Debian GNU/Linux

ソフト名：Debian GNU/Linux 6.0 (Sun Java)

回避策：DSA-2311-1にて対応

脆弱性：データ操作, 機密情報の奪取, DoS攻撃, システムアクセス, 整数オーバーフローエラー, メモリ破壊, リモートコード実行, 解放後使用エラー, リモートコマンド実行

ソース：

http://www.debian.org/

http://lists.debian.org/debian-security-announce/2011/msg00188.html

http://secunia.com/advisories/44784/

http://secunia.com/advisories/46159/

http://dvw-j.blogspot.com/2011/06/sun-java-red-hat-enterprise-linux-red.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0862

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0864

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0865

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0867

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0868

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0869

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0871

CVE：CVE-2011-0862, CVE-2011-0864, CVE-2011-0865, CVE-2011-0867, CVE-2011-0868, CVE-2011-0869, CVE-2011-0871

危険性：High Risk

HP Network Node Manager i

ソフト名：HP Network Node Manager i (NNMi) 8.1.x/9.0.x (Sun JAVA 1.x)

回避策：HPSBMU02703 SSRT100242にて対応

脆弱性：セキュリティ制限の回避, 機密情報の奪取, DoS攻撃, システムアクセス, 不正Webページ, リモートコード実行, バッファオーバーフロー, 不特定のエラー, 整数オーバーフローエラー, メモリ破壊, メモリの浪費, HTTPヘッダ構文解析エラー

ソース：

http://www8.hp.com/us/en/software/software-product.html?compURI=tcm:245-936950

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03005726

http://secunia.com/advisories/37231/

http://secunia.com/advisories/45985/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3867

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3868

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3869

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3871

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3872

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3873

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3874

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3875

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3876

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3877

CVE：CVE-2009-3867, CVE-2009-3868, CVE-2009-3869, CVE-2009-3871, CVE-2009-3872, CVE-2009-3873, CVE-2009-3874, CVE-2009-3875, CVE-2009-3876, CVE-2009-3877

危険性：Medium Risk

Novell Identity Manager Analyzer

ソフト名：Novell Identity Manager Analyzer 1.2/Designer 3.5.1/3.6.1/3.6.1 Remote Loader/Roles Based Provisioning Module 3.6.1/Roles Based Provisioning Module 3.7/Designer 4.0 (Sun Java)

回避策：あり

脆弱性：DoS攻撃, 無限ループ

ソース：

http://www.novell.com/products/identitymanager/

http://www.novell.com/support/viewContent.do?externalId=7009249

http://secunia.com/advisories/43262/

http://secunia.com/advisories/45819/

http://dvw-j.blogspot.com/2011/02/sun-java-ibm-java-ibm-websphere.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4476

CVE：CVE-2010-4476

危険性：Medium Risk

Novell SUSE Linux Enterprise Server

ソフト名：Novell SUSE Linux Enterprise Server (SLES) 10/11 (Sun Java)

回避策：SUSE-SU-2011:0966-1にて対応

脆弱性：XSS, データ操作, 機密情報の奪取, DoS攻撃, システムアクセス, 整数オーバーフローエラー, メモリ破壊, リモートコード実行, 解放後使用エラー, リモートコマンド実行, バッファオーバーフロー, バウンダリエラー

ソース：

http://www.suse.com/products/server/

http://www.novell.com/promo/home/sle11.html

https://hermes.opensuse.org/messages/11622943

http://secunia.com/advisories/44784/

http://secunia.com/advisories/45794/

http://dvw-j.blogspot.com/2011/06/sun-java-red-hat-enterprise-linux-red.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0802

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0814

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0815

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0862

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0865

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0866

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0867

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0871

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0872

CVE：CVE-2011-0802, CVE-2011-0814, CVE-2011-0815, CVE-2011-0862, CVE-2011-0865, CVE-2011-0866, CVE-2011-0867, CVE-2011-0871, CVE-2011-0872

危険性：High Risk

日立 Cosminexus, 日立 Developer's Kit, 日立 Processing Kit, 日立 uCosminexus

ソフト名：日立 Cosminexus 6.x/7.x/8.x/Studio 4.x, 日立 Developer's Kit for Java, 日立 Processing Kit for XML, 日立 uCosminexus Application Server/Client/Developer/Operator/Portal Framework/Service Architect/Service Platform (Sun JAVA)

