RHSA-2007:0072
Vulnerability from csaf_redhat - Published: 2007-01-24 00:00 - Updated: 2026-11-05 03:13Summary
Red Hat Security Advisory: IBMJava2 security update
Severity
Critical
Notes
Topic: IBMJava2-JRE and IBMJava2-SDK packages that correct several security issues
are available for Red Hat Enterprise Linux 2.1.
This update has been rated as having critical security impact by the Red
Hat Security Response Team.
Details: IBM's 1.3.1 Java release includes the IBM Java 2 Runtime Environment and
the IBM Java 2 Software Development Kit.
Vulnerabilities were discovered in the Java Runtime Environment. An
untrusted applet could use these vulnerabilities to access data from other
applets. (CVE-2006-6736, CVE-2006-6737)
Buffer overflow vulnerabilities were discovered in the Java Runtime
Environment. An untrusted applet could use these flaws to elevate its
privileges, possibly reading and writing local files or executing local
applications. (CVE-2006-6731)
Daniel Bleichenbacher discovered an attack on PKCS #1 v1.5 signatures. If
an RSA key with exponent 3 is used, it may be possible to forge a PKCS #1
v1.5 signature which incorrectly verifies under implementations that do not
check for excess data in the RSA exponentation result of the signature.
All users of IBMJava2 should upgrade to these updated packages, which
contain IBM's 1.3.1 SR10a Java release which resolves these issues.
Please note that the packages in this erratum are the same as those we
released on January 24th 2007 with advisories RHBA-2007:0023 and
RHEA-2007:0024. We have issued this security update as these previous
advisories did not specify that they fixed critical security issues. If you
have already updated to those versions of IBMJava you will not need to
apply this update.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash. This allows remote attackers to forge PKCS #1 v1.5 signatures. Consequently, OpenSSL may incorrectly verify X.509 and other certificates, leading to a bypass of trust and authentication mechanisms.
9.1 (Critical)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:IBMJava2-JRE-1:1.3.1-12.i386 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 2.1AS:IBMJava2-JRE-1:1.3.1-12.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 2.1AS:IBMJava2-SDK-1:1.3.1-11.i386 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 2.1AS:IBMJava2-SDK-1:1.3.1-11.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 2.1ES:IBMJava2-JRE-1:1.3.1-12.i386 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 2.1ES:IBMJava2-JRE-1:1.3.1-12.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 2.1ES:IBMJava2-SDK-1:1.3.1-11.i386 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 2.1ES:IBMJava2-SDK-1:1.3.1-11.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 2.1WS:IBMJava2-JRE-1:1.3.1-12.i386 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 2.1WS:IBMJava2-JRE-1:1.3.1-12.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 2.1WS:IBMJava2-SDK-1:1.3.1-11.i386 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 2.1WS:IBMJava2-SDK-1:1.3.1-11.src | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Critical
Multiple buffer overflows in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allow attackers to develop Java applets that read, write, or execute local files, possibly related to (1) integer overflows in the Java_sun_awt_image_ImagingLib_convolveBI, awt_parseRaster, and awt_parseColorModel functions; (2) a stack overflow in the Java_sun_awt_image_ImagingLib_lookupByteRaster function; and (3) improper handling of certain negative values in the Java_sun_font_SunLayoutEngine_nativeLayout function. NOTE: some of these details are obtained from third party information.
Affected products
Fixed
12 products, the same list as for
CVE-2006-4339
Threats
Impact
Critical
Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 6 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allows attackers to use untrusted applets to "access data in other applets," aka "The second issue."
Affected products
Fixed
12 products, the same list as for
CVE-2006-4339
Threats
Impact
Important
Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 5 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_10 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allows attackers to use untrusted applets to "access data in other applets," aka "The first issue."
Affected products
Fixed
12 products, the same list as for
CVE-2006-4339
Threats
Impact
Important
Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlier, and SDK and JRE 1.3.1_18 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption.
