Oracle Java SE CVE-2013-2467 Local Security Vulnerability

Bugtraq ID:	60649
Class:	Unknown
CVE:	CVE-2013-2467
Remote:	No
Local:	Yes
Published:	Jun 18 2013 12:00AM
Updated:	May 07 2015 05:03PM
Credit:	Oracle
Vulnerable:	Sun JRE (Windows Production Release) 1.5 _22 Sun JRE (Windows Production Release) 1.5 _18 Sun JRE (Windows Production Release) 1.5 _16 Sun JRE (Windows Production Release) 1.5 _15 Sun JRE (Windows Production Release) 1.5 _06 Sun JRE (Windows Production Release) 1.5 _05 Sun JRE (Windows Production Release) 1.5 _04 Sun JRE (Windows Production Release) 1.5 _03 Sun JRE (Windows Production Release) 1.5 _02 Sun JRE (Windows Production Release) 1.5 _01 Sun JRE (Windows Production Release) 1.5 Sun JRE (Windows Production Release) 1.5.0_35 Sun JRE (Windows Production Release) 1.5.0_33 Sun JRE (Windows Production Release) 1.5.0_32 Sun JRE (Windows Production Release) 1.5.0_31 Sun JRE (Windows Production Release) 1.5.0_30 Sun JRE (Windows Production Release) 1.5.0_29 Sun JRE (Windows Production Release) 1.5.0_28 Sun JRE (Windows Production Release) 1.5.0_27 Sun JRE (Windows Production Release) 1.5.0_26 Sun JRE (Windows Production Release) 1.5.0_25 Sun JRE (Windows Production Release) 1.5.0_23 Sun JRE (Windows Production Release) 1.5.0_20 Sun JRE (Windows Production Release) 1.5.0_17 Sun JRE (Windows Production Release) 1.5.0_14 Sun JRE (Windows Production Release) 1.5.0_13 Sun JRE (Windows Production Release) 1.5.0_12 Sun JRE (Windows Production Release) 1.5.0_11 Sun JRE (Windows Production Release) 1.5.0_10 Sun JRE (Windows Production Release) 1.5.0.0_09 Sun JRE (Windows Production Release) 1.5.0.0_08 Sun JRE (Windows Production Release) 1.5.0.0_07 Sun JRE (Solaris Production Release) 1.5 _22 Sun JRE (Solaris Production Release) 1.5 _18 Sun JRE (Solaris Production Release) 1.5 _16 Sun JRE (Solaris Production Release) 1.5 _15 Sun JRE (Solaris Production Release) 1.5 _06 Sun JRE (Solaris Production Release) 1.5 _05 Sun JRE (Solaris Production Release) 1.5 _04 Sun JRE (Solaris Production Release) 1.5 _03 Sun JRE (Solaris Production Release) 1.5 _02 Sun JRE (Solaris Production Release) 1.5 _01 Sun JRE (Solaris Production Release) 1.5 Sun JRE (Solaris Production Release) 1.5.0_35 Sun JRE (Solaris Production Release) 1.5.0_33 Sun JRE (Solaris Production Release) 1.5.0_32 Sun JRE (Solaris Production Release) 1.5.0_31 Sun JRE (Solaris Production Release) 1.5.0_30 Sun JRE (Solaris Production Release) 1.5.0_29 Sun JRE (Solaris Production Release) 1.5.0_28 Sun JRE (Solaris Production Release) 1.5.0_27 Sun JRE (Solaris Production Release) 1.5.0_26 Sun JRE (Solaris Production Release) 1.5.0_25 Sun JRE (Solaris Production Release) 1.5.0_23 Sun JRE (Solaris Production Release) 1.5.0_20 Sun JRE (Solaris Production Release) 1.5.0_17 Sun JRE (Solaris Production Release) 1.5.0_14 Sun JRE (Solaris Production Release) 1.5.0_13 Sun JRE (Solaris Production Release) 1.5.0_12 Sun JRE (Solaris Production Release) 1.5.0_11 Sun JRE (Solaris Production Release) 1.5.0_10 Sun JRE (Solaris Production Release) 1.5.0.0_09 Sun JRE (Solaris Production Release) 1.5.0.0_08 Sun JRE (Solaris Production Release) 1.5.0.0_07 Sun JRE (Linux Production Release) 1.5 _22 Sun JRE (Linux Production Release) 1.5 _18 Sun JRE (Linux Production