IBM Java CVE-2013-5456 Unspecified Arbitrary Code Execution Vulnerability

Bugtraq ID:	63618
Class:	Unknown
CVE:	CVE-2013-5456
Remote:	Yes
Local:	No
Published:	Nov 06 2013 12:00AM
Updated:	Mar 19 2015 09:23AM
Credit:	Adam Gowdiak of Security Explorations
Vulnerable:	SuSE SUSE Linux Enterprise Server 11 SP2 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise Server 10 SP3 LTSS + Linux kernel 2.6.5 S.u.S.E. SUSE CORE 9 for x86 S.u.S.E. CORE 9 Red Hat Enterprise Linux Workstation Supplementary 6 Red Hat Enterprise Linux Supplementary 5 server Red Hat Enterprise Linux Server Supplementary 6 Red Hat Enterprise Linux HPC Node Supplementary 6 Red Hat Enterprise Linux Desktop Supplementary 6 Red Hat Enterprise Linux Desktop Supplementary 5 client IBM Websphere Application Server 8.0 2 IBM Websphere Application Server 7.0 .11 IBM Websphere Application Server 6.1 .19 IBM Websphere Application Server 6.1 .18 IBM Websphere Application Server 6.1 .17 IBM Websphere Application Server 6.1 .13 IBM Websphere Application Server 6.1 .12 IBM Websphere Application Server 6.1 .11 IBM Websphere Application Server 6.1 .10 IBM Websphere Application Server 6.1 .1 IBM Websphere Application Server 8.0.0.4 IBM Websphere Application Server 8.0.0.1 IBM Websphere Application Server 8.0.0.0 IBM Websphere Application Server 7.0.0.17 IBM Websphere Application Server 7.0.0.14 IBM Websphere Application Server 7.0.0.1 IBM Websphere Application Server 7.0.0.0 IBM Websphere Application Server 6.1.0.45 IBM Websphere Application Server 6.1.0.43 IBM Tivoli Storage Productivity Center 4.2.1.185 IBM Tivoli Storage Productivity Center 4.2.1 Fix Pack 4 IBM Tivoli Storage Productivity Center 4.2.1 IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.2 IBM Lotus Notes 8.5.3 IBM Lotus Notes 8.5.2 IBM Lotus Notes 8.5.1 IBM Lotus Notes 8.0.2 IBM Lotus Notes 8.5.2.3 IBM Lotus Notes 8.5.2.2 IBM Lotus Notes 8.5.2.1 IBM Lotus Notes 8.5.2.0 IBM Lotus Notes 8.5.2 FP2 IBM Lotus Notes 8.5.1.5 IBM Lotus Notes 8.5.1.4 IBM Lotus Notes 8.5.1.3 IBM Lotus Notes 8.5.1.2 IBM Lotus Notes 8.5.1 FP5 IBM Lotus Notes 8.5.0.1 IBM Lotus Notes 8.5.0.0 IBM Lotus Notes 8.5 IBM Lotus Notes 8.0.2.6 IBM Lotus Notes 8.0.2.5 IBM Lotus Notes 8.0.2.4 IBM Lotus Notes 8.0.2.3 IBM Lotus Notes 8.0.2.2 IBM Lotus Notes 8.0.2.1 IBM Lotus Notes 8.0.2.0 IBM Lotus Notes 8.0.2 FP6 IBM Lotus Notes 8.0 IBM Lotus Domino 8.5.3 IBM Lotus Domino 8.5.2 IBM Lotus Domino 8.5.1 Fix Pack 2 IBM Lotus Domino 8.5.1 IBM Lotus Domino 8.5 IBM Lotus Domino 8.0.2 Fix Pack 5 IBM Lotus Domino 8.0.2 IBM Lotus Domino 8.0.1 IBM Lotus Domino 8.5FP1 IBM Lotus Domino 8.5.3FP1 IBM Lotus Domino 8.5.2 FP4 IBM Lotus Domino 8.5.2 FP3 IBM Lotus Domino 8.5.2 FP3 IBM Lotus Domino 8.5.2 FP2 IBM Lotus Domino 8.5.1FP5 IBM Lotus Domino 8.5.1.1 IBM Lotus Domino 8.5.0.1 IBM Lotus Domino 8.0.2.4 IBM Lotus Domino 8.0.2.3 IBM Lotus Domino 8.0.2.2 IBM Lotus Domino 8.0.2.1 IBM Lotus Domino 8.0.2 FP4 IBM Lotus Domino 8.0 IBM Java SDK 1.4.2 IBM Java SDK 6 IBM AIX 7.1 IBM AIX 6.1 IBM AIX 5.3
Not Vulnerable:

IBM Java CVE-2013-5456 Unspecified Arbitrary Code Execution Vulnerability

IBM Java is prone to an unspecified arbitrary code-execution vulnerability.

Limited information is currently available regarding this issue. We will update this BID as more information emerges.

An attacker can leverage this issue to execute arbitrary code within the context of the application.

IBM Java CVE-2013-5456 Unspecified Arbitrary Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM Java CVE-2013-5456 Unspecified Arbitrary Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.