Affected products
Fixed
12 products, the same list as for
CVE-2006-4339
Threats
Impact
Important
References
220 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "IBMJava2-JRE and IBMJava2-SDK packages that correct several security issues\nare available for Red Hat Enterprise Linux 2.1.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "IBM\u0027s 1.3.1 Java release includes the IBM Java 2 Runtime Environment and\nthe IBM Java 2 Software Development Kit.\n\nVulnerabilities were discovered in the Java Runtime Environment. An\nuntrusted applet could use these vulnerabilities to access data from other\napplets. (CVE-2006-6736, CVE-2006-6737)\n\nBuffer overflow vulnerabilities were discovered in the Java Runtime\nEnvironment. An untrusted applet could use these flaws to elevate its\nprivileges, possibly reading and writing local files or executing local\napplications. (CVE-2006-6731)\n\nDaniel Bleichenbacher discovered an attack on PKCS #1 v1.5 signatures. If\nan RSA key with exponent 3 is used, it may be possible to forge a PKCS #1\nv1.5 signature which incorrectly verifies under implementations that do not\ncheck for excess data in the RSA exponentation result of the signature.\n\nAll users of IBMJava2 should upgrade to these updated packages, which\ncontain IBM\u0027s 1.3.1 SR10a Java release which resolves these issues.\n\nPlease note that the packages in this erratum are the same as those we\nreleased on January 24th 2007 with advisories RHBA-2007:0023 and\nRHEA-2007:0024. We have issued this security update as these previous\nadvisories did not specify that they fixed critical security issues. If you\nhave already updated to those versions of IBMJava you will not need to\napply this update.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2007:0072",
"url": "https://access.redhat.com/errata/RHSA-2007:0072"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "http://www-128.ibm.com/developerworks/java/jdk/alerts/",
"url": "http://www-128.ibm.com/developerworks/java/jdk/alerts/"
},
{
"category": "external",
"summary": "226996",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=226996"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0072.json"
}
],
"title": "Red Hat Security Advisory: IBMJava2 security update",
"tracking": {
"current_release_date": "2026-11-05T03:13:08+00:00",
"generator": {
"date": "2026-11-05T03:13:08+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.4"
}
},
"id": "RHSA-2007:0072",
"initial_release_date": "2007-01-24T00:00:00+00:00",
"revision_history": [
{
"date": "2007-01-24T00:00:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2007-02-08T12:01:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-11-05T03:13:08+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product": {
"name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 2.1",
"product": {
"name": "Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 2.1",
"product": {
"name": "Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::ws"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "IBMJava2-JRE-1:1.3.1-12.src",
"product": {
"name": "IBMJava2-JRE-1:1.3.1-12.src",
"product_id": "IBMJava2-JRE-1:1.3.1-12.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/IBMJava2-JRE@1.3.1-12?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "IBMJava2-SDK-1:1.3.1-11.src",
"product": {
"name": "IBMJava2-SDK-1:1.3.1-11.src",
"product_id": "IBMJava2-SDK-1:1.3.1-11.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/IBMJava2-SDK@1.3.1-11?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "IBMJava2-JRE-1:1.3.1-12.i386",
"product": {
"name": "IBMJava2-JRE-1:1.3.1-12.i386",
"product_id": "IBMJava2-JRE-1:1.3.1-12.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/IBMJava2-JRE@1.3.1-12?arch=i386\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "IBMJava2-SDK-1:1.3.1-11.i386",
"product": {
"name": "IBMJava2-SDK-1:1.3.1-11.i386",
"product_id": "IBMJava2-SDK-1:1.3.1-11.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/IBMJava2-SDK@1.3.1-11?arch=i386\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i386"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "IBMJava2-JRE-1:1.3.1-12.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:IBMJava2-JRE-1:1.3.1-12.i386"
},
"product_reference": "IBMJava2-JRE-1:1.3.1-12.i386",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "IBMJava2-JRE-1:1.3.1-12.src as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:IBMJava2-JRE-1:1.3.1-12.src"
},
"product_reference": "IBMJava2-JRE-1:1.3.1-12.src",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "IBMJava2-SDK-1:1.3.1-11.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:IBMJava2-SDK-1:1.3.1-11.i386"
},
"product_reference": "IBMJava2-SDK-1:1.3.1-11.i386",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "IBMJava2-SDK-1:1.3.1-11.src as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:IBMJava2-SDK-1:1.3.1-11.src"
},
"product_reference": "IBMJava2-SDK-1:1.3.1-11.src",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "IBMJava2-JRE-1:1.3.1-12.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:IBMJava2-JRE-1:1.3.1-12.i386"
},
"product_reference": "IBMJava2-JRE-1:1.3.1-12.i386",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "IBMJava2-JRE-1:1.3.1-12.src as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:IBMJava2-JRE-1:1.3.1-12.src"
},
"product_reference": "IBMJava2-JRE-1:1.3.1-12.src",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "IBMJava2-SDK-1:1.3.1-11.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:IBMJava2-SDK-1:1.3.1-11.i386"
},
"product_reference": "IBMJava2-SDK-1:1.3.1-11.i386",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "IBMJava2-SDK-1:1.3.1-11.src as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:IBMJava2-SDK-1:1.3.1-11.src"
},
"product_reference": "IBMJava2-SDK-1:1.3.1-11.src",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "IBMJava2-JRE-1:1.3.1-12.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:IBMJava2-JRE-1:1.3.1-12.i386"
},
"product_reference": "IBMJava2-JRE-1:1.3.1-12.i386",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "IBMJava2-JRE-1:1.3.1-12.src as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:IBMJava2-JRE-1:1.3.1-12.src"
},
"product_reference": "IBMJava2-JRE-1:1.3.1-12.src",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "IBMJava2-SDK-1:1.3.1-11.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:IBMJava2-SDK-1:1.3.1-11.i386"
},
"product_reference": "IBMJava2-SDK-1:1.3.1-11.i386",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "IBMJava2-SDK-1:1.3.1-11.src as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:IBMJava2-SDK-1:1.3.1-11.src"
},
"product_reference": "IBMJava2-SDK-1:1.3.1-11.src",
