PT-2014-2456 · Ibm+1 · Ibm Java Sdk+1

Published 2014-01-21 · Updated 2016-05-25 · CVE-2013-0485

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Java SDK versions 7 before SR4-FP1 IBM Java SDK versions 6 before SR13-FP1 IBM Java SDK versions 5.0 before SR16-FP1 IBM Java SDK versions 1.4.2 before SR13-FP16

Description The issue concerns an unspecified vulnerability in the Class Libraries of IBM Java SDK, with unknown impact and attack vectors.

Recommendations For IBM Java SDK version 7, update to SR4-FP1 or later. For IBM Java SDK version 6, update to SR13-FP1 or later. For IBM Java SDK version 5.0, update to SR16-FP1 or later. For IBM Java SDK version 1.4.2, update to SR13-FP16 or later.

Fix

Related Identifiers

CVE-2013-0485

Affected Products

Ibm Java Sdk

Suse

References · 7

• http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00020.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-0485 · Security Note
• http://ibm.com/developerworks/java/jdk/aix/j532/fixes.html#SR16FP1 · Note
• http://ibm.com/developerworks/java/jdk/aix/j732/Java7.fixes.html#SR4FP1 · Note
• http://ibm.com/developerworks/java/jdk/aix/142_64/fixes.html#SR13FP16 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=950072 · Note
• http://ibm.com/developerworks/java/jdk/aix/j664/Java6_64.fixes.html#SR13FP1 · Note