Sun Java Web Start and Java Plug-in JAR File Privilege Escalation Vulnerability
BID:32892
Info
Sun Java Web Start and Java Plug-in JAR File Privilege Escalation Vulnerability
| Bugtraq ID: | 32892 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-5343 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 03 2008 12:00AM |
| Updated: | Mar 19 2015 09:46AM |
| Credit: | Billy Rios of Microsoft and Nate Mcfeters of Ernst and Young |
| Vulnerable: |
VMWare VirtualCenter 2.0.2 VMWare VirtualCenter 2.5 VMWare vCenter 4.0 VMWare ESXi Server 4.0 VMWare ESX Server 3.0.3 VMWare ESX Server 4.0 VMWare ESX Server 3.5 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 11 DEBUGINFO SuSE SUSE Linux Enterprise Server 11 SuSE SUSE Linux Enterprise Server 10 SP2 SuSE SUSE Linux Enterprise SDK 10 SP2 SuSE SUSE Linux Enterprise Desktop 10 SP2 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 SuSE openSUSE 10.3 Sun SDK (Windows Production Release) 1.4.2 _15 Sun SDK (Windows Production Release) 1.4.2 _10 Sun SDK (Windows Production Release) 1.4.2 _09 Sun SDK (Windows Production Release) 1.4.2 _08 Sun SDK (Windows Production Release) 1.4.2 _05 Sun SDK (Windows Production Release) 1.4.2 _04 Sun SDK (Windows Production Release) 1.4.2 _03 Sun SDK (Windows Production Release) 1.3.1 _21 Sun SDK (Windows Production Release) 1.3.1 _20 Sun SDK (Windows Production Release) 1.3.1 _15 Sun SDK (Windows Production Release) 1.3.1 _14 Sun SDK (Windows Production Release) 1.3.1 _13 Sun SDK (Windows Production Release) 1.3.1 _12 Sun SDK (Windows Production Release) 1.3.1 _11 Sun SDK (Windows Production Release) 1.3.1 _10 Sun SDK (Windows Production Release) 1.3.1 _09 Sun SDK (Windows Production Release) 1.3.1 _08 Sun SDK (Windows Production Release) 1.3.1 _07 Sun SDK (Windows Production Release) 1.3.1 _06 Sun SDK (Windows Production Release) 1.3.1 _05 Sun SDK (Windows Production Release) 1.3.1 _04 Sun SDK (Windows Production Release) 1.3.1 _03 Sun SDK (Windows Production Release) 1.3.1 _02 Sun SDK (Windows Production Release) 1.3.1 _01a Sun SDK (Windows Production Release) 1.4.2_18 Sun SDK (Windows Production Release) 1.4.2_17 Sun SDK (Windows Production Release) 1.4.2_16 Sun SDK (Windows Production Release) 1.4.2_14 Sun SDK (Windows Production Release) 1.4.2_13 Sun SDK (Windows Production Release) 1.4.2_12 Sun SDK (Windows Production Release) 1.4.2_11 Sun SDK (Windows Production Release) 1.3.1_23 Sun SDK (Windows Production Release) 1.3.1_22 Sun SDK (Solaris Production Release) 1.4.2 _15 Sun SDK (Solaris Production Release) 1.4.2 _10 Sun SDK (Solaris Production Release) 1.4.2 _09 Sun SDK (Solaris Production Release) 1.4.2 _08 Sun SDK (Solaris Production Release) 1.4.2 _05 Sun SDK (Solaris Production Release) 1.4.2 _04 Sun SDK (Solaris Production Release) 1.4.2 _03 Sun SDK (Solaris Production Release) 1.3.1 _23 Sun SDK (Solaris Production Release) 1.3.1 _22 Sun SDK (Solaris Production Release) 1.3.1 _21 Sun SDK (Solaris Production Release) 1.3.1 _20 Sun SDK (Solaris Production Release) 1.3.1 _15 Sun SDK (Solaris Production Release) 1.3.1 _14 Sun SDK (Solaris Production Release) 1.3.1 _13 Sun SDK (Solaris Production Release) 1.3.1 _12 Sun SDK (Solaris Production Release) 1.3.1 _11 Sun SDK (Solaris Production Release) 1.3.1 _10 Sun SDK (Solaris Production Release) 1.3.1 _09 Sun SDK (Solaris Production Release) 1.3.1 _08 Sun SDK (Solaris Production Release) 1.3.1 _07 Sun SDK (Solaris Production Release) 1.3.1 _06 Sun SDK (Solaris Production Release) 1.3.1 _05 Sun SDK (Solaris Production Release) 1.3.1 _03 Sun SDK (Solaris Production Release) 1.3.1 _02 Sun SDK (Solaris Production Release) 1.3.1 _01 Sun SDK (Solaris Production Release) 1.4.2_18 Sun SDK (Solaris Production Release) 1.4.2_17 Sun SDK (Solaris Production Release) 1.4.2_16 Sun SDK (Solaris Production Release) 1.4.2_14 Sun SDK (Solaris Production Release) 1.4.2_13 Sun SDK (Solaris Production Release) 1.4.2_12 Sun SDK (Solaris Production Release) 1.4.2_11 Sun SDK (Linux Production Release) 1.4.2 _15 Sun SDK (Linux Production Release) 1.4.2 _10 Sun SDK (Linux Production Release) 1.4.2 _09 Sun SDK (Linux Production Release) 1.4.2 _08 Sun SDK (Linux Production Release) 1.4.2 _05 Sun SDK (Linux Production Release) 1.4.2 _04 Sun SDK (Linux Production Release) 1.4.2 _03 Sun SDK (Linux Production Release) 1.4.2 _02 Sun SDK (Linux Production Release) 1.4.2 _01 Sun SDK (Linux Production Release) 1.3.1 _23 Sun SDK (Linux Production Release) 1.3.1 _22 Sun SDK (Linux Production Release) 1.3.1 _21 Sun SDK (Linux Production Release) 1.3.1 _20 Sun SDK (Linux Production Release) 1.3.1 _15 Sun SDK (Linux Production Release) 1.3.1 _14 Sun SDK (Linux Production Release) 1.3.1 _13 Sun SDK (Linux Production Release) 1.3.1 _12 Sun SDK (Linux Production Release) 1.3.1 _11 Sun SDK (Linux Production Release) 1.3.1 _10 Sun SDK (Linux Production Release) 1.3.1 _09 Sun SDK (Linux Production Release) 1.3.1 _08 Sun SDK (Linux Production Release) 1.3.1 _07 Sun SDK (Linux Production Release) 1.3.1 _06 Sun SDK (Linux Production Release) 1.3.1 _05 Sun SDK (Linux Production Release) 1.3.1 _03 Sun SDK (Linux Production Release) 1.3.1 _02 Sun SDK (Linux Production Release) 1.3.1 _01 Sun SDK (Linux Production Release) 1.4.2_18 Sun SDK (Linux Production Release) 1.4.2_17 Sun SDK (Linux Production Release) 1.4.2_16 Sun SDK (Linux Production Release) 1.4.2_14 Sun SDK (Linux Production Release) 1.4.2_13 Sun SDK (Linux Production Release) 1.4.2_12 Sun SDK (Linux Production Release) 1.4.2_11 Sun JRE (Linux Production Release) 1.6 _10 Sun JRE (Linux Production Release) 1.6 _07 Sun JRE (Linux Production Release) 1.6 _06 Sun JRE (Linux Production Release) 1.6 _05 Sun JRE (Linux Production Release) 1.6 _04 Sun JRE (Linux Production Release) 1.5 _16 Sun JRE (Linux Production Release) 1.5 _15 Sun JRE (Linux Production Release) 1.5 _07 Sun JRE (Linux Production Release) 1.5 _06 Sun JRE (Linux Production Release) 1.6.0_03 Sun JRE (Linux Production Release) 1.6.0_02 Sun JRE (Linux Production Release) 1.6.0_01 Sun JRE (Linux Production Release) 1.5.0_14 Sun JRE (Linux Production Release) 1.5.0_13 Sun JRE (Linux Production Release) 1.5.0_12 Sun JRE (Linux Production Release) 1.5.0_11 Sun JRE (Linux Production Release) 1.5.0_10 Sun JRE (Linux Production Release) 1.5.0_09 Sun JRE (Linux Production Release) 1.5.0_08 Sun JDK (Solaris Production Release) 1.5 _15 Sun JDK (Linux Production Release) 1.6 _10 Sun JDK (Linux Production Release) 1.6 _07 Sun JDK (Linux Production Release) 1.6 _06 Sun JDK (Linux Production Release) 1.6 _05 Sun JDK (Linux Production Release) 1.6 _04 Sun JDK (Linux Production Release) 1.6 _01 Sun JDK (Linux Production