"relates_to_product_reference": "2.1WS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2006-4339",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-04-02T14:45:30.311567+00:00",
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash. This allows remote attackers to forge PKCS #1 v1.5 signatures. Consequently, OpenSSL may incorrectly verify X.509 and other certificates, leading to a bypass of trust and authentication mechanisms.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenSSL: OpenSSL: Signature forgery via improper PKCS-1 padding removal leading to certificate validation bypass",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"2.1AS:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1AS:IBMJava2-JRE-1:1.3.1-12.src",
"2.1AS:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1AS:IBMJava2-SDK-1:1.3.1-11.src",
"2.1ES:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1ES:IBMJava2-JRE-1:1.3.1-12.src",
"2.1ES:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1ES:IBMJava2-SDK-1:1.3.1-11.src",
"2.1WS:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1WS:IBMJava2-JRE-1:1.3.1-12.src",
"2.1WS:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1WS:IBMJava2-SDK-1:1.3.1-11.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-4339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-4339",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-4339"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-4339",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-4339"
},
{
"category": "external",
"summary": "http://dev2dev.bea.com/pub/advisory/238",
"url": "http://dev2dev.bea.com/pub/advisory/238"
},
{
"category": "external",
"summary": "http://docs.info.apple.com/article.html?artnum=304829",
"url": "http://docs.info.apple.com/article.html?artnum=304829"
},
{
"category": "external",
"summary": "http://docs.info.apple.com/article.html?artnum=307177",
"url": "http://docs.info.apple.com/article.html?artnum=307177"
},
{
"category": "external",
"summary": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01070495",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01070495"
},
{
"category": "external",
"summary": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771"
},
{
"category": "external",
"summary": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540",
"url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540"
},
{
"category": "external",
"summary": "http://jvn.jp/en/jp/JVN51615542/index.html",
"url": "http://jvn.jp/en/jp/JVN51615542/index.html"
},
{
"category": "external",
"summary": "http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000079.html",
"url": "http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000079.html"
},
{
"category": "external",
"summary": "http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html",
"url": "http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html"
},
{
"category": "external",
"summary": "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
"url": "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html"
},
{
"category": "external",
"summary": "http://lists.vmware.com/pipermail/security-announce/2008/000008.html",
"url": "http://lists.vmware.com/pipermail/security-announce/2008/000008.html"
},
{
"category": "external",
"summary": "http://marc.info/?l=bind-announce\u0026m=116253119512445\u0026w=2",
"url": "http://marc.info/?l=bind-announce\u0026m=116253119512445\u0026w=2"
},
{
"category": "external",
"summary": "http://marc.info/?l=bugtraq\u0026m=130497311408250\u0026w=2",
"url": "http://marc.info/?l=bugtraq\u0026m=130497311408250\u0026w=2"
},
{
"category": "external",
"summary": "http://openvpn.net/changelog.html",
"url": "http://openvpn.net/changelog.html"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21709",
"url": "http://secunia.com/advisories/21709"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21767",
"url": "http://secunia.com/advisories/21767"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21776",
"url": "http://secunia.com/advisories/21776"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21778",
"url": "http://secunia.com/advisories/21778"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21785",
"url": "http://secunia.com/advisories/21785"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21791",
"url": "http://secunia.com/advisories/21791"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21812",
"url": "http://secunia.com/advisories/21812"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21823",
"url": "http://secunia.com/advisories/21823"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21846",
"url": "http://secunia.com/advisories/21846"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21852",
"url": "http://secunia.com/advisories/21852"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21870",
"url": "http://secunia.com/advisories/21870"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21873",
"url": "http://secunia.com/advisories/21873"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21906",
"url": "http://secunia.com/advisories/21906"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21927",
"url": "http://secunia.com/advisories/21927"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21930",
"url": "http://secunia.com/advisories/21930"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21982",
"url": "http://secunia.com/advisories/21982"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22036",
"url": "http://secunia.com/advisories/22036"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22044",
"url": "http://secunia.com/advisories/22044"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22066",
"url": "http://secunia.com/advisories/22066"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22161",
"url": "http://secunia.com/advisories/22161"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22226",
"url": "http://secunia.com/advisories/22226"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22232",
"url": "http://secunia.com/advisories/22232"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22259",
"url": "http://secunia.com/advisories/22259"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22260",
"url": "http://secunia.com/advisories/22260"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22284",
"url": "http://secunia.com/advisories/22284"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22325",
"url": "http://secunia.com/advisories/22325"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22446",
"url": "http://secunia.com/advisories/22446"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22509",
"url": "http://secunia.com/advisories/22509"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22513",
"url": "http://secunia.com/advisories/22513"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22523",