Release) 1.5 _16 Sun JRE (Linux Production Release) 1.5 _15 Sun JRE (Linux Production Release) 1.5 _07 Sun JRE (Linux Production Release) 1.5 _06 Sun JRE (Linux Production Release) 1.5 _05 Sun JRE (Linux Production Release) 1.5 _04 Sun JRE (Linux Production Release) 1.5 _03 Sun JRE (Linux Production Release) 1.5 _02 Sun JRE (Linux Production Release) 1.5 _01 Sun JRE (Linux Production Release) 1.5 .0 beta Sun JRE (Linux Production Release) 1.5 Sun JRE (Linux Production Release) 1.5.0_35 Sun JRE (Linux Production Release) 1.5.0_33 Sun JRE (Linux Production Release) 1.5.0_32 Sun JRE (Linux Production Release) 1.5.0_31 Sun JRE (Linux Production Release) 1.5.0_30 Sun JRE (Linux Production Release) 1.5.0_29 Sun JRE (Linux Production Release) 1.5.0_28 Sun JRE (Linux Production Release) 1.5.0_27 Sun JRE (Linux Production Release) 1.5.0_26 Sun JRE (Linux Production Release) 1.5.0_25 Sun JRE (Linux Production Release) 1.5.0_23 Sun JRE (Linux Production Release) 1.5.0_20 Sun JRE (Linux Production Release) 1.5.0_17 Sun JRE (Linux Production Release) 1.5.0_14 Sun JRE (Linux Production Release) 1.5.0_13 Sun JRE (Linux Production Release) 1.5.0_12 Sun JRE (Linux Production Release) 1.5.0_11 Sun JRE (Linux Production Release) 1.5.0_10 Sun JRE (Linux Production Release) 1.5.0_09 Sun JRE (Linux Production Release) 1.5.0_08 Sun JDK (Windows Production Release) 1.5 0_10 Sun JDK (Windows Production Release) 1.5 _22 Sun JDK (Windows Production Release) 1.5 _18 Sun JDK (Windows Production Release) 1.5 _17 Sun JDK (Windows Production Release) 1.5 _15 Sun JDK (Windows Production Release) 1.5 _14 Sun JDK (Windows Production Release) 1.5 _02 Sun JDK (Windows Production Release) 1.5 _01 Sun JDK (Windows Production Release) 1.5 .0_05 Sun JDK (Windows Production Release) 1.5 .0_04 Sun JDK (Windows Production Release) 1.5 .0_03 Sun JDK (Windows Production Release) 1.5.0_35 Sun JDK (Windows Production Release) 1.5.0_32 Sun JDK (Windows Production Release) 1.5.0_31 Sun JDK (Windows Production Release) 1.5.0_30 Sun JDK (Windows Production Release) 1.5.0_29 Sun JDK (Windows Production Release) 1.5.0_28 Sun JDK (Windows Production Release) 1.5.0_27 Sun JDK (Windows Production Release) 1.5.0_26 Sun JDK (Windows Production Release) 1.5.0_25 Sun JDK (Windows Production Release) 1.5.0_24 Sun JDK (Windows Production Release) 1.5.0_23 Sun JDK (Windows Production Release) 1.5.0_20 Sun JDK (Windows Production Release) 1.5.0_16 Sun JDK (Windows Production Release) 1.5.0_13 Sun JDK (Windows Production Release) 1.5.0_12 Sun JDK (Windows Production Release) 1.5.0_11-b03 Sun JDK (Windows Production Release) 1.5.0_07-b03 Sun JDK (Windows Production Release) 1.5.0.0_12 Sun JDK (Windows Production Release) 1.5.0.0_11 Sun JDK (Windows Production Release) 1.5.0.0_09 Sun JDK (Windows Production Release) 1.5.0.0_08 Sun JDK (Windows Production Release) 1.5.0.0_06 Sun JDK (Solaris Production Release) 1.5 0_10 Sun JDK (Solaris Production Release) 1.5 0_09 Sun JDK (Solaris Production Release) 1.5 0_03 Sun JDK (Solaris Production Release) 1.5 _22 Sun JDK (Solaris Production Release) 1.5 _18 Sun JDK (Solaris Production Release) 1.5 _17 Sun JDK (Solaris Production Release) 1.5 _15 Sun JDK (Solaris Production Release) 1.5 _14 Sun JDK (Solaris Production Release) 