Details of VAR-201210-0267

ID

VAR-201210-0267

CVE

CVE-2012-5069

TITLE

Oracle Java SE of Java Runtime Environment In Concurrency Processing vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2012-004963

DESCRIPTION

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Concurrency. The vulnerability can be exploited over multiple protocols. This issue affects the 'Concurrency' sub-component. This vulnerability affects the following supported versions: 7 Update 7, 6 Update 35, 5.0 Update 36. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201406-32 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: IcedTea JDK: Multiple vulnerabilities Date: June 29, 2014 Bugs: #312297, #330205, #340819, #346799, #352035, #353418, #354231, #355127, #370787, #387637, #404095, #421031, #429522, #433389, #438750, #442478, #457206, #458410, #461714, #466822, #477210, #489570, #508270 ID: 201406-32 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been found in the IcedTea JDK, the worst of which could lead to arbitrary code execution. Background ========== IcedTea is a distribution of the Java OpenJDK source code built with free build tools. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-java/icedtea-bin < 6.1.13.3 >= 6.1.13.3 Description =========== Multiple vulnerabilities have been discovered in the IcedTea JDK. Please review the CVE identifiers referenced below for details. Impact ====== A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, obtain sensitive information, bypass intended security policies, or have other unspecified impact. Workaround ========== There is no known workaround at this time. Resolution ========== All IcedTea JDK users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=dev-java/icedtea-bin-6.1.13.3" References ========== [ 1 ] CVE-2009-3555 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-3555 [ 2 ] CVE-2010-2548 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-2548 [ 3 ] CVE-2010-2783 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-2783 [ 4 ] CVE-2010-3541 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3541 [ 5 ] CVE-2010-3548 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3548 [ 6 ] CVE-2010-3549 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3549 [ 7 ] CVE-2010-3551 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3551 [ 8 ] CVE-2010-3553 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3553 [ 9 ] CVE-2010-3554 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3554 [ 10 ] CVE-2010-3557 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3557 [ 11 ] CVE-2010-3561 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3561 [ 12 ] CVE-2010-3562 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3562 [ 13 ] CVE-2010-3564 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3564 [ 14 ] CVE-2010-3565 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3565 [ 15 ] CVE-2010-3566 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3566 [ 16 ] CVE-2010-3567 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3567 [ 17 ] CVE-2010-3568 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3568 [ 18 ] CVE-2010-3569 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3569 [ 19 ] CVE-2010-3573 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3573 [ 20 ] CVE-2010-3574 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3574 [ 21 ] CVE-2010-3860 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3860 [ 22 ] CVE-2010-4351 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4351 [ 23 ] CVE-2010-4448 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4448 [ 24 ] CVE-2010-4450 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4450 [ 25 ] CVE-2010-4465 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4465 [ 26 ] CVE-2010-4467 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4467 [ 27 ] CVE-2010-4469 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4469 [ 28 ] CVE-2010-4470 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4470 [ 29 ] CVE-2010-4471 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4471 [ 30 ] CVE-2010-4472 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4472 [ 31 ] CVE-2010-4476 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4476 [ 32 ] CVE-2011-0025 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0025 [ 33 ] CVE-2011-0706 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0706 [ 34 ] CVE-2011-0815 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0815 [ 35 ] CVE-2011-0822 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0822 [ 36 ] CVE-2011-0862 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0862 [ 37 ] CVE-2011-0864 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0864 [ 38 ] CVE-2011-0865 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0865 [ 39 ] CVE-2011-0868 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0868 [ 40 ] CVE-2011-0869 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0869 [ 41 ] CVE-2011-0870 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0870 [ 42 ] CVE-2011-0871 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0871 [ 43 ] CVE-2011-0872 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0872 [ 44 ] CVE-2011-3389 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3389 [ 45 ] CVE-2011-3521 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3521 [ 46 ] CVE-2011-3544 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3544 [ 47 ] CVE-2011-3547 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3547 [ 48 ] CVE-2011-3548 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3548 [ 49 ] CVE-2011-3551 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3551 [ 50 ] CVE-2011-3552 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3552 [ 51 ] CVE-2011-3553 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3553 [ 52 ] CVE-2011-3554 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3554 [ 53 ] CVE-2011-3556 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3556 [ 54 ] CVE-2011-3557 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3557 [ 55 ] CVE-2011-3558 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3558 [ 56 ] CVE-2011-3560 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3560 [ 57 ] CVE-2011-3563 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3563 [ 58 ] CVE-2011-3571 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3571 [ 59 ] CVE-2011-5035 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-5035 [ 60 ] CVE-2012-0497 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0497 [ 61 ] CVE-2012-0501 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0501 [ 62 ] CVE-2012-0502 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0502 [ 63 ] CVE-2012-0503 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0503 [ 64 ] CVE-2012-0505 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0505 [ 65 ] CVE-2012-0506 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0506 [ 66 ] CVE-2012-0547 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0547 [ 67 ] CVE-2012-1711 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1711 [ 68 ] CVE-2012-1713 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1713 [ 69 ] CVE-2012-1716 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1716 [ 70 ] CVE-2012-1717 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1717 [ 71 ] CVE-2012-1718 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1718 [ 72 ] CVE-2012-1719 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1719 [ 73 ] CVE-2012-1723 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1723 [ 74 ] CVE-2012-1724 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1724 [ 75 ] CVE-2012-1725 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1725 [ 76 ] CVE-2012-1726 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1726 [ 77 ] CVE-2012-3216 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3216 [ 78 ] CVE-2012-3422 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3422 [ 79 ] CVE-2012-3423 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3423 [ 80 ] CVE-2012-4416 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4416 [ 81 ] CVE-2012-4540 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4540 [ 82 ] CVE-2012-5068 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5068 [ 83 ] CVE-2012-5069 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5069 [ 84 ] CVE-2012-5070 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5070 [ 85 ] CVE-2012-5071 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5071 [ 86 ] CVE-2012-5072 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5072 [ 87 ] CVE-2012-5073 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5073 [ 88 ] CVE-2012-5074 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5074 [ 89 ] CVE-2012-5075 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5075 [ 90 ] CVE-2012-5076 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5076 [ 91 ] CVE-2012-5077 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5077 [ 92 ] CVE-2012-5081 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5081 [ 93 ] CVE-2012-5084 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5084 [ 94 ] CVE-2012-5085 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5085 [ 95 ] CVE-2012-5086 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5086 [ 96 ] CVE-2012-5087 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5087 [ 97 ] CVE-2012-5089 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5089 [ 98 ] CVE-2012-5979 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5979 [ 99 ] CVE-2013-0169 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0169 [ 100 ] CVE-2013-0401 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0401 [ 101 ] CVE-2013-0424 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0424 [ 102 ] CVE-2013-0425 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0425 [ 103 ] CVE-2013-0426 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0426 [ 104 ] CVE-2013-0427 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0427 [ 105 ] CVE-2013-0428 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0428 [ 106 ] CVE-2013-0429 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0429 [ 107 ] CVE-2013-0431 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0431 [ 108 ] CVE-2013-0432 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0432 [ 109 ] CVE-2013-0433 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0433 [ 110 ] CVE-2013-0434 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0434 [ 111 ] CVE-2013-0435 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0435 [ 112 ] CVE-2013-0440 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0440 [ 113 ] CVE-2013-0441 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0441 [ 114 ] CVE-2013-0442 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0442 [ 115 ] CVE-2013-0443 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0443 [ 116 ] CVE-2013-0444 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0444 [ 117 ] CVE-2013-0450 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0450 [ 118 ] CVE-2013-0809 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0809 [ 119 ] CVE-2013-1475 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1475 [ 120 ] CVE-2013-1476 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1476 [ 121 ] CVE-2013-1478 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1478 [ 122 ] CVE-2013-1480 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1480 [ 123 ] CVE-2013-1484 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1484 [ 124 ] CVE-2013-1485 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1485 [ 125 ] CVE-2013-1486 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1486 [ 126 ] CVE-2013-1488 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1488 [ 127 ] CVE-2013-1493 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1493 [ 128 ] CVE-2013-1500 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1500 [ 129 ] CVE-2013-1518 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1518 [ 130 ] CVE-2013-1537 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1537 [ 131 ] CVE-2013-1557 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1557 [ 132 ] CVE-2013-1569 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1569 [ 133 ] CVE-2013-1571 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1571 [ 134 ] CVE-2013-2383 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2383 [ 135 ] CVE-2013-2384 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2384 [ 136 ] CVE-2013-2407 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2407 [ 137 ] CVE-2013-2412 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2412 [ 138 ] CVE-2013-2415 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2415 [ 139 ] CVE-2013-2417 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2417 [ 140 ] CVE-2013-2419 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2419 [ 141 ] CVE-2013-2420 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2420 [ 142 ] CVE-2013-2421 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2421 [ 143 ] CVE-2013-2422 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2422 [ 144 ] CVE-2013-2423 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2423 [ 145 ] CVE-2013-2424 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2424 [ 146 ] CVE-2013-2426 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2426 [ 147 ] CVE-2013-2429 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2429 [ 148 ] CVE-2013-2430 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2430 [ 149 ] CVE-2013-2431 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2431 [ 150 ] CVE-2013-2436 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2436 [ 151 ] CVE-2013-2443 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2443 [ 152 ] CVE-2013-2444 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2444 [ 153 ] CVE-2013-2445 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2445 [ 154 ] CVE-2013-2446 