Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2009-2721 (GCVE-0-2009-2721)
Vulnerability from cvelistv5
- n/a
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-07T05:59:57.028Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "37460", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/37460" }, { "name": "GLSA-200911-02", "tags": [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred" ], "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html" }, { "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components", "tags": [ "mailing-list", "x_refsource_BUGTRAQ", "x_transferred" ], "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html" }, { "name": "37386", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/37386" }, { "name": "ADV-2009-3316", "tags": [ "vdb-entry", "x_refsource_VUPEN", "x_transferred" ], "url": "http://www.vupen.com/english/advisories/2009/3316" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2009-07-30T00:00:00", "descriptions": [ { "lang": "en", "value": "Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6406003." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2018-10-10T18:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre" }, "references": [ { "name": "37460", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/37460" }, { "name": "GLSA-200911-02", "tags": [ "vendor-advisory", "x_refsource_GENTOO" ], "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html" }, { "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components", "tags": [ "mailing-list", "x_refsource_BUGTRAQ" ], "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html" }, { "name": "37386", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/37386" }, { "name": "ADV-2009-3316", "tags": [ "vdb-entry", "x_refsource_VUPEN" ], "url": "http://www.vupen.com/english/advisories/2009/3316" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2009-2721", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6406003." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "37460", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/37460" }, { "name": "GLSA-200911-02", "refsource": "GENTOO", "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml" }, { "name": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html", "refsource": "CONFIRM", "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html" }, { "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded" }, { "name": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1", "refsource": "CONFIRM", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1" }, { "name": "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html", "refsource": "CONFIRM", "url": "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html" }, { "name": "37386", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/37386" }, { "name": "ADV-2009-3316", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2009/3316" } ] } } } }, "cveMetadata": { "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2009-2721", "datePublished": "2009-08-10T20:00:00", "dateReserved": "2009-08-10T00:00:00", "dateUpdated": "2024-08-07T05:59:57.028Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2009-2721\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2009-08-10T20:30:00.640\",\"lastModified\":\"2025-04-09T00:30:58.490\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6406003.\"},{\"lang\":\"es\",\"value\":\"M\u00faltiples vulnerabilidades no especificadas en la clase \\\"Provider\\\" en Sun Java SE v5.0 anteriores a Update 20 tienen un impacto y vectores de ataque desconocidos, tambi\u00e9n conocido como BugId 6406003.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:C/I:C/A:C\",\"baseScore\":10.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":10.0,\"acInsufInfo\":true,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sun:java_se:*:19:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.0\",\"matchCriteriaId\":\"DC8CDBBF-43EC-4FC0-BD17-C54BEB14F547\"}]}]}],\"references\":[{\"url\":\"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/37386\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/37460\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://security.gentoo.org/glsa/glsa-200911-02.xml\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/archive/1/507985/100/0/threaded\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.vmware.com/security/advisories/VMSA-2009-0016.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.vupen.com/english/advisories/2009/3316\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/37386\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/37460\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://security.gentoo.org/glsa/glsa-200911-02.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/archive/1/507985/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.vmware.com/security/advisories/VMSA-2009-0016.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.vupen.com/english/advisories/2009/3316\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}" } }
rhsa-2009:1199
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated java-1.5.0-sun packages that correct several security issues are\nnow available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.", "title": "Topic" }, { "category": "general", "text": "The Sun 1.5.0 Java release includes the Sun Java 5 Runtime Environment and\nthe Sun Java 5 Software Development Kit.\n\nThis update fixes several vulnerabilities in the Sun Java 5 Runtime\nEnvironment and the Sun Java 5 Software Development Kit. These\nvulnerabilities are summarized on the \"Advance notification of Security\nUpdates for Java SE\" page from Sun Microsystems, listed in the References\nsection. (CVE-2009-2475, CVE-2009-2625, CVE-2009-2670, CVE-2009-2671,\nCVE-2009-2672, CVE-2009-2673, CVE-2009-2675, CVE-2009-2676, CVE-2009-2689)\n\nUsers of java-1.5.0-sun should upgrade to these updated packages, which\ncorrect these issues. All running instances of Sun Java must be restarted\nfor the update to take effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2009:1199", "url": "https://access.redhat.com/errata/RHSA-2009:1199" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#critical", "url": "https://access.redhat.com/security/updates/classification/#critical" }, { "category": "external", "summary": "http://blogs.sun.com/security/entry/advance_notification_of_security_updates5", "url": "http://blogs.sun.com/security/entry/advance_notification_of_security_updates5" }, { "category": "external", "summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1" }, { "category": "external", "summary": "512896", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512896" }, { "category": "external", "summary": "512907", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512907" }, { "category": "external", "summary": "512914", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512914" }, { "category": "external", "summary": "512920", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512920" }, { "category": "external", "summary": "512921", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512921" }, { "category": "external", "summary": "513215", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=513215" }, { "category": "external", "summary": "513222", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=513222" }, { "category": "external", "summary": "515890", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=515890" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1199.json" } ], "title": "Red Hat Security Advisory: java-1.5.0-sun security update", "tracking": { "current_release_date": "2025-09-26T03:03:36+00:00", "generator": { "date": "2025-09-26T03:03:36+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.8" } }, "id": "RHSA-2009:1199", "initial_release_date": "2009-08-06T20:38:00+00:00", "revision_history": [ { "date": "2009-08-06T20:38:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2009-08-06T16:38:05+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-09-26T03:03:36+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AS version 4 Extras", "product": { "name": "Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:4" } } }, { "category": "product_name", "name": "Red Hat Desktop version 4 Extras", "product": { "name": "Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:4" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ES version 4 Extras", "product": { "name": "Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:4" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux WS version 4 Extras", "product": { "name": "Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:4" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product": { "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:5::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Supplementary (v. 5)", "product": { "name": "Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:5::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux Supplementary" }, { "branches": [ { "category": "product_version", "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "product": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "product_id": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.20-1jpp.1.el4?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "product": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "product_id": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-jdbc@1.5.0.20-1jpp.1.el4?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "product": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "product_id": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-demo@1.5.0.20-1jpp.1.el4?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "product": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "product_id": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-src@1.5.0.20-1jpp.1.el4?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "product": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "product_id": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.20-1jpp.1.el4?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "product": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "product_id": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.20-1jpp.1.el5?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "product": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "product_id": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.20-1jpp.1.el5?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "product": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "product_id": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-jdbc@1.5.0.20-1jpp.1.el5?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "product": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "product_id": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-demo@1.5.0.20-1jpp.1.el5?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "product": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "product_id": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-src@1.5.0.20-1jpp.1.el5?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "product": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "product_id": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.20-1jpp.1.el4?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "product": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "product_id": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-jdbc@1.5.0.20-1jpp.1.el4?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "product": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "product_id": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-demo@1.5.0.20-1jpp.1.el4?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "product": { "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "product_id": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-plugin@1.5.0.20-1jpp.1.el4?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "product": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "product_id": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-src@1.5.0.20-1jpp.1.el4?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "product": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "product_id": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.20-1jpp.1.el4?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "product": { "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "product_id": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-plugin@1.5.0.20-1jpp.1.el5?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "product": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "product_id": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.20-1jpp.1.el5?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "product": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "product_id": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.20-1jpp.1.el5?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "product": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "product_id": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-jdbc@1.5.0.20-1jpp.1.el5?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "product": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "product_id": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-demo@1.5.0.20-1jpp.1.el5?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "product": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "product_id": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-src@1.5.0.20-1jpp.1.el5?arch=i586" } } } ], "category": "architecture", "name": "i586" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Server-Supplementary" } ] }, "vulnerabilities": [ { "cve": "CVE-2009-2475", "discovery_date": "2009-07-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "513215" } ], "notes": [ { "category": "description", "text": "Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to (1) LayoutQueue, (2) Cursor.predefined, (3) AccessibleResourceBundle.getContents, (4) ImageReaderSpi.STANDARD_INPUT_TYPE, (5) ImageWriterSpi.STANDARD_OUTPUT_TYPE, (6) the imageio plugins, (7) DnsContext.debug, (8) RmfFileReader/StandardMidiFileWriter.types, (9) AbstractSaslImpl.logger, (10) Synth.Region.uiToRegionMap/lowerCaseNameMap, (11) the Introspector class and a cache of BeanInfo, and (12) JAX-WS, a different vulnerability than CVE-2009-2673.