Daily Vuln Watch Japan

ソフト名：Red Hat Enterprise Linux Extras v. 4, RHEL Desktop Supplementary (v. 5 client)/Supplementary (v. 5 server)/Desktop Supplementary (v. 6)/HPC Node Supplementary (v. 6)/Server Supplementary (v. 6)/Workstation Supplementary (v. 6) (IBM Java 6.x)

回避策：RHSA-2011:1087-1にて対応

脆弱性：データ操作, 機密情報の奪取, システムアクセス, DoS攻撃, 整数オーバーフローエラー, メモリ破壊, リモートコード実行, 解放後使用エラー, リモートコマンド実行

ソース：

http://www.redhat.com/

https://rhn.redhat.com/errata/RHSA-2011-1087.html

http://secunia.com/advisories/45206/

http://secunia.com/advisories/45402/

http://dvw-j.blogspot.com/2011/07/ibm-java.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0802

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0814

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0862

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0865

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0867

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0871

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0873

CVE：CVE-2011-0802, CVE-2011-0814, CVE-2011-0862, CVE-2011-0865, CVE-2011-0867, CVE-2011-0871, CVE-2011-0873

危険性：High Risk

Scull

ソフト名：Red Hat Enterprise Linux Extras v. 4/Desktop Supplementary (v. 5 client)/Supplementary (v. 5 server)/Desktop Supplementary (v. 6)/HPC Node Supplementary (v. 6)/Server Supplementary (v. 6)/Workstation Supplementary (v. 6) (IBM Java 6.x)

回避策：RHSA-2011:0938-1にて対応

脆弱性：データ操作, 機密情報の奪取, DoS攻撃, システムアクセス, 整数オーバーフローエラー, メモリ破壊, リモートコード実行, 解放後使用エラー, リモートコマンド実行

ソース：http://www.redhat.com/

https://rhn.redhat.com/errata/RHSA-2011-0938.html

http://secunia.com/advisories/45206/

http://secunia.com/advisories/45229/

http://dvw-j.blogspot.com/2011/07/ibm-java.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0802

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0814

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0862

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0863

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0865

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0866

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0867

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0868

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0869

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0871

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0873

CVE：CVE-2011-0802, CVE-2011-0814, CVE-2011-0862, CVE-2011-0863, CVE-2011-0865, CVE-2011-0866, CVE-2011-0867, CVE-2011-0868, CVE-2011-0869, CVE-2011-0871, CVE-2011-0873

危険性：High Risk

Scull

ソフト名：Sun Java JDK 1.5.x/1.6.x/6.x, Sun Java JRE 1.6.x/6.x, Sun Java SDK 1.4.x, Red Hat Enterprise Linux 5 (Server)/Desktop 5/Desktop 6/HPC Node 6/Server 6/Workstation 6, Red Hat Enterprise Linux Extras v. 4, Red Hat Enterprise Linux Desktop Supplementary (v. 5 client)/Supplementary (v. 5 server)/Desktop Supplementary (v. 6)/HPC Node Supplementary (v. 6)/Server Supplementary (v. 6)/Workstation Supplementary (v. 6)

回避策：アップデートにて対応, RHSA-2011:0856-1, RHSA-2011:0857-1, RHSA-2011:0860-1にて対応

脆弱性：データ操作, 機密情報の奪取, DoS攻撃, システムアクセス, 整数オーバーフローエラー, メモリ破壊, リモートコード実行, 解放後使用エラー, リモートコマンド実行

ソース：http://www.oracle.com/technetwork/java/javase/overview/index.html

http://www.oracle.com/technetwork/java/javase/overview/index-jsp-136246.html

http://www.oracle.com/technetwork/topics/security/javacpujune2011-313339.html

http://www.redhat.com/

http://www.redhat.com/rhel/

http://www.redhat.com/rhel/server/

http://www.redhat.com/rhel/desktop/

https://rhn.redhat.com/errata/RHSA-2011-0856.html

https://rhn.redhat.com/errata/RHSA-2011-0857.html

https://rhn.redhat.com/errata/RHSA-2011-0860.html

http://www.zerodayinitiative.com/advisories/ZDI-11-182/

http://www.zerodayinitiative.com/advisories/ZDI-11-183/

http://www.zerodayinitiative.com/advisories/ZDI-11-184/

http://www.zerodayinitiative.com/advisories/ZDI-11-185/

http://www.zerodayinitiative.com/advisories/ZDI-11-186/

http://www.zerodayinitiative.com/advisories/ZDI-11-187/

http://www.zerodayinitiative.com/advisories/ZDI-11-188/

http://www.zerodayinitiative.com/advisories/ZDI-11-189/

http://www.zerodayinitiative.com/advisories/ZDI-11-190/

http://www.zerodayinitiative.com/advisories/ZDI-11-191/

http://www.zerodayinitiative.com/advisories/ZDI-11-192/

http://secunia.com/advisories/44784/

http://secunia.com/advisories/44818/

http://secunia.com/advisories/44880/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0786

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0788

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0802

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0814

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0815

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0817

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0862

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0863

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0864

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0865

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0866

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0867

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0868

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0869

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0871

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0872

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0873

CVE：CVE-2011-0786, CVE-2011-0788, CVE-2011-0802, CVE-2011-0814, CVE-2011-0815, CVE-2011-0817, CVE-2011-0862, CVE-2011-0863, CVE-2011-0864, CVE-2011-0865, CVE-2011-0866, CVE-2011-0867, CVE-2011-0868, CVE-2011-0869, CVE-2011-0871, CVE-2011-0872, CVE-2011-0873

危険性：High Risk