PT-2013-4809 · Ibm+2 · Ibm Java Sdk+3

Published 2013-11-07 · Updated 2017-08-29 · CVE-2013-4041

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Java SDK versions 5.0.0 before SR16 FP4 IBM Java SDK versions 7.0.0 before SR6 IBM Java SDK versions 6.0.1 before SR7 IBM Java SDK versions 6.0.0 before SR15

Description The issue allows remote attackers to access restricted classes via unspecified vectors.

Recommendations For IBM Java SDK versions 5.0.0 before SR16 FP4, update to SR16 FP4 or later. For IBM Java SDK versions 7.0.0 before SR6, update to SR6 or later. For IBM Java SDK versions 6.0.1 before SR7, update to SR7 or later. For IBM Java SDK versions 6.0.0 before SR15, update to SR15 or later.

Fix

Related Identifiers

CVE-2013-4041

RHSA-2013:1507

RHSA-2013:1508

RHSA-2013:1509

RHSA-2013:1793

RHSA-2013_1507

RHSA-2013_1508

RHSA-2013_1509

Affected Products

Ibm Aix

Ibm Java Sdk

Red Hat

Suse

References · 65

• https://nvd.nist.gov/vuln/detail/CVE-2013-4041 · Security Note
• http://rhn.redhat.com/errata/RHSA-2013-1507.html · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21655201 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV51088 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21655202 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-1793.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-1509.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-00361 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV51087 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-1508.html · Vendor Advisory
• https://ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2013 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.html · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2013-5784 · Note
• https://access.redhat.com/security/cve/CVE-2013-5814 · Note
• https://access.redhat.com/security/cve/CVE-2013-5782 · Note