Description
Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | java-1.5.0-ibm +7 | 1:1.5.0.9-1jpp.2.el5 | RHSA-2009:0016 |
| RHEL 5 | java-1.5.0-sun +5 | 1.5.0.17-1jpp.2.el5 | RHSA-2008:1025 |
| RHEL 5 | java-1.6.0-ibm +7 | 1:1.6.0.4-1jpp.1.el5 | RHSA-2009:0369 |
| RHEL 5 | java-1.6.0-sun +5 | 1:1.6.0.11-1jpp.1.el5 | RHSA-2008:1018 |
| RHEL 4 | java-1.5.0-ibm +6 | 1:1.5.0.9-1jpp.4.el4 | RHSA-2009:0016 |
| RHEL 4 | java-1.5.0-sun +5 | 1.5.0.17-1jpp.2.el4 | RHSA-2008:1025 |
| RHEL 4 | java-1.6.0-ibm +6 | 1:1.6.0.4-1jpp.1.el4 | RHSA-2009:0369 |
| RHEL 4 | java-1.6.0-sun +5 | 1:1.6.0.11-1jpp.1.el4 | RHSA-2008:1018 |
Advisories 4
- RHSA-2009:0369 Red Hat Security Advisory: java-1.6.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2009:0016 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:1018 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:1025 Red Hat Security Advisory: java-1.5.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- SSRT090049 vendor-advisory
- SUSE-SA:2009:018 vendor-advisory
- ADV-2009-0672 vdb-entry
- 34447 third-party-advisory
- RHSA-2008:1018 vendor-advisory
- 33015 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm
- 34233 third-party-advisory
- GLSA-200911-02 vendor-advisory
- http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf
- http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm
- RHSA-2009:0369 vendor-advisory
- SUSE-SA:2009:007 vendor-advisory
- SSRT080111 vendor-advisory
- 38539 third-party-advisory
- RHSA-2008:1025 vendor-advisory
- ADV-2008-3339 vdb-entry
- RHSA-2009:0016 vendor-advisory
- TA08-340A third-party-advisory
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=
- 34605 third-party-advisory
- 32991 third-party-advisory
- oval:org.mitre.oval:def:6529 vdb-entry signature
- 244988 vendor-advisory
- 37386 third-party-advisory
- 33710 third-party-advisory