SecurityTracker.com
Keep Track of the Latest Vulnerabilities
with SecurityTracker!
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 
Sign Up
Sign Up for Your FREE Weekly SecurityTracker E-mail Alert Summary
Instant Alerts
Buy our Premium Vulnerability Notification Service to receive customized, instant alerts
Affiliates
Put SecurityTracker Vulnerability Alerts on Your Web Site -- It's Free!
Partners
Become a Partner and License Our Database or Notification Service
Report a Bug
Report a vulnerability that you have found to SecurityTracker
bugs
@
securitytracker.com





Category:   Application (Generic)  >   Java Runtime Environment (JRE) Vendors:   Sun
(Red Hat Issues Fix) Java Runtime Environment (JRE) Virtual Machine Bug Lets Remote Users Access Files and Gain Privileges on the Target System
SecurityTracker Alert ID:  1020489
SecurityTracker URL:  http://securitytracker.com/id/1020489
CVE Reference:   CVE-2008-3107   (Links to External Site)
Date:  Jul 14 2008
Impact:   Disclosure of system information, Disclosure of user information, Execution of arbitrary code via network, Modification of user information, User access via network
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): JRE 6 Update 6 and prior, JDK and JRE 5.0 Update 15 and prior, SDK and JRE 1.4.2_17 and prior versions.
Description:   A vulnerability was reported in the Java Runtime Environment (JRE) Virtual Machine. A remote user can access files on the target user's system or cause arbitrary applications on the target user's system to be executed.

A remote user can create a specially crafted applet or application that, when loaded by the target user, will gain access to files on the target system or execute arbitrary applications residing on the target system.

Fujitsu reported this vulnerability.
Impact:   A remote user can create an applet or application that, when loaded by the target user, will access files or execute arbitrary applications on the target user's system.
Solution:   Red Hat has released a fix.

The Red Hat advisory is available at:

https://rhn.redhat.com/errata/RHSA-2008-0594.html
Vendor URL:  sunsolve.sun.com/search/document.do?assetkey=1-66-238967-1 (Links to External Site)
Cause:   Access control error
Underlying OS:   Linux (Red Hat Enterprise)

Message History:   This archive entry is a follow-up to the message listed below.
Jul 9 2008 Java Runtime Environment (JRE) Virtual Machine Bug Lets Remote Users Access Files and Gain Privileges on the Target System


 Source Message Contents
Date:  Mon, 14 Jul 2008 11:32:26 -0400
Subject:  [RHSA-2008:0594-01] Critical: java-1.6.0-sun security update


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

=====================================================================
                   Red Hat Security Advisory

Synopsis:          Critical: java-1.6.0-sun security update
Advisory ID:       RHSA-2008:0594-01
Product:           Red Hat Enterprise Linux Extras
Advisory URL:      https://rhn.redhat.com/errata/RHSA-2008-0594.html
Issue date:        2008-07-14
CVE Names:         CVE-2008-3103 CVE-2008-3104 CVE-2008-3105 
                   CVE-2008-3106 CVE-2008-3107 CVE-2008-3109 
                   CVE-2008-3110 CVE-2008-3112 CVE-2008-3114 
=====================================================================

1. Summary:

Updated java-1.6.0-sun packages that correct several security issues are
now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary.

This update has been rated as having critical security impact by the Red
Hat Security Response Team.

2. Relevant releases/architectures:

RHEL Desktop Supplementary (v. 5 client) - i386, x86_64
RHEL Supplementary (v. 5 server) - i386, x86_64

3. Description:

The Java Runtime Environment (JRE) contains the software and tools that
users need to run applets and applications written using the Java
programming language. 

A vulnerability was found in the Java Management Extensions (JMX)
management agent, when local monitoring is enabled. This allowed remote
attackers to perform illegal operations. (CVE-2008-3103)

Multiple vulnerabilities with unsigned applets were reported. A remote
attacker could misuse an unsigned applet to connect to localhost services
running on the host running the applet. (CVE-2008-3104)

Several vulnerabilities in the Java API for XML Web Services (JAX-WS)
client and service implementation were found. A remote attacker who caused
malicious XML to be processed by a trusted or untrusted application was
able access URLs or cause a denial of service. (CVE-2008-3105, CVE-2008-3106)

A JRE vulnerability could be triggered by an untrusted application or
applet. A remote attacker could grant an untrusted applet or application
extended privileges such as being able to read and write local files, or
execute local programs. (CVE-2008-3107)

Several vulnerabilities within the JRE scripting support were reported. A
remote attacker could grant an untrusted applet extended privileges such as
reading and writing local files, executing local programs, or querying the
sensitive data of other applets. (CVE-2008-3109, CVE-2008-3110)

A vulnerability in Java Web Start was found. A remote attacker was able to
create arbitrary files with the permissions of the user running the
untrusted Java Web Start application. (CVE-2008-3112)

Another vulnerability in Java Web Start when processing untrusted
applications was reported. An attacker was able to acquire sensitive
information, such as the cache location. (CVE-2008-3114)

Users of java-1.6.0-sun should upgrade to these updated packages, which
correct these issues.

