The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:0264 advisory.

    This update corrects several security vulnerabilities in the IBM Java     Runtime Environment shipped as part of Red Hat Satellite 5.6. In a typical     operating environment, these are of low security risk as the runtime is not     used on untrusted applets.

    Several flaws were fixed in the IBM Java 2 Runtime Environment.
    (CVE-2014-3065, CVE-2014-3068, CVE-2014-3566, CVE-2014-4209, CVE-2014-4218,     CVE-2014-4219, CVE-2014-4227, CVE-2014-4244, CVE-2014-4252, CVE-2014-4262,     CVE-2014-4263, CVE-2014-4265, CVE-2014-4288, CVE-2014-6457, CVE-2014-6458,     CVE-2014-6492, CVE-2014-6493, CVE-2014-6502, CVE-2014-6503, CVE-2014-6506,     CVE-2014-6511, CVE-2014-6512, CVE-2014-6515, CVE-2014-6531, CVE-2014-6532,     CVE-2014-6558, CVE-2014-6585, CVE-2014-6587, CVE-2014-6591, CVE-2014-6593,     CVE-2014-8891, CVE-2014-8892, CVE-2015-0395, CVE-2015-0403, CVE-2015-0406,     CVE-2015-0407, CVE-2015-0408, CVE-2015-0410, CVE-2015-0412)

    The CVE-2014-4262 and CVE-2014-6512 issues were discovered by Florian     Weimer of Red Hat Product Security.

    Users of Red Hat Satellite 5.6 are advised to upgrade to these updated     packages, which contain the IBM Java SE 6 SR16-FP3 release. For this     update to take effect, Red Hat Satellite must be restarted     (/usr/sbin/rhn-satellite restart), as well as all running instances of     IBM Java.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 5 / 6 : Red Hat Satellite IBM Java Runtime (RHSA-2015:0264)

low Nessus Plugin ID 81505

Version 1.29

Version 1.28

Version 1.29 Nov 5, 2024, 12:50 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202411051250
Version 1.28 Apr 25, 2024, 2:46 AM CVE (set "CVE" coverage to "CVE-2014-3065,CVE-2014-3068,CVE-2014-3086,CVE-2014-3566,CVE-2014-4209,CVE-2014-4218,CVE-2014-4219,CVE-2014-4227,CVE-2014-4244,CVE-2014-4252,CVE-2014-4262,CVE-2014-4263,CVE-2014-4265,CVE-2014-4288,CVE-2014-6457,CVE-2014-6458,CVE-2014-6492,CVE-2014-6493,CVE-2014-6502,CVE-2014-6503,CVE-2014-6506,CVE-2014-6511,CVE-2014-6512,CVE-2014-6515,CVE-2014-6531,CVE-2014-6532,CVE-2014-6558,CVE-2014-6585,CVE-2014-6587,CVE-2014-6591,CVE-2014-6593,CVE-2014-8891,CVE-2014-8892,CVE-2015-0395,CVE-2015-0403,CVE-2015-0406,CVE-2015-0407,CVE-2015-0408,CVE-2015-0410,CVE-2015-0412") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:H/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:H/RL:O/RC:C") CVSSv2 score source (set to "CVE-2015-0408") CVSSv3 score source (set to "CVE-2014-3566") Detection (updated detection logic) Exploit attributes ("Exploited by malware" changed from "True" to none) Plugin metadata Reference Plugin Feed: 202404250246