Release) 1.5 0_10 Sun JDK (Linux Production Release) 1.5 _14 Sun JDK (Linux Production Release) 1.5 _07 Sun JDK (Linux Production Release) 1.5 _06 Sun JDK (Linux Production Release) 1.5 _02 Sun JDK (Linux Production Release) 1.5 _01 Sun JDK (Linux Production Release) 1.5 .0_05 Sun JDK (Linux Production Release) 1.6.0_03 Sun JDK (Linux Production Release) 1.6.0_02 Sun JDK (Linux Production Release) 1.5.0_16 Sun JDK (Linux Production Release) 1.5.0_13 Sun JDK (Linux Production Release) 1.5.0.0_12 Sun JDK (Linux Production Release) 1.5.0.0_11 Sun JDK (Linux Production Release) 1.5.0.0_09 Sun JDK (Linux Production Release) 1.5.0.0_08 Sun JDK (Linux Production Release) 1.5.0.0_04 Sun JDK (Linux Production Release) 1.5.0.0_03 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Novell Linux POS 9 S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. CORE 9 RedHat Enterprise Linux WS Extras 4 RedHat Enterprise Linux WS Extras 3 RedHat Enterprise Linux Extras 4 RedHat Enterprise Linux Extras 3 RedHat Enterprise Linux ES Extras 4 RedHat Enterprise Linux ES Extras 3 RedHat Enterprise Linux AS Extras 4 RedHat Enterprise Linux AS Extras 3 RedHat Desktop Extras 4 RedHat Desktop Extras 3 Red Hat Enterprise Linux Supplementary 5 server Red Hat Enterprise Linux Desktop Supplementary 5 client Nortel Networks Self-Service WVADS 0 Nortel Networks Self-Service Speech Server 0 Nortel Networks Self-Service Peri Application 0 Nortel Networks Self-Service MPS 500 0 Nortel Networks Self-Service MPS 1000 0 Nortel Networks Self-Service MPS 100 0 Nortel Networks Self-Service Media Processing Server 0 Nortel Networks Self-Service CCXML 0 Nortel Networks Self Service VoiceXML 0 Nortel Networks Enterprise Network Management System Nortel Networks Contact Center - CCT 0 HP OpenView Network Node Manager 7.53 HP OpenView Network Node Manager 7.51 HP HP-UX B.11.31 HP HP-UX B.11.23 HP HP-UX B.11.11 Gentoo Linux Avaya Proactive Contact 3.0.2 Apple Mac OS X Server 10.5.7 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.7 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10 Apple Mac OS X 10.4.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.5 |
| Not Vulnerable: |
Sun SDK (Windows Production Release) 1.4.2_19 Sun SDK (Windows Production Release) 1.3.1_24 Sun SDK (Solaris Production Release) 1.4.2_19 Sun SDK (Solaris Production Release) 1.3.1_24 Sun SDK (Linux Production Release) 1.4.2_19 Sun SDK (Linux Production Release) 1.3.1_24 Sun JRE (Linux Production Release) 1.6.0_11 Sun JRE (Linux Production Release) 1.5.0_17 Sun JDK (Linux Production Release) 1.6 _11 Sun JDK (Linux Production Release) 1.5 _17 |
Discussion
Sun Java Web Start and Java Plug-in JAR File Privilege Escalation Vulnerability
Sun Java Web Start and Java Plug-in are prone to a privilege-escalation vulnerability.
This issue occurs when the affected applications parse a JAR file that is also a legitimate GIF image file.
An attacker may exploit this issue to obtain sensitive information (such as HTTP session cookies) or to perform actions as legitimate users of a web application. This may aid in further attacks.
NOTE: This issue was previously covered in BID 32620 (Sun Java Web Start and Java Plug-in Multiple Privilege Escalation Vulnerabilities), but has been given its own record to better document the issue.
