrary       code.
  Workaround :

    There is no known workaround at this time.

The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is earlier than 7 Update 1 / 6 Update 29 / 5.0 Update 32 / 1.4.2_34 and is potentially affected by security issues in the following components :

  - 2D
  - AWT
  - Deployment
  - Deserialization
  - Hotspot
  - Java Runtime Environment
  - JAXWS
  - JSSE
  - Networking
  - RMI
  - Scripting
  - Sound
  - Swing

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1384 advisory.

  - HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST) (CVE-2011-3389)

  - Oracle/IBM JDK: unspecified vulnerability fixed in 6u29 (Deployment) (CVE-2011-3516, CVE-2011-3546,     CVE-2011-3561)

  - OpenJDK: IIOP deserialization code execution (Deserialization, 7055902) (CVE-2011-3521)

  - OpenJDK: missing SecurityManager checks in scripting engine (Scripting, 7046823) (CVE-2011-3544)

  - Oracle/IBM JDK: unspecified vulnerability fixed in 6u29 (Sound) (CVE-2011-3545)

  - OpenJDK: InputStream skip() information leak (Networking/IO, 7000600) (CVE-2011-3547)

  - OpenJDK: mutable static AWTKeyStroke.ctor (AWT, 7019773) (CVE-2011-3548)

  - Oracle/IBM JDK: unspecified vulnerability fixed in 6u29 (Swing) (CVE-2011-3549)

  - Oracle/IBM JDK: unspecified vulnerability fixed in 6u29 (AWT) (CVE-2011-3550)

  - OpenJDK: Java2D TransformHelper integer overflow (2D, 7023640) (CVE-2011-3551)

  - OpenJDK: excessive default UDP socket limit under SecurityManager (Networking, 7032417) (CVE-2011-3552)

  - OpenJDK: JAX-WS stack-traces information leak (JAX-WS, 7046794) (CVE-2011-3553)

  - OpenJDK: insufficient pack200 JAR files uncompress error checks (Runtime, 7057857) (CVE-2011-3554)

  - OpenJDK: RMI DGC server remote code execution (RMI, 7077466) (CVE-2011-3556)

  - OpenJDK: RMI registry privileged code execution (RMI, 7083012) (CVE-2011-3557)

  - OpenJDK: Hotspot unspecified issue (Hotspot, 7070134) (CVE-2011-3558)

  - OpenJDK: missing checkSetFactory calls in HttpsURLConnection (JSSE, 7096936) (CVE-2011-3560)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
89106	VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2012-0005) (BEAST) (remote check)	Nessus	Misc.	critical
78975	RHEL 5 / 6 : IBM Java Runtime in Satellite Server (RHSA-2013:1455) (BEAST) (ROBOT)	Nessus	Red Hat Local Security Checks	critical
75874	openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-5320) (BEAST)	Nessus	SuSE Local Security Checks	critical
75870	openSUSE Security Update : java-1_6_0-openjdk (java-1_6_0-openjdk-5329) (BEAST)	Nessus	SuSE Local Security Checks	critical
75543	openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-5320) (BEAST)	Nessus	SuSE Local Security Checks	critical
75539	openSUSE Security Update : java-1_6_0-openjdk (java-1_6_0-openjdk-5329) (BEAST)	Nessus	SuSE Local Security Checks	critical
64846	Oracle Java SE Multiple Vulnerabilities (October 2011 CPU) (BEAST) (Unix)	Nessus	Misc.	critical
61158	Scientific Linux Security Update : java-1.6.0-sun on SL5.x i386/x86_64 (BEAST)	Nessus	Scientific Linux Local Security Checks	critical
58302	VMSA-2012-0003 : VMware VirtualCenter Update and ESX 3.5 patch update JRE	Nessus	VMware ESX Local Security Checks	critical
58164	SuSE 11.1 Security Update : IBM Java 1.6.0 (SAT Patch Number 5872)	Nessus	SuSE Local Security Checks	critical
57658	SuSE 10 Security Update : IBM Java (ZYPP Patch Number 7926) (BEAST)	Nessus	SuSE Local Security Checks	critical
57595	RHEL 5 / 6 : java-1.6.0-ibm (RHSA-2012:0034)	Nessus	Red Hat Local Security Checks	high
56749	Mac OS X : Java for Mac OS X 10.7 Update 1 (BEAST)	Nessus	MacOS X Local Security Checks	critical
56748	Mac OS X : Java for Mac OS X 10.6 Update 6 (BEAST)	Nessus	MacOS X Local Security Checks	critical
56724	GLSA-201111-02 : Oracle JRE/JDK: Multiple vulnerabilities (BEAST)	Nessus	Gentoo Local Security Checks	critical
56566	Oracle Java SE Multiple Vulnerabilities (October 2011 CPU) (BEAST)	Nessus	Windows	critical
56560	RHEL 5 / 6 : java-1.6.0-sun (RHSA-2011:1384)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2011-3561

high

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

high

critical

critical

critical

critical

high