Description
Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when an HTTP proxy server is used, allows remote attackers to violate the security model for an applet's outbound connections via a multi-pin DNS rebinding attack in which the applet download relies on DNS resolution on the proxy server, but the applet's socket operations rely on DNS resolution on the local machine, a different issue than CVE-2007-5274. NOTE: this is similar to CVE-2007-5232.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | java-1.4.2-bea +5 | 1.4.2.16-1jpp.1.el5 | RHSA-2008:0100 |
| RHEL 5 | java-1.4.2-ibm +6 | 1.4.2.10-1jpp.2.el5 | RHSA-2008:0132 |
| RHEL 5 | java-1.5.0-bea +5 | 1.5.0.14-1jpp.1.el5 | RHSA-2008:0156 |
| RHEL 5 | java-1.5.0-ibm +7 | 1:1.5.0.6-1jpp.1.el5 | RHSA-2007:1041 |
| RHEL 5 | java-1.5.0-sun +5 | 1.5.0.13-1jpp.1.el5 | RHSA-2007:0963 |
| RHEL 4 | java-1.4.2-ibm +6 | 1.4.2.10-1jpp.2.el4 | RHSA-2008:0132 |
| RHEL 4 | java-1.5.0-ibm +6 | 1:1.5.0.6-1jpp.2.el4 | RHSA-2007:1041 |
| RHEL 4 | java-1.5.0-sun +5 | 1.5.0.13-1jpp.1.el4 | RHSA-2007:0963 |
| RHEL 3 | java-1.4.2-bea +2 | 1.4.2.16-1jpp.1.el3 | RHSA-2008:0100 |
| RHEL 3 | java-1.4.2-ibm +5 | 1.4.2.10-1jpp.2.el3 | RHSA-2008:0132 |
Advisories 5
- RHSA-2008:0156 Red Hat Security Advisory: java-1.5.0-bea security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0132 Red Hat Security Advisory: java-1.4.2-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0100 Red Hat Security Advisory: java-1.4.2-bea security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2007:1041 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2007:0963 Red Hat Security Advisory: java-1.5.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- RHSA-2008:0132 vendor-advisory
- RHSA-2007:1041 vendor-advisory
- ADV-2007-3895 vdb-entry
- 29042 third-party-advisory
- http://crypto.stanford.edu/dns/dns-rebinding.pdf
- 27693 third-party-advisory
- http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html
- 1018771 vdb-entry
- SUSE-SA:2007:055 vendor-advisory
- 20070709 Anti-DNS Pinning and Java Applets mailing-list
- 29897 third-party-advisory
- 27206 third-party-advisory
- 27804 third-party-advisory
- GLSA-200804-28 vendor-advisory
- HPSBUX02284 vendor-advisory
- 29858 third-party-advisory
- 45527 vdb-entry
- RHSA-2007:0963 vendor-advisory
- 25918 vdb-entry
- RHSA-2008:0100 vendor-advisory
- ADV-2008-0609 vdb-entry
- 200041 vendor-advisory
- SUSE-SA:2008:025 vendor-advisory
- 27261 third-party-advisory
- 103078 vendor-advisory
- 20071029 FLEA-2007-0061-1 sun-jre sun-jdk mailing-list
- 28777 third-party-advisory
- RHSA-2008:0156 vendor-advisory
- BEA08-198.00 vendor-advisory
- 30780 third-party-advisory
- 28880 third-party-advisory
- 27716 third-party-advisory
- 29214 third-party-advisory
- 29340 third-party-advisory
- oval:org.mitre.oval:def:10340 vdb-entry signature
- GLSA-200804-20 vendor-advisory
- GLSA-200806-11 vendor-advisory