回避策：HS11-015にて対応

脆弱性：データ操作, 機密情報の奪取, DoS攻撃, システムアクセス, 整数オーバーフローエラー, メモリ破壊, リモートコード実行, 解放後使用エラー, リモートコマンド実行

ソース：http://www.hitachi.co.jp/Prod/comp/soft1/global/prod/cosminexus/index.html

http://www.hitachi.co.jp/

http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS11-015/index.html

http://secunia.com/advisories/44784/

http://secunia.com/advisories/45245/

http://dvw-j.blogspot.com/2011/06/sun-java-red-hat-enterprise-linux-red.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0802

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0814

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0815

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0862

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0864

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0865

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0866

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0867

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0868

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0869

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0871

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0872

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0873

CVE：CVE-2011-0802, CVE-2011-0814, CVE-2011-0815, CVE-2011-0862, CVE-2011-0864, CVE-2011-0865, CVE-2011-0866, CVE-2011-0867, CVE-2011-0868, CVE-2011-0869, CVE-2011-0871, CVE-2011-0872, CVE-2011-0873

危険性：High Risk

Sun Java JRE

ソフト名：Sun Java JRE 1.6.0_26-b03/6 update 26

回避策：未対応

脆弱性：システムアクセス, 安全ではない実行ファイルのロード, リモートコード実行

ソース：http://www.oracle.com/technetwork/java/javase/overview/index-jsp-136246.html

http://blog.acrossecurity.com/2011/07/binary-planting-goes-any-file-type.html

http://secunia.com/advisories/45173/

危険性：High Risk

Apple Mac OS X

ソフト名：Apple Mac OS X (Sun JAVA)

回避策：アップデートにて対応

脆弱性：データ操作, 機密情報の奪取, DoS攻撃, システムアクセス, 整数オーバーフローエラー, メモリ破壊, リモートコード実行, 解放後使用エラー, リモートコマンド実行

ソース：http://www.apple.com/macosx/

http://support.apple.com/kb/HT4738

http://support.apple.com/kb/HT4739

http://secunia.com/advisories/44784/

http://secunia.com/advisories/45084/

http://dvw-j.blogspot.com/2011/06/sun-java-red-hat-enterprise-linux-red.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0802

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0814

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0862

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0863

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0864

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0865

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0867

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0868

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0869

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0871

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0873

CVE：CVE-2011-0802, CVE-2011-0814, CVE-2011-0862, CVE-2011-0863, CVE-2011-0864, CVE-2011-0865, CVE-2011-0867, CVE-2011-0868, CVE-2011-0869, CVE-2011-0871, CVE-2011-0873

危険性：High Risk

Novell openSUSE

ソフト名：Novell openSUSE 11.3/11.4 (Sun JAVA)

回避策：openSUSE-SU-2011:0706-1にて対応

脆弱性：データ操作, 機密情報の奪取, DoS攻撃, システムアクセス, 整数オーバーフローエラー, メモリ破壊, リモートコード実行, 解放後使用エラー, リモートコマンド実行

ソース：http://www.opensuse.org/en/

https://hermes.opensuse.org/messages/9046608

http://secunia.com/advisories/44784/

http://secunia.com/advisories/45074/

http://dvw-j.blogspot.com/2011/06/sun-java-red-hat-enterprise-linux-red.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0815

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0862

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0864

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0865

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0867

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0868

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0869

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0871

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0872

CVE：CVE-2011-0815, CVE-2011-0862, CVE-2011-0864, CVE-2011-0865, CVE-2011-0867, CVE-2011-0868, CVE-2011-0869, CVE-2011-0871, CVE-2011-0872

危険性：High Risk

Novell Sentinel Log Manager

ソフト名：Novell Sentinel Log Manager 1.2.0.1未満 (Sun JAVA, Apache Tomcat 6.x/7.x)

回避策：アップデートにて対応

脆弱性：セキュリティ制限の回避, XSS, DoS攻撃, 無限ループ, キャッシュ汚染, 不正HTMLの実行, スクリプトコード実行, アウトオブメモリ

ソース：http://www.novell.com/products/sentinel-log-manager/

http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html

http://secunia.com/advisories/42337/

http://secunia.com/advisories/43194/

http://secunia.com/advisories/43262/

http://secunia.com/advisories/45022/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3718

