Oracle Java SE CVE-2013-5788 Remote Security Vulnerability

Bugtraq ID:	63145
Class:	Unknown
CVE:	CVE-2013-5788
Remote:	Yes
Local:	No
Published:	Oct 15 2013 12:00AM
Updated:	Mar 19 2015 09:45AM
Credit:	Oracle
Vulnerable:	SuSE SUSE Linux Enterprise Server 11 SP2 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise Server 10 SP3 LTSS + Linux kernel 2.6.5 Sun JRE (Windows Production Release) 1.7.0_4 Sun JRE (Windows Production Release) 1.7.0_2 Sun JRE (Windows Production Release) 1.7 Sun JRE (Solaris Production Release) 1.7.0_4 Sun JRE (Solaris Production Release) 1.7.0_2 Sun JRE (Solaris Production Release) 1.7 Sun JRE (Linux Production Release) 1.7.0_4 Sun JRE (Linux Production Release) 1.7.0_2 Sun JRE (Linux Production Release) 1.7 Sun JDK (Windows Production Release) 1.7 Sun JDK (Windows Production Release) 1.7.0_4 Sun JDK (Windows Production Release) 1.7.0_2 Sun JDK (Solaris Production Release) 1.7 Sun JDK (Solaris Production Release) 1.7.0_4 Sun JDK (Solaris Production Release) 1.7.0_2 Sun JDK (Linux Production Release) 1.7 Sun JDK (Linux Production Release) 1.7.0_4 Sun JDK (Linux Production Release) 1.7.0_2 S.u.S.E. SUSE CORE 9 for x86 S.u.S.E. CORE 9 Red Hat Enterprise Linux Workstation Supplementary 6 Red Hat Enterprise Linux Supplementary 5 server Red Hat Enterprise Linux Server Supplementary 6 Red Hat Enterprise Linux HPC Node Supplementary 6 Red Hat Enterprise Linux Desktop Supplementary 6 Red Hat Enterprise Linux Desktop Supplementary 5 client IBM Websphere Application Server 8.0 2 IBM Websphere Application Server 7.0 .11 IBM Websphere Application Server 6.1 .19 IBM Websphere Application Server 6.1 .18 IBM Websphere Application Server 6.1 .17 IBM Websphere Application Server 6.1 .13 IBM Websphere Application Server 6.1 .12 IBM Websphere Application Server 6.1 .11 IBM Websphere Application Server 6.1 .10 IBM Websphere Application Server 6.1 .1 IBM Websphere Application Server 8.0.0.4 IBM Websphere Application Server 8.0.0.1 IBM Websphere Application Server 8.0.0.0 IBM Websphere Application Server 7.0.0.17 IBM Websphere Application Server 7.0.0.14 IBM Websphere Application Server 7.0.0.1 IBM Websphere Application Server 7.0.0.0 IBM Websphere Application Server 6.1.0.45 IBM Websphere Application Server 6.1.0.43 IBM Tivoli Storage Productivity Center 4.2.1.185 IBM Tivoli Storage Productivity Center 4.2.1 Fix Pack 4 IBM Tivoli Storage Productivity Center 4.2.1 IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.2 IBM Lotus Notes 8.5.3 IBM Lotus Notes 8.5.2 IBM Lotus Notes 8.5.1 IBM Lotus Notes 8.0.2 IBM Lotus Notes 8.5.2.3 IBM Lotus Notes 8.5.2.2 IBM Lotus Notes 8.5.2.1 IBM Lotus Notes 8.5.2.0 IBM Lotus Notes 8.5.2 FP2 IBM Lotus Notes 8.5.1.5 IBM Lotus Notes 8.5.1.4 IBM Lotus Notes 8.5.1.3 IBM Lotus Notes 8.5.1.2 IBM Lotus Notes 8.5.1 FP5 IBM Lotus Notes 8.5.0.1 IBM Lotus Notes 8.5.0.0 IBM Lotus Notes 8.5 IBM Lotus Notes 8.0.2.6 IBM Lotus Notes 8.0.2.5 IBM Lotus Notes 8.0.2.4 IBM Lotus Notes 8.0.2.3 IBM Lotus Notes 8.0.2.2 IBM Lotus Notes 8.0.2.1 IBM Lotus Notes 8.0.2.0 IBM Lotus Notes 8.0.2 FP6 IBM Lotus Notes 8.0 IBM Lotus Domino 8.5.3 IBM Lotus Domino 8.5.2 IBM Lotus Domino 8.5.1 Fix Pack 2 IBM Lotus Domino 8.5.1 IBM Lotus Domino 8.5 IBM Lotus Domino 8.0.2 Fix Pack 5 IBM Lotus Domino 8.0.2 IBM Lotus Domino 8.0.1 IBM Lotus Domino 8.5FP1 IBM Lotus Domino 8.5.3FP1 IBM Lotus Domino 8.5.2 FP4 IBM Lotus Domino 8.5.2 FP3 IBM Lotus Domino 8.5.2 FP3 IBM Lotus Domino 8.5.2 FP2 IBM Lotus Domino 8.5.1FP5 IBM Lotus Domino 8.5.1.1 IBM Lotus Domino 8.5.0.1 IBM Lotus Domino 8.0.2.4 IBM Lotus Domino 8.0.2.3 IBM Lotus Domino 8.0.2.2 IBM Lotus Domino 8.0.2.1 IBM Lotus Domino 8.0.2 FP4 IBM Lotus Domino 8.0 IBM Java SDK 1.4.2 IBM Java SDK 6 IBM AIX 7.1 IBM AIX 6.1 IBM AIX 5.3 Gentoo Linux
Not Vulnerable:

Oracle Java SE CVE-2013-5788 Remote Security Vulnerability

Oracle Java SE is prone to a remote security vulnerability.

The vulnerability can be exploited over multiple protocols. This issue affects the 'Deployment' sub-component.

This vulnerability affects the following supported versions:
Java SE 7u40, Java SE Embedded 7u40

Oracle Java SE CVE-2013-5788 Remote Security Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Oracle Java SE CVE-2013-5788 Remote Security Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Oracle Java SE CVE-2013-5788 Remote Security Vulnerability

References:

• Oracle Java Homepage (Oracle)
  
• IBM Endpoint Manager for Remote Control Interim Fix 9.0.0-TIV-IEMRC900-IF0003 (IBM)
  
• IBM Endpoint Manager for Remote Control Interim Fix 9.0.1-TIV-IEMRC901-IF0001 (IBM)
  
• IBM Smart Analytics System 5600 is affected by multiple vulnerabilities in the I (IBM)
  
• IBM Tivoli Composite Application Manager for Transactions Response Time 7.4 Inte (IBM)
  
• InfoSphere Streams Applications Using Custom Java Operators May Be Affected (IBM)
  
• IV53964: SECURITY APAR,MULTIPLE OPENSSL VULNERABILITIES IN IBM ENDPOINT MANAGER (IBM)
  
• Multiple vulnerabilities in current releases of the IBM SDK, Java Technology Edi (IBM)
  
• Oracle Critical Patch Update Advisory - October 2013 (Oracle)
  
• Security Alert: Tivoli Policy Driven Software Distribution (Oracle CPU October 2 (IBM)
  
• SECURITY APAR, MULTIPLE JAVA VULNERABILITIES IN IBM ENDPOINT MANAGER FOR REMOTE (IBM)
  
• Security Bulletin: IBM Notes & Domino fixes for multiple vulnerabilities (CVE-20 (IBM)
  
• Security Bulletin: IBM Tivoli Composite Application Manager for Transactions aff (IBM)
  
• Security Bulletin: Multiple IBM SDK Java Technology Edition, Version 6 security (IBM)
  
• Security Bulletin: Multiple Java security vulnerabilities addressed in IBM Endpo (IBM)
  
• Security Bulletin: Multiple OpenSSL vulnerabilities in IBM Endpoint Manager for (IBM)
  
• Security Bulletin: Multiple vulnerabilities in current IBM SDK for Java for WebS (IBM)
  
• Security Bulletin: Multiple vulnerabilities in IBM WebSphere Real Time (IBM)
  
• Security Bulletin: Potential security vulnerabilities with JavaTM SDKs (IBM)
  
• Security Bulletin: Security Vulnerabilities for IBM Java on AIX (IBM)
  
• Security Bulletin: TADDM - Java Quarterly CPU - October 2013 (IBM)
  
• Security Bulletin: Tivoli Storage Productivity Center - Oracle CPU October 2013 (IBM)
  
• Tivoli Provisioning Manager, Interim Fix 7.1.1-TIV-TPM-IF00009 (IBM)
  
• VMSA-2014-0002 VMware vSphere updates to third party libraries (VMware)