Skip to content
OpenAdvisories
Critical RHSA-2010:0408 6 CVEs

Red Hat Security Advisory: java-1.4.2-ibm security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 4 rhel_extras_sap:4 java-1.4.2-ibm 0:1.4.2.13.4.sap-1jpp.1.el4_8
Red Hat · RHEL 4 rhel_extras_sap:4 java-1.4.2-ibm-demo 0:1.4.2.13.4.sap-1jpp.1.el4_8
Red Hat · RHEL 4 rhel_extras_sap:4 java-1.4.2-ibm-devel 0:1.4.2.13.4.sap-1jpp.1.el4_8
Red Hat · RHEL 4 rhel_extras_sap:4 java-1.4.2-ibm-javacomm 0:1.4.2.13.4.sap-1jpp.1.el4_8
Red Hat · RHEL 4 rhel_extras_sap:4 java-1.4.2-ibm-src 0:1.4.2.13.4.sap-1jpp.1.el4_8
Red Hat · RHEL 5 rhel_extras_sap:5 java-1.4.2-ibm 0:1.4.2.13.4.sap-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras_sap:5 java-1.4.2-ibm-demo 0:1.4.2.13.4.sap-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras_sap:5 java-1.4.2-ibm-devel 0:1.4.2.13.4.sap-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras_sap:5 java-1.4.2-ibm-javacomm 0:1.4.2.13.4.sap-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras_sap:5 java-1.4.2-ibm-src 0:1.4.2.13.4.sap-1jpp.1.el5

Vulnerabilities 6

  • Critical 9.8
    CVE-2009-3555 Public exploit EPSS 87%

    Apache Tomcat affected by vulnerability in TLS and SSL protocol

    The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Serv…

    openssl apache2 org.apache.tomcat:tomcat nss Debian Maven
  • Unscored —
    CVE-2009-3867 Public exploit EPSS 73%

    Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, …

  • Unscored —
    CVE-2009-3869 Public exploit EPSS 65%

    Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment…

  • Unscored —
    CVE-2009-3871

    Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environme…

  • Unscored —
    CVE-2009-3874

    Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 befo…

  • Unscored —
    CVE-2009-3875

    The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    http://kbase.redhat.com/faq/docs/DOC-20491
  • article
    http://www.ibm.com/developerworks/java/jdk/alerts/
  • article
    http://www.ibm.com/developerworks/java/jdk/security/142/secguides/jsse2docs/JSSE2RefGuide.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530057
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530062
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530063
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530067
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=533125
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=533214
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0408.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-3555
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3555
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3555
  • report
    https://access.redhat.com/security/cve/CVE-2009-3867
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3867
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3867
  • report
    https://access.redhat.com/security/cve/CVE-2009-3869
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3869
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3869
  • report
    https://access.redhat.com/security/cve/CVE-2009-3871
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3871
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3871
  • report
    https://access.redhat.com/security/cve/CVE-2009-3874
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3874
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3874
  • report
    https://access.redhat.com/security/cve/CVE-2009-3875
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3875
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3875