PT-2012-2666 · Oracle+3 · Glassfish Enterprise Server+5

Publicado 2012-05-03 · Atualizado 2022-05-13 · CVE-2012-0551

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Java SE versions prior to 7 update 5 Java SE versions prior to 6 update 33 GlassFish Enterprise Server version 3.1.1

Description The issue affects confidentiality and integrity, allowing remote attackers to exploit it via unknown vectors related to Web Container or Deployment.

Recommendations For Java SE versions prior to 7 update 5, update to Java SE 7 update 5 or later. For Java SE versions prior to 6 update 33, update to Java SE 6 update 33 or later. For GlassFish Enterprise Server version 3.1.1, consider restricting access to the Web Container or Deployment components until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2012-0551

HPSBUX02805

RHSA-2012:0734

RHSA-2012:1019

RHSA-2012:1238

RHSA-2012:1289

RHSA-2012_0734

RHSA-2012_1019

RHSA-2012_1238

RHSA-2012_1289

RHSA-2013:1455

RHSA-2013:1456

SUSE-SU-2012_1265-1

Produtos afetados

Glassfish Enterprise Server

Hp-Ux

Java Platform

Java Se

Red Hat

Suse

Referências · 79

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_exec.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_verifier_field_access.rb · Exploit
• 🔥 https://exploit-db.com/exploits/18764 · Exploit
• http://support.novell.com/security/cve/CVE-2012-1719.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0551 · Nota de Segurança
• https://bugzilla.novell.com/771808 · Nota
• http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/action.process/public/kb/docDisplay/?javax.portlet.action=true&spf_p.tpst=kbDocDisplay&javax.portlet.begCacheTok=com.vignette.cachetoken&spf_p.prp_kbDocDisplay=wsrp-interactionState%3DdocId%253DZW1yX25hLWMwMzQ0MTA3NQ%2525253D%2525253DhPsCeNc%257CdocLocale%253Den_US%257CcalledBy%253D&javax.portlet.endCacheTok=com.vignette.cachetoken · Nota
• http://support.novell.com/security/cve/CVE-2012-1721.html · Nota
• https://bugzilla.novell.com/778629 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1721 · Nota de Segurança
• http://support.novell.com/security/cve/CVE-2012-0551.html · Nota
• https://access.redhat.com/security/cve/CVE-2012-1716 · Nota
• http://support.novell.com/security/cve/CVE-2012-1718.html · Nota
• http://marc.info/?l=bugtraq&m=134496371727681&w=2 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html · Aviso do Fabricante