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4172

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4476

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0013

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0534

CVE：CVE-2010-3718, CVE-2010-4172, CVE-2010-4476, CVE-2011-0013, CVE-2011-0534

危険性：Medium Risk

Canonical Ltd. Ubuntu Linux

ソフト名：Canonical Ltd. Ubuntu Linux 10.04/10.10 (Sun Java JDK 1.5.x/JDK 1.6.x/JDK 6.x/JRE 1.6.x/6.x/SDK 1.4.x)

回避策：USN-1154-1にて対応

脆弱性：データ操作, 機密情報の奪取, DoS攻撃, システムアクセス, 整数オーバーフローエラー, メモリ破壊, リモートコード実行, 解放後使用エラー, リモートコマンド実行

ソース：http://www.ubuntu.com/

https://lists.ubuntu.com/archives/ubuntu-security-announce/2011-June/001355.html

http://secunia.com/advisories/44784/

http://secunia.com/advisories/44942/

http://dvw-j.blogspot.com/2011/06/sun-java-red-hat-enterprise-linux-red.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0815

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0862

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0864

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0865

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0867

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0868

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0869

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0871

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0872

CVE：CVE-2011-0815, CVE-2011-0862, CVE-2011-0864, CVE-2011-0865, CVE-2011-0867, CVE-2011-0868, CVE-2011-0869, CVE-2011-0871, CVE-2011-0872

危険性：High Risk

Novell openSUSE

ソフト名：Novell openSUSE 11.3/11.4 (Sun Java 1.6.0)

回避策：openSUSE-SU-2011:0633-1にて対応

脆弱性：データ操作, 機密情報の奪取, DoS攻撃, システムアクセス, 整数オーバーフローエラー, メモリ破壊, リモートコード実行, 解放後使用エラー, リモートコマンド実行

ソース：http://www.opensuse.org/en/

https://hermes.opensuse.org/messages/8754315

http://secunia.com/advisories/44784/

http://secunia.com/advisories/44930/

http://dvw-j.blogspot.com/2011/06/sun-java-red-hat-enterprise-linux-red.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0786

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0788

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0802

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0814

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0815

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0817

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0862

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0863

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0864

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0865

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0866

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0867

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0868

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0869

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0871

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0872

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0873

CVE：CVE-2011-0786, CVE-2011-0788, CVE-2011-0802, CVE-2011-0814, CVE-2011-0815, CVE-2011-0817, CVE-2011-0862, CVE-2011-0863, CVE-2011-0864, CVE-2011-0865, CVE-2011-0866, CVE-2011-0867, CVE-2011-0868, CVE-2011-0869, CVE-2011-0871, CVE-2011-0872, CVE-2011-0873

危険性：High Risk

Red Hat Fedora

ソフト名：Red Hat Fedora 14 (Sun Java 1.6.0)

回避策：FEDORA-2011-8003にて対応

脆弱性：データ操作, 機密情報の奪取, DoS攻撃, システムアクセス, 整数オーバーフローエラー, メモリ破壊, リモートコード実行, 解放後使用エラー, リモートコマンド実行

ソース：http://fedoraproject.org/

http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061352.html

http://secunia.com/advisories/44784/

http://secunia.com/advisories/44934/

http://dvw-j.blogspot.com/2011/06/sun-java-red-hat-enterprise-linux-red.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0815

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0862

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0864

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0865

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0867

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0868

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0869

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0871

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0872

CVE：CVE-2011-0815, CVE-2011-0862, CVE-2011-0864, CVE-2011-0865, CVE-2011-0867, CVE-2011-0868, CVE-2011-0869, CVE-2011-0871, CVE-2011-0872

危険性：High Risk

Red Hat Enterprise Linux

ソフト名：Red Hat Enterprise Linux Desktop 6/HPC Node 6/Server 6/Workstation 6 (Sun Java JDK 1.5.x/1.6.x/6.x, Sun Java JRE 1.4.x/1.5.x/5.x/1.6.x/6.x, Sun Java SDK 1.4.x)

回避策：RHSA-2011:0858-1にて対応

脆弱性：DoS攻撃

ソース：http://www.redhat.com/rhel/

http://www.redhat.com/rhel/server/

http://www.redhat.com/rhel/desktop/

https://rhn.redhat.com/errata/RHSA-2011-0858.html

http://secunia.com/advisories/36159/

http://secunia.com/advisories/44886/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2625

CVE：CVE-2009-2625

危険性：Medium Risk

Sun Java, Red Hat Enterprise Linux, Red Hat Enterprise Linux Extras, Red Hat Enterprise Linux Desktop Supplementary