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2446 [ 155 ] CVE-2013-2447 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2447 [ 156 ] CVE-2013-2448 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2448 [ 157 ] CVE-2013-2449 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2449 [ 158 ] CVE-2013-2450 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2450 [ 159 ] CVE-2013-2451 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2451 [ 160 ] CVE-2013-2452 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2452 [ 161 ] CVE-2013-2453 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2453 [ 162 ] CVE-2013-2454 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2454 [ 163 ] CVE-2013-2455 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2455 [ 164 ] CVE-2013-2456 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2456 [ 165 ] CVE-2013-2457 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2457 [ 166 ] CVE-2013-2458 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2458 [ 167 ] CVE-2013-2459 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2459 [ 168 ] CVE-2013-2460 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2460 [ 169 ] CVE-2013-2461 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2461 [ 170 ] CVE-2013-2463 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2463 [ 171 ] CVE-2013-2465 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2465 [ 172 ] CVE-2013-2469 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2469 [ 173 ] CVE-2013-2470 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2470 [ 174 ] CVE-2013-2471 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2471 [ 175 ] CVE-2013-2472 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2472 [ 176 ] CVE-2013-2473 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2473 [ 177 ] CVE-2013-3829 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3829 [ 178 ] CVE-2013-4002 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4002 [ 179 ] CVE-2013-5772 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5772 [ 180 ] CVE-2013-5774 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5774 [ 181 ] CVE-2013-5778 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5778 [ 182 ] CVE-2013-5780 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5780 [ 183 ] CVE-2013-5782 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5782 [ 184 ] CVE-2013-5783 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5783 [ 185 ] CVE-2013-5784 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5784 [ 186 ] CVE-2013-5790 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5790 [ 187 ] CVE-2013-5797 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5797 [ 188 ] CVE-2013-5800 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5800 [ 189 ] CVE-2013-5802 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5802 [ 190 ] CVE-2013-5803 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5803 [ 191 ] CVE-2013-5804 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5804 [ 192 ] CVE-2013-5805 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5805 [ 193 ] CVE-2013-5806 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5806 [ 194 ] CVE-2013-5809 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5809 [ 195 ] CVE-2013-5814 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5814 [ 196 ] CVE-2013-5817 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5817 [ 197 ] CVE-2013-5820 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5820 [ 198 ] CVE-2013-5823 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5823 [ 199 ] CVE-2013-5825 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5825 [ 200 ] CVE-2013-5829 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5829 [ 201 ] CVE-2013-5830 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5830 [ 202 ] CVE-2013-5840 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5840 [ 203 ] CVE-2013-5842 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5842 [ 204 ] CVE-2013-5849 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5849 [ 205 ] CVE-2013-5850 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5850 [ 206 ] CVE-2013-5851 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5851 [ 207 ] CVE-2013-6629 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-6629 [ 208 ] CVE-2013-6954 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-6954 [ 209 ] CVE-2014-0429 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0429 [ 210 ] CVE-2014-0446 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0446 [ 211 ] CVE-2014-0451 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0451 [ 212 ] CVE-2014-0452 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0452 [ 213 ] CVE-2014-0453 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0453 [ 214 ] CVE-2014-0456 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0456 [ 215 ] CVE-2014-0457 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0457 [ 216 ] CVE-2014-0458 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0458 [ 217 ] CVE-2014-0459 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0459 [ 218 ] CVE-2014-0460 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0460 [ 219 ] CVE-2014-0461 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0461 [ 220 ] CVE-2014-1876 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1876 [ 221 ] CVE-2014-2397 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-2397 [ 222 ] CVE-2014-2398 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-2398 [ 223 ] CVE-2014-2403 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-2403 [ 224 ] CVE-2014-2412 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-2412 [ 225 ] CVE-2014-2414 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-2414 [ 226 ] CVE-2014-2421 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-2421 [ 227 ] CVE-2014-2423 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-2423 [ 228 ] CVE-2014-2427 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-2427 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: http://security.gentoo.org/glsa/glsa-201406-32.xml Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2014 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5 . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emr_na-c03595351 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03595351 Version: 1 HPSBUX02832 SSRT101042 rev.1 - HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Release Date: 2012-12-12 Last Updated: 2012-12-12 Potential Security Impact: Remote unauthorized access, disclosure of information, and other vulnerabilities Source: Hewlett-Packard Company, HP Software Security Response Team VULNERABILITY SUMMARY Potential security vulnerabilities have been identified in Java Runtime Environment (JRE) and Java Developer Kit (JDK) running on HP-UX. These vulnerabilities could allow remote unauthorized access, disclosure of information, and other exploits. HP-UX B.11.11, B.11.23, and B.11.31 running HP JDK and JRE v7.0.03, v6.0.16 and v5.0.26 and earlier BACKGROUND CVSS 2.0 Base Metrics =========================================================== Reference Base Vector Base Score CVE-2012-1531 (AV:N/AC:L/Au:N/C:C/I:C/A:C) 10.0 CVE-2012-1532 (AV:N/AC:L/Au:N/C:C/I:C/A:C) 10.0 CVE-2012-1533 (AV:N/AC:L/Au:N/C:C/I:C/A:C) 10.0 CVE-2012-3143 (AV:N/AC:L/Au:N/C:C/I:C/A:C) 10.0 CVE-2012-3159 (AV:N/AC:L/Au:N/C:P/I:P/A:P) 7.5 CVE-2012-3216 (AV:N/AC:H/Au:N/C:P/I:N/A:N) 2.6 CVE-2012-4416 (AV:N/AC:L/Au:N/C:P/I:P/A:N) 6.4 CVE-2012-5068 (AV:N/AC:L/Au:N/C:P/I:P/A:P) 7.5 CVE-2012-5069 (AV:N/AC:M/Au:N/C:P/I:P/A:N) 5.8 CVE-2012-5071 (AV:N/AC:L/Au:N/C:P/I:P/A:N) 6.4 CVE-2012-5072 (AV:N/AC:L/Au:N/C:P/I:N/A:N) 5.0 CVE-2012-5073 (AV:N/AC:L/Au:N/C:P/I:N/A:N) 5.0 CVE-2012-5075 (AV:N/AC:L/Au:N/C:P/I:N/A:N) 5.0 CVE-2012-5077 (AV:N/AC:H/Au:N/C:P/I:N/A:N) 2.6 CVE-2012-5079 (AV:N/AC:L/Au:N/C:N/I:P/A:N) 5.0 CVE-2012-5081 (AV:N/AC:L/Au:N/C:N/I:N/A:P) 5.0 CVE-2012-5083 (AV:N/AC:L/Au:N/C:C/I:C/A:C) 10.0 CVE-2012-5084 (AV:N/AC:H/Au:N/C:C/I:C/A:C) 7.6 CVE-2012-5085 (AV:N/AC:M/Au:S/C:N/I:N/A:N) 0.0 CVE-2012-5086 (AV:N/AC:L/Au:N/C:C/I:C/A:C) 10.0 CVE-2012-5087 (AV:N/AC:L/Au:N/C:C/I:C/A:C) 10.0 CVE-2012-5089 (AV:N/AC:H/Au:N/C:C/I:C/A:C) 7.6 =========================================================== Information on CVSS is documented in HP Customer Notice: HPSN-2008-002 NOTE: The following apply to both v7.0.03 and v6.0.16 and earlier: CVE-2012-1531, CVE-2012-1532, CVE-2012-1533, CVE-2012-3143, CVE-2012-3159, CVE-2012-3216, CVE-2012-4416, CVE-2012-5068, CVE-2012-5069, CVE-2012-5071, CVE-2012-5072, CVE-2012-5073, CVE-2012-5075, CVE-2012-5077, CVE-2012-5079, CVE-2012-5081, CVE-2012-5083, CVE-2012-5084, CVE-2012-5085, CVE-2012-5086, CVE-2012-5087, CVE-2012-5089 NOTE: The following apply to v5.0.26 and earlier: CVE-2012-1531, CVE-2012-3143, CVE-2012-3216, CVE-2012-5069, CVE-2012-5071, CVE-2012-5073, CVE-2012-5075, CVE-2012-5077, CVE-2012-5079, CVE-2012-5081, CVE-2012-5083, CVE-2012-5084, CVE-2012-5085, CVE-2012-5089 RESOLUTION HP has provided the following Java version upgrade to resolve these vulnerabilities. The upgrade is available from the following location http://www.hp.com/java HP-UX B.11.23, B.11.31 JDK and JRE v7.0.04 or subsequent HP-UX B.11.11, B.11.23, B.11.31 JDK and JRE v6.0.17 or subsequent HP-UX B.11.11, B.11.23, B.11.31 JDK and JRE v5.0.27 or subsequent MANUAL ACTIONS: Yes - Update For Java v7.0 update to Java v7.0.04 or subsequent For Java v6.0 update to Java v6.0.17 or subsequent For Java v5.0 update to Java v5.0.27 or subsequent PRODUCT SPECIFIC INFORMATION HP-UX Software Assistant: HP-UX Software Assistant is an enhanced application that replaces HP-UX Security Patch Check. It analyzes all Security Bulletins issued by HP and lists recommended actions that may apply to a specific HP-UX system. It can also download patches and create a depot automatically. For more information see https://www.hp.com/go/swa The following text is for use by the HP-UX Software Assistant. AFFECTED VERSIONS HP-UX B.11.23 HP-UX B.11.31 =========== Jdk70.JDK70-COM Jdk70.JDK70-DEMO Jdk70.JDK70-IPF32 Jdk70.JDK70-IPF64 Jre70.JRE70-COM Jre70.JRE70-IPF32 Jre70.JRE70-IPF32-HS Jre70.JRE70-IPF64 Jre70.JRE70-IPF64-HS action: install revision 1.7.0.04.00 or subsequent HP-UX B.11.23 HP-UX B.11.31 =========== Jdk60.JDK60-COM Jdk60.JDK60-DEMO Jdk60.JDK60-IPF32 Jdk60.JDK60-IPF64 Jre60.JRE60-COM Jre60.JRE60-IPF32 Jre60.JRE60-IPF32-HS Jre60.JRE60-IPF64 Jre60.JRE60-IPF64-HS action: install revision 1.6.0.17.00 or subsequent HP-UX B.11.23 HP-UX B.11.31 =========== Jdk15.JDK15-COM Jdk15.JDK15-DEMO Jdk15.JDK15-IPF32 Jdk15.JDK15-IPF64 Jre15.JRE15-COM Jre15.JRE15-COM-DOC Jre15.JRE15-IPF32 Jre15.JRE15-IPF32-HS Jre15.JRE15-IPF64 Jre15.JRE15-IPF64-HS action: install revision 1.5.0.27.00 or subsequent HP-UX B.11.11 HP-UX B.11.23 =========== Jdk60.JDK60-COM Jdk60.JDK60-DEMO Jdk60.JDK60-PA20 Jdk60.JDK60-PA20W Jre60.JRE60-COM Jre60.JRE60-COM-DOC Jre60.JRE60-PA20 Jre60.JRE60-PA20-HS Jre60.JRE60-PA20W Jre60.JRE60-PA20W-HS action: install revision 1.6.0.17.00 or subsequent HP-UX B.11.11 HP-UX B.11.23 =========== Jdk15.JDK15-COM Jdk15.JDK15-DEMO Jdk15.JDK15-PA20 Jdk15.JDK15-PA20W Jre15.JRE15-COM Jre15.JRE15-COM-DOC Jre15.JRE15-PA20 Jre15.JRE15-PA20-HS Jre15.JRE15-PA20W Jre15.JRE15-PA20W-HS action: install revision 1.5.0.27.00 or subsequent END AFFECTED VERSIONS HISTORY Version:1 (rev.1) - 12 December 2012 Initial release Third Party Security Patches: Third party security patches that are to be installed on systems running HP software products should be applied in accordance with the customer's patch management policy. Support: For issues about implementing the recommendations of this Security Bulletin, contact normal HP Services support channel. For other issues about the content of this Security Bulletin, send e-mail to security-alert@hp.com. Report: To report a potential security vulnerability with any HP supported product, send Email to: security-alert@hp.com Subscribe: To initiate a subscription to receive future HP Security Bulletin alerts via Email: http://h41183.www4.hp.com/signup_alerts.php?jumpid=hpsc_secbulletins Security Bulletin List: A list of HP Security Bulletins, updated periodically, is contained in HP Security Notice HPSN-2011-001: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emr_na-c02964430 Security Bulletin Archive: A list of recently released Security Bulletins is available here: http://h20566.www2.hp.com/portal/site/hpsc/public/kb/secBullArchive/ Software Product Category: The Software Product Category is represented in the title by the two characters following HPSB. 3C = 3COM 3P = 3rd Party Software GN = HP General Software HF = HP Hardware and Firmware MP = MPE/iX MU = Multi-Platform Software NS = NonStop Servers OV = OpenVMS PI = Printing and Imaging PV = ProCurve ST = Storage Software TU = Tru64 UNIX UX = HP-UX Copyright 2012 Hewlett-Packard Development Company, L.P. Hewlett-Packard Company shall not be liable for technical or editorial errors or omissions contained herein. The information provided is provided "as is" without warranty of any kind. To the extent permitted by law, neither HP or its affiliates, subcontractors or suppliers will be liable for incidental,special or consequential damages including downtime cost; lost profits;damages relating to the procurement of substitute products or services; or damages for loss of data, or software restoration. The information in this document is subject to change without notice. Hewlett-Packard Company and the names of Hewlett-Packard products referenced herein are trademarks of Hewlett-Packard Company in the United States and other countries. Other product and company names mentioned herein may be trademarks of their respective owners. (CVE-2012-5085) Note: If the web browser plug-in provided by the icedtea-web package was installed, the issues exposed via Java applets could have been exploited without user interaction if a user visited a malicious