The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1386 advisory.

    [1.7.0.9-2.3.3.0.1.el6_3.1]
    - Update DISTRO_NAME in specfile

    [1.7.0.9-2.3.3.el6.1]
    - Changed permissions of sa-jdi.jar to correct 644
    - Resolves: rhbz#865050

    [1.7.0.9-2.3.3.el6]
    - Updated to 2.3.3
    - Updated java-1.7.0-openjdk-java-access-bridge-security.patch
    - Resolves rhbz#s 856124, 865346, 865348, 865350, 865352, 865354, 865357,       865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514,       865519, 865531, 865541, 865568

    [1.7.0.5-2.3.2.el6.1]
    - Cleanup before security release
    - Updated to latest IcedTea7-forest 2.3
    - Resolves: rhbz#852299

    [1.7.0.5-2.2.1.1.el6.4]
    - Cleanup before security release
    - Removed patches:
       patch 1001 sec-webrevs-openjdk7-29_aug_2012-7162473.patch        patch 1002 sec-webrevs-openjdk7-29_aug_2012-7162476.patch        patch 1003 sec-webrevs-openjdk7-29_aug_2012-7163201.patch        patch 1004 sec-webrevs-openjdk7-29_aug_2012-7194567.patch        patch 1005 sec-webrevs-openjdk7-29_aug_2012-78e01a6ca8d3.patch
    - Resolves: rhbz#852299

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 6 : java-1.7.0-openjdk (ELSA-2012-1386)

medium Nessus Plugin ID 68646

Version 1.15