Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities

Bugtraq ID:	32608
Class:	Unknown
CVE:	CVE-2008-5345 CVE-2008-5346 CVE-2008-5347 CVE-2008-5348 CVE-2008-5349 CVE-2008-5350 CVE-2008-5351 CVE-2008-5352 CVE-2008-5353 CVE-2008-5354 CVE-2008-5355 CVE-2008-5356 CVE-2008-5357 CVE-2008-5358 CVE-2008-5359 CVE-2008-5360
Remote:	Yes
Local:	No
Published:	Dec 03 2008 12:00AM
Updated:	Apr 13 2015 10:23PM
Credit:	An anonymous researcher working with ZDI, iDefense, Sebastian Apelt working with iDefense, Peter Csepely working with ZDI, Virtual Security Research, Billy Rios of Microsoft and Nate, Mcfeters of Ernst and Young, Peter Csepely working with ZDI and John Hea
Vulnerable:	VMWare VirtualCenter 2.0.2 VMWare VirtualCenter 2.5 VMWare vCenter 4.0 VMWare ESXi Server 4.0 VMWare ESX Server 3.0.3 VMWare ESX Server 4.0 VMWare ESX Server 3.5 Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 11 DEBUGINFO SuSE SUSE Linux Enterprise Server 11 SuSE SUSE Linux Enterprise Server 10 SP2 SuSE SUSE Linux Enterprise SDK 10 SP2 SuSE Suse Linux Enterprise Desktop 10 SP2 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 Sun JRE (Windows Production Release) 1.5 _06 Sun JRE (Windows Production Release) 1.5 _05 Sun JRE (Windows Production Release) 1.5 _04 Sun JRE (Windows Production Release) 1.5 _03 Sun JRE (Windows Production Release) 1.5 _02 Sun JRE (Windows Production Release) 1.5 _01 Sun JRE (Windows Production Release) 1.5 Sun JRE (Windows Production Release) 1.4.2 _10 Sun JRE (Windows Production Release) 1.4.2 _09 Sun JRE (Windows Production Release) 1.4.2 _08 Sun JRE (Windows Production Release) 1.4.2 _07 Sun JRE (Windows Production Release) 1.4.2 _06 Sun JRE (Windows Production Release) 1.4.2 _05 Sun JRE (Windows Production Release) 1.4.2 _04 Sun JRE (Windows Production Release) 1.4.2 _03 Sun JRE (Windows Production Release) 1.4.2 _02 Sun JRE (Windows Production Release) 1.4.2 _01 Sun JRE (Windows Production Release) 1.4.2 Sun JRE (Windows Production Release) 1.4.1 _07 Sun JRE (Windows Production Release) 1.4.1 _03 Sun JRE (Windows Production Release) 1.4.1 _02 Sun JRE (Windows Production Release) 1.4.1 _01 Sun JRE (Windows Production Release) 1.4.1 Sun JRE (Windows Production Release) 1.4 .0_04 Sun JRE (Windows Production Release) 1.4 .0_03 Sun JRE (Windows Production Release) 1.4 .0_02 Sun JRE (Windows Production Release) 1.4 .0_01 Sun JRE (Windows Production Release) 1.4 Sun JRE (Windows Production Release) 1.3.1 _14 Sun JRE (Windows Production Release) 1.3.1 _13 Sun JRE (Windows Production Release) 1.3.1 _12 Sun JRE (Windows Production Release) 1.3.1 _11 Sun JRE (Windows Production Release) 1.3.1 _10 Sun JRE (Windows Production Release) 1.3.1 _09 Sun JRE (Windows Production Release) 1.3.1 _08 Sun JRE (Windows Production Release) 1.3.1 _07 Sun JRE (Windows Production Release) 1.3.1 _06 Sun JRE (Windows Production Release) 1.3.1 _05 Sun JRE (Windows Production Release) 1.3.1 _04 Sun JRE (Windows Production Release) 1.3.1 _03 Sun JRE (Windows Production Release) 1.3.1 _02 Sun JRE (Windows Production Release) 1.3.1 _01a Sun JRE (Windows Production Release) 1.3.1 _01 Sun