Description
Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | java-1.5.0-bea +5 | 1.5.0.14-1jpp.1.el5 | RHSA-2008:0156 |
| RHEL 5 | java-1.5.0-ibm +7 | 1:1.5.0.7-1jpp.2.el5 | RHSA-2008:0210 |
| RHEL 5 | java-1.5.0-sun +5 | 1.5.0.14-1jpp.2.el5 | RHSA-2008:0123 |
| RHEL 4 | java-1.5.0-ibm +6 | 1:1.5.0.7-1jpp.2.el4 | RHSA-2008:0210 |
| RHEL 4 | java-1.5.0-sun +5 | 1.5.0.14-1jpp.2.el4 | RHSA-2008:0123 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Network Satellite 5 | java-1.5.0-ibm +1 | 1:1.5.0.8-1jpp.1.el4 | RHSA-2008:0638 |
Advisories 4
- RHSA-2008:0638 Red Hat Security Advisory: Red Hat Network Satellite Server IBM Java Runtime security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0210 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0156 Red Hat Security Advisory: java-1.5.0-bea security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0123 Red Hat Security Advisory: java-1.5.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- 30676 third-party-advisory
- 29841 third-party-advisory
- oval:org.mitre.oval:def:11505 vdb-entry signature
- 27650 vdb-entry
- 29897 third-party-advisory
- 29498 third-party-advisory
- BEA08-201.00 vendor-advisory
- GLSA-200804-28 vendor-advisory
- 29858 third-party-advisory
- ADV-2008-0429 vdb-entry
- 231261 vendor-advisory
- 1019308 vdb-entry
- SUSE-SA:2008:025 vendor-advisory
- ADV-2008-1252 vdb-entry
- 28795 third-party-advisory
- RHSA-2008:0156 vendor-advisory
- 31497 third-party-advisory
- 28888 third-party-advisory
- RHSA-2008:0210 vendor-advisory
- 30780 third-party-advisory
- ADV-2008-1856 vdb-entry
- http://www.vmware.com/security/advisories/VMSA-2008-0010.html
- 29214 third-party-advisory
- RHSA-2008:0123 vendor-advisory
- GLSA-200804-20 vendor-advisory
- GLSA-200806-11 vendor-advisory