website. ============================================================================ Ubuntu Security Notice USN-1619-1 October 26, 2012 openjdk-6, openjdk-7 vulnerabilities ============================================================================ A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.10 - Ubuntu 12.04 LTS - Ubuntu 11.10 - Ubuntu 11.04 - Ubuntu 10.04 LTS Summary: Several security issues were fixed in OpenJDK. An attacker could exploit these to cause a denial of service. These issues only affected Ubuntu 12.10. (CVE-2012-5067, CVE-2012-5070) Vulnerabilities were discovered in the OpenJDK JRE related to data integrity. (CVE-2012-5073, CVE-2012-5079) A vulnerability was discovered in the OpenJDK JRE related to information disclosure and data integrity. This issue only affected Ubuntu 12.10. An attacker could exploit these to cause a denial of service. These issues only affected Ubuntu 12.10. (CVE-2012-5076, CVE-2012-5087, CVE-2012-5088) A denial of service vulnerability was found in OpenJDK. (CVE-2012-5081) Please see the following for more information: http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.10: icedtea-7-jre-cacao 7u9-2.3.3-0ubuntu1~12.10.1 icedtea-7-jre-jamvm 7u9-2.3.3-0ubuntu1~12.10.1 openjdk-7-jre 7u9-2.3.3-0ubuntu1~12.10.1 openjdk-7-jre-headless 7u9-2.3.3-0ubuntu1~12.10.1 openjdk-7-jre-lib 7u9-2.3.3-0ubuntu1~12.10.1 openjdk-7-jre-zero 7u9-2.3.3-0ubuntu1~12.10.1 Ubuntu 12.04 LTS: icedtea-6-jre-cacao 6b24-1.11.5-0ubuntu1~12.04.1 icedtea-6-jre-jamvm 6b24-1.11.5-0ubuntu1~12.04.1 openjdk-6-jre 6b24-1.11.5-0ubuntu1~12.04.1 openjdk-6-jre-headless 6b24-1.11.5-0ubuntu1~12.04.1 openjdk-6-jre-lib 6b24-1.11.5-0ubuntu1~12.04.1 openjdk-6-jre-zero 6b24-1.11.5-0ubuntu1~12.04.1 Ubuntu 11.10: icedtea-6-jre-cacao 6b24-1.11.5-0ubuntu1~11.10.1 icedtea-6-jre-jamvm 6b24-1.11.5-0ubuntu1~11.10.1 openjdk-6-jre 6b24-1.11.5-0ubuntu1~11.10.1 openjdk-6-jre-headless 6b24-1.11.5-0ubuntu1~11.10.1 openjdk-6-jre-lib 6b24-1.11.5-0ubuntu1~11.10.1 openjdk-6-jre-zero 6b24-1.11.5-0ubuntu1~11.10.1 Ubuntu 11.04: icedtea-6-jre-cacao 6b24-1.11.5-0ubuntu1~11.04.1 icedtea-6-jre-jamvm 6b24-1.11.5-0ubuntu1~11.04.1 openjdk-6-jre 6b24-1.11.5-0ubuntu1~11.04.1 openjdk-6-jre-headless 6b24-1.11.5-0ubuntu1~11.04.1 openjdk-6-jre-lib 6b24-1.11.5-0ubuntu1~11.04.1 openjdk-6-jre-zero 6b24-1.11.5-0ubuntu1~11.04.1 Ubuntu 10.04 LTS: icedtea-6-jre-cacao 6b24-1.11.5-0ubuntu1~10.04.2 openjdk-6-jre 6b24-1.11.5-0ubuntu1~10.04.2 openjdk-6-jre-headless 6b24-1.11.5-0ubuntu1~10.04.2 openjdk-6-jre-lib 6b24-1.11.5-0ubuntu1~10.04.2 openjdk-6-jre-zero 6b24-1.11.5-0ubuntu1~10.04.2 This update uses a new upstream release, which includes additional bug fixes. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Important: java-1.7.0-openjdk security update Advisory ID: RHSA-2012:1386-01 Product: Red Hat Enterprise Linux Advisory URL: https://rhn.redhat.com/errata/RHSA-2012-1386.html Issue date: 2012-10-17 CVE Names: CVE-2012-3216 CVE-2012-4416 CVE-2012-5068 CVE-2012-5069 CVE-2012-5070 CVE-2012-5071 CVE-2012-5072 CVE-2012-5073 CVE-2012-5074 CVE-2012-5075 CVE-2012-5076 CVE-2012-5077 CVE-2012-5079 CVE-2012-5081 CVE-2012-5084 CVE-2012-5085 CVE-2012-5086 CVE-2012-5087 CVE-2012-5088 CVE-2012-5089 ===================================================================== 1. Summary: Updated java-1.7.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, noarch, x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - noarch, x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, noarch, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, noarch, x86_64 3. Description: These packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Software Development Kit. Multiple improper permission check issues were discovered in the Beans, Libraries, Swing, and JMX components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions. (CVE-2012-5086, CVE-2012-5087, CVE-2012-5088, CVE-2012-5084, CVE-2012-5089) The default Java security properties configuration did not restrict access to certain com.sun.org.glassfish packages. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions. This update lists those packages as restricted. (CVE-2012-5076, CVE-2012-5074) Multiple improper permission check issues were discovered in the Scripting, JMX, Concurrency, Libraries, and Security components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions. (CVE-2012-5068, CVE-2012-5071, CVE-2012-5069, CVE-2012-5073, CVE-2012-5072) It was discovered that java.util.ServiceLoader could create an instance of an incompatible class while performing provider lookup. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions. (CVE-2012-5079) It was discovered that the Java Secure Socket Extension (JSSE) SSL/TLS implementation did not properly handle handshake records containing an overly large data length value. An unauthenticated, remote attacker could possibly use this flaw to cause an SSL/TLS server to terminate with an exception. (CVE-2012-5081) It was discovered that the JMX component in OpenJDK could perform certain actions in an insecure manner. An untrusted Java application or applet could possibly use these flaws to disclose sensitive information. (CVE-2012-5070, CVE-2012-5075) A bug in the Java HotSpot Virtual Machine optimization code could cause it to not perform array initialization in certain cases. An untrusted Java application or applet could use this flaw to disclose portions of the virtual machine's memory. (CVE-2012-4416) It was discovered that the SecureRandom class did not properly protect against the creation of multiple seeders. An untrusted Java application or applet could possibly use this flaw to disclose sensitive information. (CVE-2012-5077) It was discovered that the java.io.FilePermission class exposed the hash code of the canonicalized path name. An untrusted Java application or applet could possibly use this flaw to determine certain system paths, such as the current working directory. (CVE-2012-3216) This update disables Gopher protocol support in the java.net package by default. Gopher support can be enabled by setting the newly introduced property, "jdk.net.registerGopherProtocol", to true. (CVE-2012-5085) This erratum also upgrades the OpenJDK package to IcedTea7 2.3.3. Refer to the NEWS file, linked to in the References, for further information. All users of java-1.7.0-openjdk are advised to upgrade to these updated packages, which resolve these issues. All running instances of OpenJDK Java must be restarted for the update to take effect. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 5. Bugs fixed (http://bugzilla.redhat.com/): 856124 - CVE-2012-4416 OpenJDK: uninitialized Array JVM memory disclosure (Hotspot, 7198606) 865346 - CVE-2012-3216 OpenJDK: java.io.FilePermission information leak (Libraries, 6631398) 865348 - CVE-2012-5068 OpenJDK: RhinoScriptEngine security bypass (Scripting, 7143535) 865350 - CVE-2012-5070 OpenJDK: EnvHelp information disclosure (JMX, 7158796) 865352 - CVE-2012-5076 OpenJDK: com.sun.org.glassfish.* not restricted packages (JAX-WS, 7163198) 865354 - CVE-2012-5077 OpenJDK: SecureRandom mulitple seeders information disclosure (Security, 7167656) 865357 - CVE-2012-5073 OpenJDK: LogManager security bypass (Libraries, 7169884) 865359 - CVE-2012-5074 OpenJDK: com.sun.org.glassfish.* not restricted packages (JAX-WS, 7169887) 865363 - CVE-2012-5075 OpenJDK: RMIConnectionImpl information disclosure (JMX, 7169888) 865365 - CVE-2012-5072 OpenJDK: AccessController.doPrivilegedWithCombiner() information disclosure (Security, 7172522) 865370 - CVE-2012-5081 OpenJDK: JSSE denial of service (JSSE, 7186286) 865428 - CVE-2012-5086 OpenJDK: XMLDecoder sandbox restriction bypass (Beans, 7195917) 865434 - CVE-2012-5087 OpenJDK: PropertyElementHandler insufficient access checks (Beans, 7195549) 865471 - CVE-2012-5088 OpenJDK: MethodHandle insufficient access control checks (Libraries, 7196190) 865511 - CVE-2012-5084 OpenJDK: DefaultFormatter insufficient data validation (Swing, 7195194) 865514 - CVE-2012-5089 OpenJDK: RMIConnectionImpl insufficient access control checks (JMX, 7198296) 865519 - CVE-2012-5071 OpenJDK: DescriptorSupport insufficient package access checks (JMX, 7192975) 865531 - CVE-2012-5069 OpenJDK: Executors state handling issues (Concurrency, 7189103) 865541 - CVE-2012-5085 OpenJDK: disable Gopher support by default (Gopher, 7189567) 865568 - CVE-2012-5079 OpenJDK: ServiceLoader reject not subtype classes without instantiating (Libraries, 7195919) 6. Package List: Red Hat Enterprise Linux Desktop (v. 6): Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Client/en/os/SRPMS/java-1.7.0-openjdk-1.7.0.9-2.3.3.el6_3.1.src.rpm i386: java-1.7.0-openjdk-1.7.0.9-2.3.3.el6_3.1.i686.rpm java-1.7.0-openjdk-debuginfo-1.7.0.9-2.3.3.el6_3.1.i686.rpm x86_64: java-1.7.0-openjdk-1.7.0.9-2.3.3.el6_3.1.x86_64.rpm java-1.7.0-openjdk-debuginfo-1.7.0.9-2.3.3.el6_3.1.x86_64.rpm Red Hat Enterprise Linux Desktop Optional (v. 6): Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Client/en/os/SRPMS/java-1.7.0-openjdk-1.7.0.9-2.3.3.el6_3.1.src.rpm i386: java-1.7.0-openjdk-debuginfo-1.7.0.9-2.3.3.el6_3.1.i686.rpm java-1.7.0-openjdk-demo-1.7.0.9-2.3.3.el6_3.1.i686.rpm java-1.7.0-openjdk-devel-1.7.0.9-2.3.3.el6_3.1.i686.rpm java-1.7.0-openjdk-src-1.7.0.9-2.3.3.el6_3.1.i686.rpm noarch: java-1.7.0-openjdk-javadoc-1.7.0.9-2.3.3.el6_3.1.noarch.rpm x86_64: java-1.7.0-openjdk-debuginfo-1.7.0.9-2.3.3.el6_3.1.x86_64.rpm java-1.7.0-openjdk-demo-1.7.0.9-2.3.3.el6_3.1.x86_64.rpm java-1.7.0-openjdk-devel-1.7.0.9-2.3.3.el6_3.1.x86_64.rpm java-1.7.0-openjdk-src-1.7.0.9-2.3.3.el6_3.1.x86_64.rpm Red Hat Enterprise Linux HPC Node Optional (v. 6): Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6ComputeNode/en/os/SRPMS/java-1.7.0-openjdk-1.7.0.9-2.3.3.el6_3.1.src.rpm noarch: java-1.7.0-openjdk-javadoc-1.7.0.9-2.3.3.el6_3.1.noarch.rpm x86_64: java-1.7.0-openjdk-1.7.0.9-2.3.3.el6_3.1.x86_64.rpm java-1.7.0-openjdk-debuginfo-1.7.0.9-2.3.3.el6_3.1.x86_64.rpm java-1.7.0-openjdk-demo-1.7.0.9-2.3.3.el6_3.1.x86_64.rpm java-1.7.0-openjdk-devel-1.7.0.9-2.3.3.el6_3.1.x86_64.rpm java-1.7.0-openjdk-src-1.7.0.9-2.3.3.el6_3.1.x86_64.rpm Red Hat Enterprise Linux Server (v. 6): Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/java-1.7.0-openjdk-1.7.0.9-2.3.3.el6_3.1.src.rpm i386: java-1.7.0-openjdk-1.7.0.9-2.3.3.el6_3.1.i686.rpm java-1.7.0-openjdk-debuginfo-1.7.0.9-2.3.3.el6_3.1.i686.rpm x86_64: java-1.7.0-openjdk-1.7.0.9-2.3.3.el6_3.1.x86_64.rpm java-1.7.0-openjdk-debuginfo-1.7.0.9-2.3.3.el6_3.1.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 6): Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/java-1.7.0-openjdk-1.7.0.9-2.3.3.el6_3.1.src.rpm i386: java-1.7.0-openjdk-debuginfo-1.7.0.9-2.3.3.el6_3.1.i686.rpm java-1.7.0-openjdk-demo-1.7.0.9-2.3.3.el6_3.1.i686.rpm java-1.7.0-openjdk-devel-1.7.0.9-2.3.3.el6_3.1.i686.rpm java-1.7.0-openjdk-src-1.7.0.9-2.3.3.el6_3.1.i686.rpm noarch: java-1.7.0-openjdk-javadoc-1.7.0.9-2.3.3.el6_3.1.noarch.rpm x86_64: java-1.7.0-openjdk-debuginfo-1.7.0.9-2.3.3.el6_3.1.x86_64.rpm java-1.7.0-openjdk-demo-1.7.0.9-2.3.3.el6_3.1.x86_64.rpm java-1.7.0-openjdk-devel-1.7.0.9-2.3.3.el6_3.1.x86_64.rpm java-1.7.0-openjdk-src-1.7.0.9-2.3.3.el6_3.1.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 6): Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Workstation/en/os/SRPMS/java-1.7.0-openjdk-1.7.0.9-2.3.3.el6_3.1.src.rpm i386: java-1.7.0-openjdk-1.7.0.9-2.3.3.el6_3.1.i686.rpm java-1.7.0-openjdk-debuginfo-1.7.0.9-2.3.3.el6_3.1.i686.rpm x86_64: java-1.7.0-openjdk-1.7.0.9-2.3.3.el6_3.1.x86_64.rpm java-1.7.0-openjdk-debuginfo-1.7.0.9-2.3.3.el6_3.1.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 6): Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Workstation/en/os/SRPMS/java-1.7.0-openjdk-1.7.0.9-2.3.3.el6_3.1.src.rpm i386: java-1.7.0-openjdk-debuginfo-1.7.0.9-2.3.3.el6_3.1.i686.rpm java-1.7.0-openjdk-demo-1.7.0.9-2.3.3.el6_3.1.i686.rpm java-1.7.0-openjdk-devel-1.7.0.9-2.3.3.el6_3.1.i686.rpm java-1.7.0-openjdk-src-1.7.0.9-2.3.3.el6_3.1.i686.rpm noarch: java-1.7.0-openjdk-javadoc-1.7.0.9-2.3.3.el6_3.1.noarch.rpm x86_64: java-1.7.0-openjdk-debuginfo-1.7.0.9-2.3.3.el6_3.1.x86_64.rpm java-1.7.0-openjdk-demo-1.7.0.9-2.3.3.el6_3.1.x86_64.rpm java-1.7.0-openjdk-devel-1.7.0.9-2.3.3.el6_3.1.x86_64.rpm java-1.7.0-openjdk-src-1.7.0.9-2.3.3.el6_3.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7. References: https://www.redhat.com/security/data/cve/CVE-2012-3216.html https://www.redhat.com/security/data/cve/CVE-2012-4416.html https://www.redhat.com/security/data/cve/CVE-2012-5068.html https://www.redhat.com/security/data/cve/CVE-2012-5069.html https://www.redhat.com/security/data/cve/CVE-2012-5070.html https://www.redhat.com/security/data/cve/CVE-2012-5071.html https://www.redhat.com/security/data/cve/CVE-2012-5072.html https://www.redhat.com/security/data/cve/CVE-2012-5073.html https://www.redhat.com/security/data/cve/CVE-2012-5074.html https://www.redhat.com/security/data/cve/CVE-2012-5075.html https://www.redhat.com/security/data/cve/CVE-2012-5076.html https://www.redhat.com/security/data/cve/CVE-2012-5077.html https://www.redhat.com/security/data/cve/CVE-2012-5079.html https://www.redhat.com/security/data/cve/CVE-2012-5081.html https://www.redhat.com/security/data/cve/CVE-2012-5084.html https://www.redhat.com/security/data/cve/CVE-2012-5085.html https://www.redhat.com/security/data/cve/CVE-2012-5086.html https://www.redhat.com/security/data/cve/CVE-2012-5087.html https://www.redhat.com/security/data/cve/CVE-2012-5088.html https://www.redhat.com/security/data/cve/CVE-2012-5089.html https://access.redhat.com/security/updates/classification/#important http://icedtea.classpath.org/hg/release/icedtea7-2.3/file/icedtea-2.3.3/NEWS http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2012 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFQftouXlSAg2UNWIIRAu4QAJ9oluAxlU3ZC8CvezRk4Erm08HD+QCeNlqf GG07IH3dgJiG+gj47Cm1WNQ= =8X+P -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce

Trust: 2.7

sources: NVD: CVE-2012-5069 // JVNDB: JVNDB-2012-004963 // BID: 56065 // PACKETSTORM: 127267 // PACKETSTORM: 118140 // PACKETSTORM: 118835 // PACKETSTORM: 117477 // PACKETSTORM: 117453 // PACKETSTORM: 118139 // PACKETSTORM: 117704 // PACKETSTORM: 118142 // PACKETSTORM: 117452

AFFECTED PRODUCTS

vendor:	sun	model:	jre	scope:	eq	version:	1.5.0	Trust: 1.6
vendor:	sun	model:	jdk	scope:	eq	version:	1.5.0	Trust: 1.6
vendor:	oracle	model:	jdk	scope:	lte	version:	1.5.0	Trust: 1.0
vendor:	oracle	model:	jdk	scope:	eq	version:	1.6.0	Trust: 1.0
vendor:	sun	model:	jre	scope:	eq	version:	1.6.0	Trust: 1.0
vendor:	sun	model:	jdk	scope:	eq	version:	1.6.0	Trust: 1.0
vendor:	oracle	model:	jre	scope:	lte	version:	1.7.0	Trust: 1.0
vendor:	oracle	model:	jdk	scope:	lte	version:	1.7.0	Trust: 1.0
vendor:	oracle	model:	jre	scope:	eq	version:	1.7.0	Trust: 1.0
vendor:	oracle	model:	jdk	scope:	eq	version:	1.7.0	Trust: 1.0
vendor:	oracle	model:	jdk	scope:	lte	version:	1.6.0	Trust: 1.0
vendor:	sun	model:	jdk	scope:	eq	version:	1.6.0.200	Trust: 1.0
vendor:	sun	model:	jdk	scope:	eq	version:	1.6.0.210	Trust: 1.0
vendor:	oracle	model:	jre	scope:	lte	version:	1.6.0	Trust: 1.0
vendor:	oracle	model:	jre	scope:	lte	version:	1.5.0	Trust: 1.0
vendor:	oracle	model:	jre	scope:	eq	version:	1.6.0	Trust: 1.0
vendor:	sun	model:	jre 17	scope:	eq	version:	1.6	Trust: 0.9
vendor:	sun	model:	jre 13	scope:	eq	version:	1.6	Trust: 0.9
vendor:	sun	model:	jre 12	scope:	eq	version:	1.6	Trust: 0.9
vendor:	sun	model:	jre 10	scope:	eq	version:	1.6	Trust: 0.9
vendor:	sun	model:	jre 07	scope:	eq	version:	1.6	Trust: 0.9
vendor:	sun	model:	jre 06	scope:	eq	version:	1.6	Trust: 0.9
vendor:	sun	model:	jre 05	scope:	eq	version:	1.6	Trust: 0.9
vendor:	sun	model:	jre 04	scope:	eq	version:	1.6	Trust: 0.9
vendor:	sun	model:	jre	scope:	eq	version:	1.6	Trust: 0.9
vendor:	sun	model:	jre 22	scope:	eq	version:	1.5	Trust: 0.9
vendor:	sun	model:	jre 18	scope:	eq	version:	1.5	Trust: 0.9
vendor:	sun	model:	jre 16	scope:	eq	version:	1.5	Trust: 0.9
vendor:	sun	model:	jre 15	scope:	eq	version:	1.5	Trust: 0.9
vendor:	sun	model:	jre 06	scope:	eq	version:	1.5	Trust: 0.9
vendor:	sun	model:	jre 05	scope:	eq	version:	1.5	Trust: 0.9
vendor:	sun	model:	jre 04	scope:	eq	version:	1.5	Trust: 0.9
vendor:	sun	model:	jre 03	scope:	eq	version:	1.5	Trust: 0.9
vendor:	sun	model:	jre 02	scope:	eq	version:	1.5	Trust: 0.9
vendor:	sun	model:	jre 01	scope:	eq	version:	1.5	Trust: 0.9
vendor:	sun	model:	jre	scope:	eq	version:	1.5	Trust: 0.9
vendor:	sun	model:	jre	scope:	eq	version:	1.7	Trust: 0.9
vendor:	sun	model:	jre 1.6.0 21	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jre 1.6.0 19	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jre 1.6.0 18	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jre 1.6.0 15	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jre 1.6.0 14	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jre 1.6.0 11	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jre 1.6.0 03	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jre 1.6.0 02	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jre 1.6.0 01	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jre 1.5.0 35	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jre 1.5.0 33	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jre 1.5.0 32	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jre 1.5.0 31	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jre 1.5.0 30	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jre 1.5.0 29	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jre 1.5.0 28	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jre 1.5.0 27	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jre 1.5.0 26	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jre 1.5.0 25	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jre 1.5.0 23	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jre 1.5.0 20	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jre 1.5.0 17	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jre 1.5.0 14	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jre 1.5.0 13	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jre 1.5.0 12	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jre 1.5.0 11	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jre 1.5.0 10	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jdk 17	scope:	eq	version:	1.6	Trust: 0.9
vendor:	sun	model:	jdk 14	scope:	eq	version:	1.6	Trust: 0.9
vendor:	sun	model:	jdk 13	scope:	eq	version:	1.6	Trust: 0.9
vendor:	sun	model:	jdk 11	scope:	eq	version:	1.6	Trust: 0.9
vendor:	sun	model:	jdk 10	scope:	eq	version:	1.6	Trust: 0.9
vendor:	sun	model:	jdk 07	scope:	eq	version:	1.6	Trust: 0.9
vendor:	sun	model:	jdk 06	scope:	eq	version:	1.6	Trust: 0.9
vendor:	sun	model:	jdk 05	scope:	eq	version:	1.6	Trust: 0.9
vendor:	sun	model:	jdk 04	scope:	eq	version:	1.6	Trust: 0.9
vendor:	sun	model:	jdk	scope:	eq	version:	1.6	Trust: 0.9
vendor:	sun	model:	jdk 0 10	scope:	eq	version:	1.5	Trust: 0.9
vendor:	sun	model:	jdk 22	scope:	eq	version:	1.5	Trust: 0.9
vendor:	sun	model:	jdk 18	scope:	eq	version:	1.5	Trust: 0.9
vendor:	sun	model:	jdk 17	scope:	eq	version:	1.5	Trust: 0.9
vendor:	sun	model:	jdk 15	scope:	eq	version:	1.5	Trust: 0.9
vendor:	sun	model:	jdk 14	scope:	eq	version:	1.5	Trust: 0.9
vendor:	sun	model:	jdk 02	scope:	eq	version:	1.5	Trust: 0.9
vendor:	sun	model:	jdk 01	scope:	eq	version:	1.5	Trust: 0.9
vendor:	sun	model:	jdk .0 05	scope:	eq	version:	1.5	Trust: 0.9
vendor:	sun	model:	jdk 1.6.0 21	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jdk 1.6.0 20	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jdk 1.6.0 19	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jdk 1.6.0 18	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jdk 1.6.0 15	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jdk 1.6.0 03	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jdk 1.6.0 02	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jdk 1.5.0 35	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jdk 1.5.0 33	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jdk 1.5.0 32	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jdk 1.5.0 31	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jdk 1.5.0 30	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jdk 1.5.0 29	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jdk 1.5.0 28	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jdk 1.5.0 27	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jdk 1.5.0 26	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jdk 1.5.0 25	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jdk 1.5.0 24	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jdk 1.5.0 23	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jdk 1.5.0 20	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jdk 1.5.0 16	scope:	-	version:	-	Trust: 0.9
vendor:	sun	model:	jdk 1.5.0 13	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jre 1.7.0 7	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jre 1.7.0 4	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jre 1.7.0 2	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jre 1.6.0 35	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jre 1.6.0 32	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jre 1.6.0 30	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jre 1.6.0 28	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jre 1.6.0 27	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jre 1.6.0 26	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jre 1.6.0 25	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jre 1.6.0 24	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jre 1.6.0 23	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jre 1.6.0 22	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jre 1.5.0 36	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jdk	scope:	eq	version:	1.7	Trust: 0.9
vendor:	oracle	model:	jdk 1.7.0 7	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jdk 1.7.0 4	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jdk 1.7.0 2	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jdk 1.6.0 35	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jdk 1.6.0 32	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jdk 1.6.0 30	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jdk 1.6.0 28	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jdk 1.6.0 27	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jdk 1.6.0 26	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jdk 1.6.0 25	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jdk 1.6.0 24	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jdk 1.6.0 23	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jdk 1.6.0 22	scope:	-	version:	-	Trust: 0.9
vendor:	oracle	model:	jdk 1.5.0 36	scope:	-	version:	-	Trust: 0.9
vendor:	apple	model:	mac os x	scope:	eq	version:	v10.6.8	Trust: 0.8
vendor:	apple	model:	mac os x	scope:	eq	version:	v10.7 and later	Trust: 0.8
vendor:	apple	model:	mac os x	scope:	eq	version:	v10.8 and later	Trust: 0.8
vendor:	apple	model:	mac os x server	scope:	eq	version:	v10.6.8	Trust: 0.8
vendor:	apple	model:	mac os x server	scope:	eq	version:	v10.7 and later	Trust: 0.8
vendor:	sun microsystems	model:	jdk	scope:	lte	version:	5.0 update 36	Trust: 0.8
vendor:	sun microsystems	model:	jdk	scope:	lte	version:	6 update 35	Trust: 0.8
vendor:	sun microsystems	model:	jdk	scope:	lte	version:	7 update 7	Trust: 0.8
vendor:	sun microsystems	model:	jre	scope:	lte	version:	5.0 update 36	Trust: 0.8
vendor:	sun microsystems	model:	jre	scope:	lte	version:	6 update 35	Trust: 0.8
vendor:	sun microsystems	model:	jre	scope:	lte	version:	7 update 7	Trust: 0.8
vendor:	hitachi	model:	cosminexus application server enterprise	scope:	eq	version:	version 6	Trust: 0.8
vendor:	hitachi	model:	cosminexus application server standard	scope:	eq	version:	version 6	Trust: 0.8
vendor:	hitachi	model:	cosminexus application server version 5	scope:	-	version:	-	Trust: 0.8
vendor:	hitachi	model:	cosminexus client	scope:	eq	version:	version 6	Trust: 0.8
vendor:	hitachi	model:	cosminexus developer light version 6	scope:	-	version:	-	Trust: 0.8
vendor:	hitachi	model:	cosminexus developer professional version 6	scope:	-	version:	-	Trust: 0.8
vendor:	hitachi	model:	cosminexus developer standard version 6	scope:	-	version:	-	Trust: 0.8
vendor:	hitachi	model:	cosminexus developer version 5	scope:	-	version:	-	Trust: 0.8
vendor:	hitachi	model:	cosminexus developer's kit for java	scope:	-	version:	-	Trust: 0.8
vendor:	hitachi	model:	cosminexus primary server	scope:	eq	version:	base	Trust: 0.8
vendor:	hitachi	model:	cosminexus server - standard edition version 4	scope:	-	version:	-	Trust: 0.8
vendor:	hitachi	model:	cosminexus server - web edition version 4	scope:	-	version:	-	Trust: 0.8
vendor:	hitachi	model:	cosminexus studio	scope:	eq	version:	- standard edition version 4	Trust: 0.8
vendor:	hitachi	model:	cosminexus studio	scope:	eq	version:	- web edition version 4	Trust: 0.8
vendor:	hitachi	model:	cosminexus studio	scope:	eq	version:	version 5	Trust: 0.8
vendor:	hitachi	model:	hirdb for java /xml	scope:	-	version:	-	Trust: 0.8
