Skip to content
OpenAdvisories
Unscored RHSA-2010:0043 35 CVEs

Red Hat Security Advisory: Red Hat Network Satellite Server IBM Java Runtime security update

Published Sep 29, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Network Satellite 5 network_satellite:5.3::el4 java-1.6.0-ibm 1:1.6.0.7-1jpp.3.el4
Red Hat · Network Satellite 5 network_satellite:5.3::el4 java-1.6.0-ibm-devel 1:1.6.0.7-1jpp.3.el4
Red Hat · Network Satellite 5 network_satellite:5.3::el5 java-1.6.0-ibm 1:1.6.0.7-1jpp.2.el5
Red Hat · Network Satellite 5 network_satellite:5.3::el5 java-1.6.0-ibm-devel 1:1.6.0.7-1jpp.2.el5

Vulnerabilities 35

  • Medium —
    CVE-2009-0217

    Apache XML Security For Java vulnerable to authentication bypass by HMAC truncation

    The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; (2) the WebLogic Server…

    mono org.apache.santuario:xmlsec xml-security-c xmlsec1 Debian Maven
  • Unscored —
    CVE-2009-1093

    LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earli…

  • Unscored —
    CVE-2009-1094

    Unspecified vulnerability in the LDAP implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE…

  • Unscored —
    CVE-2009-1095

    Integer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and ear…

  • Unscored —
    CVE-2009-1096

    Buffer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earl…

  • Unscored —
    CVE-2009-1097

    Multiple buffer overflows in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier a…

  • Unscored —
    CVE-2009-1098

    Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update…

  • Unscored —
    CVE-2009-1099

    Integer signedness error in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier,…

  • Unscored —
    CVE-2009-1100

    Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 …

  • Unscored —
    CVE-2009-1101

    Unspecified vulnerability in the lightweight HTTP server implementation in Java SE Development Kit (JDK) and Java Runti…

  • Unscored —
    CVE-2009-1103

    Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 U…

  • Unscored —
    CVE-2009-1104

    The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Updat…

  • Unscored —
    CVE-2009-1105

    The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 allows use…

  • Unscored —
    CVE-2009-1106

    The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 does not p…

  • Unscored —
    CVE-2009-1107

    The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 U…

  • Medium —
    CVE-2009-2625 EPSS 30%

    Denial of service in Apache Xerces2

    XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and applic…

    xerces:xercesImpl libxerces2-java Debian Maven
  • Unscored —
    CVE-2009-2670

    The audio system in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Up…

  • Unscored —
    CVE-2009-2671

    The SOCKS proxy implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE…

  • Unscored —
    CVE-2009-2672

    The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and…

  • Unscored —
    CVE-2009-2673

    The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and…

  • Unscored —
    CVE-2009-2674

    Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Upda…

  • Unscored —
    CVE-2009-2675

    Integer overflow in the unpack200 utility in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and …

  • Unscored —
    CVE-2009-2676

    Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and ear…

  • Unscored —
    CVE-2009-3865

    The launch method in the Deployment Toolkit plugin in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 6 be…

  • Unscored —
    CVE-2009-3866

    The Java Web Start Installer in Sun Java SE in JDK and JRE 6 before Update 17 does not properly use security model perm…

  • Unscored —
    CVE-2009-3867 Public exploit EPSS 73%

    Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, …

  • Unscored —
    CVE-2009-3868

    Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and…

  • Unscored —
    CVE-2009-3869 Public exploit EPSS 65%

    Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment…

  • Unscored —
    CVE-2009-3871

    Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environme…

  • Unscored —
    CVE-2009-3872

    Unspecified vulnerability in the JPEG JFIF Decoder in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 be…

  • Unscored —
    CVE-2009-3873

    The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and J…

  • Unscored —
    CVE-2009-3874

    Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 befo…

  • Unscored —
    CVE-2009-3875

    The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22…

  • Unscored —
    CVE-2009-3876

    Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and J…

  • Unscored —
    CVE-2009-3877

    Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and J…

References

  • article
    http://www.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=490166
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=512896
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=512907
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=512914
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=512915
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=533212
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=490167
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=490168
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=490169
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=490174
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=490178
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=492302
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=492305
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=492306
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=492308
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=492309
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=492310
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=492312
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=511915
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=512920
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=512921
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=515890
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530053
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530057
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530061
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530062
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530063
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530067
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=532906
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=533211
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=533214
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=533215
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0043.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-0217
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0217
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0217
  • report
    https://access.redhat.com/security/cve/CVE-2009-1093
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1093