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK information leaks in mutable variables (6588003,6656586,6656610,6656625,6657133,6657619,6657625,6657695,6660049,6660539,6813167)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2475" }, { "category": "external", "summary": "RHBZ#513215", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=513215" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2475", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2475" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2475", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2475" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK information leaks in mutable variables (6588003,6656586,6656610,6656625,6657133,6657619,6657625,6657695,6660049,6660539,6813167)" }, { "cve": "CVE-2009-2625", "discovery_date": "2009-07-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "512921" } ], "notes": [ { "category": "description", "text": "XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: XML parsing Denial-Of-Service (6845701)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2625" }, { "category": "external", "summary": "RHBZ#512921", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512921" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2625", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2625" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2625", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2625" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: XML parsing Denial-Of-Service (6845701)" }, { "cve": "CVE-2009-2670", "discovery_date": "2009-07-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "512896" } ], "notes": [ { "category": "description", "text": "The audio system in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by (1) untrusted applets and (2) Java Web Start applications, which allows context-dependent attackers to obtain sensitive information by reading these properties.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Untrusted applet System properties access (6738524)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2670" }, { "category": "external", "summary": "RHBZ#512896", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512896" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2670", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2670" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2670", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2670" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK Untrusted applet System properties access (6738524)" }, { "cve": "CVE-2009-2671", "discovery_date": "2009-07-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "512907" } ], "notes": [ { "category": "description", "text": "The SOCKS proxy implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover the username of the account that invoked an untrusted (1) applet or (2) Java Web Start application via unspecified vectors.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Proxy mechanism information leaks (6801071)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2671" }, { "category": "external", "summary": "RHBZ#512907", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512907" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2671", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2671" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2671", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2671" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Proxy mechanism information leaks (6801071)" }, { "cve": "CVE-2009-2672", "discovery_date": "2009-07-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "512907" } ], "notes": [ { "category": "description", "text": "The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to browser cookies by untrusted (1) applets and (2) Java Web Start applications, which allows remote attackers to hijack web sessions via unspecified vectors.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Proxy mechanism information leaks (6801071)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2672" }, { "category": "external", "summary": "RHBZ#512907", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512907" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2672", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2672" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2672", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2672" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Proxy mechanism information leaks (6801071)" }, { "cve": "CVE-2009-2673", "discovery_date": "2009-07-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "512914" } ], "notes": [ { "category": "description", "text": "The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lacks the final keyword.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK proxy mechanism allows non-authorized socket connections (6801497)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2673" }, { "category": "external", "summary": "RHBZ#512914", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512914" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2673", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2673" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2673", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2673" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK proxy mechanism allows non-authorized socket connections (6801497)" }, { "cve": "CVE-2009-2675", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "discovery_date": "2009-07-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "512920" } ], "notes": [ { "category": "description", "text": "Integer overflow in the unpack200 utility in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows context-dependent attackers to gain privileges via unspecified length fields in the header of a Pack200-compressed JAR file, which leads to a heap-based buffer overflow during decompression.", "title": "Vulnerability description" }, { "category": "summary", "text": "Java Web Start Buffer unpack200 processing integer overflow (6830335)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2675" }, { "category": "external", "summary": "RHBZ#512920", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512920" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2675", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2675" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2675", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2675" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "Java Web Start Buffer unpack200 processing integer overflow (6830335)" }, { "cve": "CVE-2009-2676", "discovery_date": "2009-08-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "515890" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Update 19 and earlier; and Java SE for Business in SDK and JRE 1.4.2_21 and earlier; allows remote attackers to create or modify arbitrary files via vectors involving an untrusted Java applet that accesses an old version of JNLPAppletLauncher.", "title": "Vulnerability description" }, { "category": "summary", "text": "JRE applet launcher vulnerability", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2676" }, { "category": "external", "summary": "RHBZ#515890", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=515890" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2676", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2676" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2676", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2676" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.8, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:P", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "JRE applet launcher vulnerability" }, { "cve": "CVE-2009-2689", "discovery_date": "2009-07-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "513222" } ], "notes": [ { "category": "description", "text": "JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of unspecified object types, which allows context-dependent attackers to bypass intended access restrictions via an untrusted (1) applet or (2) application.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK JDK13Services grants unnecessary privileges (6777448)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2689" }, { "category": "external", "summary": "RHBZ#513222", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=513222" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2689", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2689" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2689", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2689" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK JDK13Services grants unnecessary privileges (6777448)" }, { "cve": "CVE-2009-2720", "discovery_date": "2009-08-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "516823" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the javax.swing.plaf.synth.SynthContext.isSubregion method in the Swing implementation in Sun Java SE 6 before Update 15 allows context-dependent attackers to cause a denial of service (NullPointerException in the Jemmy library) via unknown vectors.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK DoS with Swing Synthcontext implementation", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2720" }, { "category": "external", "summary": "RHBZ#516823", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=516823" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2720", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2720" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2720", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2720" } ], "release_date": "2009-08-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 1.9, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:L/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "JDK DoS with Swing Synthcontext implementation" }, { "cve": "CVE-2009-2721", "discovery_date": "2009-08-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "516826" } ], "notes": [ { "category": "description", "text": "Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6406003.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK Multiple unspecified vulnerabilities in Provider class", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2721" }, { "category": "external", "summary": "RHBZ#516826", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=516826" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2721", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2721" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2721", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2721" } ], "release_date": "2009-08-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "JDK Multiple unspecified vulnerabilities in Provider class" }, { "cve": "CVE-2009-2722", "discovery_date": "2009-08-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "516829" } ], "notes": [ { "category": "description", "text": "Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6429594. NOTE: this issue exists because of an incorrect fix for BugId 6406003.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK Multiple unspecified vulnerabilities in Provider class (incorrect fix)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2722" }, { "category": "external", "summary": "RHBZ#516829", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=516829" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2722", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2722" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2722", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2722" } ], "release_date": "2009-08-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "JDK Multiple unspecified vulnerabilities in Provider class (incorrect fix)" }, { "cve": "CVE-2009-2723", "discovery_date": "2009-08-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "516832" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in deserialization in the Provider class in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, aka BugId 6444262.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK unspecified deserialization in Provider class", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2723" }, { "category": "external", "summary": "RHBZ#516832", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=516832" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2723", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2723" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2723", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2723" } ], "release_date": "2009-08-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "JDK unspecified deserialization in Provider class" }, { "cve": "CVE-2009-2724", "discovery_date": "2009-08-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "516834" } ], "notes": [ { "category": "description", "text": "Race condition in the java.lang package in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, related to a \"3Y Race condition in reflection checks.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK race condition vulnerability reflection checks", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2724" }, { "category": "external", "summary": "RHBZ#516834", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=516834" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2724", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2724" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2724", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2724" } ], "release_date": "2009-08-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK race condition vulnerability reflection checks" } ] }
rhsa-2009_1199
