Signature Detail
Short Name |
HTTP:STC:JAVA:BASICSERVICEIMPL |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Oracle Java SE BasicServiceImpl Sandbox Bypass |
Release Date |
2012/01/10 |
Update Number |
2061 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Oracle Java SE BasicServiceImpl Sandbox Bypass
This signature detects attempts to exploit a known vulnerability against Oracle Java SE. A successful attack can lead to bypass of java sandbox.
Extended Description
Oracle Java SE and Java for Business are prone to a remote vulnerability in Java Web Start 'BasicServiceImpl'. The vulnerability can be exploited to escape the Java sandbox and run arbitrary code in the context of the Java Runtime. This vulnerability affects the following supported versions: 6 Update 21
Affected Products
- Avaya Aura Conferencing 6.0 Standard
- Avaya Proactive Contact 3.0
- Avaya Proactive Contact 3.0.2
- Avaya Proactive Contact 3.0.3
- Gentoo Linux
- HP HP-UX B.11.11
- HP HP-UX B.11.11
- HP HP-UX B.11.23
- HP HP-UX B.11.23
- HP HP-UX B.11.23
- HP HP-UX B.11.31
- HP HP-UX B.11.31
- HP Network Node Manager i 9.0
- HP Network Node Manager i 9.00
- HP Network Node Manager i 9.00
- HP Network Node Manager i 9.01
- HP Network Node Manager i 9.02
- HP Network Node Manager i 9.03
- Red Hat Desktop Extras 4
- Red Hat Enterprise Linux AS Extras 4
- Red Hat Enterprise Linux Desktop Supplementary 5 Client
- Red Hat Enterprise Linux Desktop Supplementary 6
- Red Hat Enterprise Linux ES Extras 4
- Red Hat Enterprise Linux Extras 4
- Red Hat Enterprise Linux Extras 4.8.Z
- Red Hat Enterprise Linux HPC Node Supplementary 6
- Red Hat Enterprise Linux Server Supplementary 6
- Red Hat Enterprise Linux Supplementary 5 Server
- Red Hat Enterprise Linux Workstation Supplementary 6
- Red Hat Enterprise Linux WS Extras 4
- Red Hat Network Satellite Server (for RHEL 5) 5.4
- Sun JDK (Linux Production Release) 1.6.0
- Sun JDK (Linux Production Release) 1.6.0 01
- Sun JDK (Linux Production Release) 1.6.0 01-B06
- Sun JDK (Linux Production Release) 1.6.0 02
- Sun JDK (Linux Production Release) 1.6.0 03
- Sun JDK (Linux Production Release) 1.6.0 04
- Sun JDK (Linux Production Release) 1.6.0 05
- Sun JDK (Linux Production Release) 1.6.0 06
- Sun JDK (Linux Production Release) 1.6.0 07
- Sun JDK (Linux Production Release) 1.6.0 10
- Sun JDK (Linux Production Release) 1.6.0 11
- Sun JDK (Linux Production Release) 1.6.0 13
- Sun JDK (Linux Production Release) 1.6.0 14
- Sun JDK (Linux Production Release) 1.6.0 15
- Sun JDK (Linux Production Release) 1.6.0 17
- Sun JDK (Linux Production Release) 1.6.0 18
- Sun JDK (Linux Production Release) 1.6.0 19
- Sun JDK (Linux Production Release) 1.6.0 20
- Sun JDK (Linux Production Release) 1.6.0_21
- Sun JDK (Solaris Production Release) 1.6.0
- Sun JDK (Solaris Production Release) 1.6.0 01
- Sun JDK (Solaris Production Release) 1.6.0 01-B06
- Sun JDK (Solaris Production Release) 1.6.0 02
- Sun JDK (Solaris Production Release) 1.6.0 03
- Sun JDK (Solaris Production Release) 1.6.0 04
- Sun JDK (Solaris Production Release) 1.6.0 05
- Sun JDK (Solaris Production Release) 1.6.0 06
- Sun JDK (Solaris Production Release) 1.6.0 07
- Sun JDK (Solaris Production Release) 1.6.0 10
- Sun JDK (Solaris Production Release) 1.6.0 11
- Sun JDK (Solaris Production Release) 1.6.0 13
- Sun JDK (Solaris Production Release) 1.6.0 14
- Sun JDK (Solaris Production Release) 1.6.0 15
- Sun JDK (Solaris Production Release) 1.6.0 17
- Sun JDK (Solaris Production Release) 1.6.0 18
- Sun JDK (Solaris Production Release) 1.6.0 19
- Sun JDK (Solaris Production Release) 1.6.0 20
- Sun JDK (Solaris Production Release) 1.6.0_21
- Sun JDK (Windows Production Release) 1.6.0
- Sun JDK (Windows Production Release) 1.6.0 01
- Sun JDK (Windows Production Release) 1.6.0 01-B06
- Sun JDK (Windows Production Release) 1.6.0 02
- Sun JDK (Windows Production Release) 1.6.0 03