ソフト名：Sun Java JDK 1.5.x/1.6.x/6.x, Sun Java JRE 1.6.x/6.x, Sun Java SDK 1.4.x, Red Hat Enterprise Linux 5 (Server)/Desktop 5/Desktop 6/HPC Node 6/Server 6/Workstation 6, Red Hat Enterprise Linux Extras v. 4, Red Hat Enterprise Linux Desktop Supplementary (v. 5 client)/Supplementary (v. 5 server)/Desktop Supplementary (v. 6)/HPC Node Supplementary (v. 6)/Server Supplementary (v. 6)/Workstation Supplementary (v. 6)

回避策：アップデートにて対応, RHSA-2011:0856-1, RHSA-2011:0857-1, RHSA-2011:0860-1にて対応

脆弱性：データ操作, 機密情報の奪取, DoS攻撃, システムアクセス, 整数オーバーフローエラー, メモリ破壊, リモートコード実行, 解放後使用エラー, リモートコマンド実行

ソース：http://www.oracle.com/technetwork/java/javase/overview/index.html

http://www.oracle.com/technetwork/java/javase/overview/index-jsp-136246.html

http://www.oracle.com/technetwork/topics/security/javacpujune2011-313339.html

http://www.redhat.com/

http://www.redhat.com/rhel/

http://www.redhat.com/rhel/server/

http://www.redhat.com/rhel/desktop/

https://rhn.redhat.com/errata/RHSA-2011-0856.html

https://rhn.redhat.com/errata/RHSA-2011-0857.html

https://rhn.redhat.com/errata/RHSA-2011-0860.html

http://www.zerodayinitiative.com/advisories/ZDI-11-182/

http://www.zerodayinitiative.com/advisories/ZDI-11-183/

http://www.zerodayinitiative.com/advisories/ZDI-11-184/

http://www.zerodayinitiative.com/advisories/ZDI-11-185/

http://www.zerodayinitiative.com/advisories/ZDI-11-186/

http://www.zerodayinitiative.com/advisories/ZDI-11-187/

http://www.zerodayinitiative.com/advisories/ZDI-11-188/

http://www.zerodayinitiative.com/advisories/ZDI-11-189/

http://www.zerodayinitiative.com/advisories/ZDI-11-190/

http://www.zerodayinitiative.com/advisories/ZDI-11-191/

http://www.zerodayinitiative.com/advisories/ZDI-11-192/

http://secunia.com/advisories/44784/

http://secunia.com/advisories/44818/

http://secunia.com/advisories/44880/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0786

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0788

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0802

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0814

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0815

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0817

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0862

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0863

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0864

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0865

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0866

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0867

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0868

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0869

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0871

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0872

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0873

CVE：CVE-2011-0786, CVE-2011-0788, CVE-2011-0802, CVE-2011-0814, CVE-2011-0815, CVE-2011-0817, CVE-2011-0862, CVE-2011-0863, CVE-2011-0864, CVE-2011-0865, CVE-2011-0866, CVE-2011-0867, CVE-2011-0868, CVE-2011-0869, CVE-2011-0871, CVE-2011-0872, CVE-2011-0873

危険性：High Risk

HP HP-UX

ソフト名：HP HP-UX 11.x (Sun Java 1.x)

回避策：HPSBUX02685 SSRT100505にて対応

脆弱性：データ操作, 機密情報の奪取, DoS攻撃, システムアクセス, 無限ループ, 入力検証エラー, リモートコード実行, ヒープメモリ破壊, 符号拡張エラー, 貼り付け操作強制エラー, NTLM認証ハッシュの曝露

ソース：http://h71028.www7.hp.com/enterprise/w1/en/os/hpux11i-overview.html

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02775276

http://secunia.com/advisories/43262/

http://secunia.com/advisories/44834/

http://dvw-j.blogspot.com/2011/02/sun-java-ibm-java-ibm-websphere.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4422

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4447

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4448

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4450

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4452

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4454

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4462

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4463

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4465

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4466

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4467

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4468

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4469

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4470

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4471

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4472

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4473

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4475

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4476

CVE：CVE-2010-4422, CVE-2010-4447, CVE-2010-4448, CVE-2010-4450, CVE-2010-4452, CVE-2010-4454, CVE-2010-4462, CVE-2010-4463, CVE-2010-4465, CVE-2010-4466, CVE-2010-4467, CVE-2010-4468, CVE-2010-4469, CVE-2010-4470, CVE-2010-4471, CVE-2010-4472, CVE-2010-4473, CVE-2010-4475, CVE-2010-4476