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated java-1.5.0-sun packages that correct several security issues are\nnow available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.", "title": "Topic" }, { "category": "general", "text": "The Sun 1.5.0 Java release includes the Sun Java 5 Runtime Environment and\nthe Sun Java 5 Software Development Kit.\n\nThis update fixes several vulnerabilities in the Sun Java 5 Runtime\nEnvironment and the Sun Java 5 Software Development Kit. These\nvulnerabilities are summarized on the \"Advance notification of Security\nUpdates for Java SE\" page from Sun Microsystems, listed in the References\nsection. (CVE-2009-2475, CVE-2009-2625, CVE-2009-2670, CVE-2009-2671,\nCVE-2009-2672, CVE-2009-2673, CVE-2009-2675, CVE-2009-2676, CVE-2009-2689)\n\nUsers of java-1.5.0-sun should upgrade to these updated packages, which\ncorrect these issues. All running instances of Sun Java must be restarted\nfor the update to take effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2009:1199", "url": "https://access.redhat.com/errata/RHSA-2009:1199" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#critical", "url": "https://access.redhat.com/security/updates/classification/#critical" }, { "category": "external", "summary": "http://blogs.sun.com/security/entry/advance_notification_of_security_updates5", "url": "http://blogs.sun.com/security/entry/advance_notification_of_security_updates5" }, { "category": "external", "summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1" }, { "category": "external", "summary": "512896", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512896" }, { "category": "external", "summary": "512907", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512907" }, { "category": "external", "summary": "512914", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512914" }, { "category": "external", "summary": "512920", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512920" }, { "category": "external", "summary": "512921", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512921" }, { "category": "external", "summary": "513215", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=513215" }, { "category": "external", "summary": "513222", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=513222" }, { "category": "external", "summary": "515890", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=515890" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1199.json" } ], "title": "Red Hat Security Advisory: java-1.5.0-sun security update", "tracking": { "current_release_date": "2024-11-14T10:46:47+00:00", "generator": { "date": "2024-11-14T10:46:47+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.0" } }, "id": "RHSA-2009:1199", "initial_release_date": "2009-08-06T20:38:00+00:00", "revision_history": [ { "date": "2009-08-06T20:38:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2009-08-06T16:38:05+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-14T10:46:47+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AS version 4 Extras", "product": { "name": "Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:4" } } }, { "category": "product_name", "name": "Red Hat Desktop version 4 Extras", "product": { "name": "Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:4" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ES version 4 Extras", "product": { "name": "Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:4" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux WS version 4 Extras", "product": { "name": "Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:4" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product": { "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:5::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Supplementary (v. 5)", "product": { "name": "Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:5::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux Supplementary" }, { "branches": [ { "category": "product_version", "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "product": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "product_id": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.20-1jpp.1.el4?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "product": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "product_id": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-jdbc@1.5.0.20-1jpp.1.el4?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "product": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "product_id": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-demo@1.5.0.20-1jpp.1.el4?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "product": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "product_id": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-src@1.5.0.20-1jpp.1.el4?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "product": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "product_id": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.20-1jpp.1.el4?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "product": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "product_id": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.20-1jpp.1.el5?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "product": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "product_id": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.20-1jpp.1.el5?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "product": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "product_id": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-jdbc@1.5.0.20-1jpp.1.el5?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "product": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "product_id": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-demo@1.5.0.20-1jpp.1.el5?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "product": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "product_id": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-src@1.5.0.20-1jpp.1.el5?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "product": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "product_id": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.20-1jpp.1.el4?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "product": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "product_id": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-jdbc@1.5.0.20-1jpp.1.el4?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "product": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "product_id": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-demo@1.5.0.20-1jpp.1.el4?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "product": { "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "product_id": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-plugin@1.5.0.20-1jpp.1.el4?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "product": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "product_id": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-src@1.5.0.20-1jpp.1.el4?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "product": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "product_id": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.20-1jpp.1.el4?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "product": { "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "product_id": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-plugin@1.5.0.20-1jpp.1.el5?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "product": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "product_id": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.20-1jpp.1.el5?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "product": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "product_id": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.20-1jpp.1.el5?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "product": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "product_id": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-jdbc@1.5.0.20-1jpp.1.el5?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "product": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "product_id": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-demo@1.5.0.20-1jpp.1.el5?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "product": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "product_id": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-src@1.5.0.20-1jpp.1.el5?arch=i586" } } } ], "category": "architecture", "name": "i586" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Server-Supplementary" } ] }, "vulnerabilities": [ { "cve": "CVE-2009-2475", "discovery_date": "2009-07-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "513215" } ], "notes": [ { "category": "description", "text": "Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to (1) LayoutQueue, (2) Cursor.predefined, (3) AccessibleResourceBundle.getContents, (4) ImageReaderSpi.STANDARD_INPUT_TYPE, (5) ImageWriterSpi.STANDARD_OUTPUT_TYPE, (6) the imageio plugins, (7) DnsContext.debug, (8) RmfFileReader/StandardMidiFileWriter.types, (9) AbstractSaslImpl.logger, (10) Synth.Region.uiToRegionMap/lowerCaseNameMap, (11) the Introspector class and a cache of BeanInfo, and (12) JAX-WS, a different vulnerability than CVE-2009-2673.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK information leaks in mutable variables (6588003,6656586,6656610,6656625,6657133,6657619,6657625,6657695,6660049,6660539,6813167)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2475" }, { "category": "external", "summary": "RHBZ#513215", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=513215" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2475", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2475" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2475", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2475" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK information leaks in mutable variables (6588003,6656586,6656610,6656625,6657133,6657619,6657625,6657695,6660049,6660539,6813167)" }, { "cve": "CVE-2009-2625", "discovery_date": "2009-07-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "512921" } ], "notes": [ { "category": "description", "text": "XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: XML parsing Denial-Of-Service (6845701)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2625" }, { "category": "external", "summary": "RHBZ#512921", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512921" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2625", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2625" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2625", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2625" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: XML parsing Denial-Of-Service (6845701)" }, { "cve": "CVE-2009-2670", "discovery_date": "2009-07-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "512896" } ], "notes": [ { "category": "description", "text": "The audio system in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by (1) untrusted applets and (2) Java Web Start applications, which allows context-dependent attackers to obtain sensitive information by reading these properties.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Untrusted applet System properties access (6738524)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2670" }, { "category": "external", "summary": "RHBZ#512896", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512896" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2670", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2670" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2670", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2670" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK Untrusted applet System properties access (6738524)" }, { "cve": "CVE-2009-2671", "discovery_date": "2009-07-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "512907" } ], "notes": [ { "category": "description", "text": "The SOCKS proxy implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover the username of the account that invoked an untrusted (1) applet or (2) Java Web Start application via unspecified vectors.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Proxy mechanism information leaks (6801071)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2671" }, { "category": "external", "summary": "RHBZ#512907", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512907" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2671", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2671" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2671", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2671" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Proxy mechanism information leaks (6801071)" }, { "cve": "CVE-2009-2672", "discovery_date": "2009-07-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "512907" } ], "notes": [ { "category": "description", "text": "The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to browser cookies by untrusted (1) applets and (2) Java Web Start applications, which allows remote attackers to hijack web sessions via unspecified vectors.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Proxy mechanism information leaks (6801071)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2672" }, { "category": "external", "summary": "RHBZ#512907", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512907" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2672", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2672" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2672", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2672" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Proxy mechanism information leaks (6801071)" }, { "cve": "CVE-2009-2673", "discovery_date": "2009-07-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "512914" } ], "notes": [ { "category": "description", "text": "The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lacks the final keyword.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK proxy mechanism allows non-authorized socket connections (6801497)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2673" }, { "category": "external", "summary": "RHBZ#512914", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512914" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2673", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2673" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2673", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2673" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK proxy mechanism allows non-authorized socket connections (6801497)" }, { "cve": "CVE-2009-2675", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "discovery_date": "2009-07-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "512920" } ], "notes": [ { "category": "description", "text": "Integer overflow in the unpack200 utility in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows context-dependent attackers to gain privileges via unspecified length fields in the header of a Pack200-compressed JAR file, which leads to a heap-based buffer overflow during decompression.", "title": "Vulnerability description" }, { "category": "summary", "text": "Java Web Start Buffer unpack200 processing integer overflow (6830335)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2675" }, { "category": "external", "summary": "RHBZ#512920", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512920" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2675", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2675" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2675", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2675" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "Java Web Start Buffer unpack200 processing integer overflow (6830335)" }, { "cve": "CVE-2009-2676", "discovery_date": "2009-08-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "515890" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Update 19 and earlier; and Java SE for Business in SDK and JRE 1.4.2_21 and earlier; allows remote attackers to create or modify arbitrary files via vectors involving an untrusted Java applet that accesses an old version of JNLPAppletLauncher.", "title": "Vulnerability description" }, { "category": "summary", "text": "JRE applet launcher vulnerability", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2676" }, { "category": "external", "summary": "RHBZ#515890", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=515890" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2676", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2676" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2676", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2676" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.8, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:P", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "JRE applet launcher vulnerability" }, { "cve": "CVE-2009-2689", "discovery_date": "2009-07-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "513222" } ], "notes": [ { "category": "description", "text": "JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of unspecified object types, which allows context-dependent attackers to bypass intended access restrictions via an untrusted (1) applet or (2) application.