Language:
Severity: Critical
ID: 62598
File Name: centos_RHSA-2012-1386.nasl
Version: 1.25
Type: local
Agent: unix
Family: CentOS Local Security Checks
Published: 10/18/2012
Updated: 3/29/2022
Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus
Risk Factor: Critical
Score: 9.8
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2012-5088
CPE: p-cpe:/a:centos:centos:java-1.7.0-openjdk, p-cpe:/a:centos:centos:java-1.7.0-openjdk-demo, cpe:/o:centos:centos:6, p-cpe:/a:centos:centos:java-1.7.0-openjdk-devel, p-cpe:/a:centos:centos:java-1.7.0-openjdk-src, p-cpe:/a:centos:centos:java-1.7.0-openjdk-javadoc
Required KB Items: Host/local_checks_enabled, Host/CentOS/release, Host/CentOS/rpm-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 10/17/2012
Vulnerability Publication Date: 10/16/2012
CISA Known Exploited Vulnerability Due Dates: 4/18/2022
CANVAS (CANVAS)
Core Impact
Metasploit (Java Applet Method Handle Remote Code Execution)
CVE: CVE-2012-3216, CVE-2012-4416, CVE-2012-5068, CVE-2012-5069, CVE-2012-5070, CVE-2012-5071, CVE-2012-5072, CVE-2012-5073, CVE-2012-5074, CVE-2012-5075, CVE-2012-5076, CVE-2012-5077, CVE-2012-5079, CVE-2012-5081, CVE-2012-5084, CVE-2012-5085, CVE-2012-5086, CVE-2012-5087, CVE-2012-5088, CVE-2012-5089
BID: 56039, 56043, 56054, 56056, 56057, 56058, 56059, 56063, 56065, 56067, 56075, 56076, 56079
RHSA: 2012:1386