PT-2013-2344 · Oracle+3 · Java Se+4

Publicado 2013-02-01 · Atualizado 2017-09-19 · CVE-2013-0449

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7 through Update 11

Description The issue affects the confidentiality of the system, allowing remote attacks via unknown vectors related to Deployment. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited.

Recommendations For Oracle Java SE versions 7 through Update 11, update to a version later than Update 11 to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2013-0449

HPSBUX02857

RHSA-2013:0237

RHSA-2013:0626

RHSA-2013_0237

RHSA-2013_0626

Produtos afetados

Hp-Ux

Java Platform

Java Se

Red Hat

Suse

Referências · 115

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_jmxbean.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_cmm.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_jmxbean_2.rb · Exploit
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19123 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-0422 · Nota de Segurança
• http://us-cert.gov/cas/techalerts/TA13-032A.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0446 · Nota de Segurança
• https://access.redhat.com/errata/RHSA-2013:0626 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0435 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2013-1493 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0351 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1493 · Nota de Segurança
• https://bdu.fstec.ru/vul/2022-03304 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2012-1541 · Nota
• https://access.redhat.com/security/cve/CVE-2013-0446 · Nota