The following versions are affected:
JDK and JRE 6 Update 10 and earlier
JDK and JRE 5.0 Update 16 and earlier
SDK and JRE 1.4.2_18 and earlier
SDK and JRE 1.3.1_23 and earlier
Sun Java Web Start and Java Plug-in are prone to a privilege-escalation vulnerability.
This issue occurs when the affected applications parse a JAR file that is also a legitimate GIF image file.
An attacker may exploit this issue to obtain sensitive information (such as HTTP session cookies) or to perform actions as legitimate users of a web application. This may aid in further attacks.
NOTE: This issue was previously covered in BID 32620 (Sun Java Web Start and Java Plug-in Multiple Privilege Escalation Vulnerabilities), but has been given its own record to better document the issue.
The following versions are affected:
JDK and JRE 6 Update 10 and earlier
JDK and JRE 5.0 Update 16 and earlier
SDK and JRE 1.4.2_18 and earlier
SDK and JRE 1.3.1_23 and earlier
Exploit / POC
Sun Java Web Start and Java Plug-in JAR File Privilege Escalation Vulnerability
An attacker may exploit this issue using readily available tools.
An attacker may exploit this issue using readily available tools.
Solution / Fix
Sun Java Web Start and Java Plug-in JAR File Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references for more information.
S.u.S.E. openSUSE 11.0
S.u.S.E. openSUSE 11.1
Apple Mac OS X 10.4.10
Apple Mac OS X 10.4.11
Apple Mac OS X Server 10.4.11
Apple Mac OS X 10.4.2
Apple Mac OS X 10.4.3
Apple Mac OS X 10.4.4
Apple Mac OS X Server 10.5.3
Apple Mac OS X Server 10.5.5
Solution:
Updates are available. Please see the references for more information.
S.u.S.E. openSUSE 11.0
-
S.u.S.E. java-1_5_0-sun-1.5.0_update17-0.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 5_0-sun-1.5.0_update17-0.1.i586.rpm -
S.u.S.E. java-1_5_0-sun-alsa-1.5.0_update17-0.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 5_0-sun-alsa-1.5.0_update17-0.1.i586.rpm -
S.u.S.E. java-1_5_0-sun-demo-1.5.0_update17-0.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 5_0-sun-demo-1.5.0_update17-0.1.i586.rpm -
S.u.S.E. java-1_5_0-sun-devel-1.5.0_update17-0.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 5_0-sun-devel-1.5.0_update17-0.1.i586.rpm -
S.u.S.E. java-1_5_0-sun-jdbc-1.5.0_update17-0.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 5_0-sun-jdbc-1.5.0_update17-0.1.i586.rpm -
S.u.S.E. java-1_5_0-sun-plugin-1.5.0_update17-0.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 5_0-sun-plugin-1.5.0_update17-0.1.i586.rpm -
S.u.S.E. java-1_5_0-sun-src-1.5.0_update17-0.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 5_0-sun-src-1.5.0_update17-0.1.i586.rpm -
S.u.S.E. java-1_6_0-sun-1.6.0.u11-0.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 6_0-sun-1.6.0.u11-0.1.i586.rpm -
S.u.S.E. java-1_6_0-sun-alsa-1.6.0.u11-0.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 6_0-sun-alsa-1.6.0.u11-0.1.i586.rpm -
S.u.S.E. java-1_6_0-sun-demo-1.6.0.u11-0.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 6_0-sun-demo-1.6.0.u11-0.1.i586.rpm -
S.u.S.E. java-1_6_0-sun-devel-1.6.0.u11-0.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 6_0-sun-devel-1.6.0.u11-0.1.i586.rpm -
S.u.S.E. java-1_6_0-sun-jdbc-1.6.0.u11-0.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 6_0-sun-jdbc-1.6.0.u11-0.1.i586.rpm -
