Description
Unspecified vulnerability in the Java Runtime Environment (JRE) Applet Class Loader in Sun JDK and JRE 5.0 Update 11 and earlier, 6 through 6 Update 1, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to violate the security model for an applet's outbound connections by connecting to certain localhost services running on the machine that loaded the applet.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | java-1.5.0-ibm +6 | 1:1.5.0.5-1jpp.0.1.el5 | RHSA-2007:0829 |
| RHEL 4 | java-1.5.0-ibm +6 | 1:1.5.0.5-1jpp.2.el4 | RHSA-2007:0829 |
| RHEL 4 | java-1.5.0-sun +5 | 1.5.0.12-1jpp.2.el4 | RHSA-2007:0818 |
| RHEL 2 | IBMJava2-JRE +1 | 1:1.3.1-17 | RHSA-2008:0133 |
Advisories 3
- RHSA-2008:0133 Red Hat Security Advisory: IBMJava2 security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2007:0829 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2007:0818 Red Hat Security Advisory: java-1.5.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- RHSA-2007:0818 vendor-advisory
- 26933 third-party-advisory
- http://docs.info.apple.com/article.html?artnum=307177
- 102995 vendor-advisory
- 26314 third-party-advisory
- BEA07-177.00 vendor-advisory
- SSA:2007-243-01 vendor-advisory
- 30805 third-party-advisory
- 1018428 vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2007-322.htm
- 26369 third-party-advisory
- APPLE-SA-2007-12-14 vendor-advisory
- ADV-2007-2573 vdb-entry
- 26645 third-party-advisory
- sun-java-class-unauthorized-access(35491) vdb-entry
- SSRT071465 vendor-advisory
- ADV-2007-4224 vdb-entry
- ADV-2007-3861 vdb-entry
- ADV-2007-3009 vdb-entry
- 27266 third-party-advisory
- SUSE-SA:2007:056 vendor-advisory
- GLSA-200709-15 vendor-advisory
- 25054 vdb-entry
- 28115 third-party-advisory
- oval:org.mitre.oval:def:10387 vdb-entry signature
- RHSA-2007:0829 vendor-advisory
- 26631 third-party-advisory
- 27635 third-party-advisory
- RHSA-2008:0133 vendor-advisory