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK JDK13Services grants unnecessary privileges (6777448)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2689" }, { "category": "external", "summary": "RHBZ#513222", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=513222" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2689", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2689" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2689", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2689" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK JDK13Services grants unnecessary privileges (6777448)" }, { "cve": "CVE-2009-2720", "discovery_date": "2009-08-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "516823" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the javax.swing.plaf.synth.SynthContext.isSubregion method in the Swing implementation in Sun Java SE 6 before Update 15 allows context-dependent attackers to cause a denial of service (NullPointerException in the Jemmy library) via unknown vectors.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK DoS with Swing Synthcontext implementation", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2720" }, { "category": "external", "summary": "RHBZ#516823", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=516823" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2720", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2720" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2720", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2720" } ], "release_date": "2009-08-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 1.9, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:L/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "JDK DoS with Swing Synthcontext implementation" }, { "cve": "CVE-2009-2721", "discovery_date": "2009-08-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "516826" } ], "notes": [ { "category": "description", "text": "Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6406003.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK Multiple unspecified vulnerabilities in Provider class", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2721" }, { "category": "external", "summary": "RHBZ#516826", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=516826" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2721", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2721" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2721", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2721" } ], "release_date": "2009-08-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "JDK Multiple unspecified vulnerabilities in Provider class" }, { "cve": "CVE-2009-2722", "discovery_date": "2009-08-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "516829" } ], "notes": [ { "category": "description", "text": "Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6429594. NOTE: this issue exists because of an incorrect fix for BugId 6406003.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK Multiple unspecified vulnerabilities in Provider class (incorrect fix)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2722" }, { "category": "external", "summary": "RHBZ#516829", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=516829" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2722", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2722" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2722", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2722" } ], "release_date": "2009-08-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "JDK Multiple unspecified vulnerabilities in Provider class (incorrect fix)" }, { "cve": "CVE-2009-2723", "discovery_date": "2009-08-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "516832" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in deserialization in the Provider class in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, aka BugId 6444262.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK unspecified deserialization in Provider class", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2723" }, { "category": "external", "summary": "RHBZ#516832", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=516832" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2723", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2723" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2723", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2723" } ], "release_date": "2009-08-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "JDK unspecified deserialization in Provider class" }, { "cve": "CVE-2009-2724", "discovery_date": "2009-08-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "516834" } ], "notes": [ { "category": "description", "text": "Race condition in the java.lang package in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, related to a \"3Y Race condition in reflection checks.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK race condition vulnerability reflection checks", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2724" }, { "category": "external", "summary": "RHBZ#516834", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=516834" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2724", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2724" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2724", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2724" } ], "release_date": "2009-08-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK race condition vulnerability reflection checks" } ] }
RHSA-2009:1199
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated java-1.5.0-sun packages that correct several security issues are\nnow available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.", "title": "Topic" }, { "category": "general", "text": "The Sun 1.5.0 Java release includes the Sun Java 5 Runtime Environment and\nthe Sun Java 5 Software Development Kit.\n\nThis update fixes several vulnerabilities in the Sun Java 5 Runtime\nEnvironment and the Sun Java 5 Software Development Kit. These\nvulnerabilities are summarized on the \"Advance notification of Security\nUpdates for Java SE\" page from Sun Microsystems, listed in the References\nsection. (CVE-2009-2475, CVE-2009-2625, CVE-2009-2670, CVE-2009-2671,\nCVE-2009-2672, CVE-2009-2673, CVE-2009-2675, CVE-2009-2676, CVE-2009-2689)\n\nUsers of java-1.5.0-sun should upgrade to these updated packages, which\ncorrect these issues. All running instances of Sun Java must be restarted\nfor the update to take effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2009:1199", "url": "https://access.redhat.com/errata/RHSA-2009:1199" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#critical", "url": "https://access.redhat.com/security/updates/classification/#critical" }, { "category": "external", "summary": "http://blogs.sun.com/security/entry/advance_notification_of_security_updates5", "url": "http://blogs.sun.com/security/entry/advance_notification_of_security_updates5" }, { "category": "external", "summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1" }, { "category": "external", "summary": "512896", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512896" }, { "category": "external", "summary": "512907", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512907" }, { "category": "external", "summary": "512914", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512914" }, { "category": "external", "summary": "512920", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512920" }, { "category": "external", "summary": "512921", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512921" }, { "category": "external", "summary": "513215", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=513215" }, { "category": "external", "summary": "513222", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=513222" }, { "category": "external", "summary": "515890", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=515890" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1199.json" } ], "title": "Red Hat Security Advisory: java-1.5.0-sun security update", "tracking": { "current_release_date": "2025-09-26T03:03:36+00:00", "generator": { "date": "2025-09-26T03:03:36+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.8" } }, "id": "RHSA-2009:1199", "initial_release_date": "2009-08-06T20:38:00+00:00", "revision_history": [ { "date": "2009-08-06T20:38:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2009-08-06T16:38:05+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-09-26T03:03:36+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AS version 4 Extras", "product": { "name": "Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:4" } } }, { "category": "product_name", "name": "Red Hat Desktop version 4 Extras", "product": { "name": "Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:4" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ES version 4 Extras", "product": { "name": "Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:4" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux WS version 4 Extras", "product": { "name": "Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:4" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product": { "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:5::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Supplementary (v. 5)", "product": { "name": "Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:5::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux Supplementary" }, { "branches": [ { "category": "product_version", "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "product": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "product_id": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.20-1jpp.1.el4?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "product": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "product_id": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-jdbc@1.5.0.20-1jpp.1.el4?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "product": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "product_id": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-demo@1.5.0.20-1jpp.1.el4?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "product": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "product_id": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-src@1.5.0.20-1jpp.1.el4?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "product": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "product_id": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.20-1jpp.1.el4?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "product": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "product_id": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.20-1jpp.1.el5?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "product": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "product_id": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.20-1jpp.1.el5?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "product": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "product_id": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-jdbc@1.5.0.20-1jpp.1.el5?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "product": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "product_id": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-demo@1.5.0.20-1jpp.1.el5?arch=x86_64" } } }, { "category": "product_version", "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "product": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "product_id": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-src@1.5.0.20-1jpp.1.el5?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "product": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "product_id": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.20-1jpp.1.el4?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "product": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "product_id": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-jdbc@1.5.0.20-1jpp.1.el4?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "product": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "product_id": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-demo@1.5.0.20-1jpp.1.el4?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "product": { "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "product_id": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-plugin@1.5.0.20-1jpp.1.el4?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "product": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "product_id": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-src@1.5.0.20-1jpp.1.el4?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "product": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "product_id": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.20-1jpp.1.el4?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "product": { "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "product_id": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-plugin@1.5.0.20-1jpp.1.el5?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "product": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "product_id": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.20-1jpp.1.el5?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "product": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "product_id": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.20-1jpp.1.el5?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "product": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "product_id": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-jdbc@1.5.0.20-1jpp.1.el5?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "product": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "product_id": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-demo@1.5.0.20-1jpp.1.el5?arch=i586" } } }, { "category": "product_version", "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "product": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "product_id": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.5.0-sun-src@1.5.0.20-1jpp.1.el5?arch=i586" } } } ], "category": "architecture", "name": "i586" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras", "product_id": "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4AS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras", "product_id": "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4Desktop-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras", "product_id": "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4ES-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras", "product_id": "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "relates_to_product_reference": "4WS-LACD" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Client-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "relates_to_product_reference": "5Server-Supplementary" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" }, "product_reference": "java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "relates_to_product_reference": "5Server-Supplementary" } ] }, "vulnerabilities": [ { "cve": "CVE-2009-2475", "discovery_date": "2009-07-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "513215" } ], "notes": [ { "category": "description", "text": "Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to (1) LayoutQueue, (2) Cursor.predefined, (3) AccessibleResourceBundle.getContents, (4) ImageReaderSpi.STANDARD_INPUT_TYPE, (5) ImageWriterSpi.STANDARD_OUTPUT_TYPE, (6) the imageio plugins, (7) DnsContext.debug, (8) RmfFileReader/StandardMidiFileWriter.types, (9) AbstractSaslImpl.logger, (10) Synth.Region.uiToRegionMap/lowerCaseNameMap, (11) the Introspector class and a cache of BeanInfo, and (12) JAX-WS, a different vulnerability than CVE-2009-2673.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK information leaks in mutable variables (6588003,6656586,6656610,6656625,6657133,6657619,6657625,6657695,6660049,6660539,6813167)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2475" }, { "category": "external", "summary": "RHBZ#513215", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=513215" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2475", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2475" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2475", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2475" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK information leaks in mutable variables (6588003,6656586,6656610,6656625,6657133,6657619,6657625,6657695,6660049,6660539,6813167)" }, { "cve": "CVE-2009-2625", "discovery_date": "2009-07-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "512921" } ], "notes": [ { "category": "description", "text": "XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: XML parsing Denial-Of-Service (6845701)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2625" }, { "category": "external", "summary": "RHBZ#512921", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512921" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2625", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2625" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2625", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2625" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: XML parsing Denial-Of-Service (6845701)" }, { "cve": "CVE-2009-2670", "discovery_date": "2009-07-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "512896" } ], "notes": [ { "category": "description", "text": "The audio system in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by (1) untrusted applets and (2) Java Web Start applications, which allows context-dependent attackers to obtain sensitive information by reading these properties.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Untrusted applet System properties access (6738524)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2670" }, { "category": "external", "summary": "RHBZ#512896", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512896" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2670", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2670" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2670", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2670" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK Untrusted applet System properties access (6738524)" }, { "cve": "CVE-2009-2671", "discovery_date": "2009-07-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "512907" } ], "notes": [ { "category": "description", "text": "The SOCKS proxy implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover the username of the account that invoked an untrusted (1) applet or (2) Java Web Start application via unspecified vectors.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Proxy mechanism information leaks (6801071)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2671" }, { "category": "external", "summary": "RHBZ#512907", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512907" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2671", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2671" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2671", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2671" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Proxy mechanism information leaks (6801071)" }, { "cve": "CVE-2009-2672", "discovery_date": "2009-07-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "512907" } ], "notes": [ { "category": "description", "text": "The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to browser cookies by untrusted (1) applets and (2) Java Web Start applications, which allows remote attackers to hijack web sessions via unspecified vectors.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Proxy mechanism information leaks (6801071)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2672" }, { "category": "external", "summary": "RHBZ#512907", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512907" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2672", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2672" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2672", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2672" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Proxy mechanism information leaks (6801071)" }, { "cve": "CVE-2009-2673", "discovery_date": "2009-07-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "512914" } ], "notes": [ { "category": "description", "text": "The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lacks the final keyword.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK proxy mechanism allows non-authorized socket connections (6801497)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2673" }, { "category": "external", "summary": "RHBZ#512914", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512914" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2673", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2673" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2673", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2673" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK proxy mechanism allows non-authorized socket connections (6801497)" }, { "cve": "CVE-2009-2675", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "discovery_date": "2009-07-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "512920" } ], "notes": [ { "category": "description", "text": "Integer overflow in the unpack200 utility in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows context-dependent attackers to gain privileges via unspecified length fields in the header of a Pack200-compressed JAR file, which leads to a heap-based buffer overflow during decompression.", "title": "Vulnerability description" }, { "category": "summary", "text": "Java Web Start Buffer unpack200 processing integer overflow (6830335)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2675" }, { "category": "external", "summary": "RHBZ#512920", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512920" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2675", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2675" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2675", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2675" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "Java Web Start Buffer unpack200 processing integer overflow (6830335)" }, { "cve": "CVE-2009-2676", "discovery_date": "2009-08-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "515890" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Update 19 and earlier; and Java SE for Business in SDK and JRE 1.4.2_21 and earlier; allows remote attackers to create or modify arbitrary files via vectors involving an untrusted Java applet that accesses an old version of JNLPAppletLauncher.", "title": "Vulnerability description" }, { "category": "summary", "text": "JRE applet launcher vulnerability", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2676" }, { "category": "external", "summary": "RHBZ#515890", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=515890" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2676", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2676" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2676", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2676" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.8, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:P", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "JRE applet launcher vulnerability" }, { "cve": "CVE-2009-2689", "discovery_date": "2009-07-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "513222" } ], "notes": [ { "category": "description", "text": "JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of unspecified object types, which allows context-dependent attackers to bypass intended access restrictions via an untrusted (1) applet or (2) application.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK JDK13Services grants unnecessary privileges (6777448)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2689" }, { "category": "external", "summary": "RHBZ#513222", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=513222" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2689", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2689" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2689", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2689" } ], "release_date": "2009-08-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK JDK13Services grants unnecessary privileges (6777448)" }, { "cve": "CVE-2009-2720", "discovery_date": "2009-08-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "516823" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the javax.swing.plaf.synth.SynthContext.isSubregion method in the Swing implementation in Sun Java SE 6 before Update 15 allows context-dependent attackers to cause a denial of service (NullPointerException in the Jemmy library) via unknown vectors.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK DoS with Swing Synthcontext implementation", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2720" }, { "category": "external", "summary": "RHBZ#516823", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=516823" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2720", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2720" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2720", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2720" } ], "release_date": "2009-08-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 1.9, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:L/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "JDK DoS with Swing Synthcontext implementation" }, { "cve": "CVE-2009-2721", "discovery_date": "2009-08-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "516826" } ], "notes": [ { "category": "description", "text": "Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6406003.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK Multiple unspecified vulnerabilities in Provider class", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2721" }, { "category": "external", "summary": "RHBZ#516826", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=516826" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2721", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2721" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2721", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2721" } ], "release_date": "2009-08-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "JDK Multiple unspecified vulnerabilities in Provider class" }, { "cve": "CVE-2009-2722", "discovery_date": "2009-08-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "516829" } ], "notes": [ { "category": "description", "text": "Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6429594. NOTE: this issue exists because of an incorrect fix for BugId 6406003.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK Multiple unspecified vulnerabilities in Provider class (incorrect fix)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2722" }, { "category": "external", "summary": "RHBZ#516829", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=516829" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2722", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2722" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2722", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2722" } ], "release_date": "2009-08-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "JDK Multiple unspecified vulnerabilities in Provider class (incorrect fix)" }, { "cve": "CVE-2009-2723", "discovery_date": "2009-08-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "516832" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in deserialization in the Provider class in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, aka BugId 6444262.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK unspecified deserialization in Provider class", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2723" }, { "category": "external", "summary": "RHBZ#516832", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=516832" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2723", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2723" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2723", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2723" } ], "release_date": "2009-08-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "JDK unspecified deserialization in Provider class" }, { "cve": "CVE-2009-2724", "discovery_date": "2009-08-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "516834" } ], "notes": [ { "category": "description", "text": "Race condition in the java.lang package in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, related to a \"3Y Race condition in reflection checks.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK race condition vulnerability reflection checks", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2724" }, { "category": "external", "summary": "RHBZ#516834", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=516834" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2724", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2724" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2724", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2724" } ], "release_date": "2009-08-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-08-06T20:38:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1199" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el4.x86_64", "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.i586", "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el4.x86_64", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.20-1jpp.1.el5.x86_64", "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.i586", "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.20-1jpp.1.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK race condition vulnerability reflection checks" } ] }
ghsa-p3w4-7hc7-833g
Vulnerability from github
Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6406003.
{ "affected": [], "aliases": [ "CVE-2009-2721" ], "database_specific": { "cwe_ids": [], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2009-08-10T20:30:00Z", "severity": "HIGH" }, "details": "Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6406003.", "id": "GHSA-p3w4-7hc7-833g", "modified": "2022-05-02T03:38:03Z", "published": "2022-05-02T03:38:03Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2721" }, { "type": "WEB", "url": "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html" }, { "type": "WEB", "url": "http://secunia.com/advisories/37386" }, { "type": "WEB", "url": "http://secunia.com/advisories/37460" }, { "type": "WEB", "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml" }, { "type": "WEB", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1" }, { "type": "WEB", "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded" }, { "type": "WEB", "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2009/3316" } ], "schema_version": "1.4.0", "severity": [] }
fkie_cve-2009-2721
Vulnerability from fkie_nvd
URL | Tags | ||
---|---|---|---|
cve@mitre.org | http://java.sun.com/j2se/1.5.0/ReleaseNotes.html | Patch, Vendor Advisory | |
cve@mitre.org | http://secunia.com/advisories/37386 | ||
cve@mitre.org | http://secunia.com/advisories/37460 | ||
cve@mitre.org | http://security.gentoo.org/glsa/glsa-200911-02.xml | ||
cve@mitre.org | http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1 | Patch, Vendor Advisory | |
cve@mitre.org | http://www.securityfocus.com/archive/1/507985/100/0/threaded | ||
cve@mitre.org | http://www.vmware.com/security/advisories/VMSA-2009-0016.html | ||
cve@mitre.org | http://www.vupen.com/english/advisories/2009/3316 | ||
af854a3a-2127-422b-91ae-364da2661108 | http://java.sun.com/j2se/1.5.0/ReleaseNotes.html | Patch, Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/37386 | ||
af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/37460 | ||
af854a3a-2127-422b-91ae-364da2661108 | http://security.gentoo.org/glsa/glsa-200911-02.xml | ||
af854a3a-2127-422b-91ae-364da2661108 | http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1 | Patch, Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/archive/1/507985/100/0/threaded | ||
af854a3a-2127-422b-91ae-364da2661108 | http://www.vmware.com/security/advisories/VMSA-2009-0016.html | ||
af854a3a-2127-422b-91ae-364da2661108 | http://www.vupen.com/english/advisories/2009/3316 |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:sun:java_se:*:19:*:*:*:*:*:*", "matchCriteriaId": "DC8CDBBF-43EC-4FC0-BD17-C54BEB14F547", "versionEndIncluding": "5.0", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6406003." }, { "lang": "es", "value": "M\u00faltiples vulnerabilidades no especificadas en la clase \"Provider\" en Sun Java SE v5.0 anteriores a Update 20 tienen un impacto y vectores de ataque desconocidos, tambi\u00e9n conocido como BugId 6406003." } ], "id": "CVE-2009-2721", "lastModified": "2025-04-09T00:30:58.490", "metrics": { "cvssMetricV2": [ { "acInsufInfo": true, "baseSeverity": "HIGH", "cvssData": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ] }, "published": "2009-08-10T20:30:00.640", "references": [ { "source": "cve@mitre.org", "tags": [ "Patch", "Vendor Advisory" ], "url": "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html" }, { "source": "cve@mitre.org", "url": "http://secunia.com/advisories/37386" }, { "source": "cve@mitre.org", "url": "http://secunia.com/advisories/37460" }, { "source": "cve@mitre.org", "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml" }, { "source": "cve@mitre.org", "tags": [ "Patch", "Vendor Advisory" ], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1" }, { "source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded" }, { "source": "cve@mitre.org", "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html" }, { "source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2009/3316" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Patch", "Vendor Advisory" ], "url": "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/37386" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/37460" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Patch", "Vendor Advisory" ], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2009/3316" } ], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [ { "description": [ { "lang": "en", "value": "NVD-CWE-noinfo" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
gsd-2009-2721
Vulnerability from gsd
{ "GSD": { "alias": "CVE-2009-2721", "description": "Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6406003.", "id": "GSD-2009-2721", "references": [ "https://access.redhat.com/errata/RHSA-2009:1199" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2009-2721" ], "details": "Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6406003.", "id": "GSD-2009-2721", "modified": "2023-12-13T01:19:46.388155Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2009-2721", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6406003." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "37460", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/37460" }, { "name": "GLSA-200911-02", "refsource": "GENTOO", "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml" }, { "name": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html", "refsource": "CONFIRM", "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html" }, { "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded" }, { "name": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1", "refsource": "CONFIRM", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1" }, { "name": "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html", "refsource": "CONFIRM", "url": "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html" }, { "name": "37386", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/37386" }, { "name": "ADV-2009-3316", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2009/3316" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:sun:java_se:*:19:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "5.0", "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2009-2721" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6406003." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "NVD-CWE-noinfo" } ] } ] }, "references": { "reference_data": [ { "name": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1", "refsource": "CONFIRM", "tags": [ "Patch", "Vendor Advisory" ], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1" }, { "name": "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html", "refsource": "CONFIRM", "tags": [ "Patch", "Vendor Advisory" ], "url": "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html" }, { "name": "GLSA-200911-02", "refsource": "GENTOO", "tags": [], "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml" }, { "name": "37460", "refsource": "SECUNIA", "tags": [], "url": "http://secunia.com/advisories/37460" }, { "name": "ADV-2009-3316", "refsource": "VUPEN", "tags": [], "url": "http://www.vupen.com/english/advisories/2009/3316" }, { "name": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html", "refsource": "CONFIRM", "tags": [], "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html" }, { "name": "37386", "refsource": "SECUNIA", "tags": [], "url": "http://secunia.com/advisories/37386" }, { "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components", "refsource": "BUGTRAQ", "tags": [], "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded" } ] } }, "impact": { "baseMetricV2": { "acInsufInfo": true, "cvssV2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "userInteractionRequired": false } }, "lastModifiedDate": "2018-10-10T19:42Z", "publishedDate": "2009-08-10T20:30Z" } } }
CERTA-2010-AVI-043
Vulnerability from certfr_avis
De multiples vulnérabilités dans les produits VMware permettent, entre autre, l'exécution de code arbitraire à distance.
Description
De multiples vulnérabilités dans les produits VMware permettent, entre autre, l'exécution de code arbitraire à distance. Ces vulnérabilités impactent plus spécifiquement la couche logicielle Java JRE utilisée par certains produits VMware.
Il est à noter que des correctifs ne sont pour l'instant pas disponibles pour toutes les plaformes impactées.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneTitle | Publication Time | Tags | |
---|---|---|---|
{ "$ref": "https://www.cert.ssi.gouv.fr/openapi.json", "affected_systems": [ { "description": "Server 2.0 ;", "product": { "name": "N/A", "vendor": { "name": "VMware", "scada": false } } }, { "description": "VirtualCenter 2.0.2 ;", "product": { "name": "N/A", "vendor": { "name": "VMware", "scada": false } } }, { "description": "ESX 3.0.3 ;", "product": { "name": "N/A", "vendor": { "name": "VMware", "scada": false } } }, { "description": "ESX 3.5 ;", "product": { "name": "N/A", "vendor": { "name": "VMware", "scada": false } } }, { "description": "VirtualCenter 2.5 ant\u00e9rieur \u00e0 Update 6 ;", "product": { "name": "N/A", "vendor": { "name": "VMware", "scada": false } } }, { "description": "vMA 4.0.", "product": { "name": "N/A", "vendor": { "name": "VMware", "scada": false } } }, { "description": "ESX 4.0 ;", "product": { "name": "N/A", "vendor": { "name": "VMware", "scada": false } } }, { "description": "vCenter 4.0 ;", "product": { "name": "N/A", "vendor": { "name": "VMware", "scada": false } } } ], "affected_systems_content": null, "content": "## Description\n\nDe multiples vuln\u00e9rabilit\u00e9s dans les produits VMware permettent, entre\nautre, l\u0027ex\u00e9cution de code arbitraire \u00e0 distance. Ces vuln\u00e9rabilit\u00e9s\nimpactent plus sp\u00e9cifiquement la couche logicielle Java JRE utilis\u00e9e par\ncertains produits VMware.\n\nIl est \u00e0 noter que des correctifs ne sont pour l\u0027instant pas disponibles\npour toutes les plaformes impact\u00e9es.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n", "cves": [ { "name": "CVE-2009-3877", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3877" }, { "name": "CVE-2009-2724", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2724" }, { "name": "CVE-2009-2721", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2721" }, { "name": "CVE-2009-1106", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1106" }, { "name": "CVE-2009-1104", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1104" }, { "name": "CVE-2009-3871", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3871" }, { "name": "CVE-2009-1101", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1101" }, { "name": "CVE-2009-2673", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2673" }, { "name": "CVE-2009-3884", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3884" }, { "name": "CVE-2009-2719", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2719" }, { "name": "CVE-2009-3867", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3867" }, { "name": "CVE-2009-1094", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1094" }, { "name": "CVE-2009-3882", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3882" }, { "name": "CVE-2009-1095", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1095" }, { "name": "CVE-2009-2672", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2672" }, { "name": "CVE-2009-2670", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2670" }, { "name": "CVE-2009-1102", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1102" }, { "name": "CVE-2009-3872", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3872" }, { "name": "CVE-2009-2720", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2720" }, { "name": "CVE-2009-2671", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2671" }, { "name": "CVE-2009-3864", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3864" }, { "name": "CVE-2009-2675", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2675" }, { "name": "CVE-2009-2625", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2625" }, { "name": "CVE-2009-3883", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3883" }, { "name": "CVE-2009-3728", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3728" }, { "name": "CVE-2009-1099", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1099" }, { "name": "CVE-2009-3881", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3881" }, { "name": "CVE-2009-3876", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3876" }, { "name": "CVE-2009-3885", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3885" }, { "name": "CVE-2009-3875", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3875" }, { "name": "CVE-2009-2723", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2723" }, { "name": "CVE-2009-1107", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1107" }, { "name": "CVE-2009-2716", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2716" }, { "name": "CVE-2009-3869", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3869" }, { "name": "CVE-2009-1105", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1105" }, { "name": "CVE-2009-3873", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3873" }, { "name": "CVE-2009-2722", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2722" }, { "name": "CVE-2009-3886", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3886" }, { "name": "CVE-2009-1103", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1103" }, { "name": "CVE-2009-3874", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3874" }, { "name": "CVE-2009-1100", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1100" }, { "name": "CVE-2009-2676", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2676" }, { "name": "CVE-2009-3879", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3879" }, { "name": "CVE-2009-3729", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3729" }, { "name": "CVE-2009-1096", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1096" }, { "name": "CVE-2009-1098", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1098" }, { "name": "CVE-2009-3868", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3868" }, { "name": "CVE-2009-1097", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1097" }, { "name": "CVE-2009-3865", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3865" }, { "name": "CVE-2009-3880", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3880" }, { "name": "CVE-2009-2718", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2718" }, { "name": "CVE-2009-3866", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3866" }, { "name": "CVE-2009-1093", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1093" } ], "initial_release_date": "2010-02-02T00:00:00", "last_revision_date": "2010-02-02T00:00:00", "links": [ { "title": "Bulletin de s\u00e9curit\u00e9 VMware VMSA-2010-0002 du 29 janvier 2010 :", "url": "http://www.vmware.com/security/advisories/VMSA-2010-0002.html" } ], "reference": "CERTA-2010-AVI-043", "revisions": [ { "description": "version initiale.", "revision_date": "2010-02-02T00:00:00.000000" } ], "risks": [ { "description": "D\u00e9ni de service \u00e0 distance" }, { "description": "Ex\u00e9cution de code arbitraire \u00e0 distance" }, { "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es" }, { "description": "Contournement de la politique de s\u00e9curit\u00e9" }, { "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es" }, { "description": "\u00c9l\u00e9vation de privil\u00e8ges" } ], "summary": "De multiples vuln\u00e9rabilit\u00e9s dans les produits VMware permettent, entre\nautre, l\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n", "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits VMware", "vendor_advisories": [ { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 VMware VMSA-2010-0002 du 29 janvier 2010", "url": null } ] }
CERTA-2009-AVI-513
Vulnerability from certfr_avis
Plusieurs vulnérabilités découvertes dans les produits VMware peuvent être exploitées à distance par un utilisateur malintentionné afin de compromettre le système vulnérable ou encore d'entraver son bon fonctionnement.
Description
Les vulnérabilités présentes dans les produits VMware peuvent être exploitées afin de porter atteinte à l'intégrité et à la confidentialité des données, de réaliser un déni de service, d'injecter et d'exécuter indirectement du code arbitraire, d'élever ses privilèges ou d'exécuter du code arbitraire.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneVendor | Product | Description | ||
---|---|---|---|---|
VMware | N/A | VMware Server 2.x ; | ||
VMware | ESXi | VMware ESXi 3.x ; | ||
VMware | N/A | VMware vMA 4.x. | ||
VMware | N/A | VMware ESX Server 4.x ; | ||
VMware | N/A | VMware ESX Server 2.x ; | ||
VMware | N/A | VMware ESX Server 3.x ; | ||
VMware | ESXi | VMware ESXi 4.x ; | ||
VMware | vCenter Server | VMware vCenter Server 4.x ; | ||
VMware | N/A | VMware VirtualCenter 2.x ; |
Title | Publication Time | Tags | |||
---|---|---|---|---|---|
|
{ "$ref": "https://www.cert.ssi.gouv.fr/openapi.json", "affected_systems": [ { "description": "VMware Server 2.x ;", "product": { "name": "N/A", "vendor": { "name": "VMware", "scada": false } } }, { "description": "VMware ESXi 3.x ;", "product": { "name": "ESXi", "vendor": { "name": "VMware", "scada": false } } }, { "description": "VMware vMA 4.x.", "product": { "name": "N/A", "vendor": { "name": "VMware", "scada": false } } }, { "description": "VMware ESX Server 4.x ;", "product": { "name": "N/A", "vendor": { "name": "VMware", "scada": false } } }, { "description": "VMware ESX Server 2.x ;", "product": { "name": "N/A", "vendor": { "name": "VMware", "scada": false } } }, { "description": "VMware ESX Server 3.x ;", "product": { "name": "N/A", "vendor": { "name": "VMware", "scada": false } } }, { "description": "VMware ESXi 4.x ;", "product": { "name": "ESXi", "vendor": { "name": "VMware", "scada": false } } }, { "description": "VMware vCenter Server 4.x ;", "product": { "name": "vCenter Server", "vendor": { "name": "VMware", "scada": false } } }, { "description": "VMware VirtualCenter 2.x ;", "product": { "name": "N/A", "vendor": { "name": "VMware", "scada": false } } } ], "affected_systems_content": null, "content": "## Description\n\nLes vuln\u00e9rabilit\u00e9s pr\u00e9sentes dans les produits VMware peuvent \u00eatre\nexploit\u00e9es afin de porter atteinte \u00e0 l\u0027int\u00e9grit\u00e9 et \u00e0 la confidentialit\u00e9\ndes donn\u00e9es, de r\u00e9aliser un d\u00e9ni de service, d\u0027injecter et d\u0027ex\u00e9cuter\nindirectement du code arbitraire, d\u0027\u00e9lever ses privil\u00e8ges ou d\u0027ex\u00e9cuter\ndu code arbitraire.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n", "cves": [ { "name": "CVE-2009-2724", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2724" }, { "name": "CVE-2009-0676", "url": "https://www.cve.org/CVERecord?id=CVE-2009-0676" }, { "name": "CVE-2009-2721", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2721" }, { "name": "CVE-2008-3143", "url": "https://www.cve.org/CVERecord?id=CVE-2008-3143" }, { "name": "CVE-2009-2692", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2692" }, { "name": "CVE-2009-2406", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2406" }, { "name": "CVE-2009-1389", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1389" }, { "name": "CVE-2008-0002", "url": "https://www.cve.org/CVERecord?id=CVE-2008-0002" }, { "name": "CVE-2009-1106", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1106" }, { "name": "CVE-2009-1072", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1072" }, { "name": "CVE-2008-4307", "url": "https://www.cve.org/CVERecord?id=CVE-2008-4307" }, { "name": "CVE-2009-1104", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1104" }, { "name": "CVE-2009-2407", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2407" }, { "name": "CVE-2008-3142", "url": "https://www.cve.org/CVERecord?id=CVE-2008-3142" }, { "name": "CVE-2009-1101", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1101" }, { "name": "CVE-2009-2416", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2416" }, { "name": "CVE-2009-1385", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1385" }, { "name": "CVE-2009-0746", "url": "https://www.cve.org/CVERecord?id=CVE-2009-0746" }, { "name": "CVE-2009-2673", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2673" }, { "name": "CVE-2007-5966", "url": "https://www.cve.org/CVERecord?id=CVE-2007-5966" }, { "name": "CVE-2009-2719", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2719" }, { "name": "CVE-2008-4864", "url": "https://www.cve.org/CVERecord?id=CVE-2008-4864" }, { "name": "CVE-2009-2417", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2417" }, { "name": "CVE-2009-1439", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1439" }, { "name": "CVE-2009-0322", "url": "https://www.cve.org/CVERecord?id=CVE-2009-0322" }, { "name": "CVE-2009-1895", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1895" }, { "name": "CVE-2009-1094", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1094" }, { "name": "CVE-2009-0748", "url": "https://www.cve.org/CVERecord?id=CVE-2009-0748" }, { "name": "CVE-2008-3144", "url": "https://www.cve.org/CVERecord?id=CVE-2008-3144" }, { "name": "CVE-2009-0747", "url": "https://www.cve.org/CVERecord?id=CVE-2009-0747" }, { "name": "CVE-2009-0580", "url": "https://www.cve.org/CVERecord?id=CVE-2009-0580" }, { "name": "CVE-2009-1095", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1095" }, { "name": "CVE-2009-2672", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2672" }, { "name": "CVE-2009-0675", "url": "https://www.cve.org/CVERecord?id=CVE-2009-0675" }, { "name": "CVE-2007-5461", "url": "https://www.cve.org/CVERecord?id=CVE-2007-5461" }, { "name": "CVE-2009-2670", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2670" }, { "name": "CVE-2009-1102", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1102" }, { "name": "CVE-2009-1630", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1630" }, { "name": "CVE-2009-0269", "url": "https://www.cve.org/CVERecord?id=CVE-2009-0269" }, { "name": "CVE-2008-3528", "url": "https://www.cve.org/CVERecord?id=CVE-2008-3528" }, { "name": "CVE-2008-5031", "url": "https://www.cve.org/CVERecord?id=CVE-2008-5031" }, { "name": "CVE-2008-1721", "url": "https://www.cve.org/CVERecord?id=CVE-2008-1721" }, { "name": "CVE-2009-1388", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1388" }, { "name": "CVE-2009-1192", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1192" }, { "name": "CVE-2009-2720", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2720" }, { "name": "CVE-2009-0834", "url": "https://www.cve.org/CVERecord?id=CVE-2009-0834" }, { "name": "CVE-2009-2671", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2671" }, { "name": "CVE-2009-2848", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2848" }, { "name": "CVE-2009-2675", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2675" }, { "name": "CVE-2008-1232", "url": "https://www.cve.org/CVERecord?id=CVE-2008-1232" }, { "name": "CVE-2009-0159", "url": "https://www.cve.org/CVERecord?id=CVE-2009-0159" }, { "name": "CVE-2009-0778", "url": "https://www.cve.org/CVERecord?id=CVE-2009-0778" }, { "name": "CVE-2009-2625", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2625" }, { "name": "CVE-2009-1099", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1099" }, { "name": "CVE-2009-1252", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1252" }, { "name": "CVE-2009-2698", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2698" }, { "name": "CVE-2008-2370", "url": "https://www.cve.org/CVERecord?id=CVE-2008-2370" }, { "name": "CVE-2009-0033", "url": "https://www.cve.org/CVERecord?id=CVE-2009-0033" }, { "name": "CVE-2009-2723", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2723" }, { "name": "CVE-2009-1107", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1107" }, { "name": "CVE-2009-2716", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2716" }, { "name": "CVE-2007-5333", "url": "https://www.cve.org/CVERecord?id=CVE-2007-5333" }, { "name": "CVE-2008-1947", "url": "https://www.cve.org/CVERecord?id=CVE-2008-1947" }, { "name": "CVE-2009-1105", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1105" }, { "name": "CVE-2007-6286", "url": "https://www.cve.org/CVERecord?id=CVE-2007-6286" }, { "name": "CVE-2009-0028", "url": "https://www.cve.org/CVERecord?id=CVE-2009-0028" }, { "name": "CVE-2009-1337", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1337" }, { "name": "CVE-2009-0781", "url": "https://www.cve.org/CVERecord?id=CVE-2009-0781" }, { "name": "CVE-2009-2414", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2414" }, { "name": "CVE-2007-2052", "url": "https://www.cve.org/CVERecord?id=CVE-2007-2052" }, { "name": "CVE-2009-1336", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1336" }, { "name": "CVE-2009-0783", "url": "https://www.cve.org/CVERecord?id=CVE-2009-0783" }, { "name": "CVE-2008-5515", "url": "https://www.cve.org/CVERecord?id=CVE-2008-5515" }, { "name": "CVE-2007-4965", "url": "https://www.cve.org/CVERecord?id=CVE-2007-4965" }, { "name": "CVE-2009-1633", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1633" }, { "name": "CVE-2009-2722", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2722" }, { "name": "CVE-2008-5700", "url": "https://www.cve.org/CVERecord?id=CVE-2008-5700" }, { "name": "CVE-2009-1103", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1103" }, { "name": "CVE-2009-1100", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1100" }, { "name": "CVE-2009-2676", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2676" }, { "name": "CVE-2007-5342", "url": "https://www.cve.org/CVERecord?id=CVE-2007-5342" }, { "name": "CVE-2009-1096", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1096" }, { "name": "CVE-2009-1098", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1098" }, { "name": "CVE-2009-0787", "url": "https://www.cve.org/CVERecord?id=CVE-2009-0787" }, { "name": "CVE-2008-1887", "url": "https://www.cve.org/CVERecord?id=CVE-2008-1887" }, { "name": "CVE-2009-1097", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1097" }, { "name": "CVE-2009-2847", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2847" }, { "name": "CVE-2008-2315", "url": "https://www.cve.org/CVERecord?id=CVE-2008-2315" }, { "name": "CVE-2009-0696", "url": "https://www.cve.org/CVERecord?id=CVE-2009-0696" }, { "name": "CVE-2009-2718", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2718" }, { "name": "CVE-2009-0745", "url": "https://www.cve.org/CVERecord?id=CVE-2009-0745" }, { "name": "CVE-2009-1093", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1093" } ], "initial_release_date": "2009-11-24T00:00:00", "last_revision_date": "2009-11-24T00:00:00", "links": [], "reference": "CERTA-2009-AVI-513", "revisions": [ { "description": "version initiale.", "revision_date": "2009-11-24T00:00:00.000000" } ], "risks": [ { "description": "D\u00e9ni de service \u00e0 distance" }, { "description": "Injection de code indirecte" }, { "description": "Ex\u00e9cution de code arbitraire \u00e0 distance" }, { "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es" }, { "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es" }, { "description": "\u00c9l\u00e9vation de privil\u00e8ges" } ], "summary": "Plusieurs vuln\u00e9rabilit\u00e9s d\u00e9couvertes dans les produits VMware peuvent\n\u00eatre exploit\u00e9es \u00e0 distance par un utilisateur malintentionn\u00e9 afin de\ncompromettre le syst\u00e8me vuln\u00e9rable ou encore d\u0027entraver son bon\nfonctionnement.\n", "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits VMware", "vendor_advisories": [ { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 VMware du 20 novembre 2009", "url": "http://lists.vmware.com/pipermail/security-announce/2009/000070.html" } ] }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.