Vulnerability CVE-2008-5341 - CERT Civis.Net

Vulnerability Name:

CVE-2008-5341 (CCN-47055)

Assigned:

2008-12-03

Published:

2008-12-03

Updated:

2017-09-29

Summary:

Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071.

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): None Availibility (A): None

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)
3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

4.3 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N)
3.2 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

Vulnerability Type:

Vulnerability Consequences:

Obtain Information

References:

Source: MITRE
Type: CNA
CVE-2008-5341

Source: CCN
Type: HP Security Bulletin HPSBUX02411 SSRT080111 rev.1
HP-UX Running Java, Remote Execution of Arbitrary Code and Other Vulnerabilities

Source: CCN
Type: HP Security Bulletin HPSBMA02486 SSRT090049 rev.1
HP OpenView Network Node Manager (OV NNM) Java Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Execution of Arbitrary Code and Other Vulnerabilities

Source: SUSE
Type: UNKNOWN
SUSE-SA:2009:007

Source: SUSE
Type: UNKNOWN
SUSE-SA:2009:018

Source: HP
Type: UNKNOWN
SSRT080111

Source: HP
Type: UNKNOWN
SSRT090049

Source: CCN
Type: RHSA-2008-1018
Critical: java-1.6.0-sun security update

Source: REDHAT
Type: UNKNOWN
RHSA-2008:1018

Source: CCN
Type: RHSA-2008-1025
Critical: java-1.5.0-sun security update

Source: REDHAT
Type: UNKNOWN
RHSA-2008:1025

Source: CCN
Type: RHSA-2009-0016
Critical: java-1.5.0-ibm security update

Source: CCN
Type: RHSA-2009-0369
Critical: java-1.6.0-ibm security update

Source: CCN
Type: SA32991
Sun Java JDK / JRE Multiple Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
32991

Source: SECUNIA
Type: UNKNOWN
33015

Source: SECUNIA
Type: UNKNOWN
33710

Source: SECUNIA
Type: UNKNOWN
34233

Source: SECUNIA
Type: UNKNOWN
34447

Source: SECUNIA
Type: UNKNOWN
34605

Source: SECUNIA
Type: UNKNOWN
37386

Source: CCN
Type: SA38539
HP OpenView Network Node Manager Java JDK / JRE Multiple Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
38539

Source: GENTOO
Type: UNKNOWN
GLSA-200911-02

Source: SUNALERT
Type: Patch, Vendor Advisory
244988

Source: CCN
Type: Sun Alert ID: 244988
Multiple Security Vulnerabilities in Java Web Start and Java Plug-in May Allow Privilege Escalation

Source: CONFIRM
Type: UNKNOWN
http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm

Source: CCN
Type: ASA-2008-486
Multiple Security Vulnerabilities in Java Web Start and Java Plug-in May Allow Privilege Escalation (Sun 244988)

Source: CONFIRM
Type: UNKNOWN
http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm

Source: CCN
Type: ASA-2009-012
java-1.5.0-ibm security update (RHSA-2009-0016)

Source: CCN
Type: ASA-2009-084
HPSBUX02411 SSRT080111 rev.1 - HP-UX Running Java Remote Execution of Arbitrary Code and Other Vulnerabilities

Source: CCN
Type: ASA-2009-105
java-1.6.0-ibm security update (RHSA-2009-0369)

Source: CCN
Type: NORTEL BULLETIN ID: 2009009294, Rev 1
Nortel: Technical Support: Nortel Response to Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities

Source: CONFIRM
Type: UNKNOWN
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=

Source: REDHAT
Type: UNKNOWN
RHSA-2009:0016

Source: REDHAT
Type: UNKNOWN
RHSA-2009:0369

Source: CCN
Type: BID-32608
Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities

Source: CERT
Type: US Government Resource
TA08-340A

Source: VUPEN
Type: UNKNOWN
ADV-2008-3339

Source: VUPEN
Type: UNKNOWN
ADV-2009-0672

Source: CONFIRM
Type: UNKNOWN
http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf

Source: XF
Type: UNKNOWN
jws-filedir-information-disclosure(47055)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:6529

Source: SUSE
Type: SUSE-SA:2009:001
Sun Java security problems

Source: SUSE
Type: SUSE-SA:2009:007
IBM Java 5 security problems

Source: SUSE
Type: SUSE-SA:2009:018
IBM Java security update

Source: CCN
Type: ZDI-08-081
Sun Java Web Start and Applet Multiple Sandbox Bypass Vulnerabilities

Vulnerable Configuration:

Configuration 1:

cpe:/a:sun:jdk:5.0:update_1:*:*:*:*:*:*

OR cpe:/a:sun:jdk:5.0:update_10:*:*:*:*:*:*

OR cpe:/a:sun:jdk:5.0:update_11:*:*:*:*:*:*

OR cpe:/a:sun:jdk:5.0:update_12:*:*:*:*:*:*

OR cpe:/a:sun:jdk:5.0:update_13:*:*:*:*:*:*

OR cpe:/a:sun:jdk:5.0:update_14:*:*:*:*:*:*

OR cpe:/a:sun:jdk:5.0:update_15:*:*:*:*:*:*

OR cpe:/a:sun:jdk:*:update_16:*:*:*:*:*:* (Version <= 5.0)

OR cpe:/a:sun:jdk:5.0:update_2:*:*:*:*:*:*

OR cpe:/a:sun:jdk:5.0:update_3:*:*:*:*:*:*

OR cpe:/a:sun:jdk:5.0:update_4:*:*:*:*:*:*

OR cpe:/a:sun:jdk:5.0:update_5:*:*:*:*:*:*

OR cpe:/a:sun:jdk:5.0:update_6:*:*:*:*:*:*

OR cpe:/a:sun:jdk:5.0:update_7:*:*:*:*:*:*

OR cpe:/a:sun:jdk:5.0:update_8:*:*:*:*:*:*

OR cpe:/a:sun:jdk:5.0:update_9:*:*:*:*:*:*

OR cpe:/a:sun:jdk:6:*:*:*:*:*:*:*

OR cpe:/a:sun:jdk:6:update_1:*:*:*:*:*:*

OR cpe:/a:sun:jdk:*:update_10:*:*:*:*:*:* (Version <= 6)

OR cpe:/a:sun:jdk:6:update_2:*:*:*:*:*:*

OR cpe:/a:sun:jdk:6:update_3:*:*:*:*:*:*

OR cpe:/a:sun:jdk:6:update_4:*:*:*:*:*:*

OR cpe:/a:sun:jdk:6:update_5:*:*:*:*:*:*

OR cpe:/a:sun:jdk:6:update_6:*:*:*:*:*:*

OR cpe:/a:sun:jdk:6:update_7:*:*:*:*:*:*

OR cpe:/a:sun:jdk:6:update_8:*:*:*:*:*:*

OR cpe:/a:sun:jdk:6:update_9:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_1:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_2:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_3:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_4:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_5:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_6:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_7:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_8:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_9:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_10:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_11:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_12:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_13:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_14:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_15:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_16:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.4.2_17:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:*:*:*:*:*:*:*:* (Version <= 1.4.2_18)

OR cpe:/a:sun:jre:5.0:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:5.0:update_1:*:*:*:*:*:*

OR cpe:/a:sun:jre:5.0:update_10:*:*:*:*:*:*

OR cpe:/a:sun:jre:5.0:update_11:*:*:*:*:*:*

OR cpe:/a:sun:jre:5.0:update_12:*:*:*:*:*:*

OR cpe:/a:sun:jre:5.0:update_13:*:*:*:*:*:*

OR cpe:/a:sun:jre:5.0:update_14:*:*:*:*:*:*

OR cpe:/a:sun:jre:5.0:update_15:*:*:*:*:*:*

OR cpe:/a:sun:jre:*:update_16:*:*:*:*:*:* (Version <= 5.0)