"url": "http://secunia.com/advisories/22523"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22545",
"url": "http://secunia.com/advisories/22545"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22585",
"url": "http://secunia.com/advisories/22585"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22671",
"url": "http://secunia.com/advisories/22671"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22689",
"url": "http://secunia.com/advisories/22689"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22711",
"url": "http://secunia.com/advisories/22711"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22733",
"url": "http://secunia.com/advisories/22733"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22758",
"url": "http://secunia.com/advisories/22758"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22799",
"url": "http://secunia.com/advisories/22799"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22932",
"url": "http://secunia.com/advisories/22932"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22934",
"url": "http://secunia.com/advisories/22934"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22936",
"url": "http://secunia.com/advisories/22936"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22937",
"url": "http://secunia.com/advisories/22937"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22938",
"url": "http://secunia.com/advisories/22938"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22939",
"url": "http://secunia.com/advisories/22939"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22940",
"url": "http://secunia.com/advisories/22940"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22948",
"url": "http://secunia.com/advisories/22948"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22949",
"url": "http://secunia.com/advisories/22949"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/23155",
"url": "http://secunia.com/advisories/23155"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/23455",
"url": "http://secunia.com/advisories/23455"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/23680",
"url": "http://secunia.com/advisories/23680"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/23794",
"url": "http://secunia.com/advisories/23794"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/23841",
"url": "http://secunia.com/advisories/23841"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/23915",
"url": "http://secunia.com/advisories/23915"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/24099",
"url": "http://secunia.com/advisories/24099"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/24930",
"url": "http://secunia.com/advisories/24930"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/24950",
"url": "http://secunia.com/advisories/24950"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/25284",
"url": "http://secunia.com/advisories/25284"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/25399",
"url": "http://secunia.com/advisories/25399"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/25649",
"url": "http://secunia.com/advisories/25649"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/26329",
"url": "http://secunia.com/advisories/26329"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/26893",
"url": "http://secunia.com/advisories/26893"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/28115",
"url": "http://secunia.com/advisories/28115"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/31492",
"url": "http://secunia.com/advisories/31492"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/38567",
"url": "http://secunia.com/advisories/38567"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/38568",
"url": "http://secunia.com/advisories/38568"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/41818",
"url": "http://secunia.com/advisories/41818"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/60799",
"url": "http://secunia.com/advisories/60799"
},
{
"category": "external",
"summary": "http://security.freebsd.org/advisories/FreeBSD-SA-06:19.openssl.asc",
"url": "http://security.freebsd.org/advisories/FreeBSD-SA-06:19.openssl.asc"
},
{
"category": "external",
"summary": "http://security.gentoo.org/glsa/glsa-200609-05.xml",
"url": "http://security.gentoo.org/glsa/glsa-200609-05.xml"
},
{
"category": "external",
"summary": "http://security.gentoo.org/glsa/glsa-200609-18.xml",
"url": "http://security.gentoo.org/glsa/glsa-200609-18.xml"
},
{
"category": "external",
"summary": "http://securitytracker.com/id?1016791",
"url": "http://securitytracker.com/id?1016791"
},
{
"category": "external",
"summary": "http://securitytracker.com/id?1017522",
"url": "http://securitytracker.com/id?1017522"
},
{
"category": "external",
"summary": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.566955",
"url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.566955"
},
{
"category": "external",
"summary": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.605306",
"url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.605306"
},
{
"category": "external",
"summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1"
},
{
"category": "external",
"summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102656-1",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102656-1"
},
{
"category": "external",
"summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102657-1",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102657-1"
},
{
"category": "external",
"summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102686-1",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102686-1"
},
{
"category": "external",
"summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102696-1",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102696-1"
},
{
"category": "external",
"summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102722-1",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102722-1"
},
{
"category": "external",
"summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102744-1",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102744-1"
},
{
"category": "external",
"summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102759-1",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102759-1"
},
{
"category": "external",
"summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200708-1",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200708-1"
},
{
"category": "external",
"summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201247-1",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201247-1"
},
{
"category": "external",
"summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1"
},
{
"category": "external",
"summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000148.1-1",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000148.1-1"
