Detections
Analytics
SuSE 10 Security Update : IBM Java 1.6.0 (ZYPP Patch Number 8094)
critical Nessus Plugin ID 59065
Language:
Synopsis
The remote SuSE 10 host is missing a security-related patch.Description
IBM Java 1.6.0 has been updated to SR10-FP1, fixing various security issues.More information can be found on :
http://www.ibm.com/developerworks/java/jdk/alerts/
Solution
Apply ZYPP patch number 8094.See Also
http://support.novell.com/security/cve/CVE-2011-3563.html
http://support.novell.com/security/cve/CVE-2011-5035.html
http://support.novell.com/security/cve/CVE-2012-0497.html
http://support.novell.com/security/cve/CVE-2012-0498.html
http://support.novell.com/security/cve/CVE-2012-0499.html
http://support.novell.com/security/cve/CVE-2012-0500.html
http://support.novell.com/security/cve/CVE-2012-0501.html
http://support.novell.com/security/cve/CVE-2012-0502.html
http://support.novell.com/security/cve/CVE-2012-0503.html
http://support.novell.com/security/cve/CVE-2012-0505.html
Plugin Details
Severity: Critical
ID: 59065
File Name: suse_java-1_6_0-ibm-8094.nasl
Version: 1.8
Type: local
Agent: unix
Family: SuSE Local Security Checks
Published: 5/10/2012
Updated: 3/8/2022
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Critical
Score: 9.9
CVSS v2
Risk Factor: Critical
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/o:suse:suse_linux
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 4/26/2012
Vulnerability Publication Date: 12/29/2011
CISA Known Exploited Vulnerability Due Dates: 3/24/2022
Exploitable With
CANVAS (CANVAS)
Core Impact
Metasploit (Java AtomicReferenceArray Type Violation Vulnerability)
Reference Information
CVE: CVE-2011-3563, CVE-2011-5035, CVE-2012-0497, CVE-2012-0498, CVE-2012-0499, CVE-2012-0500, CVE-2012-0501, CVE-2012-0502, CVE-2012-0503, CVE-2012-0505, CVE-2012-0506, CVE-2012-0507