vendor:	hitachi	model:	developer's kit for java	scope:	-	version:	-	Trust: 0.8
vendor:	hitachi	model:	processing kit for xml	scope:	-	version:	-	Trust: 0.8
vendor:	hitachi	model:	ucosminexus application server	scope:	eq	version:	-r	Trust: 0.8
vendor:	hitachi	model:	ucosminexus application server	scope:	eq	version:	express	Trust: 0.8
vendor:	hitachi	model:	ucosminexus application server	scope:	eq	version:	light	Trust: 0.8
vendor:	hitachi	model:	ucosminexus application server enterprise	scope:	-	version:	-	Trust: 0.8
vendor:	hitachi	model:	ucosminexus application server smart edition	scope:	-	version:	-	Trust: 0.8
vendor:	hitachi	model:	ucosminexus application server standard	scope:	eq	version:	none	Trust: 0.8
vendor:	hitachi	model:	ucosminexus application server standard	scope:	eq	version:	-r	Trust: 0.8
vendor:	hitachi	model:	ucosminexus client	scope:	eq	version:	none	Trust: 0.8
vendor:	hitachi	model:	ucosminexus client	scope:	eq	version:	for plug-in	Trust: 0.8
vendor:	hitachi	model:	ucosminexus developer	scope:	eq	version:	01	Trust: 0.8
vendor:	hitachi	model:	ucosminexus developer	scope:	eq	version:	professional	Trust: 0.8
vendor:	hitachi	model:	ucosminexus developer	scope:	eq	version:	professional for plug-in	Trust: 0.8
vendor:	hitachi	model:	ucosminexus developer light	scope:	-	version:	-	Trust: 0.8
vendor:	hitachi	model:	ucosminexus developer standard	scope:	-	version:	-	Trust: 0.8
vendor:	hitachi	model:	ucosminexus operator	scope:	-	version:	-	Trust: 0.8
vendor:	hitachi	model:	ucosminexus portal framework	scope:	eq	version:	entry set	Trust: 0.8
vendor:	hitachi	model:	ucosminexus primary server	scope:	eq	version:	base	Trust: 0.8
vendor:	hitachi	model:	ucosminexus server	scope:	eq	version:	standard-r	Trust: 0.8
vendor:	hitachi	model:	ucosminexus service architect	scope:	-	version:	-	Trust: 0.8
vendor:	hitachi	model:	ucosminexus service platform	scope:	eq	version:	none	Trust: 0.8
vendor:	hitachi	model:	ucosminexus service platform	scope:	eq	version:	- messaging	Trust: 0.8
vendor:	sun	model:	jre 1.6.0 20	scope:	-	version:	-	Trust: 0.6
vendor:	sun	model:	jre 1.6.0 2	scope:	-	version:	-	Trust: 0.6
vendor:	sun	model:	jre 1.5.0.0 09	scope:	-	version:	-	Trust: 0.6
vendor:	sun	model:	jre 1.5.0.0 08	scope:	-	version:	-	Trust: 0.6
vendor:	sun	model:	jre 1.5.0.0 07	scope:	-	version:	-	Trust: 0.6
vendor:	sun	model:	jdk .0 04	scope:	eq	version:	1.5	Trust: 0.6
vendor:	sun	model:	jdk .0 03	scope:	eq	version:	1.5	Trust: 0.6
vendor:	sun	model:	jdk 1.6.0 01	scope:	-	version:	-	Trust: 0.6
vendor:	sun	model:	jdk 1.5.0 12	scope:	-	version:	-	Trust: 0.6
vendor:	sun	model:	jdk 1.5.0.0 12	scope:	-	version:	-	Trust: 0.6
vendor:	sun	model:	jdk 1.5.0.0 11	scope:	-	version:	-	Trust: 0.6
vendor:	sun	model:	jdk 1.5.0.0 09	scope:	-	version:	-	Trust: 0.6
vendor:	sun	model:	jdk 1.5.0.0 08	scope:	-	version:	-	Trust: 0.6
vendor:	sun	model:	jdk 01-b06	scope:	eq	version:	1.6	Trust: 0.6
vendor:	sun	model:	jdk 11-b03	scope:	eq	version:	1.5	Trust: 0.6
vendor:	sun	model:	jdk 07-b03	scope:	eq	version:	1.5	Trust: 0.6
vendor:	sun	model:	jdk 06	scope:	eq	version:	1.5	Trust: 0.6
vendor:	xerox	model:	freeflow print server 73.c0.41	scope:	-	version:	-	Trust: 0.3
vendor:	xerox	model:	freeflow print server 73.b3.61	scope:	-	version:	-	Trust: 0.3
vendor:	vmware	model:	virtualcenter	scope:	eq	version:	2.5	Trust: 0.3
vendor:	vmware	model:	vcenter update manager	scope:	eq	version:	5.1	Trust: 0.3
vendor:	vmware	model:	vcenter update manager	scope:	eq	version:	5.0	Trust: 0.3
vendor:	vmware	model:	vcenter server	scope:	eq	version:	5.0	Trust: 0.3
vendor:	vmware	model:	vcenter server	scope:	eq	version:	4.1	Trust: 0.3
vendor:	vmware	model:	vcenter server	scope:	eq	version:	4.0	Trust: 0.3
vendor:	vmware	model:	esx	scope:	eq	version:	4.1	Trust: 0.3
vendor:	vmware	model:	esx	scope:	eq	version:	4.0	Trust: 0.3
vendor:	vmware	model:	esx	scope:	eq	version:	3.5	Trust: 0.3
vendor:	ubuntu	model:	linux i386	scope:	eq	version:	12.10	Trust: 0.3
vendor:	ubuntu	model:	linux amd64	scope:	eq	version:	12.10	Trust: 0.3
vendor:	ubuntu	model:	linux lts i386	scope:	eq	version:	12.04	Trust: 0.3
vendor:	ubuntu	model:	linux lts amd64	scope:	eq	version:	12.04	Trust: 0.3
vendor:	ubuntu	model:	linux i386	scope:	eq	version:	11.10	Trust: 0.3
vendor:	ubuntu	model:	linux amd64	scope:	eq	version:	11.10	Trust: 0.3
vendor:	ubuntu	model:	linux powerpc	scope:	eq	version:	11.04	Trust: 0.3
vendor:	ubuntu	model:	linux i386	scope:	eq	version:	11.04	Trust: 0.3
vendor:	ubuntu	model:	linux arm	scope:	eq	version:	11.04	Trust: 0.3
vendor:	ubuntu	model:	linux amd64	scope:	eq	version:	11.04	Trust: 0.3
vendor:	ubuntu	model:	linux sparc	scope:	eq	version:	10.04	Trust: 0.3
vendor:	ubuntu	model:	linux powerpc	scope:	eq	version:	10.04	Trust: 0.3
vendor:	ubuntu	model:	linux i386	scope:	eq	version:	10.04	Trust: 0.3
vendor:	ubuntu	model:	linux arm	scope:	eq	version:	10.04	Trust: 0.3
vendor:	ubuntu	model:	linux amd64	scope:	eq	version:	10.04	Trust: 0.3
vendor:	suse	model:	linux enterprise software development kit sp2	scope:	eq	version:	11	Trust: 0.3
vendor:	suse	model:	linux enterprise server for vmware sp2	scope:	eq	version:	11	Trust: 0.3
vendor:	suse	model:	linux enterprise server sp2	scope:	eq	version:	11	Trust: 0.3
vendor:	suse	model:	linux enterprise server sp4	scope:	eq	version:	10	Trust: 0.3
vendor:	suse	model:	linux enterprise java sp2	scope:	eq	version:	11	Trust: 0.3
vendor:	suse	model:	linux enterprise java sp4	scope:	eq	version:	10	Trust: 0.3
vendor:	suse	model:	linux enterprise desktop sp4	scope:	eq	version:	10	Trust: 0.3
vendor:	sun	model:	jre 07	scope:	eq	version:	1.5	Trust: 0.3
vendor:	sun	model:	jre beta	scope:	eq	version:	1.5.0	Trust: 0.3
vendor:	sun	model:	jre 1.5.0 09	scope:	-	version:	-	Trust: 0.3
vendor:	sun	model:	jre 1.5.0 08	scope:	-	version:	-	Trust: 0.3
vendor:	sun	model:	jdk 1.6.0 01-b06	scope:	-	version:	-	Trust: 0.3
vendor:	sun	model:	jdk 1.5.0 11-b03	scope:	-	version:	-	Trust: 0.3
vendor:	sun	model:	jdk 1.5.0 07-b03	scope:	-	version:	-	Trust: 0.3
vendor:	sun	model:	jdk 1.5.0.0 06	scope:	-	version:	-	Trust: 0.3
vendor:	sun	model:	jdk 0 09	scope:	eq	version:	1.5	Trust: 0.3
vendor:	sun	model:	jdk 0 03	scope:	eq	version:	1.5	Trust: 0.3
vendor:	sun	model:	jdk 1.5.0 11	scope:	-	version:	-	Trust: 0.3
vendor:	sun	model:	jdk 01	scope:	eq	version:	1.6	Trust: 0.3
vendor:	sun	model:	jdk 07	scope:	eq	version:	1.5	Trust: 0.3
vendor:	sun	model:	jdk	scope:	eq	version:	1.5	Trust: 0.3
vendor:	sun	model:	jdk 1.5.0.0 04	scope:	-	version:	-	Trust: 0.3
vendor:	sun	model:	jdk 1.5.0.0 03	scope:	-	version:	-	Trust: 0.3
vendor:	schneider electric	model:	trio tview software	scope:	eq	version:	3.27.0	Trust: 0.3
vendor:	s u s e	model:	opensuse	scope:	eq	version:	12.2	Trust: 0.3
vendor:	s u s e	model:	opensuse	scope:	eq	version:	12.1	Trust: 0.3
vendor:	s u s e	model:	opensuse	scope:	eq	version:	11.4	Trust: 0.3
vendor:	redhat	model:	network satellite (for rhel	scope:	eq	version:	6)5.5	Trust: 0.3
vendor:	redhat	model:	network satellite (for rhel	scope:	eq	version:	5)5.5	Trust: 0.3
vendor:	redhat	model:	enterprise linux workstation supplementary	scope:	eq	version:	6	Trust: 0.3
vendor:	redhat	model:	enterprise linux workstation optional	scope:	eq	version:	6	Trust: 0.3
vendor:	redhat	model:	enterprise linux workstation	scope:	eq	version:	6	Trust: 0.3
vendor:	redhat	model:	enterprise linux supplementary server	scope:	eq	version:	5	Trust: 0.3
vendor:	redhat	model:	enterprise linux server supplementary	scope:	eq	version:	6	Trust: 0.3
vendor:	redhat	model:	enterprise linux server optional	scope:	eq	version:	6	Trust: 0.3
vendor:	redhat	model:	enterprise linux server	scope:	eq	version:	6	Trust: 0.3
vendor:	redhat	model:	enterprise linux hpc node supplementary	scope:	eq	version:	6	Trust: 0.3
vendor:	redhat	model:	enterprise linux hpc node optional	scope:	eq	version:	6	Trust: 0.3
vendor:	redhat	model:	enterprise linux hpc node	scope:	eq	version:	6	Trust: 0.3
vendor:	redhat	model:	enterprise linux desktop supplementary	scope:	eq	version:	6	Trust: 0.3
vendor:	redhat	model:	enterprise linux desktop supplementary client	scope:	eq	version:	5	Trust: 0.3
vendor:	redhat	model:	enterprise linux desktop optional	scope:	eq	version:	6	Trust: 0.3
vendor:	redhat	model:	enterprise linux desktop	scope:	eq	version:	6	Trust: 0.3
vendor:	redhat	model:	enterprise linux desktop client	scope:	eq	version:	5	Trust: 0.3
vendor:	redhat	model:	enterprise linux server	scope:	eq	version:	5	Trust: 0.3
vendor:	oracle	model:	solaris	scope:	eq	version:	11.1	Trust: 0.3
vendor:	oracle	model:	solaris	scope:	eq	version:	11	Trust: 0.3
vendor:	oracle	model:	enterprise linux	scope:	eq	version:	6.2	Trust: 0.3
vendor:	oracle	model:	enterprise linux	scope:	eq	version:	6	Trust: 0.3
vendor:	oracle	model:	enterprise linux	scope:	eq	version:	5	Trust: 0.3
vendor:	openjdk	model:	openjdk	scope:	eq	version:	7	Trust: 0.3
vendor:	openjdk	model:	openjdk	scope:	eq	version:	6	Trust: 0.3
vendor:	mandriva	model:	linux mandrake x86 64	scope:	eq	version:	2011	Trust: 0.3
vendor:	mandriva	model:	linux mandrake	scope:	eq	version:	2011	Trust: 0.3
vendor:	mandrakesoft	model:	enterprise server x86 64	scope:	eq	version:	5	Trust: 0.3
vendor:	mandrakesoft	model:	enterprise server	scope:	eq	version:	5	Trust: 0.3
vendor:	icedtea	model:	icedtea	scope:	eq	version:	2.3.2	Trust: 0.3
vendor:	icedtea	model:	icedtea	scope:	eq	version:	2.2.2	Trust: 0.3
vendor:	icedtea	model:	icedtea	scope:	eq	version:	2.1.2	Trust: 0.3
vendor:	icedtea	model:	icedtea	scope:	eq	version:	1.11.4	Trust: 0.3
vendor:	icedtea	model:	icedtea	scope:	eq	version:	1.10.9	Trust: 0.3
vendor:	ibm	model:	websphere operational decision management	scope:	eq	version:	8.0.1	Trust: 0.3
vendor:	ibm	model:	websphere operational decision management	scope:	eq	version:	7.5.0.0	Trust: 0.3
vendor:	ibm	model:	websphere mq	scope:	eq	version:	7.5.0.1	Trust: 0.3
vendor:	ibm	model:	websphere mq	scope:	eq	version:	7.1.0.3	Trust: 0.3
vendor:	ibm	model:	websphere message broker	scope:	eq	version:	8.0.0.1	Trust: 0.3
vendor:	ibm	model:	websphere message broker	scope:	eq	version:	8.0	Trust: 0.3
vendor:	ibm	model:	websphere message broker	scope:	eq	version:	7.0.0.5	Trust: 0.3
vendor:	ibm	model:	websphere message broker	scope:	eq	version:	7.0.0.4	Trust: 0.3
vendor:	ibm	model:	websphere message broker	scope:	eq	version:	7.0.0.3	Trust: 0.3
vendor:	ibm	model:	websphere message broker	scope:	eq	version:	7.0.0.1	Trust: 0.3
vendor:	ibm	model:	websphere message broker	scope:	eq	version:	7.0.0	Trust: 0.3
vendor:	ibm	model:	websphere message broker	scope:	eq	version:	6.1	Trust: 0.3
vendor:	ibm	model:	websphere message broker	scope:	eq	version:	7.0.0.2	Trust: 0.3
vendor:	ibm	model:	websphere ilog jrules	scope:	eq	version:	7.1.1	Trust: 0.3
vendor:	ibm	model:	websphere cast iron cloud integration	scope:	eq	version:	6.0	Trust: 0.3
vendor:	ibm	model:	websphere cast iron cloud integration	scope:	eq	version:	6.1	Trust: 0.3
vendor:	ibm	model:	tivoli monitoring	scope:	eq	version:	6.2.3	Trust: 0.3
vendor:	ibm	model:	tivoli monitoring	scope:	eq	version:	6.2.2	Trust: 0.3
vendor:	ibm	model:	tivoli monitoring	scope:	eq	version:	6.2.1	Trust: 0.3
vendor:	ibm	model:	tivoli monitoring	scope:	eq	version:	6.2	Trust: 0.3