},
{
"category": "external",
"summary": "http://support.attachmate.com/techdocs/2127.html",
"url": "http://support.attachmate.com/techdocs/2127.html"
},
{
"category": "external",
"summary": "http://support.attachmate.com/techdocs/2128.html",
"url": "http://support.attachmate.com/techdocs/2128.html"
},
{
"category": "external",
"summary": "http://support.attachmate.com/techdocs/2137.html",
"url": "http://support.attachmate.com/techdocs/2137.html"
},
{
"category": "external",
"summary": "http://support.avaya.com/elmodocs2/security/ASA-2006-188.htm",
"url": "http://support.avaya.com/elmodocs2/security/ASA-2006-188.htm"
},
{
"category": "external",
"summary": "http://www.arkoon.fr/upload/alertes/40AK-2006-04-FR-1.1_SSL360_OPENSSL_RSA.pdf",
"url": "http://www.arkoon.fr/upload/alertes/40AK-2006-04-FR-1.1_SSL360_OPENSSL_RSA.pdf"
},
{
"category": "external",
"summary": "http://www.bluecoat.com/support/knowledge/openSSL_RSA_Signature_forgery.html",
"url": "http://www.bluecoat.com/support/knowledge/openSSL_RSA_Signature_forgery.html"
},
{
"category": "external",
"summary": "http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html",
"url": "http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html"
},
{
"category": "external",
"summary": "http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml",
"url": "http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml"
},
{
"category": "external",
"summary": "http://www.debian.org/security/2006/dsa-1174",
"url": "http://www.debian.org/security/2006/dsa-1174"
},
{
"category": "external",
"summary": "http://www.gentoo.org/security/en/glsa/glsa-200610-06.xml",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200610-06.xml"
},
{
"category": "external",
"summary": "http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml",
"url": "http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml"
},
{
"category": "external",
"summary": "http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html",
"url": "http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html"
},
{
"category": "external",
"summary": "http://www.kb.cert.org/vuls/id/845620",
"url": "http://www.kb.cert.org/vuls/id/845620"
},
{
"category": "external",
"summary": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:161",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:161"
},
{
"category": "external",
"summary": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:177",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:177"
},
{
"category": "external",
"summary": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:178",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:178"
},
{
"category": "external",
"summary": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:207",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:207"
},
{
"category": "external",
"summary": "http://www.matasano.com/log/469/many-rsa-signatures-may-be-forgeable-in-openssl-and-elsewhere/",
"url": "http://www.matasano.com/log/469/many-rsa-signatures-may-be-forgeable-in-openssl-and-elsewhere/"
},
{
"category": "external",
"summary": "http://www.novell.com/linux/security/advisories/2006_26_sr.html",
"url": "http://www.novell.com/linux/security/advisories/2006_26_sr.html"
},
{
"category": "external",
"summary": "http://www.novell.com/linux/security/advisories/2006_55_ssl.html",
"url": "http://www.novell.com/linux/security/advisories/2006_55_ssl.html"
},
{
"category": "external",
"summary": "http://www.novell.com/linux/security/advisories/2006_61_opera.html",
"url": "http://www.novell.com/linux/security/advisories/2006_61_opera.html"
},
{
"category": "external",
"summary": "http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html",
"url": "http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html"
},
{
"category": "external",
"summary": "http://www.openbsd.org/errata.html",
"url": "http://www.openbsd.org/errata.html"
},
{
"category": "external",
"summary": "http://www.openoffice.org/security/cves/CVE-2006-4339.html",
"url": "http://www.openoffice.org/security/cves/CVE-2006-4339.html"
},
{
"category": "external",
"summary": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.018.html",
"url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.018.html"
},
{
"category": "external",
"summary": "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.029-bind.html",
"url": "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.029-bind.html"
},
{
"category": "external",
"summary": "http://www.openssl.org/news/secadv_20060905.txt",
"url": "http://www.openssl.org/news/secadv_20060905.txt"
},
{
"category": "external",
"summary": "http://www.opera.com/support/search/supsearch.dml?index=845",
"url": "http://www.opera.com/support/search/supsearch.dml?index=845"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html",
"url": "http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html"
},
{
"category": "external",
"summary": "http://www.osvdb.org/28549",
"url": "http://www.osvdb.org/28549"
},
{
"category": "external",
"summary": "http://www.redhat.com/support/errata/RHSA-2006-0661.html",
"url": "http://www.redhat.com/support/errata/RHSA-2006-0661.html"
},
{
"category": "external",
"summary": "http://www.redhat.com/support/errata/RHSA-2007-0062.html",
"url": "http://www.redhat.com/support/errata/RHSA-2007-0062.html"
},
{
"category": "external",
"summary": "http://www.redhat.com/support/errata/RHSA-2007-0072.html",
"url": "http://www.redhat.com/support/errata/RHSA-2007-0072.html"
},
{
"category": "external",
"summary": "http://www.redhat.com/support/errata/RHSA-2007-0073.html",
"url": "http://www.redhat.com/support/errata/RHSA-2007-0073.html"
},
{
"category": "external",
"summary": "http://www.redhat.com/support/errata/RHSA-2008-0629.html",
"url": "http://www.redhat.com/support/errata/RHSA-2008-0629.html"
},
{
"category": "external",
"summary": "http://www.securityfocus.com/archive/1/445231/100/0/threaded",
"url": "http://www.securityfocus.com/archive/1/445231/100/0/threaded"
},
{
"category": "external",
"summary": "http://www.securityfocus.com/archive/1/445822/100/0/threaded",
"url": "http://www.securityfocus.com/archive/1/445822/100/0/threaded"
},
{
"category": "external",
"summary": "http://www.securityfocus.com/archive/1/450327/100/0/threaded",
"url": "http://www.securityfocus.com/archive/1/450327/100/0/threaded"
},
{
"category": "external",
"summary": "http://www.securityfocus.com/archive/1/456546/100/200/threaded",
"url": "http://www.securityfocus.com/archive/1/456546/100/200/threaded"
},
{
"category": "external",
"summary": "http://www.securityfocus.com/archive/1/489739/100/0/threaded",
"url": "http://www.securityfocus.com/archive/1/489739/100/0/threaded"
},
{
"category": "external",