4. Solution:

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network.  Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

5. Bugs fixed (http://bugzilla.redhat.com/):

452649 - CVE-2008-3105 CVE-2008-3106 OpenJDK JAX-WS unauthorized URL access (6542088)
452658 - CVE-2008-3107 JDK untrusted applet/application privilege escalation (6661918)
452659 - CVE-2008-3103 OpenJDK JMX allows illegal operations with local monitoring (6332953)
454601 - CVE-2008-3104 Java RE allows Same Origin Policy to be Bypassed (6687932)
454603 - CVE-2008-3109 CVE-2008-3110 Security Vulnerabilities in the Java Runtime Environment Scripting Language Support (6529568,
 6529579)
454606 - CVE-2008-3112 Java Web Start, arbitrary file creation (6703909)
454608 - CVE-2008-3114 Java Web Start, untrusted application may determine Cache Location  (6704074)

6. Package List:

RHEL Desktop Supplementary (v. 5 client):

i386:
java-1.6.0-sun-1.6.0.7-1jpp.1.el5.i586.rpm
java-1.6.0-sun-demo-1.6.0.7-1jpp.1.el5.i586.rpm
java-1.6.0-sun-devel-1.6.0.7-1jpp.1.el5.i586.rpm
java-1.6.0-sun-jdbc-1.6.0.7-1jpp.1.el5.i586.rpm
java-1.6.0-sun-plugin-1.6.0.7-1jpp.1.el5.i586.rpm
java-1.6.0-sun-src-1.6.0.7-1jpp.1.el5.i586.rpm

x86_64:
java-1.6.0-sun-1.6.0.7-1jpp.1.el5.x86_64.rpm
java-1.6.0-sun-demo-1.6.0.7-1jpp.1.el5.x86_64.rpm
java-1.6.0-sun-devel-1.6.0.7-1jpp.1.el5.x86_64.rpm
java-1.6.0-sun-jdbc-1.6.0.7-1jpp.1.el5.x86_64.rpm
java-1.6.0-sun-plugin-1.6.0.7-1jpp.1.el5.i586.rpm
java-1.6.0-sun-src-1.6.0.7-1jpp.1.el5.x86_64.rpm

RHEL Supplementary (v. 5 server):

i386:
java-1.6.0-sun-1.6.0.7-1jpp.1.el5.i586.rpm
java-1.6.0-sun-demo-1.6.0.7-1jpp.1.el5.i586.rpm
java-1.6.0-sun-devel-1.6.0.7-1jpp.1.el5.i586.rpm
java-1.6.0-sun-jdbc-1.6.0.7-1jpp.1.el5.i586.rpm
java-1.6.0-sun-plugin-1.6.0.7-1jpp.1.el5.i586.rpm
java-1.6.0-sun-src-1.6.0.7-1jpp.1.el5.i586.rpm

x86_64:
java-1.6.0-sun-1.6.0.7-1jpp.1.el5.x86_64.rpm
java-1.6.0-sun-demo-1.6.0.7-1jpp.1.el5.x86_64.rpm
java-1.6.0-sun-devel-1.6.0.7-1jpp.1.el5.x86_64.rpm
java-1.6.0-sun-jdbc-1.6.0.7-1jpp.1.el5.x86_64.rpm
java-1.6.0-sun-plugin-1.6.0.7-1jpp.1.el5.i586.rpm
java-1.6.0-sun-src-1.6.0.7-1jpp.1.el5.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and 
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package

7. References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3103
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3104
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3105
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3106
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3107
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3109
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3110
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3112
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3114
http://www.redhat.com/security/updates/classification/#critical

8. Contact:

The Red Hat security contact is <secalert@redhat.com>.  More contact
details at https://www.redhat.com/security/team/contact/

Copyright 2008 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (GNU/Linux)

iD8DBQFIe3GCXlSAg2UNWIIRArt1AJ45wdIc73WX8WmHSdNW6xXu8BbuVACfYLR6
OKHPr6bal50QVb1whF6263o=
=tpsU
-----END PGP SIGNATURE-----


-- 
Enterprise-watch-list mailing list
Enterprise-watch-list@redhat.com
https://www.redhat.com/mailman/listinfo/enterprise-watch-list


Go to the Top of This SecurityTracker Archive Page



Home   |    View Topics   |    Search   |    Contact Us

Copyright 2012, SecurityGlobal.net LLC