JRE (Windows Production Release) 1.3.1 Sun JRE (Windows Production Release) 1.3 _01 Sun JRE (Windows Production Release) 1.3 .0_05 Sun JRE (Windows Production Release) 1.3 .0_04 Sun JRE (Windows Production Release) 1.3 .0_02 Sun JRE (Windows Production Release) 1.3 Sun JRE (Windows Production Release) 1.2.2 _12 Sun JRE (Windows Production Release) 1.2.2 _015 Sun JRE (Windows Production Release) 1.2.2 _014 Sun JRE (Windows Production Release) 1.2.2 _013 Sun JRE (Windows Production Release) 1.2.2 _011 Sun JRE (Windows Production Release) 1.2.2 _010 Sun JRE (Windows Production Release) 1.2.2 _007 Sun JRE (Windows Production Release) 1.2.2 Sun JRE (Windows Production Release) 1.2.1 Sun JRE (Windows Production Release) 1.2 Sun JRE (Windows Production Release) 1.1.8 _009 Sun JRE (Windows Production Release) 1.1.8 _008 Sun JRE (Windows Production Release) 1.1.8 _007 Sun JRE (Windows Production Release) 1.1.8 _005 Sun JRE (Windows Production Release) 1.1.8 Sun JRE (Windows Production Release) 1.1.7 B_007 Sun JRE (Windows Production Release) 1.1.6 _09 Sun JRE (Windows Production Release) 1.6.0_2 Sun JRE (Windows Production Release) 1.6.0_03 Sun JRE (Windows Production Release) 1.6.0_02 Sun JRE (Windows Production Release) 1.6.0_01 Sun JRE (Windows Production Release) 1.5.0_14 Sun JRE (Windows Production Release) 1.5.0_13 Sun JRE (Windows Production Release) 1.5.0_12 Sun JRE (Windows Production Release) 1.5.0_11 Sun JRE (Windows Production Release) 1.5.0_10 Sun JRE (Windows Production Release) 1.5.0.0_09 Sun JRE (Windows Production Release) 1.5.0.0_08 Sun JRE (Windows Production Release) 1.5.0.0_07 Sun JRE (Windows Production Release) 1.4.2_18 Sun JRE (Windows Production Release) 1.4.2_17 Sun JRE (Windows Production Release) 1.4.2_16 Sun JRE (Windows Production Release) 1.4.2_15 Sun JRE (Windows Production Release) 1.4.2_14 Sun JRE (Windows Production Release) 1.4.2_13 Sun JRE (Windows Production Release) 1.4.2_12 Sun JRE (Windows Production Release) 1.4.2_11 Sun JRE (Windows Production Release) 1.3.1_23 Sun JRE (Windows Production Release) 1.3.1_22 Sun JRE (Windows Production Release) 1.3.1_21 Sun JRE (Windows Production Release) 1.3.1_20 Sun JRE (Windows Production Release) 1.3.1_19 Sun JRE (Windows Production Release) 1.3.1_18 Sun JRE (Windows Production Release) 1.3.1_17 Sun JRE (Windows Production Release) 1.3.1_16 Sun JRE (Windows Production Release) 1.3.1_15 Sun JRE (Solaris Production Release) 1.5 _15 Sun JRE (Solaris Production Release) 1.5 _06 Sun JRE (Solaris Production Release) 1.5 _05 Sun JRE (Solaris Production Release) 1.5 _04 Sun JRE (Solaris Production Release) 1.5 _03 Sun JRE (Solaris Production Release) 1.5 _02 Sun JRE (Solaris Production Release) 1.5 _01 Sun JRE (Solaris Production Release) 1.5 Sun JRE (Solaris Production Release) 1.4.2 _10 Sun JRE (Solaris Production Release) 1.4.2 _09 Sun JRE (Solaris Production Release) 1.4.2 _08 Sun JRE (Solaris Production Release) 1.4.2 _07 Sun JRE (Solaris Production Release) 1.4.2 _06 Sun JRE (Solaris Production Release) 1.4.2 _05 Sun JRE (Solaris Production Release) 1.4.2 _04 Sun JRE (Solaris Production Release) 