vendor:	ibm	model:	tivoli application dependency discovery manager	scope:	eq	version:	7.2.13	Trust: 0.3
vendor:	ibm	model:	tivoli application dependency discovery manager	scope:	eq	version:	7.2.12	Trust: 0.3
vendor:	ibm	model:	tivoli application dependency discovery manager	scope:	eq	version:	7.2.11	Trust: 0.3
vendor:	ibm	model:	tivoli application dependency discovery manager	scope:	eq	version:	7.2	Trust: 0.3
vendor:	ibm	model:	rational system architect	scope:	eq	version:	11.4.2.1	Trust: 0.3
vendor:	ibm	model:	rational synergy	scope:	eq	version:	7.1.0.6	Trust: 0.3
vendor:	ibm	model:	rational service tester	scope:	eq	version:	8.3	Trust: 0.3
vendor:	ibm	model:	rational performance tester	scope:	eq	version:	8.3	Trust: 0.3
vendor:	ibm	model:	rational host on-demand	scope:	eq	version:	11.0	Trust: 0.3
vendor:	ibm	model:	rational host on-demand	scope:	eq	version:	11.0.6.1	Trust: 0.3
vendor:	ibm	model:	rational functional tester	scope:	eq	version:	8.3	Trust: 0.3
vendor:	ibm	model:	rational functional tester	scope:	eq	version:	8.0	Trust: 0.3
vendor:	ibm	model:	rational build forge	scope:	eq	version:	7.1.35	Trust: 0.3
vendor:	ibm	model:	rational build forge	scope:	eq	version:	7.1.34	Trust: 0.3
vendor:	ibm	model:	rational build forge	scope:	eq	version:	7.1.33	Trust: 0.3
vendor:	ibm	model:	rational build forge	scope:	eq	version:	7.1.32	Trust: 0.3
vendor:	ibm	model:	rational build forge	scope:	eq	version:	7.1.31	Trust: 0.3
vendor:	ibm	model:	rational build forge	scope:	eq	version:	7.1.3	Trust: 0.3
vendor:	ibm	model:	rational build forge	scope:	eq	version:	7.1.23	Trust: 0.3
vendor:	ibm	model:	rational build forge	scope:	eq	version:	7.1.22	Trust: 0.3
vendor:	ibm	model:	rational build forge	scope:	eq	version:	7.1.21	Trust: 0.3
vendor:	ibm	model:	rational build forge	scope:	eq	version:	7.1.2	Trust: 0.3
vendor:	ibm	model:	rational build forge	scope:	eq	version:	7.1.14	Trust: 0.3
vendor:	ibm	model:	openpages grc platform	scope:	eq	version:	6.2	Trust: 0.3
vendor:	ibm	model:	websphere mq server	scope:	eq	version:	7.0.1	Trust: 0.3
vendor:	hp	model:	nonstop server j6.0.14.01	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.16	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.15.01	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.15	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.14.02	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.14	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.13.01	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.13	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.12.00	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.11.01	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.11.00	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.10.02	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.10.01	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.10.00	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.09.04	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.09.03	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.09.02	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.09.01	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.09.00	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.08.04	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.08.03	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.08.02	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.08.01	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.08.00	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.07.02	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.07.01	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.07.00	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.06.03	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.06.02	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.06.01	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.06.00	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.05.02	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.05.01	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.05.00	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.04.02	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.04.01	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server j06.04.00	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.27	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.26.01	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.26	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.25.01	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.25	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.24.01	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.24	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.23	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.22.01	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.22.00	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.21.02	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.21.01	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.21.00	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.20.03	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.20.02	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.20.01	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.20.00	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.19.03	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.19.02	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.19.01	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.19.00	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.18.02	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.18.01	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.18.00	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.17.03	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.17.02	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.17.01	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.17.00	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.16.02	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.16.01	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.16.00	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.15.02	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.15.01	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	nonstop server h06.15.00	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	jdk and jre for openvms integrity servers 6.0-3.p1	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	hp-ux b.11.31	scope:	-	version:	-	Trust: 0.3
vendor:	hp	model:	hp-ux b.11.11	scope:	-	version:	-	Trust: 0.3
vendor:	hitachi	model:	ucosminexus service platform messaging	scope:	eq	version:	-0	Trust: 0.3
vendor:	hitachi	model:	ucosminexus service platform	scope:	eq	version:	0	Trust: 0.3
vendor:	hitachi	model:	ucosminexus service architect	scope:	eq	version:	0	Trust: 0.3
vendor:	hitachi	model:	ucosminexus portal framework	scope:	eq	version:	0	Trust: 0.3
vendor:	hitachi	model:	ucosminexus operator	scope:	eq	version:	0	Trust: 0.3
vendor:	hitachi	model:	ucosminexus client	scope:	eq	version:	09-00	Trust: 0.3
vendor:	hitachi	model:	ucosminexus application server	scope:	eq	version:	09-00	Trust: 0.3
vendor:	hitachi	model:	processing kit for xml	scope:	eq	version:	0	Trust: 0.3
vendor:	hitachi	model:	hirdb	scope:	eq	version:	8.0	Trust: 0.3
vendor:	hitachi	model:	hirdb	scope:	eq	version:	7.0	Trust: 0.3
vendor:	hitachi	model:	cosminexus studio	scope:	eq	version:	4.0	Trust: 0.3
vendor:	hitachi	model:	cosminexus	scope:	eq	version:	9.0	Trust: 0.3
vendor:	hitachi	model:	cosminexus	scope:	eq	version:	8.0	Trust: 0.3
vendor:	hitachi	model:	cosminexus	scope:	eq	version:	7.0	Trust: 0.3
vendor:	hitachi	model:	cosminexus	scope:	eq	version:	7	Trust: 0.3
vendor:	hitachi	model:	cosminexus	scope:	eq	version:	6.0	Trust: 0.3
vendor:	hitachi	model:	cosminexus	scope:	eq	version:	5.0	Trust: 0.3
vendor:	gentoo	model:	linux	scope:	-	version:	-	Trust: 0.3
vendor:	centos	model:	centos	scope:	eq	version:	6	Trust: 0.3
vendor:	centos	model:	centos	scope:	eq	version:	5	Trust: 0.3
vendor:	avaya	model:	aura system platform	scope:	eq	version:	6.2.1	Trust: 0.3
vendor:	avaya	model:	aura system platform	scope:	eq	version:	6.0.2	Trust: 0.3
vendor:	avaya	model:	aura system platform	scope:	eq	version:	6.0.1	Trust: 0.3
vendor:	avaya	model:	aura system platform sp1	scope:	eq	version:	6.2	Trust: 0.3
vendor:	avaya	model:	aura system platform	scope:	eq	version:	6.2	Trust: 0.3
vendor:	avaya	model:	aura system platform	scope:	eq	version:	6.0.3.9.3	Trust: 0.3
vendor:	avaya	model:	aura system platform	scope:	eq	version:	6.0.3.8.3	Trust: 0.3
vendor:	avaya	model:	aura system platform	scope:	eq	version:	6.0.3.0.3	Trust: 0.3
vendor:	avaya	model:	aura system platform sp3	scope:	eq	version:	6.0	Trust: 0.3
vendor:	avaya	model:	aura system platform sp2	scope:	eq	version:	6.0	Trust: 0.3
vendor:	avaya	model:	aura system platform	scope:	eq	version:	6.0	Trust: 0.3
vendor:	avaya	model:	aura system platform	scope:	eq	version:	1.0	Trust: 0.3
vendor:	avaya	model:	aura experience portal	scope:	eq	version:	6.0.1	Trust: 0.3
vendor:	avaya	model:	aura experience portal	scope:	eq	version:	6.0	Trust: 0.3
vendor:	avaya	model:	aura communication manager utility services	scope:	eq	version:	6.2	Trust: 0.3
vendor:	avaya	model:	aura communication manager utility services	scope:	eq	version:	6.1	Trust: 0.3
vendor:	avaya	model:	aura communication manager utility services	scope:	eq	version:	6.0	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.7	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.6.8	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.8	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.7	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.6.8	Trust: 0.3
vendor:	vmware	model:	vcenter server update	scope:	ne	version:	5.11	Trust: 0.3
vendor:	vmware	model:	update manager update	scope:	ne	version:	5.11	Trust: 0.3
vendor:	schneider electric	model:	trio tview software	scope:	ne	version:	3.29.0	Trust: 0.3
vendor:	icedtea	model:	icedtea	scope:	ne	version:	2.3.3	Trust: 0.3
vendor:	icedtea	model:	icedtea	scope:	ne	version:	2.2.3	Trust: 0.3
vendor:	icedtea	model:	icedtea	scope:	ne	version:	2.1.3	Trust: 0.3
vendor:	icedtea	model:	icedtea	scope:	ne	version:	1.11.5	Trust: 0.3
vendor:	icedtea	model:	icedtea	scope:	ne	version:	1.10.10	Trust: 0.3
vendor:	ibm	model:	tivoli application dependency discovery manager	scope:	ne	version:	7.2.1.4	Trust: 0.3
vendor:	ibm	model:	rational system architect	scope:	ne	version:	11.4.2.2	Trust: 0.3
vendor:	ibm	model:	rational synergy	scope:	ne	version:	7.1.0.7	Trust: 0.3
vendor:	ibm	model:	rational service tester	scope:	ne	version:	8.3.0.1	Trust: 0.3
vendor:	ibm	model:	rational performance tester	scope:	ne	version:	8.3.0.1	Trust: 0.3
vendor:	ibm	model:	rational host on-demand	scope:	ne	version:	11.0.7	Trust: 0.3
vendor:	ibm	model:	rational functional tester	scope:	ne	version:	8.3.0.1	Trust: 0.3
vendor:	ibm	model:	rational build forge	scope:	ne	version:	8.0	Trust: 0.3
vendor:	ibm	model:	openpages grc platform	scope:	ne	version:	6.2.1	Trust: 0.3
vendor:	hp	model:	jdk and jre for openvms integrity servers	scope:	ne	version:	6.0-4	Trust: 0.3