1.5 _11-b03 Sun JDK (Solaris Production Release) 1.5 _07-b03 Sun JDK (Solaris Production Release) 1.5 _06 Sun JDK (Solaris Production Release) 1.5 _02 Sun JDK (Solaris Production Release) 1.5 _01 Sun JDK (Solaris Production Release) 1.5 .0_05 Sun JDK (Solaris Production Release) 1.5 .0_04 Sun JDK (Solaris Production Release) 1.5 .0_03 Sun JDK (Solaris Production Release) 1.5.0_35 Sun JDK (Solaris Production Release) 1.5.0_32 Sun JDK (Solaris Production Release) 1.5.0_31 Sun JDK (Solaris Production Release) 1.5.0_30 Sun JDK (Solaris Production Release) 1.5.0_29 Sun JDK (Solaris Production Release) 1.5.0_28 Sun JDK (Solaris Production Release) 1.5.0_27 Sun JDK (Solaris Production Release) 1.5.0_26 Sun JDK (Solaris Production Release) 1.5.0_25 Sun JDK (Solaris Production Release) 1.5.0_24 Sun JDK (Solaris Production Release) 1.5.0_23 Sun JDK (Solaris Production Release) 1.5.0_20 Sun JDK (Solaris Production Release) 1.5.0_16 Sun JDK (Solaris Production Release) 1.5.0_13 Sun JDK (Solaris Production Release) 1.5.0_12 Sun JDK (Solaris Production Release) 1.5.0_11 Sun JDK (Linux Production Release) 1.5 0_10 Sun JDK (Linux Production Release) 1.5 _22 Sun JDK (Linux Production Release) 1.5 _18 Sun JDK (Linux Production Release) 1.5 _17 Sun JDK (Linux Production Release) 1.5 _15 Sun JDK (Linux Production Release) 1.5 _14 Sun JDK (Linux Production Release) 1.5 _11-b03 Sun JDK (Linux Production Release) 1.5 _07-b03 Sun JDK (Linux Production Release) 1.5 _07 Sun JDK (Linux Production Release) 1.5 _06 Sun JDK (Linux Production Release) 1.5 _02 Sun JDK (Linux Production Release) 1.5 _01 Sun JDK (Linux Production Release) 1.5 .0_05 Sun JDK (Linux Production Release) 1.5 Sun JDK (Linux Production Release) 1.5.0_35 Sun JDK (Linux Production Release) 1.5.0_32 Sun JDK (Linux Production Release) 1.5.0_31 Sun JDK (Linux Production Release) 1.5.0_30 Sun JDK (Linux Production Release) 1.5.0_29 Sun JDK (Linux Production Release) 1.5.0_28 Sun JDK (Linux Production Release) 1.5.0_27 Sun JDK (Linux Production Release) 1.5.0_26 Sun JDK (Linux Production Release) 1.5.0_25 Sun JDK (Linux Production Release) 1.5.0_24 Sun JDK (Linux Production Release) 1.5.0_23 Sun JDK (Linux Production Release) 1.5.0_20 Sun JDK (Linux Production Release) 1.5.0_16 Sun JDK (Linux Production Release) 1.5.0_13 Sun JDK (Linux Production Release) 1.5.0.0_12 Sun JDK (Linux Production Release) 1.5.0.0_11 Sun JDK (Linux Production Release) 1.5.0.0_09 Sun JDK (Linux Production Release) 1.5.0.0_08 Sun JDK (Linux Production Release) 1.5.0.0_04 Sun JDK (Linux Production Release) 1.5.0.0_03 IBM Tivoli Monitoring 6.2.3 IBM Tivoli Monitoring 6.2.2 IBM Tivoli Monitoring 6.2.1 IBM Tivoli Monitoring 6.2.2 FP6 IBM Tivoli Monitoring 6.2.2 FixPack 4 IBM Maximo Asset Management 7.5 IBM Maximo Asset Management 6.2 IBM Lotus Notes 8.5.3 IBM Lotus Notes 8.5.2 IBM Lotus Notes 8.5.1 IBM Lotus Notes 8.0.2 IBM Lotus Notes 8.5.2.3 IBM Lotus Notes 8.5.2.2 IBM Lotus Notes 8.5.2.1 IBM Lotus Notes 8.5.1.5 IBM Lotus Notes 8.5.1.4 IBM Lotus Notes 8.5.1.3 IBM Lotus Notes 8.5.1.2 IBM Lotus Notes 8.5.0.1 IBM Lotus Notes 8.5 IBM Lotus Notes 8.0.2.6 IBM Lotus Notes 8.0.2.5 IBM Lotus Notes 8.0.2.4 IBM Lotus Notes 8.0.2.3 IBM Lotus Notes 8.0.2.2 IBM Lotus Notes 8.0.2.1 IBM Lotus Notes 8.0 