The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1544 advisory.

  - IBM JDK: plain text data stored in memory dumps (CVE-2015-1931)

  - OpenJDK: deserialization issue in ObjectInputStream.readSerialData() (Libraries, 8076401) (CVE-2015-2590)

  - OpenJDK: non-constant time comparisons in crypto code (JCE, 8074865) (CVE-2015-2601)

  - OpenJDK: incorrect code permission checks in RMIConnectionImpl (JMX, 8075853) (CVE-2015-2621)

  - ICU: integer overflow in LETableReference verifyLength() (OpenJDK 2D, 8077520) (CVE-2015-2632)

  - Oracle JDK: unspecified vulnerability fixed in 6u101, 7u85 and 8u51 (2D) (CVE-2015-2637, CVE-2015-2638)

  - Oracle JDK: unspecified vulnerability fixed in 6u101, 7u85 and 8u51 (Deployment) (CVE-2015-2664)

  - LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks     (CVE-2015-4000)

  - OpenJDK: improper permission checks in MBeanServerInvocationHandler (JMX, 8076397) (CVE-2015-4731)

  - OpenJDK: insufficient context checks during object deserialization (Libraries, 8076405) (CVE-2015-4732)

  - OpenJDK: RemoteObjectInvocationHandler allows calling finalize() (RMI, 8076409) (CVE-2015-4733)

  - OpenJDK: incorrect OCSP nextUpdate checking (Libraries, 8075374) (CVE-2015-4748)

  - OpenJDK: DnsClient fails to release request information after error (JNDI, 8075378) (CVE-2015-4749)

  - ICU: missing boundary checks in layout engine (OpenJDK 2D, 8071715) (CVE-2015-4760)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 5 / 6 : java-1.5.0-ibm (RHSA-2015:1544)

medium Nessus Plugin ID 85238

Version 2.21

Version 2.20

Version 2.19

Version 2.21 Apr 28, 2024, 1:01 AM Detection (updated detection logic) Plugin metadata Reference Plugin Feed: 202404280101
Version 2.20 Apr 25, 2023, 11:11 PM CVSS temporal metrics (Adjust exploitability metrics for CISA KEV vulnerabilities) Plugin Feed: 202304252311
Version 2.19 Dec 6, 2022, 1:01 AM Reference Plugin Feed: 202212060101