CVE-2013-0424
The MITRE CVE dictionary describes this issue as:
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to RMI. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to cross-site scripting (XSS) in the sun.rmi.transport.proxy CGIHandler class that does not properly handle error messages in a (1) command or (2) port number.
Find out more about CVE-2013-0424 from the MITRE CVE dictionary dictionary and NIST NVD.
CVSS v2 metrics
| Base Score | 4.3 |
|---|---|
| Base Metrics | AV:N/AC:M/Au:N/C:N/I:P/A:N |
| Access Vector | Network |
| Access Complexity | Medium |
| Authentication | None |
| Confidentiality Impact | None |
| Integrity Impact | Partial |
| Availability Impact | None |
Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).
Red Hat Security Errata
| Platform | Errata | Release Date |
|---|---|---|
| Red Hat Enterprise Linux Supplementary (v. 6) (java-1.7.0-ibm) | RHSA-2013:0626 | 2013-03-11 |
| Red Hat Enterprise Linux Supplementary 5 (java-1.6.0-sun) | RHSA-2013:0236 | 2013-02-04 |
| Red Hat Enterprise Linux Supplementary 5 (java-1.7.0-oracle) | RHSA-2013:0237 | 2013-02-04 |
| Red Hat Satellite 5.5 (RHEL v.6) (java-1.6.0-ibm) | RHSA-2013:1456 | 2013-10-23 |
| Red Hat Enterprise Linux Supplementary (v. 6) (java-1.7.0-oracle) | RHSA-2013:0237 | 2013-02-04 |
| Red Hat Enterprise Linux Supplementary (v. 6) (java-1.6.0-sun) | RHSA-2013:0236 | 2013-02-04 |
| Red Hat Satellite 5.4 (RHEL v.5) (java-1.6.0-ibm) | RHSA-2013:1455 | 2013-10-23 |
| Red Hat Satellite 5.4 (RHEL v.6) (java-1.6.0-ibm) | RHSA-2013:1455 | 2013-10-23 |
| Red Hat Enterprise Linux Supplementary (v. 6) (java-1.5.0-ibm) | RHSA-2013:0624 | 2013-03-11 |
| Red Hat Enterprise Linux Supplementary (v. 6) (java-1.6.0-ibm) | RHSA-2013:0625 | 2013-03-11 |
| Red Hat Enterprise Linux 5 (java-1.7.0-openjdk) | RHSA-2013:0247 | 2013-02-08 |
| Red Hat Enterprise Linux 6 (java-1.7.0-openjdk) | RHSA-2013:0247 | 2013-02-08 |
| Red Hat Satellite 5.5 (RHEL v.5) (java-1.6.0-ibm) | RHSA-2013:1456 | 2013-10-23 |
| Red Hat Enterprise Linux 6 (java-1.6.0-openjdk) | RHSA-2013:0245 | 2013-02-08 |
| Red Hat Enterprise Linux Supplementary 5 (java-1.7.0-ibm) | RHSA-2013:0626 | 2013-03-11 |
| Red Hat Enterprise Linux Supplementary 5 (java-1.6.0-ibm) | RHSA-2013:0625 | 2013-03-11 |
| Red Hat Enterprise Linux Supplementary 5 (java-1.5.0-ibm) | RHSA-2013:0624 | 2013-03-11 |
| Red Hat Enterprise Linux 5 (java-1.6.0-openjdk) | RHSA-2013:0246 | 2013-02-08 |
Affected Packages State
| Platform | Package | State |
|---|---|---|
| Red Hat Enterprise Linux 5 | java-1.4.2-ibm | Will not fix |
External References
CVE description copyright © 2017, The MITRE Corporation