偵測

SuSE 11.2 安全性更新：Java (SAT 修補程式編號 7454)

critical Nessus Plugin ID 65246

語系：

概要

遠端 SuSE 11 主機缺少一個或多個安全性更新。

說明

IBM Java 7 已更新至 SR4，可修正多種重大的安全性問題和錯誤。

如需詳細資訊，請參閱 IBM JDK 警示頁面：

http://www.ibm.com/developerworks/java/jdk/alerts/

修正的安全性問題：

- / CVE-2012-3174。(CVE-2013-1487 / CVE-2013-1486 / CVE-2013-1478 / CVE-2013-0445 / CVE-2013-1480 / CVE-2013-0441 / CVE-2013-1476 / CVE-2012-1541 / CVE-2013-0446 / CVE-2012-3342 / CVE-2013-0442 / CVE-2013-0450 / CVE-2013-0425 / CVE-2013-0426 / CVE-2013-0428 / CVE-2012-3213 / CVE-2013-0419 / CVE-2013-0423 / CVE-2013-0351 / CVE-2013-0432 / CVE-2013-1473 / CVE-2013-0435 / CVE-2013-0434 / CVE-2013-0409 / CVE-2013-0427 / CVE-2013-0433 / CVE-2013-0424 / CVE-2013-0440 / CVE-2013-0438 / CVE-2013-0443 / CVE-2013-1484 / CVE-2013-1485 / CVE-2013-0437 / CVE-2013-0444 / CVE-2013-0449 / CVE-2013-0431 / CVE-2013-0422)

解決方案

套用 SAT 修補程式編號 7454。

另請參閱

https://bugzilla.novell.com/show_bug.cgi?id=798535

http://support.novell.com/security/cve/CVE-2012-1541.html

http://support.novell.com/security/cve/CVE-2012-3174.html

http://support.novell.com/security/cve/CVE-2012-3213.html

http://support.novell.com/security/cve/CVE-2012-3342.html

http://support.novell.com/security/cve/CVE-2013-0351.html

http://support.novell.com/security/cve/CVE-2013-0409.html

http://support.novell.com/security/cve/CVE-2013-0419.html

http://support.novell.com/security/cve/CVE-2013-0422.html

http://support.novell.com/security/cve/CVE-2013-0423.html

http://support.novell.com/security/cve/CVE-2013-0424.html

http://support.novell.com/security/cve/CVE-2013-0425.html

http://support.novell.com/security/cve/CVE-2013-0426.html

http://support.novell.com/security/cve/CVE-2013-0427.html

http://support.novell.com/security/cve/CVE-2013-0428.html

http://support.novell.com/security/cve/CVE-2013-0431.html

http://support.novell.com/security/cve/CVE-2013-0432.html

http://support.novell.com/security/cve/CVE-2013-0433.html

http://support.novell.com/security/cve/CVE-2013-0434.html

http://support.novell.com/security/cve/CVE-2013-0435.html

http://support.novell.com/security/cve/CVE-2013-0437.html

http://support.novell.com/security/cve/CVE-2013-0438.html

http://support.novell.com/security/cve/CVE-2013-0440.html

http://support.novell.com/security/cve/CVE-2013-0441.html

http://support.novell.com/security/cve/CVE-2013-0442.html

http://support.novell.com/security/cve/CVE-2013-0443.html

http://support.novell.com/security/cve/CVE-2013-0444.html

http://support.novell.com/security/cve/CVE-2013-0445.html

http://support.novell.com/security/cve/CVE-2013-0446.html

http://support.novell.com/security/cve/CVE-2013-0449.html

http://support.novell.com/security/cve/CVE-2013-0450.html

http://support.novell.com/security/cve/CVE-2013-1473.html

http://support.novell.com/security/cve/CVE-2013-1476.html

http://support.novell.com/security/cve/CVE-2013-1478.html

http://support.novell.com/security/cve/CVE-2013-1480.html

http://support.novell.com/security/cve/CVE-2013-1484.html

http://support.novell.com/security/cve/CVE-2013-1485.html

http://support.novell.com/security/cve/CVE-2013-1486.html

http://support.novell.com/security/cve/CVE-2013-1487.html

Plugin 詳細資訊

嚴重性: Critical

ID: 65246

檔案名稱: suse_11_java-1_7_0-ibm-130306.nasl

版本: 1.10

類型: local

代理程式: unix

已發布: 2013/3/13

已更新: 2022/5/25

支援的感應器: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

風險資訊

VPR

風險因素: Critical

分數: 9.8

CVSS v2

風險因素: Critical

基本分數: 10

媒介: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

弱點資訊

CPE: p-cpe:/a:novell:suse_linux:11:java-1_7_0-ibm, p-cpe:/a:novell:suse_linux:11:java-1_7_0-ibm-alsa, p-cpe:/a:novell:suse_linux:11:java-1_7_0-ibm-jdbc, p-cpe:/a:novell:suse_linux:11:java-1_7_0-ibm-plugin, cpe:/o:novell:suse_linux:11

必要的 KB 項目: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

可被惡意程式利用: true

可輕鬆利用: Exploits are available

修補程式發佈日期: 2013/3/6

CISA 已知遭惡意利用弱點到期日: 2022/6/15

可惡意利用

CANVAS (CANVAS)

Core Impact

Metasploit (Java Applet JMX Remote Code Execution)

參考資訊

CVE: CVE-2012-1541, CVE-2012-3174, CVE-2012-3213, CVE-2012-3342, CVE-2013-0351, CVE-2013-0409, CVE-2013-0419, CVE-2013-0422, CVE-2013-0423, CVE-2013-0424, CVE-2013-0425, CVE-2013-0426, CVE-2013-0427, CVE-2013-0428, CVE-2013-0431, CVE-2013-0432, CVE-2013-0433, CVE-2013-0434, CVE-2013-0435, CVE-2013-0437, CVE-2013-0438, CVE-2013-0440, CVE-2013-0441, CVE-2013-0442, CVE-2013-0443, CVE-2013-0444, CVE-2013-0445, CVE-2013-0446, CVE-2013-0449, CVE-2013-0450, CVE-2013-1473, CVE-2013-1476, CVE-2013-1478, CVE-2013-1480, CVE-2013-1484, CVE-2013-1485, CVE-2013-1486, CVE-2013-1487