Oracle Java SE CVE-2013-5893 Remote Security Vulnerability
BID:64863
Info
Oracle Java SE CVE-2013-5893 Remote Security Vulnerability
| Bugtraq ID: | 64863 |
| Class: | Unknown |
| CVE: |
CVE-2013-5893 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 14 2014 12:00AM |
| Updated: | Apr 13 2015 10:08PM |
| Credit: | Oracle |
| Vulnerable: |
Ubuntu Ubuntu Linux 13.10 Ubuntu Ubuntu Linux 13.04 Ubuntu Ubuntu Linux 12.10 Sun JRE (Windows Production Release) 1.7 Sun JRE (Solaris Production Release) 1.7 Sun JRE (Linux Production Release) 1.7 S.u.S.E. openSUSE 12.3 Redhat Enterprise Linux Workstation Supplementary 6 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Supplementary 5 server Redhat Enterprise Linux Server Supplementary 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Supplementary 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop Supplementary 6 Redhat Enterprise Linux Desktop Supplementary 5 client Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux 5 Server Oracle JRE(Windows Production Release) 1.7.0_9 Oracle JRE(Windows Production Release) 1.7.0_8 Oracle JRE(Windows Production Release) 1.7.0_45 Oracle JRE(Windows Production Release) 1.7.0_17 Oracle JRE(Windows Production Release) 1.7.0_13 Oracle JRE(Windows Production Release) 1.7.0_12 Oracle JRE(Windows Production Release) 1.7.0_11 Oracle JRE(Windows Production Release) 1.7.0_10 Oracle JRE(Solaris Production Release) 1.7.0_9 Oracle JRE(Solaris Production Release) 1.7.0_8 Oracle JRE(Solaris Production Release) 1.7.0_45 Oracle JRE(Solaris Production Release) 1.7.0_40 Oracle JRE(Solaris Production Release) 1.7.0_17 Oracle JRE(Solaris Production Release) 1.7.0_13 Oracle JRE(Solaris Production Release) 1.7.0_11 Oracle JRE(Solaris Production Release) 1.7.0_10 Oracle JRE(Linux Production Release) 1.7.0_9 Oracle JRE(Linux Production Release) 1.7.0_8 Oracle JRE(Linux Production Release) 1.7.0_45 Oracle JRE(Linux Production Release) 1.7.0_40 Oracle JRE(Linux Production Release) 1.7.0_17 Oracle JRE(Linux Production Release) 1.7.0_11 Oracle JRE(Linux Production Release) 1.7.0_10 Oracle JRE (Windows Production Release) 1.7.0_7 Oracle JRE (Windows Production Release) 1.7.0_40 Oracle JRE (Windows Production Release) 1.7.0_4 Oracle JRE (Windows Production Release) 1.7.0_21 Oracle JRE (Windows Production Release) 1.7.0_2 Oracle JRE (Solaris Production Release) 1.7.0_7 Oracle JRE (Solaris Production Release) 1.7.0_4 Oracle JRE (Solaris Production Release) 1.7.0_2 Oracle JRE (Linux Production Release) 1.7.0_7 Oracle JRE (Linux Production Release) 1.7.0_4 Oracle JRE (Linux Production Release) 1.7.0_21 Oracle JRE (Linux Production Release) 1.7.0_2 Oracle JRE (Linux Production Release) 1.7.0_13 Oracle JRE (Linux Production Release) 1.7.0_12 Oracle JDK(Windows Production Release) 1.7.0_9 Oracle JDK(Windows Production Release) 1.7.0_8 Oracle JDK(Windows Production Release) 