危険性：High Risk

日立 JP1

ソフト名：日立 JP1/Automatic Job Management System/JP1/Cm2/Network Node Manager/JP1/Cm2/SNMP System Observer/JP1/Integrated Management (IM)/JP1/IT Resource Management/JP1/Performance Management (PFM)/JP1/ServerConductor/Control Manager (Sun JAVA)

回避策：あり

脆弱性：システムアクセス, DoS攻撃, 無限ループ

ソース：http://www.hitachi.co.jp/Prod/comp/soft1/global/prod/jp1/popup/ajs2.html

http://www.hitachi.co.jp/Prod/comp/soft1/global/prod/jp1/popup/im.html

http://www.hitachi.co.jp/Prod/comp/soft1/manual/pc/d3S4310/INDEX.HTM

http://www.hitachi.co.jp/Prod/comp/soft1/global/prod/jp1/popup/pfm.html

http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS11-008/index.html

http://secunia.com/advisories/43262/

http://secunia.com/advisories/44576/

http://dvw-j.blogspot.com/2011/02/sun-java-ibm-java-ibm-websphere.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4476

CVE：CVE-2010-4476

危険性：Medium Risk

HP Tru64 UNIX, HP OpenVMS

ソフト名：HP Tru64 UNIX 5.x, HP OpenVMS 6.x/7.x/8.x (Sun JAVA)

回避策：HPSBTU02684 SSRT100390, HPSBOV02634 SSRT100390にて対応

脆弱性：DoS攻撃, 無限ループ

ソース：http://welcome.hp.com/country/us/en/welcome-copy.html#Product

http://h71000.www7.hp.com/

https://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02826781

https://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02822093

http://secunia.com/advisories/43262/

http://secunia.com/advisories/44535/

http://dvw-j.blogspot.com/2011/02/sun-java-ibm-java-ibm-websphere.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4476

CVE：CVE-2010-4476

危険性：Medium Risk

IBM InfoSphere Information Server

ソフト名：IBM InfoSphere Information Server 8.0/8.1/8.5 (Sun JAVA)

回避策：IBM JR39034にて対応

脆弱性：DoS攻撃, 無限ループ

ソース：http://www-01.ibm.com/software/data/integration/info_server/

http://www.ibm.com/support/docview.wss?uid=swg24029823

http://secunia.com/advisories/43262/

http://secunia.com/advisories/44462/

http://dvw-j.blogspot.com/2011/02/sun-java-ibm-java-ibm-websphere.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4476

CVE：CVE-2010-4476

危険性：Medium Risk

Sun Java System Access Manager, Sun OpenSSO Enterprise

ソフト名：Sun Java System Access Manager 7.1, Sun OpenSSO Enterprise 8.0

回避策：あり

脆弱性：データ操作, 機密情報の奪取, 不特定のエラー

ソース：http://www.oracle.com/technetwork/testcontent/opensso-091890.html

http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html#AppendixSUNS

http://secunia.com/advisories/44305/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0844

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0847

CVE：CVE-2011-0844, CVE-2011-0847

危険性：Medium Risk

Oracle iPlanet Web Server, IBM Tivoli Netview

ソフト名：Oracle iPlanet Web Server 6.1/7.0, IBM Tivoli Netview for z/OS 5.2.0/5.3.0/5.4.0 (Sun JAVA JDK 5.0 Update 27以下/JDK 6 Update 23以下/JRE 6 Update 23以下)

回避策：あり, 未対応

脆弱性：DoS攻撃, 無限ループ

ソース：http://www.oracle.com/us/products/middleware/application-server/050735.html

http://www-01.ibm.com/software/tivoli/products/netview-zos/

http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html#AppendixSUNS

https://www-304.ibm.com/support/docview.wss?uid=swg1OA35932

https://www-304.ibm.com/support/docview.wss?uid=swg21469285

http://secunia.com/advisories/43262/

http://secunia.com/advisories/44261/

http://secunia.com/advisories/44303/

http://dvw-j.blogspot.com/2011/02/sun-java-ibm-java-ibm-websphere.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4476

CVE：CVE-2010-4476

危険性：Medium Risk