The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0343 advisory.

  - HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST) (CVE-2011-3389)

  - Oracle/IBM JDK: unspecified vulnerability fixed in 6u29 (Sound) (CVE-2011-3545)

  - OpenJDK: InputStream skip() information leak (Networking/IO, 7000600) (CVE-2011-3547)

  - OpenJDK: mutable static AWTKeyStroke.ctor (AWT, 7019773) (CVE-2011-3548)

  - Oracle/IBM JDK: unspecified vulnerability fixed in 6u29 (Swing) (CVE-2011-3549)

  - OpenJDK: excessive default UDP socket limit under SecurityManager (Networking, 7032417) (CVE-2011-3552)

  - OpenJDK: RMI DGC server remote code execution (RMI, 7077466) (CVE-2011-3556)

  - OpenJDK: RMI registry privileged code execution (RMI, 7083012) (CVE-2011-3557)

  - OpenJDK: missing checkSetFactory calls in HttpsURLConnection (JSSE, 7096936) (CVE-2011-3560)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 5 : java-1.4.2-ibm-sap (RHSA-2012:0343)

high Nessus Plugin ID 193977

Version 1.2

Version 1.1

Version 1.0

Version 1.2 Apr 29, 2024, 9:06 AM Exploit attributes ("Exploit framework metasploit" set to "True") Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202404290906
Version 1.1 Apr 28, 2024, 10:10 PM CEA reference Plugin Feed: 202404282210
Version 1.0 Apr 27, 2024, 10:42 PM New Plugin Feed: 202404272242