Description
Unspecified vulnerability in the JAX-WS client and service in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows remote attackers to access URLs or cause a denial of service via unknown vectors involving "processing of XML data" by a trusted application.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | java-1.6.0-ibm +7 | 1:1.6.0.2-1jpp.2.el5 | RHSA-2008:0906 |
| RHEL 5 | java-1.6.0-sun +5 | 1:1.6.0.7-1jpp.1.el5 | RHSA-2008:0594 |
| RHEL 4 | java-1.6.0-ibm +6 | 1:1.6.0.2-1jpp.2.el4 | RHSA-2008:0906 |
| RHEL 4 | java-1.6.0-sun +5 | 1:1.6.0.7-1jpp.2.el4 | RHSA-2008:0594 |
Advisories 2
- RHSA-2008:0906 Red Hat Security Advisory: java-1.6.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0594 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- RHSA-2008:1044 vendor-advisory
- 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and mailing-list
- 32436 third-party-advisory
- 1020457 vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm
- http://support.avaya.com/elmodocs2/security/ASA-2008-507.htm
- 31600 third-party-advisory
- SUSE-SA:2008:042 vendor-advisory
- oval:org.mitre.oval:def:11274 vdb-entry signature
- 32018 third-party-advisory
- GLSA-200911-02 vendor-advisory
- 32179 third-party-advisory
- ADV-2008-2740 vdb-entry
- APPLE-SA-2008-09-24 vendor-advisory
- sun-jre-jaxws-unauth-access(43654) vdb-entry
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=756717
- 33237 third-party-advisory
- ADV-2008-2056 vdb-entry
- 32180 third-party-advisory
- http://www.vmware.com/security/advisories/VMSA-2008-0016.html
- 30143 vdb-entry
- RHSA-2008:0594 vendor-advisory
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=751014
- http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm
- 238628 vendor-advisory
- RHSA-2008:1045 vendor-advisory
- 33238 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2008-299.htm
- 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues mailing-list
- RHSA-2008:0906 vendor-advisory
- TA08-193A third-party-advisory
- 37386 third-party-advisory
- http://support.apple.com/kb/HT3179
- sun-jre-xml-dos(43657) vdb-entry
- 31010 third-party-advisory