Language:
https://oss.oracle.com/pipermail/el-errata/2012-October/003088.html
Severity: Critical
ID: 68646
File Name: oraclelinux_ELSA-2012-1386.nasl
Version: 1.14
Type: local
Agent: unix
Published: 7/12/2013
Updated: 3/29/2022
Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Factor: Critical
Score: 9.8
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2012-5088
CPE: p-cpe:/a:oracle:linux:java-1.7.0-openjdk, p-cpe:/a:oracle:linux:java-1.7.0-openjdk-demo, p-cpe:/a:oracle:linux:java-1.7.0-openjdk-devel, p-cpe:/a:oracle:linux:java-1.7.0-openjdk-javadoc, p-cpe:/a:oracle:linux:java-1.7.0-openjdk-src, cpe:/o:oracle:linux:6
Required KB Items: Host/local_checks_enabled, Host/OracleLinux, Host/RedHat/release, Host/RedHat/rpm-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 10/18/2012
Vulnerability Publication Date: 10/16/2012
CISA Known Exploited Vulnerability Due Dates: 4/18/2022
CANVAS (CANVAS)
Core Impact
Metasploit (Java Applet Method Handle Remote Code Execution)
CVE: CVE-2012-3216, CVE-2012-4416, CVE-2012-5068, CVE-2012-5069, CVE-2012-5070, CVE-2012-5071, CVE-2012-5072, CVE-2012-5073, CVE-2012-5074, CVE-2012-5075, CVE-2012-5076, CVE-2012-5077, CVE-2012-5079, CVE-2012-5081, CVE-2012-5084, CVE-2012-5085, CVE-2012-5086, CVE-2012-5087, CVE-2012-5088, CVE-2012-5089
BID: 55501, 56039, 56043, 56054, 56056, 56057, 56058, 56063, 56065, 56071, 56075, 56076, 56079, 56080, 56081, 56082, 56083
RHSA: 2012:1386