OR cpe:/a:sun:jre:5.0:update_2:*:*:*:*:*:*

OR cpe:/a:sun:jre:5.0:update_3:*:*:*:*:*:*

OR cpe:/a:sun:jre:5.0:update_4:*:*:*:*:*:*

OR cpe:/a:sun:jre:5.0:update_5:*:*:*:*:*:*

OR cpe:/a:sun:jre:5.0:update_6:*:*:*:*:*:*

OR cpe:/a:sun:jre:5.0:update_7:*:*:*:*:*:*

OR cpe:/a:sun:jre:5.0:update_8:*:*:*:*:*:*

OR cpe:/a:sun:jre:5.0:update_9:*:*:*:*:*:*

OR cpe:/a:sun:jre:6:*:*:*:*:*:*:*

OR cpe:/a:sun:jre:6:update_1:*:*:*:*:*:*

OR cpe:/a:sun:jre:*:update_10:*:*:*:*:*:* (Version <= 6)

OR cpe:/a:sun:jre:6:update_2:*:*:*:*:*:*

OR cpe:/a:sun:jre:6:update_3:*:*:*:*:*:*

OR cpe:/a:sun:jre:6:update_4:*:*:*:*:*:*

OR cpe:/a:sun:jre:6:update_5:*:*:*:*:*:*

OR cpe:/a:sun:jre:6:update_6:*:*:*:*:*:*

OR cpe:/a:sun:jre:6:update_7:*:*:*:*:*:*

OR cpe:/a:sun:jre:6:update_8:*:*:*:*:*:*

OR cpe:/a:sun:jre:6:update_9:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*

OR cpe:/a:sun:sdk:*:*:*:*:*:*:*:* (Version <= 1.4.2_18)

Configuration RedHat 1:

cpe:/a:redhat:rhel_extras:5:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/a:redhat:rhel_extras:4:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:sun:jre:1.5.0:-:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.5.0:update3:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.6.0:-:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.6.0:-:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.5.0:update10:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.5.0:update11:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.5.0:update7:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.5.0:update8:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.5.0:update9:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.5.0:update10:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.5.0:update11:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.5.0:-:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.5.0:update1:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.5.0:update12:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.5.0:update2:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.5.0:update3:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.5.0:update4:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.5.0:update5:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.5.0:update6:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.5.0:update7:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.5.0:update8:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.5.0:update9:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.6.0:update2:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.6.0:update1:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.6.0:update2:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.5.0:update1:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.5.0:update12:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.5.0:update13:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.5.0:update2:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.5.0:update4:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.5.0:update5:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.5.0:update6:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.6.0:update6:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.5.0:update15:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.5.0:update15:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.6.0:update3:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.6.0:update4:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.6.0:update5:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.6.0:update6:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.6.0:update4:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.6.0:update5:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.5.0:update14:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.5.0:update14:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.5.0:update13:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.5.0:update16:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.5.0:update16:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.6.0:update7:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.6.0:update8:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.6.0:update9:*:*:*:*:*:*

OR cpe:/a:sun:jre:1.6.0:update10:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.6.0:update7:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.6.0:update8:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.6.0:update9:*:*:*:*:*:*