1.7.0_45 Oracle JDK(Windows Production Release) 1.7.0_21 Oracle JDK(Windows Production Release) 1.7.0_17 Oracle JDK(Windows Production Release) 1.7.0_13 Oracle JDK(Windows Production Release) 1.7.0_12 Oracle JDK(Windows Production Release) 1.7.0_11 Oracle JDK(Windows Production Release) 1.7.0_10 Oracle JDK(Solaris Production Release) 1.7.0_9 Oracle JDK(Solaris Production Release) 1.7.0_8 Oracle JDK(Solaris Production Release) 1.7.0_45 Oracle JDK(Solaris Production Release) 1.7.0_40 Oracle JDK(Solaris Production Release) 1.7.0_21 Oracle JDK(Solaris Production Release) 1.7.0_13 Oracle JDK(Solaris Production Release) 1.7.0_12 Oracle JDK(Linux Production Release) 1.7.0_9 Oracle JDK(Linux Production Release) 1.7.0_8 Oracle JDK(Linux Production Release) 1.7.0_45 Oracle JDK(Linux Production Release) 1.7.0_40 Oracle JDK(Linux Production Release) 1.7.0_21 Oracle JDK(Linux Production Release) 1.7.0_17 Oracle JDK(Linux Production Release) 1.7.0_11 Oracle JDK(Linux Production Release) 1.7.0_10 Oracle JDK(Linux Production Release) 1.6.0_43 Oracle JDK (Windows Production Release) 1.7 Oracle JDK (Windows Production Release) 1.7.0_7 Oracle JDK (Windows Production Release) 1.7.0_40 Oracle JDK (Windows Production Release) 1.7.0_4 Oracle JDK (Windows Production Release) 1.7.0_2 Oracle JDK (Solaris Production Release) 1.7 Oracle JDK (Solaris Production Release) 1.7.0_7 Oracle JDK (Solaris Production Release) 1.7.0_4 Oracle JDK (Solaris Production Release) 1.7.0_2 Oracle JDK (Solaris Production Release) 1.7.0_11 Oracle JDK (Solaris Production Release) 1.7.0_10 Oracle JDK (Linux Production Release) 1.7 Oracle JDK (Linux Production Release) 1.7.0_7 Oracle JDK (Linux Production Release) 1.7.0_4 Oracle JDK (Linux Production Release) 1.7.0_2 Oracle JDK (Linux Production Release) 1.7.0_13 Oracle JDK (Linux Production Release) 1.7.0_12 Oracle Java SE Embedded 7u45 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Oracle Enterprise Linux 5 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 IBM Lotus Notes 9.0.1 IBM Lotus Notes 8.5.4 IBM Lotus Notes 8.5.3 Fix Pack 3 IBM Lotus Notes 8.5.3 Fix Pack 2 IBM Lotus Notes 8.5.3 2 IBM Lotus Notes 8.5.3 1 IBM Lotus Notes 8.5.3 IBM Lotus Notes 8.5.2 IBM Lotus Notes 8.5.1 IBM Lotus Notes 8.0.2 IBM Lotus Notes 9.0 IBM Lotus Notes 8.5.3.5 IBM Lotus Notes 8.5.3.4 IBM Lotus Notes 8.5.3.3 IBM Lotus Notes 8.5.3 Fix Pack 5 IBM Lotus Notes 8.5.3 Fix Pack 4 IBM Lotus Notes 8.5.2.3 IBM Lotus Notes 8.5.2.2 IBM Lotus Notes 8.5.2.1 IBM Lotus Notes 8.5.2.0 IBM Lotus Notes 8.5.2 FP2 IBM Lotus Notes 8.5.1.5 IBM Lotus Notes 8.5.1.4 IBM Lotus Notes 8.5.1.3 IBM Lotus Notes 8.5.1.2 IBM Lotus Notes 8.5.1 FP5 IBM Lotus Notes 8.5.0.1 IBM Lotus Notes 8.5.0.0 IBM Lotus Notes 8.5 IBM Lotus Notes 8.0.2.6 IBM Lotus Notes 8.0.2.5 IBM Lotus Notes 8.0.2.4 IBM Lotus Notes 8.0.2.3 IBM Lotus Notes 8.0.2.2 IBM Lotus Notes 8.0.2.1 IBM Lotus Notes 