S.u.S.E. java-1_6_0-sun-plugin-1.6.0.u11-0.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_ 6_0-sun-plugin-1.6.0.u11-0.1.i586.rpm
S.u.S.E. openSUSE 11.1
-
S.u.S.E. java-1_5_0-sun-1.5.0_update17-1.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_ 5_0-sun-1.5.0_update17-1.1.i586.rpm -
S.u.S.E. java-1_5_0-sun-alsa-1.5.0_update17-1.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_ 5_0-sun-alsa-1.5.0_update17-1.1.i586.rpm -
S.u.S.E. java-1_5_0-sun-devel-1.5.0_update17-1.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_ 5_0-sun-devel-1.5.0_update17-1.1.i586.rpm -
S.u.S.E. java-1_5_0-sun-jdbc-1.5.0_update17-1.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_ 5_0-sun-jdbc-1.5.0_update17-1.1.i586.rpm -
S.u.S.E. java-1_5_0-sun-plugin-1.5.0_update17-1.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_ 5_0-sun-plugin-1.5.0_update17-1.1.i586.rpm -
S.u.S.E. java-1_6_0-sun-1.6.0.u11-1.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_ 6_0-sun-1.6.0.u11-1.1.i586.rpm -
S.u.S.E. java-1_6_0-sun-alsa-1.6.0.u11-1.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_ 6_0-sun-alsa-1.6.0.u11-1.1.i586.rpm -
S.u.S.E. java-1_6_0-sun-devel-1.6.0.u11-1.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_ 6_0-sun-devel-1.6.0.u11-1.1.i586.rpm -
S.u.S.E. java-1_6_0-sun-jdbc-1.6.0.u11-1.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_ 6_0-sun-jdbc-1.6.0.u11-1.1.i586.rpm -
S.u.S.E. java-1_6_0-sun-plugin-1.6.0.u11-1.1.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_ 6_0-sun-plugin-1.6.0.u11-1.1.i586.rpm
Apple Mac OS X 10.4.10
-
Apple Java_for_Mac_OS_X_10_4__Release_8
http://support.apple.com/downloads/_Java_for_Mac_OS_X_10_4__Release_8
Apple Mac OS X 10.4.11
-
Apple Java_for_Mac_OS_X_10_4__Release_8
http://support.apple.com/downloads/_Java_for_Mac_OS_X_10_4__Release_8 -
Apple JavaForMacOSX10.4Release9.dmg
http://support.apple.com/downloads/DL847/en_US/JavaForMacOSX10.4Releas e9.dmg
Apple Mac OS X Server 10.4.11
-
Apple JavaForMacOSX10.4Release9.dmg
http://support.apple.com/downloads/DL847/en_US/JavaForMacOSX10.4Releas e9.dmg
Apple Mac OS X 10.4.2
-
Apple Java_for_Mac_OS_X_10_4__Release_8
http://support.apple.com/downloads/_Java_for_Mac_OS_X_10_4__Release_8
Apple Mac OS X 10.4.3
-
Apple Java_for_Mac_OS_X_10_4__Release_8
http://support.apple.com/downloads/_Java_for_Mac_OS_X_10_4__Release_8
Apple Mac OS X 10.4.4
-
Apple Java_for_Mac_OS_X_10_4__Release_8
http://support.apple.com/downloads/_Java_for_Mac_OS_X_10_4__Release_8
Apple Mac OS X Server 10.5.3
-
Apple Java_for_Mac_OS_X_10_5_Update_3_
http://support.apple.com/downloads/Java_for_Mac_OS_X_10_5_Update_3_
Apple Mac OS X Server 10.5.5
-
Apple Java_for_Mac_OS_X_10_5_Update_3_
http://support.apple.com/downloads/Java_for_Mac_OS_X_10_5_Update_3_
References
Sun Java Web Start and Java Plug-in JAR File Privilege Escalation Vulnerability
References:
References:
- [Security-announce] VMSA-2009-0014 VMware ESX patches for DHCP, Service Console (VMware)
- Java Web Start Homepage (Sun Microsystems)
- SUN Fixes GIFARs (xssniper)
- ASA-2009-084 HPSBUX02411 SSRT080111 rev.1 - HP-UX Running Java, Remote Execution (Avaya)
- Multiple Security Vulnerabilities in Java Web Start and Java Plug-in May Allow P (Sun)
- Nortel Response to Sun Java Runtime Environment and Java Development Kit Multipl (Nortel Networks)
- RHSA-2008:1018-4 java-1.6.0-sun security update (Red Hat)
- RHSA-2008:1025-4 java-1.5.0-sun security update (Red Hat)