"summary": "http://www.securityfocus.com/bid/19849",
"url": "http://www.securityfocus.com/bid/19849"
},
{
"category": "external",
"summary": "http://www.securityfocus.com/bid/22083",
"url": "http://www.securityfocus.com/bid/22083"
},
{
"category": "external",
"summary": "http://www.securityfocus.com/bid/28276",
"url": "http://www.securityfocus.com/bid/28276"
},
{
"category": "external",
"summary": "http://www.serv-u.com/releasenotes/",
"url": "http://www.serv-u.com/releasenotes/"
},
{
"category": "external",
"summary": "http://www.sybase.com/detail?id=1047991",
"url": "http://www.sybase.com/detail?id=1047991"
},
{
"category": "external",
"summary": "http://www.ubuntu.com/usn/usn-339-1",
"url": "http://www.ubuntu.com/usn/usn-339-1"
},
{
"category": "external",
"summary": "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
"url": "http://www.us-cert.gov/cas/techalerts/TA06-333A.html"
},
{
"category": "external",
"summary": "http://www.us.debian.org/security/2006/dsa-1173",
"url": "http://www.us.debian.org/security/2006/dsa-1173"
},
{
"category": "external",
"summary": "http://www.vmware.com/security/advisories/VMSA-2008-0005.html",
"url": "http://www.vmware.com/security/advisories/VMSA-2008-0005.html"
},
{
"category": "external",
"summary": "http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html",
"url": "http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html"
},
{
"category": "external",
"summary": "http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html",
"url": "http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html"
},
{
"category": "external",
"summary": "http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html",
"url": "http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html"
},
{
"category": "external",
"summary": "http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html",
"url": "http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html"
},
{
"category": "external",
"summary": "http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html",
"url": "http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html"
},
{
"category": "external",
"summary": "http://www.vmware.com/support/player/doc/releasenotes_player.html",
"url": "http://www.vmware.com/support/player/doc/releasenotes_player.html"
},
{
"category": "external",
"summary": "http://www.vmware.com/support/player2/doc/releasenotes_player2.html",
"url": "http://www.vmware.com/support/player2/doc/releasenotes_player2.html"
},
{
"category": "external",
"summary": "http://www.vmware.com/support/server/doc/releasenotes_server.html",
"url": "http://www.vmware.com/support/server/doc/releasenotes_server.html"
},
{
"category": "external",
"summary": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html",
"url": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"
},
{
"category": "external",
"summary": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html",
"url": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"
},
{
"category": "external",
"summary": "http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html",
"url": "http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html"
},
{
"category": "external",
"summary": "http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html",
"url": "http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/3453",
"url": "http://www.vupen.com/english/advisories/2006/3453"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/3566",
"url": "http://www.vupen.com/english/advisories/2006/3566"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/3730",
"url": "http://www.vupen.com/english/advisories/2006/3730"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/3748",
"url": "http://www.vupen.com/english/advisories/2006/3748"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/3793",
"url": "http://www.vupen.com/english/advisories/2006/3793"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/3899",
"url": "http://www.vupen.com/english/advisories/2006/3899"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/3936",
"url": "http://www.vupen.com/english/advisories/2006/3936"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/4205",
"url": "http://www.vupen.com/english/advisories/2006/4205"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/4206",
"url": "http://www.vupen.com/english/advisories/2006/4206"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/4207",
"url": "http://www.vupen.com/english/advisories/2006/4207"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/4216",
"url": "http://www.vupen.com/english/advisories/2006/4216"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/4327",
"url": "http://www.vupen.com/english/advisories/2006/4327"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/4329",
"url": "http://www.vupen.com/english/advisories/2006/4329"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/4366",
"url": "http://www.vupen.com/english/advisories/2006/4366"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/4417",
"url": "http://www.vupen.com/english/advisories/2006/4417"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/4586",
"url": "http://www.vupen.com/english/advisories/2006/4586"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/4744",
"url": "http://www.vupen.com/english/advisories/2006/4744"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/4750",
"url": "http://www.vupen.com/english/advisories/2006/4750"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/5146",
"url": "http://www.vupen.com/english/advisories/2006/5146"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2007/0254",
"url": "http://www.vupen.com/english/advisories/2007/0254"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2007/0343",
"url": "http://www.vupen.com/english/advisories/2007/0343"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2007/1401",
"url": "http://www.vupen.com/english/advisories/2007/1401"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2007/1815",
"url": "http://www.vupen.com/english/advisories/2007/1815"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2007/1945",
"url": "http://www.vupen.com/english/advisories/2007/1945"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2007/2163",
"url": "http://www.vupen.com/english/advisories/2007/2163"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2007/2315",
"url": "http://www.vupen.com/english/advisories/2007/2315"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2007/2783",
"url": "http://www.vupen.com/english/advisories/2007/2783"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2007/4224",
"url": "http://www.vupen.com/english/advisories/2007/4224"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2008/0905/references",
