Description
Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or (3) user.home System Properties, aka "Java Web Start File Inclusion" and CR 6694892.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | java-1.4.2-ibm +6 | 1.4.2.13-1jpp.1.el5 | RHSA-2009:0445 |
| RHEL 5 | java-1.5.0-ibm +7 | 1:1.5.0.9-1jpp.2.el5 | RHSA-2009:0016 |
| RHEL 5 | java-1.5.0-sun +5 | 1.5.0.17-1jpp.2.el5 | RHSA-2008:1025 |
| RHEL 5 | java-1.6.0-ibm +7 | 1:1.6.0.3-1jpp.1.el5 | RHSA-2009:0015 |
| RHEL 5 | java-1.6.0-sun +5 | 1:1.6.0.11-1jpp.1.el5 | RHSA-2008:1018 |
| RHEL 4 | java-1.4.2-ibm +6 | 1.4.2.13-1jpp.1.el4 | RHSA-2009:0445 |
| RHEL 4 | java-1.5.0-ibm +6 | 1:1.5.0.9-1jpp.4.el4 | RHSA-2009:0016 |
| RHEL 4 | java-1.5.0-sun +5 | 1.5.0.17-1jpp.2.el4 | RHSA-2008:1025 |
| RHEL 4 | java-1.6.0-ibm +6 | 1:1.6.0.3-1jpp.3.el4 | RHSA-2009:0015 |
| RHEL 4 | java-1.6.0-sun +5 | 1:1.6.0.11-1jpp.1.el4 | RHSA-2008:1018 |
| RHEL 3 | java-1.4.2-ibm +5 | 1.4.2.13-1jpp.1.el3 | RHSA-2009:0445 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Network Satellite 5 | java-1.5.0-sun +1 | 1.5.0.22-1jpp.1.el4 | RHSA-2009:1662 |
Advisories 6
- RHSA-2009:1662 Red Hat Security Advisory: Red Hat Network Satellite Server Sun Java Runtime security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2009:0445 Red Hat Security Advisory: java-1.4.2-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2009:0015 Red Hat Security Advisory: java-1.6.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2009:0016 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:1018 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:1025 Red Hat Security Advisory: java-1.5.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- SSRT090049 vendor-advisory
- RHSA-2008:1018 vendor-advisory
- SUSE-SA:2009:018 vendor-advisory
- ADV-2009-0672 vdb-entry
- 32620 vdb-entry
- 4693 third-party-advisory
- 33015 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm
- 34889 third-party-advisory
- 34233 third-party-advisory
- GLSA-200911-02 vendor-advisory
- http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf
- http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm
- oval:org.mitre.oval:def:5601 vdb-entry signature
- SUSE-SA:2009:007 vendor-advisory
- SSRT080111 vendor-advisory
- 38539 third-party-advisory
- 50510 vdb-entry
- 35065 third-party-advisory
- 33528 third-party-advisory
- http://www.vsecurity.com/bulletins/advisories/2008/JWS-props.txt
- ADV-2009-0424 vdb-entry
- 1021318 vdb-entry
- RHSA-2008:1025 vendor-advisory
- RHSA-2009:0445 vendor-advisory
- RHSA-2009:0016 vendor-advisory
- 20081204 CVE-2008-2086: Java Web Start File Inclusion via System PropertiesOverride mailing-list
- TA08-340A third-party-advisory
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=
- 34605 third-party-advisory
- SUSE-SR:2009:010 vendor-advisory
- RHSA-2009:0015 vendor-advisory
- 32991 third-party-advisory
- APPLE-SA-2009-02-12 vendor-advisory
- 244988 vendor-advisory
- 37386 third-party-advisory
- 33710 third-party-advisory