IBM Lotus Domino 8.5.3 IBM Lotus Domino 8.5.2 IBM Lotus Domino 8.5.1 IBM Lotus Domino 8.5 IBM Lotus Domino 8.0.2 IBM Lotus Domino 8.0.1 IBM Lotus Domino 8.5.1.1 IBM Lotus Domino 8.5.0.1 IBM Lotus Domino 8.0.2.4 IBM Lotus Domino 8.0.2.3 IBM Lotus Domino 8.0.2.2 IBM Lotus Domino 8.0.2.1 IBM Lotus Domino 8.0 IBM Java SE 1.4.2 IBM Java SE 7 IBM Java SE 6 IBM Java SE 5.0 IBM Java SDK 1.4.2 IBM Java SDK 6 HP HP-UX B.11.31 Hitachi uCosminexus Service Platform 8 Hitachi uCosminexus Service Architect 8 Hitachi uCosminexus Operator 8 Hitachi uCosminexus Client 8 Hitachi Cosminexus Studio 5 Hitachi Cosminexus Server - Web Edition 4 Hitachi Cosminexus Server - Standard Edition 4 Hitachi Cosminexus Developer 5 Hitachi Cosminexus Client 6 Hitachi Cosminexus Application Server 5 Gentoo Linux Avaya Voice Portal 5.1.2 Avaya Voice Portal 5.1.1 Avaya Voice Portal 5.1 SP1 Avaya Voice Portal 5.1 Avaya Voice Portal 5.0 SP2 Avaya Voice Portal 5.0 SP1 Avaya Voice Portal 5.0 Avaya Proactive Contact 5.0 Avaya Meeting Exchange 6.0 Avaya Meeting Exchange 5.2 Avaya Meeting Exchange 5.1 Avaya Meeting Exchange 5.0 Avaya IR 4.0 Avaya IP Office Application Server 8.1 Avaya IP Office Application Server 8.0 Avaya Communication Server 1000M Signaling Server 7.5 Avaya Communication Server 1000M Signaling Server 7.0 Avaya Communication Server 1000M Signaling Server 6.0 Avaya Communication Server 1000M 7.5 Avaya Communication Server 1000M 7.0 Avaya Communication Server 1000M 6.0 Avaya Communication Server 1000E Signaling Server 7.5 Avaya Communication Server 1000E Signaling Server 7.0 Avaya Communication Server 1000E Signaling Server 6.0 Avaya Communication Server 1000E 7.5 Avaya Communication Server 1000E 7.0 Avaya Communication Server 1000E 6.0 Avaya Aura System Manager 6.2 Avaya Aura System Manager 6.1.3 Avaya Aura System Manager 6.1.2 Avaya Aura System Manager 6.1.1 Avaya Aura System Manager 6.1 SP2 Avaya Aura System Manager 6.1 Sp1 Avaya Aura System Manager 6.1 Avaya Aura System Manager 6.0 SP1 Avaya Aura System Manager 6.0 Avaya Aura System Manager 5.2 Avaya Aura SIP Enablement Services 5.2.1 Avaya Aura SIP Enablement Services 5.2 Avaya Aura Session Manager 6.2.1 Avaya Aura Session Manager 6.1.3 Avaya Aura Session Manager 6.1.2 Avaya Aura Session Manager 6.1.1 Avaya Aura Session Manager 6.2 Avaya Aura Session Manager 6.1 SP2 Avaya Aura Session Manager 6.1 Sp1 Avaya Aura Session Manager 6.1 Avaya Aura Session Manager 6.0 SP1 Avaya Aura Session Manager 6.0 Avaya Aura Session Manager 5.2 SP2 Avaya Aura Session Manager 5.2 SP1 Avaya Aura Session Manager 5.2 Avaya Aura Presence Services 6.1.1 Avaya Aura Presence Services 6.1 Avaya Aura Presence Services 6.0 Avaya Aura Messaging 6.1 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Messaging 6.0.1 Avaya Aura Messaging 6.0 Avaya Aura Experience Portal 6.0 Avaya Aura Conferencing 6.0 Standard Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura Application Server 5300 SIP Core 2.0 Avaya Aura Application Enablement Services 5.2.1 Avaya Aura Application Enablement Services 6.1.1 Avaya Aura Application Enablement Services 6.1 Avaya Aura Application Enablement Services 5.2.3 Avaya Aura Application Enablement Services 5.2.2 Avaya Aura Application Enablement Services 5.2
Not Vulnerable:

Oracle Java SE CVE-2013-2467 Local Security Vulnerability

Oracle Java SE is prone to a local security vulnerability in Java Runtime Environment.

This issue affects the 'Install' sub-component.

This vulnerability affects the following supported versions:
5.0 Update 45

Oracle Java SE CVE-2013-2467 Local Security Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Oracle Java SE CVE-2013-2467 Local Security Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Oracle Java SE CVE-2013-2467 Local Security Vulnerability

References:

• Oracle Homepage (Oracle)
  
• HPSBUX02907 rev.1 - HP-UX Running Java7, Remote Unauthorized Access, Disclosure (HP)
  
• HS13-015: Multiple Vulnerabilities in Cosminexus (Hitachi)
  
• IBM Java Security alerts (IBM)
  
• IBM Tivoli Composite Application Manager for Transactions Response Time 7.3.0.1 (IBM)
  
• IBM Tivoli Monitoring clients affected by vulnerabilities in IBM JRE (IBM)
  
• IBM Tivoli Monitoring clients affected by vulnerabilities in IBM JRE executed un (IBM)
  
• Multiple vulnerabilities in the IBM i Java SDK (IBM)
  
• Oracle Java Critical Patch Update (June 2013) (Avaya)
  
• Oracle Java SE Critical Patch Update Advisory - June 2013 (Oracle)
  
• Security Bulletin: IBM Notes & Domino fixes for multiple vulnerabilities in IBM (IBM)
  
• Security Bulletin: Multiple vulnerabilities in the IBM Java SDK (IBM)
  
• Security Bulletin: Potential security vulnerabilities with JavaTM SDKs (IBM)
  
• Security Bulletin: Rational Host On-Demand clients affected by vulnerabilities i (IBM)
  
• Tivoli Provisioning Manager, Interim Fix 7.1.1-TIV-TPM-IF00009 (IBM)
  
• Vulnerabilities in IBM Tivoli Monitoring affecting IBM CloudBurst (IBM)
  
• Vulnerabilities in IBM Tivoli Monitoring affecting IBM Service Delivery Manager (IBM)
  
• Xerox Security Bulletin XRX13-007 (Xerox)