The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1021 advisory.

  - jar: directory traversal vulnerability (CVE-2005-1080)

  - IBM JDK: ephemeral RSA keys accepted for non-export SSL/TLS cipher suites (FREAK) (CVE-2015-0138)

  - IBM JDK: unspecified Java sandbox restrictions bypass (CVE-2015-0192)

  - Oracle JDK: unspecified vulnerability fixed in 5.0u85, 6u95, 7u79 and 8u45 (2D) (CVE-2015-0459,     CVE-2015-0491)

  - ICU: layout engine glyphStorage off-by-one (OpenJDK 2D, 8067699) (CVE-2015-0469)

  - OpenJDK: incorrect permissions check in resource loading (Beans, 8068320) (CVE-2015-0477)

  - OpenJDK: insufficient hardening of RSA-CRT implementation (JCE, 8071726) (CVE-2015-0478)

  - OpenJDK: jar directory traversal issues (Tools, 8064601) (CVE-2015-0480)

  - OpenJDK: certificate options parsing uncaught exception (JSSE, 8068720) (CVE-2015-0488)

  - IBM JDK: unspecified partial Java sandbox restrictions bypass (CVE-2015-1914)

  - SSL/TLS: Invariance Weakness vulnerability in RC4 stream cipher (CVE-2015-2808)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

IBM Java 1.5.0 was updated to SR16-FP10 fixing security issues and bugs.

Tabulated information can be found on: <a href='http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_ Update_May_2015'>http://www.ibm.com/developerworks/java/jdk/alerts/#IB M_Security_Update_May_2015</a>

CVE-2015-0192 CVE-2015-2808 CVE-2015-1914 CVE-2015-0138 CVE-2015-0491 CVE-2015-0459 CVE-2015-0469 CVE-2015-0480 CVE-2015-0488 CVE-2015-0478 CVE-2015-0477 CVE-2015-0204

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

IBM Java 1.6.0 was updated to SR16-FP4 fixing security issues and bugs.

Tabulated information can be found on: <a href='http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_ Update_May_2015'>http://www.ibm.com/developerworks/java/jdk/alerts/#IB M_Security_Update_May_2015</a>

CVE-2015-0192 CVE-2015-2808 CVE-2015-1914 CVE-2015-0138 CVE-2015-0491 CVE-2015-0458 CVE-2015-0459 CVE-2015-0469 CVE-2015-0480 CVE-2015-0488 CVE-2015-0478 CVE-2015-0477 CVE-2015-0204

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

IBM Java 1.7.0 was updated to SR9 fixing security issues and bugs.

Tabulated information can be found on: <a href='http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_ Update_May_2015'>http://www.ibm.com/developerworks/java/jdk/alerts/#IB M_Security_Update_May_2015</a>

CVE-2015-0192 CVE-2015-2808 CVE-2015-1914 CVE-2015-0138 CVE-2015-0491 CVE-2015-0458 CVE-2015-0459 CVE-2015-0469 CVE-2015-0480 CVE-2015-0488 CVE-2015-0478 CVE-2015-0477 CVE-2015-0204

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
83754	RHEL 5 / 6 : java-1.5.0-ibm (RHSA-2015:1021)	Nessus	Red Hat Local Security Checks	2015/5/21	2024/4/21	critical
84285	SUSE SLES10 Security Update : IBM Java (SUSE-SU-2015:1085-1) (Bar Mitzvah) (FREAK)	Nessus	SuSE Local Security Checks	2015/6/19	2021/1/6	critical
84286	SUSE SLES11 Security Update : IBM Java (SUSE-SU-2015:1086-1) (Bar Mitzvah) (FREAK)	Nessus	SuSE Local Security Checks	2015/6/19	2021/1/19	critical
84423	SUSE SLES11 Security Update : Java (SUSE-SU-2015:1086-3) (Bar Mitzvah) (FREAK)	Nessus	SuSE Local Security Checks	2015/6/26	2021/1/19	critical

検出

プラグインの検索

critical

critical

critical

critical