1.4.2 _03 Sun JRE (Solaris Production Release) 1.4.2 _02 Sun JRE (Solaris Production Release) 1.4.2 _01 Sun JRE (Solaris Production Release) 1.4.2 Sun JRE (Solaris Production Release) 1.4.1 _03 Sun JRE (Solaris Production Release) 1.4.1 _02 Sun JRE (Solaris Production Release) 1.4.1 _01 Sun JRE (Solaris Production Release) 1.4.1 Sun JRE (Solaris Production Release) 1.4 .0_04 Sun JRE (Solaris Production Release) 1.4 .0_03 Sun JRE (Solaris Production Release) 1.4 .0_02 Sun JRE (Solaris Production Release) 1.4 .0_01 Sun JRE (Solaris Production Release) 1.4 Sun JRE (Solaris Production Release) 1.3.1 _14 Sun JRE (Solaris Production Release) 1.3.1 _13 Sun JRE (Solaris Production Release) 1.3.1 _12 Sun JRE (Solaris Production Release) 1.3.1 _11 Sun JRE (Solaris Production Release) 1.3.1 _10 Sun JRE (Solaris Production Release) 1.3.1 _09 Sun JRE (Solaris Production Release) 1.3.1 _08 Sun JRE (Solaris Production Release) 1.3.1 _07 Sun JRE (Solaris Production Release) 1.3.1 _06 Sun JRE (Solaris Production Release) 1.3.1 _05 Sun JRE (Solaris Production Release) 1.3.1 _04 Sun JRE (Solaris Production Release) 1.3.1 _03 Sun JRE (Solaris Production Release) 1.3.1 _02 Sun JRE (Solaris Production Release) 1.3.1 _01a Sun JRE (Solaris Production Release) 1.3.1 _01 Sun JRE (Solaris Production Release) 1.3.1 Sun JRE (Solaris Production Release) 1.3 _04 Sun JRE (Solaris Production Release) 1.3 _03 Sun JRE (Solaris Production Release) 1.3 _01 Sun JRE (Solaris Production Release) 1.3 .0_05 Sun JRE (Solaris Production Release) 1.3 .0_02 Sun JRE (Solaris Production Release) 1.3 Sun JRE (Solaris Production Release) 1.2.2 _11 Sun JRE (Solaris Production Release) 1.2.2 _07 Sun JRE (Solaris Production Release) 1.2.2 _05a Sun JRE (Solaris Production Release) 1.2.2 _014 Sun JRE (Solaris Production Release) 1.2.2 _013 Sun JRE (Solaris Production Release) 1.2.2 _012 Sun JRE (Solaris Production Release) 1.2.2 _011 Sun JRE (Solaris Production Release) 1.2.2 _010 Sun JRE (Solaris Production Release) 1.2.2 Sun JRE (Solaris Production Release) 1.2.1 Sun JRE (Solaris Production Release) 1.2 Sun JRE (Solaris Production Release) 1.1.8 _14 Sun JRE (Solaris Production Release) 1.1.8 _13 Sun JRE (Solaris Production Release) 1.1.8 _12 Sun JRE (Solaris Production Release) 1.1.8 _10 + Sun Solaris 8_x86 + Sun Solaris 8_sparc + Sun Solaris 7.0_x86 + Sun Solaris 7.0 + Sun Solaris 2.6_x86 + Sun Solaris 2.6 Sun JRE (Solaris Production Release) 1.1.8 _009 Sun JRE (Solaris Production Release) 1.1.8 Sun JRE (Solaris Production Release) 1.1.7 B Sun JRE (Solaris Production Release) 1.1.6 Sun JRE (Solaris Production Release) 1.6.0_2 Sun JRE (Solaris Production Release) 1.6.0_03 Sun JRE (Solaris Production Release) 1.6.0_02 Sun JRE (Solaris Production Release) 1.6.0_01 Sun JRE (Solaris Production Release) 1.5.0_14 Sun JRE (Solaris Production Release) 1.5.0_13 Sun JRE (Solaris Production Release) 1.5.0_12 Sun JRE (Solaris Production Release) 1.5.0_11 Sun JRE (Solaris Production Release) 1.5.0_10 Sun JRE (Solaris Production Release) 1.5.0.0_09 Sun JRE (Solaris Production Release) 1.5.0.0_08 Sun JRE (Solaris Production Release) 1.5.0.0_07 Sun JRE (Solaris Production Release) 1.4.2_18 Sun JRE (Solaris Production Release) 1.4.2_17 Sun JRE (Solaris Production Release) 1.4.2_16 Sun JRE (Solaris Production Release) 1.4.2_15 Sun JRE (Solaris Production Release) 1.4.2_14 Sun JRE (Solaris Production Release) 1.4.2_13 Sun JRE (Solaris Production Release) 1.4.2_12 Sun JRE (Solaris Production Release) 1.4.2_11 Sun JRE (Solaris Production Release) 1.3.1_23 Sun JRE (Solaris Production Release) 1.3.1_22 Sun JRE (Solaris Production Release) 1.3.1_21 Sun JRE (Solaris Production Release) 1.3.1_20 Sun JRE (Solaris Production Release) 1.3.1_19 Sun JRE (Solaris Production Release) 1.3.1_18 Sun JRE (Solaris Production Release) 1.3.1_17 Sun JRE (Solaris Production Release) 1.3.1_16 Sun JRE (Solaris Production Release) 1.3.1_15 Sun JRE (Linux Production Release) 1.6 _10 Sun JRE (Linux Production Release) 1.6 _07 Sun JRE (Linux Production Release) 1.6 _06 Sun JRE (Linux Production Release) 1.6 _05 Sun JRE (Linux Production Release) 1.6 _04 Sun JRE (Linux Production Release) 1.6 Sun JRE (Linux Production Release) 1.5 _16 Sun JRE (Linux Production Release) 1.5 _15 Sun JRE (Linux Production Release) 1.5 _07 Sun JRE (Linux Production Release) 1.5 _06 Sun JRE (Linux Production Release) 1.5 _05 Sun JRE (Linux Production Release) 1.5 _04 Sun JRE (Linux Production Release) 1.5 _03 Sun JRE (Linux Production Release) 1.5 _02 Sun JRE (Linux Production Release) 1.5 _01 Sun JRE (Linux Production Release) 1.5 .0 beta Sun JRE (Linux Production Release) 1.5 Sun JRE (Linux Production Release) 1.4.2 _10-b03 Sun JRE (Linux Production Release) 1.4.2 _10 Sun JRE (Linux Production Release) 1.4.2 _09 Sun JRE (Linux Production Release) 1.4.2 _08 Sun JRE (Linux Production Release) 1.4.2 _07 Sun JRE (Linux Production Release) 1.4.2 _06 Sun JRE (Linux Production Release) 1.4.2 _05 Sun JRE (Linux Production Release) 1.4.2 _04 + Opera Software Opera Web Browser 7.54 Sun JRE (Linux Production Release) 1.4.2 _03 Sun JRE (Linux Production Release) 1.4.2 _02 Sun JRE (Linux Production Release) 1.4.2 _01 Sun JRE (Linux Production Release) 1.4.2 Sun JRE (Linux Production Release) 1.4.1 _03 Sun JRE (Linux Production Release) 1.4.1 _02 Sun JRE (Linux Production Release) 1.4.1 _01 Sun JRE (Linux Production Release) 1.4.1 Sun JRE (Linux Production Release) 1.4 .0_04 Sun JRE (Linux Production Release) 1.4 .0_03 Sun JRE (Linux Production Release) 1.4 .0_02 Sun JRE (Linux Production Release) 1.4 Sun JRE (Linux Production Release) 1.3.1 _21 Sun JRE (Linux Production Release) 1.3.1 _19 Sun JRE (Linux Production Release) 1.3.1 _18 Sun JRE (Linux Production Release) 1.3.1 _17 Sun JRE (Linux Production Release) 1.3.1 _16 Sun JRE (Linux Production Release) 1.3.1 _15 Sun JRE (Linux Production Release) 1.3.1 _14 Sun JRE (Linux Production Release) 1.3.1 _13 Sun JRE (Linux Production Release) 1.3.1 _12 Sun JRE (Linux Production Release) 1.3.1 _11 Sun JRE (Linux Production Release) 1.3.1 _10 Sun JRE (Linux Production Release) 1.3.1 _09 Sun JRE (Linux Production Release) 1.3.1 _08 Sun JRE (Linux Production Release) 1.3.1 _07 Sun JRE (Linux Production Release) 1.3.1 _06 Sun JRE (Linux Production Release) 1.3.1 _05 Sun JRE (Linux Production Release) 1.3.1 _04 Sun JRE (Linux Production Release) 1.3.1 _03 Sun JRE (Linux Production Release) 1.3.1 _02 Sun JRE (Linux Production Release) 1.3.1 _01a Sun JRE (Linux Production Release) 1.3.1 _01 Sun JRE (Linux Production Release) 1.3.1 Sun JRE (Linux Production Release) 1.3 .0_05 Sun JRE (Linux Production Release) 1.3 .0_04 Sun JRE (Linux Production Release) 1.3 .0_03 Sun JRE (Linux Production Release) 1.3 .0_02 Sun JRE (Linux Production Release) 1.3 .0_01 Sun JRE (Linux Production Release) 1.3 .0 Sun JRE (Linux Production Release) 1.2.2 _12 Sun JRE (Linux Production Release) 1.2.2 _015 Sun JRE (Linux Production Release) 1.2.2 _014 Sun JRE (Linux Production Release) 1.2.2 _013 Sun JRE (Linux Production Release) 1.2.2 _011 Sun JRE (Linux Production Release) 1.2.2 _010 Sun JRE (Linux Production Release) 1.2.2 _007 Sun JRE (Linux Production Release) 1.2.2 _006 Sun JRE (Linux Production Release) 1.2.2 _005 Sun JRE (Linux Production Release) 1.2.2 _004 Sun JRE (Linux Production Release) 1.2.2 _003 Sun JRE (Linux Production Release) 1.2.2 Sun JRE (Linux Production Release) 1.2.1 _04 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows 98SE - Microsoft Windows 98SE - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_x86 - Sun Solaris 8_x86 - Sun Solaris 8_sparc - Sun Solaris 8_sparc - Sun Solaris 7.0_x86 - Sun Solaris 7.0_x86 - Sun Solaris 7.0 - Sun Solaris 7.0 - Sun Solaris 2.6_x86 - Sun Solaris 2.6_x86 - Sun Solaris 2.6 - Sun Solaris 2.6 Sun JRE (Linux Production Release) 1.1.8 _06 Sun JRE (Linux Production Release) 1.1.7 B_07 Sun JRE (Linux Production Release) 1.1.6 _09 Sun JRE (Linux Production Release) 1.6.0_03 Sun JRE (Linux Production Release) 1.6.0_02 Sun JRE (Linux Production Release) 1.6.0_01 Sun JRE (Linux Production Release) 1.5.0_14 Sun JRE (Linux Production Release) 1.5.0_13 Sun JRE (Linux Production Release) 1.5.0_12 Sun JRE (Linux Production Release) 1.5.0_11 Sun JRE (Linux Production Release) 1.5.0_10 Sun JRE (Linux Production Release) 1.5.0_09 Sun JRE (Linux Production Release) 1.5.0_08 Sun JRE (Linux Production Release) 1.4.2_18 Sun JRE (Linux Production Release) 1.4.2_17 Sun JRE (Linux Production Release) 1.4.2_16 Sun JRE (Linux Production Release) 1.4.2_15 Sun JRE (Linux Production Release) 1.4.2_14 Sun JRE (Linux Production Release) 1.4.2_13 Sun JRE (Linux Production Release) 1.4.2_12 Sun JRE (Linux Production Release) 1.4.2_11 Sun JRE (Linux Production Release) 1.3.1_23 Sun JRE (Linux Production Release) 1.3.1_22 Sun JRE (Linux Production Release) 1.3.1_21 Sun JRE (Linux Production Release) 1.3.1_20 Sun JDK (Solaris Production Release) 1.5 _15 Sun JDK (Linux Production Release) 1.6 _10 Sun JDK (Linux Production Release) 1.6 _07 Sun JDK (Linux Production Release) 1.6 _06 Sun JDK (Linux Production Release) 1.6 _05 Sun JDK (Linux Production Release) 1.6 _04 Sun JDK (Linux Production Release) 1.6 _01 Sun JDK (Linux Production Release) 1.6 Sun JDK (Linux Production Release) 1.5 0_10 Sun JDK (Linux Production Release) 1.5 _15 Sun JDK (Linux Production