"url": "http://www.vupen.com/english/advisories/2008/0905/references"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2010/0366",
"url": "http://www.vupen.com/english/advisories/2010/0366"
},
{
"category": "external",
"summary": "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742",
"url": "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742"
},
{
"category": "external",
"summary": "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18\u0026ID=3117",
"url": "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18\u0026ID=3117"
},
{
"category": "external",
"summary": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28755",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28755"
},
{
"category": "external",
"summary": "https://issues.rpath.com/browse/RPL-1633",
"url": "https://issues.rpath.com/browse/RPL-1633"
},
{
"category": "external",
"summary": "https://issues.rpath.com/browse/RPL-616",
"url": "https://issues.rpath.com/browse/RPL-616"
},
{
"category": "external",
"summary": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11656",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11656"
},
{
"category": "external",
"summary": "https://secure-support.novell.com/KanisaPlatform/Publishing/41/3143224_f.SAL_Public.html",
"url": "https://secure-support.novell.com/KanisaPlatform/Publishing/41/3143224_f.SAL_Public.html"
},
{
"category": "external",
"summary": "https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144",
"url": "https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144"
}
],
"release_date": "2006-09-05T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2007-01-24T00:00:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. Only those\nRPMs which are currently installed will be updated. Those RPMs which are\nnot installed but included in the list will not be updated. Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"2.1AS:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1AS:IBMJava2-JRE-1:1.3.1-12.src",
"2.1AS:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1AS:IBMJava2-SDK-1:1.3.1-11.src",
"2.1ES:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1ES:IBMJava2-JRE-1:1.3.1-12.src",
"2.1ES:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1ES:IBMJava2-SDK-1:1.3.1-11.src",
"2.1WS:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1WS:IBMJava2-JRE-1:1.3.1-12.src",
"2.1WS:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1WS:IBMJava2-SDK-1:1.3.1-11.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2007:0072"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"2.1AS:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1AS:IBMJava2-JRE-1:1.3.1-12.src",
"2.1AS:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1AS:IBMJava2-SDK-1:1.3.1-11.src",
"2.1ES:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1ES:IBMJava2-JRE-1:1.3.1-12.src",
"2.1ES:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1ES:IBMJava2-SDK-1:1.3.1-11.src",
"2.1WS:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1WS:IBMJava2-JRE-1:1.3.1-12.src",
"2.1WS:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1WS:IBMJava2-SDK-1:1.3.1-11.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"2.1AS:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1AS:IBMJava2-JRE-1:1.3.1-12.src",
"2.1AS:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1AS:IBMJava2-SDK-1:1.3.1-11.src",
"2.1ES:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1ES:IBMJava2-JRE-1:1.3.1-12.src",
"2.1ES:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1ES:IBMJava2-SDK-1:1.3.1-11.src",
"2.1WS:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1WS:IBMJava2-JRE-1:1.3.1-12.src",
"2.1WS:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1WS:IBMJava2-SDK-1:1.3.1-11.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "OpenSSL: OpenSSL: Signature forgery via improper PKCS-1 padding removal leading to certificate validation bypass"
},
{
"cve": "CVE-2006-6731",
"discovery_date": "2007-01-04T00:00:00+00:00",
"notes": [
{
"category": "description",
"text": "Multiple buffer overflows in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allow attackers to develop Java applets that read, write, or execute local files, possibly related to (1) integer overflows in the Java_sun_awt_image_ImagingLib_convolveBI, awt_parseRaster, and awt_parseColorModel functions; (2) a stack overflow in the Java_sun_awt_image_ImagingLib_lookupByteRaster function; and (3) improper handling of certain negative values in the Java_sun_font_SunLayoutEngine_nativeLayout function. NOTE: some of these details are obtained from third party information.",
"title": "Vulnerability description"
},
{
"category": "other",
"text": "Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"2.1AS:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1AS:IBMJava2-JRE-1:1.3.1-12.src",
"2.1AS:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1AS:IBMJava2-SDK-1:1.3.1-11.src",
"2.1ES:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1ES:IBMJava2-JRE-1:1.3.1-12.src",
"2.1ES:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1ES:IBMJava2-SDK-1:1.3.1-11.src",
"2.1WS:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1WS:IBMJava2-JRE-1:1.3.1-12.src",
"2.1WS:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1WS:IBMJava2-SDK-1:1.3.1-11.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-6731"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-6731",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-6731"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-6731",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-6731"
}
],
"release_date": "2007-01-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2007-01-24T00:00:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. Only those\nRPMs which are currently installed will be updated. Those RPMs which are\nnot installed but included in the list will not be updated. Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"2.1AS:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1AS:IBMJava2-JRE-1:1.3.1-12.src",
"2.1AS:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1AS:IBMJava2-SDK-1:1.3.1-11.src",
"2.1ES:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1ES:IBMJava2-JRE-1:1.3.1-12.src",
"2.1ES:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1ES:IBMJava2-SDK-1:1.3.1-11.src",
"2.1WS:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1WS:IBMJava2-JRE-1:1.3.1-12.src",
"2.1WS:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1WS:IBMJava2-SDK-1:1.3.1-11.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2007:0072"
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "security flaw"
},
{
"cve": "CVE-2006-6736",
"discovery_date": "2007-01-04T00:00:00+00:00",
