Description
Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier, when local monitoring is enabled, allows remote attackers to "perform unauthorized operations" via unspecified vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | java-1.5.0-ibm +7 | 1:1.5.0.8-1jpp.2.el5 | RHSA-2008:0891 |
| RHEL 5 | java-1.5.0-sun +5 | 1.5.0.16-1jpp.2.el5 | RHSA-2008:0595 |
| RHEL 5 | java-1.6.0-ibm +7 | 1:1.6.0.2-1jpp.2.el5 | RHSA-2008:0906 |
| RHEL 5 | java-1.6.0-sun +5 | 1:1.6.0.7-1jpp.1.el5 | RHSA-2008:0594 |
| RHEL 4 | java-1.5.0-ibm +6 | 1:1.5.0.8-1jpp.2.el4 | RHSA-2008:0891 |
| RHEL 4 | java-1.5.0-sun +5 | 1.5.0.16-1jpp.2.el4 | RHSA-2008:0595 |
| RHEL 4 | java-1.6.0-ibm +6 | 1:1.6.0.2-1jpp.2.el4 | RHSA-2008:0906 |
| RHEL 4 | java-1.6.0-sun +5 | 1:1.6.0.7-1jpp.2.el4 | RHSA-2008:0594 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Network Satellite 5 | java-1.5.0-ibm +1 | 1:1.5.0.9-1jpp.2.el5 | RHSA-2009:0466 |
| Red Hat Network Satellite 5 | java-1.5.0-sun +1 | 1.5.0.16-1jpp.2.el4 | RHSA-2008:0636 |
Advisories 6
- RHSA-2009:0466 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0906 Red Hat Security Advisory: java-1.6.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0891 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0636 Red Hat Security Advisory: Red Hat Network Satellite Server Sun Java Runtime security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0594 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0595 Red Hat Security Advisory: java-1.5.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- 1020458 vdb-entry
- RHSA-2008:1044 vendor-advisory
- 32394 third-party-advisory
- APPLE-SA-2008-09-24 vendor-advisory
- 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and mailing-list
- 32436 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm
- http://support.avaya.com/elmodocs2/security/ASA-2008-507.htm
- sun-jmx-security-bypass(43669) vdb-entry
- 31600 third-party-advisory
- SUSE-SA:2008:042 vendor-advisory
- 32018 third-party-advisory
- GLSA-200911-02 vendor-advisory
- 32179 third-party-advisory
- ADV-2008-2740 vdb-entry
- 33237 third-party-advisory
- ADV-2008-2056 vdb-entry
- 31055 third-party-advisory
- 32180 third-party-advisory
- http://www.vmware.com/security/advisories/VMSA-2008-0016.html
- 34972 third-party-advisory
- RHSA-2009:0466 vendor-advisory
- 238965 vendor-advisory
- http://support.apple.com/kb/HT3178
- RHSA-2008:0594 vendor-advisory
- 32437 third-party-advisory
- SUSE-SR:2008:022 vendor-advisory
- 31497 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm
- RHSA-2008:0891 vendor-advisory
- RHSA-2008:1045 vendor-advisory
- 30146 vdb-entry
- 33238 third-party-advisory
- 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues mailing-list
- RHSA-2008:0906 vendor-advisory
- TA08-193A third-party-advisory
- 37386 third-party-advisory
- http://support.apple.com/kb/HT3179
- oval:org.mitre.oval:def:10920 vdb-entry signature
- RHSA-2008:0595 vendor-advisory
- 31010 third-party-advisory