PT-2012-2666 · Oracle+3 · Glassfish Enterprise Server+5

Published 2012-05-03 · Updated 2022-05-13 · CVE-2012-0551

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Java SE versions prior to 7 update 5 Java SE versions prior to 6 update 33 GlassFish Enterprise Server version 3.1.1

Description The issue affects confidentiality and integrity, allowing remote attackers to exploit it via unknown vectors related to Web Container or Deployment.

Recommendations For Java SE versions prior to 7 update 5, update to Java SE 7 update 5 or later. For Java SE versions prior to 6 update 33, update to Java SE 6 update 33 or later. For GlassFish Enterprise Server version 3.1.1, consider restricting access to the Web Container or Deployment components until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2012-0551

HPSBUX02805

RHSA-2012:0734

RHSA-2012:1019

RHSA-2012:1238

RHSA-2012:1289

RHSA-2012_0734

RHSA-2012_1019

RHSA-2012_1238

RHSA-2012_1289

RHSA-2013:1455

RHSA-2013:1456

SUSE-SU-2012_1265-1

Affected Products

Glassfish Enterprise Server

Hp-Ux

Java Platform

Java Se

Red Hat

Suse

References · 79

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_exec.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_verifier_field_access.rb · Exploit
• 🔥 https://exploit-db.com/exploits/18764 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0551 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1721 · Security Note
• http://marc.info/?l=bugtraq&m=134496371727681&w=2 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-1456.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00035.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-0734.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-1455.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1716 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1713 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1725 · Security Note
• https://bdu.fstec.ru/vul/2021-04417 · Security Note