Release) 1.5 _14 Sun JDK (Linux Production Release) 1.5 _07 Sun JDK (Linux Production Release) 1.5 _06 Sun JDK (Linux Production Release) 1.5 _02 Sun JDK (Linux Production Release) 1.5 _01 Sun JDK (Linux Production Release) 1.5 .0_05 Sun JDK (Linux Production Release) 1.6.0_03 Sun JDK (Linux Production Release) 1.6.0_02 Sun JDK (Linux Production Release) 1.5.0_13 Sun JDK (Linux Production Release) 1.5.0.0_12 Sun JDK (Linux Production Release) 1.5.0.0_11 Sun JDK (Linux Production Release) 1.5.0.0_09 Sun JDK (Linux Production Release) 1.5.0.0_08 Sun JDK (Linux Production Release) 1.5.0.0_04 Sun JDK (Linux Production Release) 1.5.0.0_03 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Novell Linux POS 9 S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. CORE 9 Redhat Enterprise Linux WS Extras 4 Redhat Enterprise Linux WS Extras 3 Redhat Enterprise Linux Supplementary 5 server Redhat Enterprise Linux for SAP 0 Redhat Enterprise Linux Extras 4 Redhat Enterprise Linux Extras 3 Redhat Enterprise Linux ES Extras 4 Redhat Enterprise Linux ES Extras 3 Redhat Enterprise Linux Desktop Supplementary 5 client Redhat Enterprise Linux AS Extras 4 Redhat Enterprise Linux AS Extras 3 Redhat Desktop Extras 4 Redhat Desktop Extras 3 Pardus Linux 2008 0 Nortel Networks Self-Service WVADS 0 Nortel Networks Self-Service Speech Server 0 Nortel Networks Self-Service Peri Application 0 Nortel Networks Self-Service MPS 500 0 Nortel Networks Self-Service MPS 1000 0 Nortel Networks Self-Service MPS 100 0 Nortel Networks Self-Service Media Processing Server 0 Nortel Networks Self-Service - CCSS7 0 Nortel Networks Self Service VoiceXML 0 Nortel Networks Enterprise Network Management System Nortel Networks Contact Center - CCT 0 HP Serviceguard Manager A.05.02 HP Serviceguard Manager A.05.01 HP Serviceguard Manager A.05.00 HP OpenView Network Node Manager 7.53 HP OpenView Network Node Manager 7.51 HP HP-UX B.11.31 HP HP-UX B.11.23 HP HP-UX B.11.11 Gentoo Linux Avaya Proactive Contact 3.0.2 Avaya Proactive Contact 3.0 Avaya Interactive Response 4.0 Avaya Interactive Response 3.0 Avaya Interactive Response 2.0 Avaya CMS Supervisor 0 Avaya CMS Server 13.0 Avaya CMS Server 12.0 Avaya CMS Server 11.0 Avaya CMS Server 10.0 Avaya CMS Server 9.0 Avaya CMS Server 8.0 Avaya CMS Server 14.1 Avaya CMS Server 14.0 Avaya CMS Server 13.1 Apple Mac OS X Server 10.5.7 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.7 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10 Apple Mac OS X 10.4.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.5
Not Vulnerable:	Sun SDK (Windows Production Release) 1.4.2_19 Sun SDK (Windows Production Release) 1.3.1_24 Sun SDK (Solaris Production Release) 1.4.2_19 Sun SDK (Solaris Production Release) 1.3.1_24 Sun SDK (Linux Production Release) 1.4.2_19 Sun SDK (Linux Production Release) 1.3.1_24 Sun JRE (Windows Production Release) 1.6.0_11 Sun JRE (Solaris Production Release) 1.6.0_11 Sun JRE (Linux Production Release) 1.6.0_11 Sun JRE (Linux Production Release) 1.5.0_17 Sun JDK (Linux Production Release) 1.6 _11 Sun JDK (Linux Production Release) 1.5 _17

Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities

Sun Java Runtime Environment and Java Development Kit are prone to multiple security vulnerabilities.

Successful exploits may allow attackers to violate the same-origin policy, obtain sensitive information, bypass security restrictions, run untrusted applets with elevated privileges, and cause denial-of-service conditions. This may result in a compromise of affected computers.

These issues affect versions *prior to* the following:

JDK and JRE 6 Update 11
JDK and JRE 5.0 Update 17
SDK and JRE 1.4.2_19
SDK and JRE 1.3.1_24

Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities

Note that some issues may not require exploit code and may be trivial to exploit.

A working commercial exploit for CVE-2008-5358 is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product for CVE-2008-5353. This exploit is not otherwise publicly available or known to be circulating in the wild.

The following exploit for CVE-2008-5353 is available to members of the Immunity Partners program:

https://www.immunityinc.com/downloads/immpartners/java_deserialize01.tar.gz

A proof of concept for CVE-2008-5353 is available from the following location:

http://landonf.bikemonkey.org/static/moab-tests/CVE-2008-5353/hello.html

The following Metasploit exploit module is available for CVE-2008-5353:

• /data/vulnerabilities/exploits/CVE-2008-5353-java-calendar-deserialize.rb

Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


S.u.S.E. openSUSE 11.0

• S.u.S.E. java-1_5_0-sun-1.5.0_update17-0.1.i586.rpm
  http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 5_0-sun-1.5.0_update17-0.1.i586.rpm


• S.u.S.E. java-1_5_0-sun-alsa-1.5.0_update17-0.1.i586.rpm
  http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 5_0-sun-alsa-1.5.0_update17-0.1.i586.rpm


• S.u.S.E. java-1_5_0-sun-demo-1.5.0_update17-0.1.i586.rpm
  http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 5_0-sun-demo-1.5.0_update17-0.1.i586.rpm


• S.u.S.E. java-1_5_0-sun-devel-1.5.0_update17-0.1.i586.rpm
  http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 5_0-sun-devel-1.5.0_update17-0.1.i586.rpm


• S.u.S.E. java-1_5_0-sun-jdbc-1.5.0_update17-0.1.i586.rpm
  http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 5_0-sun-jdbc-1.5.0_update17-0.1.i586.rpm


• S.u.S.E. java-1_5_0-sun-plugin-1.5.0_update17-0.1.i586.rpm
  http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 5_0-sun-plugin-1.5.0_update17-0.1.i586.rpm


• S.u.S.E. java-1_5_0-sun-src-1.5.0_update17-0.1.i586.rpm
  http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 5_0-sun-src-1.5.0_update17-0.1.i586.rpm


• S.u.S.E. java-1_6_0-sun-1.6.0.u11-0.1.i586.rpm
  http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 6_0-sun-1.6.0.u11-0.1.i586.rpm


• S.u.S.E. java-1_6_0-sun-alsa-1.6.0.u11-0.1.i586.rpm
  http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 6_0-sun-alsa-1.6.0.u11-0.1.i586.rpm


• S.u.S.E. java-1_6_0-sun-demo-1.6.0.u11-0.1.i586.rpm
  http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 6_0-sun-demo-1.6.0.u11-0.1.i586.rpm


• S.u.S.E. java-1_6_0-sun-devel-1.6.0.u11-0.1.i586.rpm
  http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 6_0-sun-devel-1.6.0.u11-0.1.i586.rpm


• S.u.S.E. java-1_6_0-sun-jdbc-1.6.0.u11-0.1.i586.rpm
  http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 6_0-sun-jdbc-1.6.0.u11-0.1.i586.rpm


• S.u.S.E. java-1_6_0-sun-plugin-1.6.0.u11-0.1.i586.rpm
  http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 6_0-sun-plugin-1.6.0.u11-0.1.i586.rpm

Apple Mac OS X 10.4.11

• Apple JavaForMacOSX10.4Release9.dmg
  http://support.apple.com/downloads/DL847/en_US/JavaForMacOSX10.4Releas e9.dmg

Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities

References:

• [Security-announce] VMSA-2009-0014 VMware ESX patches for DHCP, Service Console (VMware)
  
• Critical Mac OS X Java Vulnerabilities (landonf)
  