- Sun JDK (Windows Production Release) 1.6.0 04
- Sun JDK (Windows Production Release) 1.6.0 05
- Sun JDK (Windows Production Release) 1.6.0 06
- Sun JDK (Windows Production Release) 1.6.0 07
- Sun JDK (Windows Production Release) 1.6.0 10
- Sun JDK (Windows Production Release) 1.6.0 11
- Sun JDK (Windows Production Release) 1.6.0 13
- Sun JDK (Windows Production Release) 1.6.0 14
- Sun JDK (Windows Production Release) 1.6.0 15
- Sun JDK (Windows Production Release) 1.6.0 17
- Sun JDK (Windows Production Release) 1.6.0 18
- Sun JDK (Windows Production Release) 1.6.0 19
- Sun JDK (Windows Production Release) 1.6.0 20
- Sun JDK (Windows Production Release) 1.6.0_21
- Sun JRE (Linux Production Release) 1.6.0
- Sun JRE (Linux Production Release) 1.6.0 01
- Sun JRE (Linux Production Release) 1.6.0 02
- Sun JRE (Linux Production Release) 1.6.0 03
- Sun JRE (Linux Production Release) 1.6.0 04
- Sun JRE (Linux Production Release) 1.6.0 05
- Sun JRE (Linux Production Release) 1.6.0 06
- Sun JRE (Linux Production Release) 1.6.0 07
- Sun JRE (Linux Production Release) 1.6.0 10
- Sun JRE (Linux Production Release) 1.6.0 11
- Sun JRE (Linux Production Release) 1.6.0 12
- Sun JRE (Linux Production Release) 1.6.0 13
- Sun JRE (Linux Production Release) 1.6.0 14
- Sun JRE (Linux Production Release) 1.6.0 15
- Sun JRE (Linux Production Release) 1.6.0 17
- Sun JRE (Linux Production Release) 1.6.0 18
- Sun JRE (Linux Production Release) 1.6.0 19
- Sun JRE (Linux Production Release) 1.6.0 20
- Sun JRE (Linux Production Release) 1.6.0_21
- Sun JRE (Solaris Production Release) 1.6.0
- Sun JRE (Solaris Production Release) 1.6.0 01
- Sun JRE (Solaris Production Release) 1.6.0 02
- Sun JRE (Solaris Production Release) 1.6.0 03
- Sun JRE (Solaris Production Release) 1.6.0 04
- Sun JRE (Solaris Production Release) 1.6.0 05
- Sun JRE (Solaris Production Release) 1.6.0 06
- Sun JRE (Solaris Production Release) 1.6.0 07
- Sun JRE (Solaris Production Release) 1.6.0 10
- Sun JRE (Solaris Production Release) 1.6.0 11
- Sun JRE (Solaris Production Release) 1.6.0 12
- Sun JRE (Solaris Production Release) 1.6.0 13
- Sun JRE (Solaris Production Release) 1.6.0 14
- Sun JRE (Solaris Production Release) 1.6.0 15
- Sun JRE (Solaris Production Release) 1.6.0 17
- Sun JRE (Solaris Production Release) 1.6.0 18
- Sun JRE (Solaris Production Release) 1.6.0 19
- Sun JRE (Solaris Production Release) 1.6.0 2
- Sun JRE (Solaris Production Release) 1.6.0_21
- Sun JRE (Windows Production Release) 1.6.0
- Sun JRE (Windows Production Release) 1.6.0 01
- Sun JRE (Windows Production Release) 1.6.0 02
- Sun JRE (Windows Production Release) 1.6.0 03
- Sun JRE (Windows Production Release) 1.6.0 04
- Sun JRE (Windows Production Release) 1.6.0 05
- Sun JRE (Windows Production Release) 1.6.0 06
- Sun JRE (Windows Production Release) 1.6.0 07
- Sun JRE (Windows Production Release) 1.6.0 10
- Sun JRE (Windows Production Release) 1.6.0 11
- Sun JRE (Windows Production Release) 1.6.0 12
- Sun JRE (Windows Production Release) 1.6.0 13
- Sun JRE (Windows Production Release) 1.6.0 14
- Sun JRE (Windows Production Release) 1.6.0 15
- Sun JRE (Windows Production Release) 1.6.0 17
- Sun JRE (Windows Production Release) 1.6.0 18
- Sun JRE (Windows Production Release) 1.6.0 19
- Sun JRE (Windows Production Release) 1.6.0 2
- Sun JRE (Windows Production Release) 1.6.0 20
- Sun JRE (Windows Production Release) 1.6.0_21
- SuSE openSUSE 11.1
- SuSE openSUSE 11.2
- SuSE openSUSE 11.3
- SuSE SUSE Linux Enterprise 11
- SuSE SUSE Linux Enterprise 11 SP1
- SuSE SUSE Linux Enterprise Java 10 SP3
- SuSE SUSE Linux Enterprise Java 11 SP1
- SuSE SUSE Linux Enterprise SDK 11 SP1
- SuSE SUSE Linux Enterprise Server 10 SP3
- SuSE SUSE Linux Enterprise Server 11 SP1
- VMWare ESX 4.1
- VMWare ESX 4.1 Update 1
- VMWare vCenter 4.1
- VMWare vCenter 4.1 Update 1
References
- BugTraq: 43999
- CVE: CVE-2010-3563