Description
Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | java-1.6.0-ibm +7 | 1:1.6.0.2-1jpp.2.el5 | RHSA-2008:0906 |
| RHEL 5 | java-1.6.0-sun +5 | 1:1.6.0.7-1jpp.1.el5 | RHSA-2008:0594 |
| RHEL 4 | java-1.6.0-ibm +6 | 1:1.6.0.2-1jpp.2.el4 | RHSA-2008:0906 |
| RHEL 4 | java-1.6.0-sun +5 | 1:1.6.0.7-1jpp.2.el4 | RHSA-2008:0594 |
Advisories 2
- RHSA-2008:0906 Red Hat Security Advisory: java-1.6.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0594 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and mailing-list
- 32436 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm
- 31600 third-party-advisory
- SUSE-SA:2008:042 vendor-advisory
- 32018 third-party-advisory
- sun-jre-scripting-unauth-access(43660) vdb-entry
- 238687 vendor-advisory
- GLSA-200911-02 vendor-advisory
- 32179 third-party-advisory
- ADV-2008-2740 vdb-entry
- 30144 vdb-entry
- APPLE-SA-2008-09-24 vendor-advisory
- ADV-2008-2056 vdb-entry
- 32180 third-party-advisory
- http://www.vmware.com/security/advisories/VMSA-2008-0016.html
- oval:org.mitre.oval:def:8540 vdb-entry signature
- RHSA-2008:0594 vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm
- RHSA-2008:1045 vendor-advisory
- 33238 third-party-advisory
- 1020456 vdb-entry
- 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues mailing-list
- RHSA-2008:0906 vendor-advisory
- TA08-193A third-party-advisory
- 37386 third-party-advisory
- http://support.apple.com/kb/HT3179
- 31010 third-party-advisory