Rapid7 Vulnerability & Exploit Database

RHSA-2011:0152: java-1.4.2-ibm security update

Free InsightVM Trial No credit card necessary
Watch Demo See how it all works
Back to Search

RHSA-2011:0152: java-1.4.2-ibm security update

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
10/19/2010
Created
07/25/2018
Added
01/25/2011
Modified
07/04/2017

Description

The IBM 1.4.2 SR13-FP8 Java release includes the IBM Java 2 RuntimeEnvironment and the IBM Java 2 Software Development Kit.This update fixes two vulnerabilities in the IBM Java 2 Runtime Environmentand the IBM Java 2 Software Development Kit. Detailed vulnerabilitydescriptions are linked from the IBM "Security alerts" page, listed in theReferences section. (CVE-2010-1321, CVE-2010-3574)Note: The RHSA-2010:0935 java-1.4.2-ibm update did not, unlike the erratumtext stated, provide fixes for the above issues.All users of java-1.4.2-ibm are advised to upgrade to these updatedpackages, which contain the IBM 1.4.2 SR13-FP8 Java release. All runninginstances of IBM Java must be restarted for this update to take effect.

Solution(s)

  • redhat-upgrade-java-1-4-2-ibm
  • redhat-upgrade-java-1-4-2-ibm-demo
  • redhat-upgrade-java-1-4-2-ibm-devel
  • redhat-upgrade-java-1-4-2-ibm-javacomm
  • redhat-upgrade-java-1-4-2-ibm-jdbc
  • redhat-upgrade-java-1-4-2-ibm-plugin
  • redhat-upgrade-java-1-4-2-ibm-src

References

  • https://attackerkb.com/topics/cve-2010-1321
  • 40235
  • 44011
  • TA10-287A
  • TA11-201A
  • CVE - 2010-1321
  • CVE - 2010-3574
  • DSA-2052
  • Category I
  • V0027158
  • V0030769
  • 2011-A-0066
  • 2011-A-0160
  • 64744
  • OVAL11604
  • OVAL12367
  • OVAL12462
  • OVAL7198
  • OVAL7450
  • RHSA-2010:0423
  • RHSA-2010:0768
  • RHSA-2010:0770
  • RHSA-2010:0807
  • RHSA-2010:0865
  • RHSA-2010:0873
  • RHSA-2010:0935
  • RHSA-2010:0987
  • RHSA-2011:0152
  • RHSA-2011:0880
View more

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;