• Java Homepage (Sun)
  
• Java SE 6 Update 11 Release Notes (Sun)
  
• Java�?� 2 Platform Standard Edition Development Kit 5.0 Update 17 (Sun)
  
• Write once, own everyone, Java deserialization issues (Julien Tinnes)
  
• [security bulletin] HPSBMA02445 SSRT090058 rev.1 - HP Serviceguard Manager, Remo ([email protected])
  
• Hardening OSX against CVE-2008-5353 (Marc Schoenefeld )
  
• HPSBUX02429 SSRT090058 rev.2 - HP-UX Running Java, Remote Execution of Arbitrary ([email protected])
  
• iDefense Security Advisory 12.04.08: Sun Java JRE Pack200 Decompression Integer (iDefense Labs )
  
• iDefense Security Advisory 12.04.08: Sun Java JRE TrueType Font Parsing Heap Ove (iDefense Labs )
  
• iDefense Security Advisory 12.04.08: Sun Java JRE TrueType Font Parsing Integer (iDefense Labs )
  
• iDefense Security Advisory 12.04.08: Sun Java Web Start GIF Decoding Memory Corr (iDefense Labs )
  
• Solution 244991 : A Security Vulnerability in the Java Runtime Environment ( (Sun)
  
• ASA-2008-484 - The Java Runtime Environment Creates Temporary Files That Have 'G (Avaya)
  
• ASA-2008-485 - Java Runtime Environment (JRE) Buffer Overflow Vulnerabilities in (Avaya)
  
• ASA-2008-487 - A Buffer Overflow Vulnerability in the Java Runtime Environment ( (Avaya)
  
• ASA-2008-496 Security Vulnerability in Java Runtime Environment May Allow Applet (Avaya)
  
• ASA-2008-498 - A Security Vulnerability in Java Runtime Environment (JRE) With P (Avaya)
  
• ASA-2009-084 HPSBUX02411 SSRT080111 rev.1 - HP-UX Running Java, Remote Execution (Avaya)
  
• ASA-2009-229 HPSBUX02429 SSRT090058 rev.1 - HP-UX Running Java, Remote Execution (Avaya)
  
• Mac OS X Includes Known Vulnerable Version of Java (US-CERT)
  
• Nortel Response to Sun Java Runtime Environment and Java Development Kit Multipl (Nortel Networks)
  
• RHSA-2009:1551-1 java-1.4.2-ibm security update (Red Hat)
  
• Solution 244990 : A Buffer Overflow Vulnerability in the Java Runtime Environ (Sun)
  
• Solution 244992 : A Buffer Overflow Vulnerability in the Java Runtime Environ (Sun)
  
• Solution 245246 : The Java Runtime Environment UTF-8 Decoder May Allow Multip (Sun)
  
• Solution 246266 : Security Vulnerability in Java Runtime Environment May Allo (Sun)
  
• Solution 246286 : Security Vulnerability in the Java Runtime Environment With (Sun)
  
• Solution 246346 : A Security Vulnerability in Java Runtime Environment (JRE) (Sun)
  
• Solution 246366 : Security Vulnerabilities in the Java Runtime Environment (J (Sun)
  
• Solution 246386 : A Security Vulnerability in Java Runtime Environment (JRE) (Sun)
  
• Solution 246387 : A Security Vulnerability in the Java Runtime Environment ma (Sun)
  
• Solution 244986: The Java Runtime Environment Creates Temporary Files That Have (Sun)
  
• Solution 244987: Java Runtime Environment (JRE) Buffer Overflow Vulnerabilitie (Sun)
  
• Solution 244989: The Java Runtime Environment (JRE) 'Java Update' Mechanism Does (Sun)
  
• Sun Java AWT Library Sandbox Violation Vulnerability (ZDI)
  
• Sun Java JRE Pack200 Decompression Integer Overflow Vulnerability (iDefense)
  
• Sun Java JRE TrueType Font Parsing Heap Overflow Vulnerability (iDefense)
  
• Sun Java JRE TrueType Font Parsing Integer Overflow Vulnerability (iDefense)
  
• Sun Java Web Start GIF Decoding Memory Corruption Vulnerability (iDefense)