sources: BID: 56065 // JVNDB: JVNDB-2012-004963 // CNNVD: CNNVD-201210-281 // NVD: CVE-2012-5069

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2012-5069
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2012-5069
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201210-281
value:	MEDIUM
Trust: 0.6

nvd@nist.gov:	CVE-2012-5069
severity:	MEDIUM
baseScore:	5.8
vectorString:	AV:N/AC:M/AU:N/C:P/I:P/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	4.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8

sources: JVNDB: JVNDB-2012-004963 // CNNVD: CNNVD-201210-281 // NVD: CVE-2012-5069

PROBLEMTYPE DATA

problemtype:

NVD-CWE-noinfo

Trust: 1.0

sources: NVD: CVE-2012-5069

THREAT TYPE

remote

Trust: 0.7

sources: PACKETSTORM: 118835 // CNNVD: CNNVD-201210-281

TYPE

Unknown

Trust: 0.3

sources: BID: 56065

CONFIGURATIONS

sources: JVNDB: JVNDB-2012-004963

PATCH

title:	HT5549	url:	http://support.apple.com/kb/HT5549	Trust: 0.8
title:	HT5549	url:	http://support.apple.com/kb/HT5549?viewlocale=ja_JP	Trust: 0.8
title:	HS12-023	url:	http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-023/index.html	Trust: 0.8
title:	HPSBUX02832 SSRT101042	url:	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c03595351	Trust: 0.8
title:	HPSBOV02833 SSRT101043	url:	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c03596813	Trust: 0.8
title:	1631786	url:	http://www-01.ibm.com/support/docview.wss?uid=swg21631786	Trust: 0.8
title:	1616490	url:	http://www-01.ibm.com/support/docview.wss?uid=swg21616490	Trust: 0.8
title:	1620037	url:	http://www-01.ibm.com/support/docview.wss?uid=swg21620037	Trust: 0.8
title:	1621154	url:	http://www-01.ibm.com/support/docview.wss?uid=swg21621154	Trust: 0.8
title:	SUSE-SU-2012:1489	url:	http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00010.html	Trust: 0.8
title:	openSUSE-SU-2012:1423	url:	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html	Trust: 0.8
title:	SUSE-SU-2012:1398	url:	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html	Trust: 0.8
title:	SUSE-SU-2012:1595	url:	http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00022.html	Trust: 0.8
title:	Text Form of Oracle Java SE Critical Patch Update - October 2012 Risk Matrices	url:	http://www.oracle.com/technetwork/topics/security/javacpuoct2012verbose-1515981.html	Trust: 0.8
title:	Oracle Java SE Critical Patch Update Advisory - October 2012	url:	http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html	Trust: 0.8
title:	RHSA-2013:1455	url:	https://rhn.redhat.com/errata/RHSA-2013-1455.html	Trust: 0.8
title:	RHSA-2012:1465	url:	http://rhn.redhat.com/errata/RHSA-2012-1465.html	Trust: 0.8
title:	RHSA-2013:1456	url:	https://rhn.redhat.com/errata/RHSA-2013-1456.html	Trust: 0.8
title:	RHSA-2012:1466	url:	http://rhn.redhat.com/errata/RHSA-2012-1466.html	Trust: 0.8
title:	RHSA-2012:1467	url:	http://rhn.redhat.com/errata/RHSA-2012-1467.html	Trust: 0.8
title:	RHSA-2012:1391	url:	http://rhn.redhat.com/errata/RHSA-2012-1391.html	Trust: 0.8
title:	RHSA-2012:1392	url:	http://rhn.redhat.com/errata/RHSA-2012-1392.html	Trust: 0.8
title:	RHSA-2012:1385	url:	http://rhn.redhat.com/errata/RHSA-2012-1385.html	Trust: 0.8
title:	RHSA-2012:1386	url:	http://rhn.redhat.com/errata/RHSA-2012-1386.html	Trust: 0.8
title:	October 2012 Critical Patch Update and Critical Patch Update for Java SE Released	url:	https://blogs.oracle.com/security/entry/october_2012_critical_patch_update	Trust: 0.8
title:	XRX13-003	url:	http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf	Trust: 0.8
title:	HS12-023	url:	http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS12-023/index.html	Trust: 0.8
title:	Oracle Corporation Javaプラグインの脆弱性に関するお知らせ	url:	http://www.fmworld.net/biz/common/oracle/20121017.html	Trust: 0.8
title:	Oracle Java SE JRE Fixes for Unknown Security Vulnerabilities in Components	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=192736	Trust: 0.6

sources: JVNDB: JVNDB-2012-004963 // CNNVD: CNNVD-201210-281

EXTERNAL IDS

db:	NVD	id:	CVE-2012-5069	Trust: 3.6
db:	HITACHI	id:	HS12-023	Trust: 1.9
db:	BID	id:	56065	Trust: 1.9
db:	SECUNIA	id:	51438	Trust: 1.6
db:	SECUNIA	id:	51166	Trust: 1.6
db:	SECUNIA	id:	51390	Trust: 1.6
db:	SECUNIA	id:	51328	Trust: 1.6
db:	SECUNIA	id:	51327	Trust: 1.6
db:	SECUNIA	id:	51141	Trust: 1.6
db:	SECUNIA	id:	51326	Trust: 1.6
db:	SECUNIA	id:	51029	Trust: 1.6
db:	SECUNIA	id:	51028	Trust: 1.6
db:	SECUNIA	id:	51315	Trust: 1.6
db:	JVNDB	id:	JVNDB-2012-004963	Trust: 0.8
db:	CNNVD	id:	CNNVD-201210-281	Trust: 0.6
db:	ICS CERT	id:	ICSA-17-213-02	Trust: 0.3
db:	PACKETSTORM	id:	127267	Trust: 0.1
db:	PACKETSTORM	id:	118140	Trust: 0.1
db:	PACKETSTORM	id:	118835	Trust: 0.1
db:	PACKETSTORM	id:	117477	Trust: 0.1
db:	PACKETSTORM	id:	117453	Trust: 0.1
db:	PACKETSTORM	id:	118139	Trust: 0.1
db:	PACKETSTORM	id:	117704	Trust: 0.1
db:	PACKETSTORM	id:	118142	Trust: 0.1
db:	PACKETSTORM	id:	117452	Trust: 0.1

sources: BID: 56065 // JVNDB: JVNDB-2012-004963 // PACKETSTORM: 127267 // PACKETSTORM: 118140 // PACKETSTORM: 118835 // PACKETSTORM: 117477 // PACKETSTORM: 117453 // PACKETSTORM: 118139 // PACKETSTORM: 117704 // PACKETSTORM: 118142 // PACKETSTORM: 117452 // CNNVD: CNNVD-201210-281 // NVD: CVE-2012-5069

