Oval Definition:oval:org.mitre.oval:def:19673
Revision Date:2015-04-20Version:26
Title:HP-UX Running Java JRE and JDK, Remote Denial of Service (DoS), Unauthorized Modification and Disclosure of Information
Description:The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.
Family:unixClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2011-3389
Platform(s):HP-UX 11
Product(s):
Definition Synopsis
  • platforms
  • HP-UX B.11.23
  • OR HP-UX B.11.31
  • AND filesets test
  • Jpi14.JPI14-COM version is less than 1.4.2.28.00
  • OR Jpi14.JPI14-COM-DOC version is less than 1.4.2.28.00
  • OR Jpi14.JPI14-IPF32 version is less than 1.4.2.28.00
  • OR Jpi14.JPI14-PA11 version is less than 1.4.2.28.00
  • OR Jdk14.JDK14-COM version is less than 1.4.2.28.00
  • OR Jdk14.JDK14-DEMO version is less than 1.4.2.28.00
  • OR Jdk14.JDK14-IPF32 version is less than 1.4.2.28.00
  • OR Jdk14.JDK14-IPF64 version is less than 1.4.2.28.00
  • OR Jdk14.JDK14-PA11 version is less than 1.4.2.28.00
  • OR Jdk14.JDK14-PA20 version is less than 1.4.2.28.00
  • OR Jdk14.JDK14-PA20W version is less than 1.4.2.28.00
  • OR Jdk14.JDK14-PNV2 version is less than 1.4.2.28.00
  • OR Jdk14.JDK14-PWV2 version is less than 1.4.2.28.00
  • OR Jre14.JRE14-COM version is less than 1.4.2.28.00
  • OR Jre14.JRE14-COM-DOC version is less than 1.4.2.28.00
  • OR Jre14.JRE14-IPF32 version is less than 1.4.2.28.00
  • OR Jre14.JRE14-IPF32-HS version is less than 1.4.2.28.00
  • OR Jre14.JRE14-IPF64 version is less than 1.4.2.28.00
  • OR Jre14.JRE14-IPF64-HS version is less than 1.4.2.28.00
  • OR Jre14.JRE14-PA11 version is less than 1.4.2.28.00
  • OR Jre14.JRE14-PA11-HS version is less than 1.4.2.28.00
  • OR Jre14.JRE14-PA20 version is less than 1.4.2.28.00
  • OR Jre14.JRE14-PA20-HS version is less than 1.4.2.28.00
  • OR Jre14.JRE14-PA20W version is less than 1.4.2.28.00
  • OR Jre14.JRE14-PA20W-HS version is less than 1.4.2.28.00
  • OR Jre14.JRE14-PNV2 version is less than 1.4.2.28.00
  • OR Jre14.JRE14-PNV2-H version is less than 1.4.2.28.00
  • OR Jre14.JRE14-PWV2 version is less than 1.4.2.28.00
  • OR Jre14.JRE14-PWV2-H version is less than 1.4.2.28.00
    • BACK