|
HP-UX update for JRE/JDK
|
|
Secunia Advisory:
|
SA27693
|
|
|
Release Date:
|
2007-11-16
|
|
Last Update:
|
2007-12-21
|
|
Popularity:
|
4,998 views
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
Security Bypass
Manipulation of data
Exposure of system information
Exposure of sensitive information
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | HP-UX 11.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2007-5232
CVE-2007-5236
CVE-2007-5237
CVE-2007-5238
CVE-2007-5239
CVE-2007-5240
CVE-2007-5273
CVE-2007-5274
CVE-2007-5689
|
|
Description:
HP has issued an update for JRE/JDK. This fixes some vulnerabilities, which can be exploited by malicious people to bypass certain security restrictions, manipulate data, disclose sensitive/system information, or potentially compromise a vulnerable system.
For more information:
SA27009
SA27320
The vulnerabilities are reported in HP-UX B.11.11, B.11.23, and B.11.31 running JRE v5.0.10 and earlier, and JDK v1.4.2.16 and earlier.
Solution:
Apply updated packages. Please see the vendor's advisory for details.
http://www.hp.com/go/java
Changelog:
2007-12-21: The original advisory has been updated to reflect the correct fixed revisions. Please see the vendor's advisory for details.
Original Advisory:
HPSBUX02284 SSRT071483:
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533
Other References:
SA27009:
http://secunia.com/advisories/27009/
SA27320:
http://secunia.com/advisories/27320/
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