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 6 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allows attackers to use untrusted applets to \"access data in other applets,\" aka \"The second issue.\"",
"title": "Vulnerability description"
},
{
"category": "other",
"text": "Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"2.1AS:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1AS:IBMJava2-JRE-1:1.3.1-12.src",
"2.1AS:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1AS:IBMJava2-SDK-1:1.3.1-11.src",
"2.1ES:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1ES:IBMJava2-JRE-1:1.3.1-12.src",
"2.1ES:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1ES:IBMJava2-SDK-1:1.3.1-11.src",
"2.1WS:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1WS:IBMJava2-JRE-1:1.3.1-12.src",
"2.1WS:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1WS:IBMJava2-SDK-1:1.3.1-11.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-6736"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-6736",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-6736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-6736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-6736"
}
],
"release_date": "2007-01-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2007-01-24T00:00:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. Only those\nRPMs which are currently installed will be updated. Those RPMs which are\nnot installed but included in the list will not be updated. Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"2.1AS:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1AS:IBMJava2-JRE-1:1.3.1-12.src",
"2.1AS:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1AS:IBMJava2-SDK-1:1.3.1-11.src",
"2.1ES:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1ES:IBMJava2-JRE-1:1.3.1-12.src",
"2.1ES:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1ES:IBMJava2-SDK-1:1.3.1-11.src",
"2.1WS:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1WS:IBMJava2-JRE-1:1.3.1-12.src",
"2.1WS:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1WS:IBMJava2-SDK-1:1.3.1-11.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2007:0072"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "security flaw"
},
{
"cve": "CVE-2006-6737",
"discovery_date": "2007-01-04T00:00:00+00:00",
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 5 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_10 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allows attackers to use untrusted applets to \"access data in other applets,\" aka \"The first issue.\"",
"title": "Vulnerability description"
},
{
"category": "other",
"text": "Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"2.1AS:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1AS:IBMJava2-JRE-1:1.3.1-12.src",
"2.1AS:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1AS:IBMJava2-SDK-1:1.3.1-11.src",
"2.1ES:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1ES:IBMJava2-JRE-1:1.3.1-12.src",
"2.1ES:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1ES:IBMJava2-SDK-1:1.3.1-11.src",
"2.1WS:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1WS:IBMJava2-JRE-1:1.3.1-12.src",
"2.1WS:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1WS:IBMJava2-SDK-1:1.3.1-11.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-6737"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-6737",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-6737"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-6737",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-6737"
}
],
"release_date": "2007-01-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2007-01-24T00:00:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. Only those\nRPMs which are currently installed will be updated. Those RPMs which are\nnot installed but included in the list will not be updated. Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"2.1AS:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1AS:IBMJava2-JRE-1:1.3.1-12.src",
"2.1AS:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1AS:IBMJava2-SDK-1:1.3.1-11.src",
"2.1ES:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1ES:IBMJava2-JRE-1:1.3.1-12.src",
"2.1ES:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1ES:IBMJava2-SDK-1:1.3.1-11.src",
"2.1WS:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1WS:IBMJava2-JRE-1:1.3.1-12.src",
"2.1WS:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1WS:IBMJava2-SDK-1:1.3.1-11.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2007:0072"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "security flaw"
},
{
"cve": "CVE-2007-0243",
"discovery_date": "2007-04-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "325941"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlier, and SDK and JRE 1.3.1_18 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "java-jre: GIF buffer overflow",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1AS:IBMJava2-JRE-1:1.3.1-12.src",
"2.1AS:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1AS:IBMJava2-SDK-1:1.3.1-11.src",
"2.1ES:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1ES:IBMJava2-JRE-1:1.3.1-12.src",
"2.1ES:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1ES:IBMJava2-SDK-1:1.3.1-11.src",
"2.1WS:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1WS:IBMJava2-JRE-1:1.3.1-12.src",
"2.1WS:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1WS:IBMJava2-SDK-1:1.3.1-11.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-0243"
},
{
"category": "external",
"summary": "RHBZ#325941",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=325941"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-0243",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-0243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-0243"
}
],
"release_date": "2007-01-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2007-01-24T00:00:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. Only those\nRPMs which are currently installed will be updated. Those RPMs which are\nnot installed but included in the list will not be updated. Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"2.1AS:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1AS:IBMJava2-JRE-1:1.3.1-12.src",
"2.1AS:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1AS:IBMJava2-SDK-1:1.3.1-11.src",
"2.1ES:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1ES:IBMJava2-JRE-1:1.3.1-12.src",
"2.1ES:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1ES:IBMJava2-SDK-1:1.3.1-11.src",
"2.1WS:IBMJava2-JRE-1:1.3.1-12.i386",
"2.1WS:IBMJava2-JRE-1:1.3.1-12.src",
"2.1WS:IBMJava2-SDK-1:1.3.1-11.i386",
"2.1WS:IBMJava2-SDK-1:1.3.1-11.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2007:0072"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "java-jre: GIF buffer overflow"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.