Oracle Java SE CVE-2015-0486 Remote Security Vulnerability

Bugtraq ID:	74145
Class:	Unknown
CVE:	CVE-2015-0486
Remote:	Yes
Local:	No
Published:	Apr 14 2015 12:00AM
Updated:	Jul 06 2016 01:49PM
Credit:	Oracle
Vulnerable:	Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop 6 IBM Tivoli Storage Productivity Center 4.2.1.185 IBM Tivoli Storage Productivity Center 4.2.1 IBM Tivoli Monitoring 6.2.2 FixPack 4 IBM Java SDK 6 SR10 IBM Java SDK 6 IBM CICS Transaction Gateway 8.0 IBM CICS Transaction Gateway 7.2 IBM AIX 7.1 IBM AIX 6.1 IBM AIX 5.3 Gentoo Linux Avaya Proactive Contact 5.0 Avaya Messaging Application Server 5.2 Avaya Meeting Exchange 6.0 Avaya IQ 5.1.1 Avaya IQ 5.1 Avaya IQ 5 Avaya IP Office Application Server 8.1 Avaya IP Office Application Server 8.0 Avaya Communication Server 1000M Signaling Server 7.5 Avaya Communication Server 1000M Signaling Server 7.0 Avaya Communication Server 1000M 7.5 Avaya Communication Server 1000M 7.0 Avaya Communication Server 1000E Signaling Server 7.5 Avaya Communication Server 1000E Signaling Server 7.0 Avaya Communication Server 1000E 7.5 Avaya Communication Server 1000E 7.0 Avaya Aura System Manager 6.2 Avaya Aura System Manager 6.1.3 Avaya Aura System Manager 6.1.2 Avaya Aura System Manager 6.1.1 Avaya Aura System Manager 6.1 SP2 Avaya Aura System Manager 6.1 Sp1 Avaya Aura System Manager 6.1 Avaya Aura System Manager 6.0 SP1 Avaya Aura System Manager 6.0 Avaya Aura Session Manager 6.2.1 Avaya Aura Session Manager 6.1.3 Avaya Aura Session Manager 6.1.2 Avaya Aura Session Manager 6.1.1 Avaya Aura Session Manager 6.2 Avaya Aura Session Manager 6.1 SP2 Avaya Aura Session Manager 6.1 Sp1 Avaya Aura Session Manager 6.1 Avaya Aura Session Manager 6.0 SP1 Avaya Aura Session Manager 6.0 Avaya Aura Presence Services 6.1.1 Avaya Aura Presence Services 6.1 Avaya Aura Presence Services 6.0 Avaya Aura Messaging 6.1 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Messaging 6.0.1 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Messaging 6.0 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Experience Portal 6.0 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Application Server 5300 SIP Core 2.0 Avaya Aura Application Enablement Services 6.1.1 Avaya Aura Application Enablement Services 6.1
Not Vulnerable:

Oracle Java SE CVE-2015-0486 Remote Security Vulnerability

Oracle Java SE is prone to a remote security vulnerability.

The vulnerability can be exploited over multiple protocols. This issue affects the 'Deployment' sub-component.

This vulnerability affects the following supported versions:
Java SE 8u40

Oracle Java SE CVE-2015-0486 Remote Security Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Oracle Java SE CVE-2015-0486 Remote Security Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Oracle Java SE CVE-2015-0486 Remote Security Vulnerability

References:

• Oracle Java Homepage (Oracle)
  
• ASA-2015-238 (Avaya)
  
• Critical: java-1.8.0-oracle security update (RedHat)
  
• IBM Advisory isg3T1022548 (IBM)
  
• IBM Advisory isg3T1022550 (IBM)
  
• IBM SECURITY ADVISORY AIX (IBM)
  
• MIGR-5098822 : Multiple vulnerabilities in IBM Java SDK 7 affect IBM Systems Dir (IBM)
  
• Multiple vulnerabilities in current releases of IBM? WebSphere Real Time (IBM)
  
• Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation for (IBM)
  
• Multiple vulnerabilities, including Freak and Bar Mitzvah, in IBM Java SDK affec (IBM)
  
• Oracle Critical Patch Update Advisory - April 2015 (Oracle)
  
• Security Bulletin: CICS Transaction Gateway for Multiplatforms (IBM)
  
• Security Bulletin: Multiple vulnerabilities in current releases of the IBM? SDK, (IBM)
  
• Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Tivol (IBM)
  
• Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Tivoli Storag (IBM)
  
• Security Bulletin: Multiple vulnerabilities in IBM Java SDK/JRE that affect IBM (IBM)
  
• Security Bulletin: Vulnerabilities in Java affect Power Hardware Management Cons (IBM)