REFERENCES

url:	http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html	Trust: 2.3
url:	http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_xrx13-003_v1.0.pdf	Trust: 1.9
url:	http://www-01.ibm.com/support/docview.wss?uid=swg21620037	Trust: 1.9
url:	http://www-01.ibm.com/support/docview.wss?uid=swg21616490	Trust: 1.9
url:	http://www-01.ibm.com/support/docview.wss?uid=swg21631786	Trust: 1.9
url:	http://security.gentoo.org/glsa/glsa-201406-32.xml	Trust: 1.7
url:	http://rhn.redhat.com/errata/rhsa-2012-1466.html	Trust: 1.7
url:	http://rhn.redhat.com/errata/rhsa-2012-1391.html	Trust: 1.7
url:	http://rhn.redhat.com/errata/rhsa-2012-1465.html	Trust: 1.7
url:	http://rhn.redhat.com/errata/rhsa-2012-1467.html	Trust: 1.7
url:	http://rhn.redhat.com/errata/rhsa-2012-1386.html	Trust: 1.7
url:	http://rhn.redhat.com/errata/rhsa-2013-1456.html	Trust: 1.6
url:	http://secunia.com/advisories/51438	Trust: 1.6
url:	http://secunia.com/advisories/51315	Trust: 1.6
url:	http://www.securityfocus.com/bid/56065	Trust: 1.6
url:	http://www-01.ibm.com/support/docview.wss?uid=swg21621154	Trust: 1.6
url:	http://rhn.redhat.com/errata/rhsa-2012-1385.html	Trust: 1.6
url:	http://secunia.com/advisories/51328	Trust: 1.6
url:	https://oval.cisecurity.org/repository/search/definition/oval%3aorg.mitre.oval%3adef%3a16685	Trust: 1.6
url:	http://secunia.com/advisories/51028	Trust: 1.6
url:	http://secunia.com/advisories/51326	Trust: 1.6
url:	http://secunia.com/advisories/51327	Trust: 1.6
url:	http://secunia.com/advisories/51029	Trust: 1.6
url:	http://rhn.redhat.com/errata/rhsa-2012-1392.html	Trust: 1.6
url:	http://marc.info/?l=bugtraq&m=135542848327757&w=2	Trust: 1.6
url:	https://exchange.xforce.ibmcloud.com/vulnerabilities/79428	Trust: 1.6
url:	http://secunia.com/advisories/51166	Trust: 1.6
url:	http://marc.info/?l=bugtraq&m=135758563611658&w=2	Trust: 1.6
url:	http://rhn.redhat.com/errata/rhsa-2013-1455.html	Trust: 1.6
url:	http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00010.html	Trust: 1.6
url:	http://secunia.com/advisories/51141	Trust: 1.6
url:	http://www.hitachi.co.jp/prod/comp/soft1/global/security/info/vuls/hs12-023/index.html	Trust: 1.6
url:	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html	Trust: 1.6
url:	http://secunia.com/advisories/51390	Trust: 1.6
url:	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html	Trust: 1.6
url:	http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00022.html	Trust: 1.6
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-5069	Trust: 0.8
url:	http://www.ipa.go.jp/security/ciadr/vul/20121017-jre.html	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-5069	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2012-5075	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2012-5071	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2012-5081	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2012-3216	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2012-5069	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2012-5084	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2012-5073	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2012-5089	Trust: 0.7
url:	https://nvd.nist.gov/vuln/detail/cve-2012-5079	Trust: 0.7
url:	https://nvd.nist.gov/vuln/detail/cve-2012-5072	Trust: 0.7
url:	https://nvd.nist.gov/vuln/detail/cve-2012-1531	Trust: 0.6
url:	https://www.redhat.com/security/data/cve/cve-2012-5073.html	Trust: 0.6
url:	https://www.redhat.com/security/data/cve/cve-2012-5089.html	Trust: 0.6
url:	https://www.redhat.com/security/data/cve/cve-2012-5079.html	Trust: 0.6
url:	https://access.redhat.com/security/team/contact/	Trust: 0.6
url:	https://www.redhat.com/security/data/cve/cve-2012-5081.html	Trust: 0.6
url:	https://www.redhat.com/mailman/listinfo/rhsa-announce	Trust: 0.6
url:	https://www.redhat.com/security/data/cve/cve-2012-5071.html	Trust: 0.6
url:	https://nvd.nist.gov/vuln/detail/cve-2012-5068	Trust: 0.6
url:	https://www.redhat.com/security/data/cve/cve-2012-3216.html	Trust: 0.6
url:	https://www.redhat.com/security/data/cve/cve-2012-5069.html	Trust: 0.6
url:	https://www.redhat.com/security/data/cve/cve-2012-5075.html	Trust: 0.6
url:	https://nvd.nist.gov/vuln/detail/cve-2012-3143	Trust: 0.6
url:	https://access.redhat.com/knowledge/articles/11258	Trust: 0.6
url:	https://www.redhat.com/security/data/cve/cve-2012-5084.html	Trust: 0.6
url:	https://access.redhat.com/security/team/key/#package	Trust: 0.6
url:	https://nvd.nist.gov/vuln/detail/cve-2012-5083	Trust: 0.6
url:	http://bugzilla.redhat.com/):	Trust: 0.6
url:	https://nvd.nist.gov/vuln/detail/cve-2012-5077	Trust: 0.6
url:	https://nvd.nist.gov/vuln/detail/cve-2012-5086	Trust: 0.6
url:	https://nvd.nist.gov/vuln/detail/cve-2012-1533	Trust: 0.5
url:	https://www.redhat.com/security/data/cve/cve-2012-5072.html	Trust: 0.5
url:	https://access.redhat.com/security/updates/classification/#critical	Trust: 0.5
url:	https://nvd.nist.gov/vuln/detail/cve-2012-1532	Trust: 0.5
url:	https://nvd.nist.gov/vuln/detail/cve-2012-3159	Trust: 0.5
url:	https://nvd.nist.gov/vuln/detail/cve-2012-4416	Trust: 0.5
url:	https://nvd.nist.gov/vuln/detail/cve-2012-5085	Trust: 0.5
url:	https://www.redhat.com/security/data/cve/cve-2012-3143.html	Trust: 0.4
url:	https://www.redhat.com/security/data/cve/cve-2012-1531.html	Trust: 0.4
url:	https://www.redhat.com/security/data/cve/cve-2012-5068.html	Trust: 0.4
url:	https://www.redhat.com/security/data/cve/cve-2012-5083.html	Trust: 0.4
url:	https://nvd.nist.gov/vuln/detail/cve-2012-5087	Trust: 0.4
url:	https://nvd.nist.gov/vuln/detail/cve-2012-5070	Trust: 0.4
url:	https://www.redhat.com/security/data/cve/cve-2012-5086.html	Trust: 0.4
url:	https://www.redhat.com/security/data/cve/cve-2012-5077.html	Trust: 0.4
url:	https://nvd.nist.gov/vuln/detail/cve-2012-5076	Trust: 0.4
url:	https://nvd.nist.gov/vuln/detail/cve-2012-5074	Trust: 0.4
url:	http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-october/020571.html	Trust: 0.3
url:	http://support.apple.com/kb/ht5549	Trust: 0.3
url:	http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-october/020556.html	Trust: 0.3
url:	https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_fixed_in_java	Trust: 0.3
url:	https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_fixed_in_java1	Trust: 0.3
url:	https://www-304.ibm.com/connections/blogs/psirt/entry/security_bulletin_vulnerabilities_in_rational_functional_tester_versions_8_x_due_to_security_vulnerabilities_in_ibm_jre_7_0_service_release_2_or_e	Trust: 0.3
url:	https://ics-cert.us-cert.gov/advisories/icsa-17-213-02	Trust: 0.3
url:	https://downloads.avaya.com/css/p8/documents/100168011	Trust: 0.3
url:	https://downloads.avaya.com/css/p8/documents/100168009	Trust: 0.3
url:	https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docdisplay?docid=emr_na-c03595351	Trust: 0.3
url:	http://h20566.www2.hp.com/portal/site/hpsc/template.page/public/kb/docdisplay/?docid=emr_na-c03909126-1	Trust: 0.3
url:	https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docdisplay?docid=emr_na-c03596813	Trust: 0.3
url:	http://www-01.ibm.com/support/docview.wss?uid=swg21621951	Trust: 0.3
url:	http://www-01.ibm.com/support/docview.wss?uid=swg21621771	Trust: 0.3
url:	http://www.hitachi.co.jp/prod/comp/soft1/security/info/vuls/hs12-023/index.html	Trust: 0.3
url:	http://www-01.ibm.com/support/docview.wss?uid=swg21617321	Trust: 0.3
url:	http://www-01.ibm.com/support/docview.wss?uid=swg21617323	Trust: 0.3
url:	http://www-01.ibm.com/support/docview.wss?uid=swg21635864	Trust: 0.3
url:	http://www-01.ibm.com/support/docview.wss?uid=swg21637519	Trust: 0.3
url:	http://www-01.ibm.com/support/docview.wss?uid=swg21618977	Trust: 0.3
url:	http://www-01.ibm.com/support/docview.wss?uid=swg21625941	Trust: 0.3
url:	http://www-01.ibm.com/support/docview.wss?uid=swg21636462	Trust: 0.3
url:	http://www-01.ibm.com/support/docview.wss?uid=swg21619418	Trust: 0.3
url:	http://www.vmware.com/security/advisories/vmsa-2013-0003.html	Trust: 0.3
url:	http://www.vmware.com/security/advisories/vmsa-2013-0006.html	Trust: 0.3
url:	http://www-01.ibm.com/support/docview.wss?uid=swg21621959	Trust: 0.3
url:	http://www-01.ibm.com/support/docview.wss?uid=swg21621958	Trust: 0.3
url:	https://www.redhat.com/security/data/cve/cve-2012-4820.html	Trust: 0.3
url:	https://nvd.nist.gov/vuln/detail/cve-2012-4820	Trust: 0.3
url:	https://www.ibm.com/developerworks/java/jdk/alerts/	Trust: 0.3
url:	https://nvd.nist.gov/vuln/detail/cve-2012-4822	Trust: 0.3
url:	https://www.redhat.com/security/data/cve/cve-2012-4822.html	Trust: 0.3
url:	https://www.redhat.com/security/data/cve/cve-2012-1532.html	Trust: 0.3
url:	https://www.redhat.com/security/data/cve/cve-2012-3159.html	Trust: 0.3
url:	https://www.redhat.com/security/data/cve/cve-2012-1533.html	Trust: 0.3
url:	https://www.redhat.com/security/data/cve/cve-2012-5085.html	Trust: 0.3
url:	https://www.redhat.com/security/data/cve/cve-2012-4416.html	Trust: 0.3
url:	https://www.redhat.com/security/data/cve/cve-2012-5070.html	Trust: 0.3
url:	https://www.redhat.com/security/data/cve/cve-2012-5076.html	Trust: 0.3
url:	https://www.redhat.com/security/data/cve/cve-2012-5074.html	Trust: 0.3
url:	https://nvd.nist.gov/vuln/detail/cve-2012-5088	Trust: 0.3
url:	https://www.redhat.com/security/data/cve/cve-2012-5088.html	Trust: 0.3
url:	https://www.redhat.com/security/data/cve/cve-2012-5087.html	Trust: 0.3
url:	https://nvd.nist.gov/vuln/detail/cve-2012-5067	Trust: 0.3
url:	https://www.redhat.com/security/data/cve/cve-2012-4823.html	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2012-4823	Trust: 0.2
url:	https://www.redhat.com/security/data/cve/cve-2012-5067.html	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2010-4470	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-3574	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-3423	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-3548	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-3565	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2469	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-0864	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-3553	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2443	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1717	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-2412	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1716	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-0505	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1518	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2419	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-3557	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-2414	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-4450	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-3829	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5829	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5804	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1485	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5806	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5087	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2422	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-0865	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-4471	Trust: 0.1
url:	http://creativecommons.org/licenses/by-sa/2.5	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5075	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-3557	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2010-3562	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2426	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2010-3567	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-4002	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5084	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1711	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1478	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2461	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5820	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5979	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-6954	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2470	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-4476	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-0547	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-4540	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0429	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0441	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2451	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2459	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5823	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-2421	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-0870	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-3554	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-0862	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2460	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1713	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-0706	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0434	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5784	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2010-3568	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5830	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-3561	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5800	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-4467	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-3567	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2456	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5803	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-4465	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-4472	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5086	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-3556	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0425	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2383	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2423	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2447	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2452	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2445	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2450	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5778	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5780	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5073	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-3568	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-3548	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1493	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2446	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5069	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-5035	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2010-3541	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2010-3566	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-3549	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1500	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-3562	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-3571	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2009-3555	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0426	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0457	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5850	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2010-2783	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-3573	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-3552	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0451	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0459	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-2423	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-1876	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2384	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-4469	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0431	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1557	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0458	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-2548	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2453	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-4448	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-3521	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0401	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5085	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2407	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2421	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2010-3564	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2429	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2010-4465	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-3569	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-2403	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5068	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2010-2548	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-0871	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5071	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-2398	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0432	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-0815	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0444	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1475	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-0497	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5774	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5782	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2010-3554	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2010-4469	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1725	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5790	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5805	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-3564	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5802	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5849	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1719	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2010-3569	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2010-3573	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0461	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0442	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2448	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2458	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0427	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2010-3548	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-2427	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5825	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-0506	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1484	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2430	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-3541	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2415	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2010-3549	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2010-3565	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-0872	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-3216	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0429	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1718	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5772	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2010-3860	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-3422	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0433	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5074	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-3554	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2010-3574	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2454	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2444	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5072	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-4470	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2436	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-4416	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-0822	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1537	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2010-3553	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2009-3555	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-3551	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2449	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-0503	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-0025	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2457	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1476	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0169	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-0424	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-3563	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0809	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5077	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0435	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-3544	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0456	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2010-4450	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1723	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1726	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0450	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1571	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2010-4467	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0460	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5081	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-3547	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5840	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5851	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2465	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2431	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2473	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-6629	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5783	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2010-4448	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-2783	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2463	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-3560	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2412	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5809	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1480	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-4351	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2420	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-0501	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0428	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-0869	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2417	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2471	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-3566	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-3551	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2424	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5076	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5842	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-2397	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0452	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-3553	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1569	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1724	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-3558	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5797	Trust: 0.1
url:	http://security.gentoo.org/	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5070	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1486	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2472	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0446	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0453	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-3860	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1488	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-0502	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2010-3561	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-0868	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0440	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0443	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-3389	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5814	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5817	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2010-4351	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2010-3551	Trust: 0.1
url:	https://bugs.gentoo.org.	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2455	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2010-3557	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5089	Trust: 0.1
url:	https://www.redhat.com/security/data/cve/cve-2012-1682.html	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2012-1682	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2012-0547	Trust: 0.1
url:	https://www.redhat.com/security/data/cve/cve-2012-0547.html	Trust: 0.1
url:	http://www.hp.com/java	Trust: 0.1
url:	http://h20566.www2.hp.com/portal/site/hpsc/public/kb/secbullarchive/	Trust: 0.1
url:	http://h41183.www4.hp.com/signup_alerts.php?jumpid=hpsc_secbulletins	Trust: 0.1
url:	https://www.hp.com/go/swa	Trust: 0.1
url:	https://h20566.www2.hp.com/portal/site/hpsc/public/kb/	Trust: 0.1
url:	http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.5/news	Trust: 0.1
url:	https://rhn.redhat.com/errata/rhsa-2012-1384.html	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1	Trust: 0.1
url:	http://www.ubuntu.com/usn/usn-1619-1	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2012-1718	Trust: 0.1
url:	https://www.redhat.com/security/data/cve/cve-2012-4821.html	Trust: 0.1
url:	https://www.redhat.com/security/data/cve/cve-2012-1718.html	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2012-4821	Trust: 0.1
url:	https://access.redhat.com/security/updates/classification/#important	Trust: 0.1
url:	http://icedtea.classpath.org/hg/release/icedtea7-2.3/file/icedtea-2.3.3/news	Trust: 0.1

CREDITS

Red Hat

Trust: 0.6

sources: PACKETSTORM: 118140 // PACKETSTORM: 117477 // PACKETSTORM: 117453 // PACKETSTORM: 118139 // PACKETSTORM: 118142 // PACKETSTORM: 117452

SOURCES

db:	BID	id:	56065
db:	JVNDB	id:	JVNDB-2012-004963
db:	PACKETSTORM	id:	127267
db:	PACKETSTORM	id:	118140
db:	PACKETSTORM	id:	118835
db:	PACKETSTORM	id:	117477
db:	PACKETSTORM	id:	117453
db:	PACKETSTORM	id:	118139
db:	PACKETSTORM	id:	117704
db:	PACKETSTORM	id:	118142
db:	PACKETSTORM	id:	117452
db:	CNNVD	id:	CNNVD-201210-281
db:	NVD	id:	CVE-2012-5069

LAST UPDATE DATE

2024-09-19T00:23:04.327000+00:00

SOURCES UPDATE DATE

db:	BID	id:	56065	date:	2017-08-03T11:09:00
db:	JVNDB	id:	JVNDB-2012-004963	date:	2015-08-11T00:00:00
db:	CNNVD	id:	CNNVD-201210-281	date:	2022-05-16T00:00:00
db:	NVD	id:	CVE-2012-5069	date:	2022-05-13T14:52:54.863

SOURCES RELEASE DATE

db:	BID	id:	56065	date:	2012-10-16T00:00:00
db:	JVNDB	id:	JVNDB-2012-004963	date:	2012-10-18T00:00:00
db:	PACKETSTORM	id:	127267	date:	2014-06-30T23:39:28
db:	PACKETSTORM	id:	118140	date:	2012-11-16T07:05:59
db:	PACKETSTORM	id:	118835	date:	2012-12-14T02:38:55
db:	PACKETSTORM	id:	117477	date:	2012-10-18T22:02:02
db:	PACKETSTORM	id:	117453	date:	2012-10-18T06:07:33
db:	PACKETSTORM	id:	118139	date:	2012-11-16T07:05:11
db:	PACKETSTORM	id:	117704	date:	2012-10-26T22:43:35
db:	PACKETSTORM	id:	118142	date:	2012-11-16T07:06:23
db:	PACKETSTORM	id:	117452	date:	2012-10-18T06:07:00
db:	CNNVD	id:	CNNVD-201210-281	date:	2012-10-18T00:00:00
db:	NVD	id:	CVE-2012-5069	date:	2012-10-16T21:55:01.713