OR cpe:/a:sun:jdk:1.6.0:update10:*:*:*:*:*:*

AND

cpe:/o:hp:hp-ux:b.11.11:*:*:*:*:*:*:*

OR cpe:/o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*

OR cpe:/o:novell:linux_desktop:9:*:*:*:*:*:*:*

OR cpe:/a:redhat:rhel_extras:4:*:*:*:*:*:*:*

OR cpe:/a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*

OR cpe:/o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*

OR cpe:/a:novell:open_enterprise_server:*:*:*:*:*:*:*:*

OR cpe:/o:opensuse:opensuse:10.3:*:*:*:*:*:*:*

OR cpe:/o:opensuse:opensuse:11.0:*:*:*:*:*:*:*

OR cpe:/o:novell:suse_linux_enterprise_server:10:sp2:itanium_ia64:*:*:*:*:*

OR cpe:/a:hp:openview_network_node_manager:7.53:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20085341	V	CVE-2008-5341	2022-05-20
oval:org.opensuse.security:def:32181	P	Security update for xen (Important)	2021-09-06
oval:org.opensuse.security:def:29409	P	Security update for fetchmail (Moderate)	2021-08-18
oval:org.opensuse.security:def:29373	P	Security update for polkit (Important)	2021-06-03
oval:org.opensuse.security:def:32274	P	Security update for glib2 (Important)	2021-03-16
oval:org.opensuse.security:def:27963	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:33422	P	Security update for acl and libacl	2020-12-01
oval:org.opensuse.security:def:28675	P	Security update for MozillaFirefox, mozilla-nspr, mozilla-nss (Important)	2020-12-01
oval:org.opensuse.security:def:32418	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:28157	P	Security update for the Linux Kernel (Critical)	2020-12-01
oval:org.opensuse.security:def:31961	P	Security update for guile (Low)	2020-12-01
oval:org.opensuse.security:def:28735	P	Security update for kvm and libvirt	2020-12-01
oval:org.opensuse.security:def:32630	P	acpid on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:28298	P	Security update for net-snmp (Moderate)	2020-12-01
oval:org.opensuse.security:def:31973	P	Security update for jakarta-taglibs-standard (Important)	2020-12-01
oval:org.opensuse.security:def:32718	P	libmysqlclient15-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:28534	P	Security update for Mono	2020-12-01
oval:org.opensuse.security:def:27952	P	Security update for ImageMagick (Important)	2020-12-01
oval:org.opensuse.security:def:32784	P	ruby on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:28636	P	Security update for bash	2020-12-01
oval:org.opensuse.security:def:32331	P	Security update for samba (Moderate)	2020-12-01
oval:org.opensuse.security:def:28027	P	Security update for bind (Important)	2020-12-01
oval:org.opensuse.security:def:33461	P	Security update for IBM Java 1.6.0	2020-12-01
oval:org.opensuse.security:def:28691	P	Security update for freetype2	2020-12-01
oval:org.opensuse.security:def:32574	P	libxslt on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:28241	P	Security update for libvorbis (Moderate)	2020-12-01
oval:org.opensuse.security:def:31962	P	Security update for icu (Moderate)	2020-12-01
oval:org.opensuse.security:def:32679	P	gstreamer-0_10-plugins-good on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:28382	P	Security update for rubygem-activerecord-3_2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:32047	P	Security update for kvm (Important)	2020-12-01
oval:org.opensuse.security:def:27951	P	Security update for ImageMagick (Important)	2020-12-01
oval:org.opensuse.security:def:32740	P	libxslt on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:28587	P	Security update for libxslt	2020-12-01
oval:org.mitre.oval:def:22521	P	ELSA-2008:1025: java-1.5.0-sun security update (Critical)	2014-05-26
oval:org.mitre.oval:def:22693	P	ELSA-2009:0369: java-1.6.0-ibm security update (Critical)	2014-05-26
oval:org.mitre.oval:def:22126	P	ELSA-2009:0016: java-1.5.0-ibm security update (Critical)	2014-05-26
oval:org.mitre.oval:def:22263	P	ELSA-2008:1018: java-1.6.0-sun security update (Critical)	2014-05-26
oval:org.mitre.oval:def:6529	V	Java Runtime Environment (JRE) Buffer Overflow in Processing Image Files and Fonts Lets Remote Users Gain Privileges on the Target System	2010-01-11
oval:com.redhat.rhsa:def:20090369	P	RHSA-2009:0369: java-1.6.0-ibm security update (Critical)	2009-03-25
oval:com.redhat.rhsa:def:20090016	P	RHSA-2009:0016: java-1.5.0-ibm security update (Critical)	2009-01-13
oval:com.redhat.rhsa:def:20081018	P	RHSA-2008:1018: java-1.6.0-sun security update (Critical)	2008-12-04
oval:com.redhat.rhsa:def:20081025	P	RHSA-2008:1025: java-1.5.0-sun security update (Critical)	2008-12-04