The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1384 advisory.

    The Sun 1.6.0 Java release includes the Sun Java 6 Runtime Environment and     the Sun Java 6 Software Development Kit.

    This update fixes several vulnerabilities in the Sun Java 6 Runtime     Environment and the Sun Java 6 Software Development Kit. Further     information about these flaws can be found on the Oracle Java SE Critical     Patch page, listed in the References section. (CVE-2011-3389,     CVE-2011-3516, CVE-2011-3521, CVE-2011-3544, CVE-2011-3545, CVE-2011-3546,     CVE-2011-3547, CVE-2011-3548, CVE-2011-3549, CVE-2011-3550, CVE-2011-3551,     CVE-2011-3552, CVE-2011-3553, CVE-2011-3554, CVE-2011-3555, CVE-2011-3556,     CVE-2011-3557, CVE-2011-3558, CVE-2011-3560, CVE-2011-3561)

    All users of java-1.6.0-sun are advised to upgrade to these updated     packages, which provide JDK and JRE 6 Update 29 and resolve these issues.
    All running instances of Sun Java must be restarted for the update to take     effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is earlier than 7 Update 1 / 6 Update 29 / 5.0 Update 32 / 1.4.2_34 and is potentially affected by security issues in the following components :

  - 2D
  - AWT
  - Deployment
  - Deserialization
  - Hotspot
  - Java Runtime Environment
  - JAXWS
  - JSSE
  - Networking
  - RMI
  - Scripting
  - Sound
  - Swing

The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is earlier than 7 Update 1 / 6 Update 29 / 5.0 Update 32 / 1.4.2_34.  As such, it is potentially affected by security issues in the following components :

  - 2D
  - AWT
  - Deployment
  - Deserialization
  - Hotspot
  - Java Runtime Environment
  - JAXWS
  - JSSE
  - Networking
  - RMI
  - Scripting
  - Sound
  - Swing

Oracle/Sun Java 1.6.0 was updated to the u26 release, fixing lots of bugs and security issues.

Please see http://www.oracle.com/technetwork/topics/security/javacpuoct2011-44343 1.html

for more details.

The remote VMware ESX / ESXi host is missing a security-related patch.
It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in the following components :

  - Apache Tomcat
  - bzip2 library
  - JRE
  - WDDM display driver
  - XPDM display driver

The remote host is affected by the vulnerability described in GLSA-201111-02 (Oracle JRE/JDK: Multiple vulnerabilities)

    Multiple vulnerabilities have been reported in the Oracle Java       implementation. Please review the CVE identifiers referenced below and       the associated Oracle Critical Patch Update Advisory for details.
  Impact :

    A remote attacker could exploit these vulnerabilities to cause       unspecified impact, possibly including remote execution of arbitrary       code.
  Workaround :

    There is no known workaround at this time.

a. VirtualCenter and ESX, Oracle (Sun) JRE update 1.5.0_32

   Oracle (Sun) JRE is updated to version 1.5.0_32, which addresses    multiple security issues that existed in earlier releases of Oracle    (Sun) JRE.

   Oracle has documented the CVE identifiers that are addressed in    JRE 1.5.0_32 in the Oracle Java SE Critical Patch Update Advisory of    October 2011.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0034 advisory.

    The IBM Java SE version 6 release includes the IBM Java 6 Runtime     Environment and the IBM Java 6 Software Development Kit.

    This update fixes several vulnerabilities in the IBM Java 6 Runtime     Environment and the IBM Java 6 Software Development Kit. Detailed     vulnerability descriptions are linked from the IBM Security alerts page,     listed in the References section. (CVE-2011-3389, CVE-2011-3516,     CVE-2011-3521, CVE-2011-3544, CVE-2011-3545, CVE-2011-3546, CVE-2011-3547,     CVE-2011-3548, CVE-2011-3549, CVE-2011-3550, CVE-2011-3551, CVE-2011-3552,     CVE-2011-3553, CVE-2011-3554, CVE-2011-3556, CVE-2011-3557, CVE-2011-3560,     CVE-2011-3561)

    All users of java-1.6.0-ibm are advised to upgrade to these updated     packages, containing the IBM Java 6 SR10 release. All running instances     of IBM Java must be restarted for the update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

IBM Java 1.6.0 SR10 has been released fixing the following CVE's :

  - CVE-2011-3389

  - CVE-2011-3516

  - CVE-2011-3521

  - CVE-2011-3544

  - CVE-2011-3545

  - CVE-2011-3546

  - CVE-2011-3547

  - CVE-2011-3548

  - CVE-2011-3549

  - CVE-2011-3550

  - CVE-2011-3551

  - CVE-2011-3552

  - CVE-2011-3553

  - CVE-2011-3554

  - CVE-2011-3556

  - CVE-2011-3557

  - CVE-2011-3560

  - CVE-2011-3561

Oracle/Sun OpenJDK 1.6.0 was updated to the 1.10.4release, fixing lots of bugs and security issues.

Please see http://www.oracle.com/technetwork/topics/security/javacpuoct2011-44343 1.html

for more details.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
56560	RHEL 5 / 6 : java-1.6.0-sun (RHSA-2011:1384)	Nessus	Red Hat Local Security Checks	2011/10/20	2025/3/21	critical
56566	Oracle Java SE Multiple Vulnerabilities (October 2011 CPU) (BEAST)	Nessus	Windows	2011/10/20	2022/12/5	critical
64846	Oracle Java SE Multiple Vulnerabilities (October 2011 CPU) (BEAST) (Unix)	Nessus	Misc.	2013/2/22	2026/9/29	critical
75874	openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-5320) (BEAST)	Nessus	SuSE Local Security Checks	2014/6/13	2022/12/5	critical
89106	VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2012-0005) (BEAST) (remote check)	Nessus	Misc.	2016/3/3	2022/12/5	critical
56724	GLSA-201111-02 : Oracle JRE/JDK: Multiple vulnerabilities (BEAST)	Nessus	Gentoo Local Security Checks	2011/11/7	2022/12/5	critical
58302	VMSA-2012-0003 : VMware VirtualCenter Update and ESX 3.5 patch update JRE	Nessus	VMware ESX Local Security Checks	2012/3/9	2022/12/5	critical
57595	RHEL 6 : java-1.6.0-ibm (RHSA-2012:0034)	Nessus	Red Hat Local Security Checks	2012/1/19	2025/4/15	critical
57658	SuSE 10 Security Update : IBM Java (ZYPP Patch Number 7926) (BEAST)	Nessus	SuSE Local Security Checks	2012/1/24	2022/12/5	critical
75870	openSUSE Security Update : java-1_6_0-openjdk (java-1_6_0-openjdk-5329) (BEAST)	Nessus	SuSE Local Security Checks	2014/6/13	2022/12/5	critical

検出

プラグインの検索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical