Detections
Analytics
Sun Java JRE Applet Handling Privilege Escalation (231261) (Unix)
critical Nessus Plugin ID 64826
Language:
Synopsis
The remote Unix host has an application that is affected by privilege escalation vulnerabilities.Description
The version of Sun Java Runtime Environment (JRE) installed on the remote host reportedly contains two vulnerabilities that may independently allow an untrusted application or applet to elevate its privileges by, for example, granting itself permission to read and write local files or execute local applications subject to the privileges of the user running the application or applet.Solution
Upgrade to Sun JDK and JRE 6 Update 2 / JDK and JRE 5.0 Update 14 or later and remove, if necessary, any affected versions.See Also
Plugin Details
Severity: Critical
ID: 64826
File Name: sun_java_jre_231261_unix.nasl
Version: 1.10
Type: local
Agent: unix
Family: Misc.
Published: 2/22/2013
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2008-0657
Vulnerability Information
CPE: cpe:/a:oracle:jre
Required KB Items: Host/Java/JRE/Installed
Exploit Ease: No known exploits are available
Patch Publication Date: 2/5/2008
Reference Information
CVE: CVE-2008-0657
BID: 27650