Oval Definition:oval:org.mitre.oval:def:28500
Revision Date:2015-06-08Version:19
Title:JRE and JDK Vulnerability on HPUX
Description:The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
Family:unixClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2014-3566
Platform(s):HP-UX 11
Product(s):
Definition Synopsis
  • Criteria meets HP Security Bulletin HPSBUX03219
  • HP-UX B.11.31
  • AND filesets tests
  • Jdk80.JDK80-COM version is less than 1.8.0.01.00
  • OR Jdk80.JDK80-IPF32 version is less than 1.8.0.01.00
  • OR Jdk80.JDK80-IPF64 version is less than 1.8.0.01.00
  • OR Jdk80.JDK80-DEMO version is less than 1.8.0.01.00
  • OR Jre80.JRE80-COM version is less than 1.8.0.01.00
  • OR Jre80.JRE80-COM-DOC version is less than 1.8.0.01.00
  • OR Jre80.JRE800-IPF32 version is less than 1.8.0.01.00
  • OR Jre80.JRE800-IPF32-HS version is less than 1.8.0.01.00
  • OR Jre80.JRE80-IPF64 version is less than 1.8.0.01.00
  • OR Jre80.JRE80-IPF64-HS version is less than 1.8.0.01.00
  • BACK