Language:
Severity: Critical
ID: 57961
File Name: centos_RHSA-2012-0135.nasl
Version: 1.20
Type: local
Agent: unix
Family: CentOS Local Security Checks
Published: 2/16/2012
Updated: 3/8/2022
Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus
Risk Factor: Critical
Score: 9.9
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2012-0507
CPE: cpe:/o:centos:centos:6, p-cpe:/a:centos:centos:java-1.6.0-openjdk, p-cpe:/a:centos:centos:java-1.6.0-openjdk-demo, p-cpe:/a:centos:centos:java-1.6.0-openjdk-javadoc, p-cpe:/a:centos:centos:java-1.6.0-openjdk-devel, p-cpe:/a:centos:centos:java-1.6.0-openjdk-src
Required KB Items: Host/local_checks_enabled, Host/CentOS/release, Host/CentOS/rpm-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 2/15/2012
Vulnerability Publication Date: 12/30/2011
CISA Known Exploited Vulnerability Due Dates: 3/24/2022
CANVAS (CANVAS)
Core Impact
Metasploit (Java AtomicReferenceArray Type Violation Vulnerability)
CVE: CVE-2011-3563, CVE-2011-3571, CVE-2011-5035, CVE-2012-0497, CVE-2012-0501, CVE-2012-0502, CVE-2012-0503, CVE-2012-0505, CVE-2012-0506, CVE-2012-0507
BID: 51194, 51467, 52009, 52011, 52012, 52013, 52014, 52017, 52018
RHSA: 2012:0135