8.0.2.0 IBM Lotus Notes 8.0.2 FP6 IBM Lotus Notes 8.0 IBM Lotus Domino 8.5.4 IBM Lotus Domino 8.5.3 Fix Pack 5 IBM Lotus Domino 8.5.3 Fix Pack 4 IBM Lotus Domino 8.5.3 Fix Pack 3 IBM Lotus Domino 8.5.3 2 IBM Lotus Domino 8.5.3 1 IBM Lotus Domino 8.5.3 IBM Lotus Domino 8.5.2 IBM Lotus Domino 8.5.1 Fix Pack 2 IBM Lotus Domino 8.5.1 2 IBM Lotus Domino 8.5.1 IBM Lotus Domino 8.5 IBM Lotus Domino 8.0.2 Fix Pack 5 IBM Lotus Domino 8.0.2 IBM Lotus Domino 8.0.1 IBM Lotus Domino 9.0.1.0 IBM Lotus Domino 9.0.0.0 IBM Lotus Domino 9.0 IBM Lotus Domino 8.5FP1 IBM Lotus Domino 8.5.3FP1 IBM Lotus Domino 8.5.3.6 IBM Lotus Domino 8.5.3.5 IBM Lotus Domino 8.5.3.4 IBM Lotus Domino 8.5.3.3 IBM Lotus Domino 8.5.3.0 IBM Lotus Domino 8.5.2.4 IBM Lotus Domino 8.5.2.3 IBM Lotus Domino 8.5.2.2 IBM Lotus Domino 8.5.2.1 IBM Lotus Domino 8.5.2.0 IBM Lotus Domino 8.5.2 FP4 IBM Lotus Domino 8.5.2 FP3 IBM Lotus Domino 8.5.2 FP3 IBM Lotus Domino 8.5.2 FP2 IBM Lotus Domino 8.5.1FP5 IBM Lotus Domino 8.5.1.5 IBM Lotus Domino 8.5.1.4 IBM Lotus Domino 8.5.1.3 IBM Lotus Domino 8.5.1.1 IBM Lotus Domino 8.5.0.1 IBM Lotus Domino 8.0.2.4 IBM Lotus Domino 8.0.2.3 IBM Lotus Domino 8.0.2.2 IBM Lotus Domino 8.0.2.1 IBM Lotus Domino 8.0.2 FP4 IBM Lotus Domino 8.0 HP JDK and JRE 7.0.08 HP JDK and JRE 6.0.21 HP HP-UX B.11.31 HP HP-UX B.11.23 HP HP-UX B.11.11 Gentoo Linux CentOS CentOS 6 CentOS CentOS 5 Avaya IP Office Server Edition 9.0 Avaya IP Office Application Server 9.0 Avaya Aura Experience Portal 7.0 |
| Not Vulnerable: |
HP JDK and JRE 7.0.09 HP JDK and JRE 6.0.22 |
Discussion
Oracle Java SE CVE-2013-5893 Remote Security Vulnerability
Oracle Java SE is prone to a remote security vulnerability in Java SE, Java SE Embedded.
The vulnerability can be exploited over multiple protocols. This issue affects the 'Libraries' sub-component.
This vulnerability affects the following supported versions:
Java SE 7u45, Java SE Embedded 7u45
Oracle Java SE is prone to a remote security vulnerability in Java SE, Java SE Embedded.
The vulnerability can be exploited over multiple protocols. This issue affects the 'Libraries' sub-component.
This vulnerability affects the following supported versions:
Java SE 7u45, Java SE Embedded 7u45
Exploit / POC
Oracle Java SE CVE-2013-5893 Remote Security Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Oracle Java SE CVE-2013-5893 Remote Security Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Oracle Java SE CVE-2013-5893 Remote Security Vulnerability
References:
References:
- Oracle Java Homepage (Oracle)
- HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and (HP)
- HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and (HP)
- java-1.7.0-openjdk security update (RHSA-2014-0026) (Avaya)
- Oracle Critical Patch Update Advisory - January 2014 (Oracle)
- Security Bulletin: IBM Notes & Domino fixes for multiple vulnerabilities (CVE-20 (IBM)