|
|
|
>> HP-UX Security Update Fixes Java Code Execution Vulnerabilities
|
Multiple vulnerabilities have been identified in HP-UX, which could be exploited by attackers or malicious users to bypass security restrictions, disclose sensitive information, cause a denial of service, or compromise an affected system. These issues are caused by errors in Java. For additional information, see : VUPEN/ADV-2009-0852
Affected Products
HP-UX B.11.11 (HP JDK and JRE version 6.0.03 and prior, HP JDK and JRE version 5.0.16 and prior, or HP Java SDK and RTE version 1.4.2.22 and prior)
HP-UX B.11.23 (HP JDK and JRE version 6.0.03 and prior, HP JDK and JRE version 5.0.16 and prior, or HP Java SDK and RTE version 1.4.2.22 and prior)
HP-UX B.11.31 (HP JDK and JRE version 6.0.03 and prior, HP JDK and JRE version 5.0.16 and prior, or HP Java SDK and RTE version 1.4.2.22 and prior)
Solution
Upgrade to JDK and JRE v6.0.04 or subsequent, JDK and JRE v5.0.16 or subsequent, or SDK and JRE v1.4.2.22 or subsequent :
http://www.hp.com/go/java
References
http://www.vupen.com/english/advisories/2009/1426
https://www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01745133
ChangeLog
2009-05-27 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time alerts with CVE, CWE, and CVSS when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
