7.5 - HPSBUX02725 SSRT100627

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Summary
Title	HP-UX Apache Running Tomcat Servlet Engine, Remote Information Disclosure, Authentication Bypass, Cross-Site Scripting (XSS), Unauthorized Access, Denial of Service (DoS)

Informations
Name	HPSBUX02725 SSRT100627	First vendor Publication	2011-11-21
Vendor	HP	Last vendor Modification	2011-11-22
Severity (Vendor)	N/A	Revision	1

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score	7.5	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Potential security vulnerabilities have been identified with HP-UX Apache Running Tomcat Servlet Engine. These vulnerabilities could be exploited remotely to disclose information, allow authentication bypass, allow cross-site scripting (XSS), gain unauthorized access, or create a Denial of Service (DoS). The Tomcat-based Servlet Engine is contained in the HP-UX Apache Web Server Suite.

Original Source

Url : http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03090723

CWE : Common Weakness Enumeration

%	Id	Name
40 %	CWE-264	Permissions, Privileges, and Access Controls
20 %	CWE-200	Information Exposure
20 %	CWE-79	Failure to Preserve Web Page Structure ('Cross-site Scripting') (CWE/SANS Top 25)
20 %	CWE-20	Improper Input Validation

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:12517

Oval ID:	oval:org.mitre.oval:def:12517
Title:	HP-UX Apache Web Server, Remote Information Disclosure, Cross-Site Scripting (XSS), Denial of Service (DoS)
Description:	Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read-only, which allows local web applications to read or write files outside of the intended working directory, as demonstrated using a directory traversal attack.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-3718	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02645 HP Release B.11.23 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.30.04 OR Criteria meets HP Security Bulletin HPSBUX02645 HP-UX B.11.31 AND filesets tests hpuxwsAPACHE.APACHE version is less than B.2.2.15.05 AND hpuxwsAPACHE.APACHE2 version is less than B.2.2.15.05 AND hpuxwsAPACHE.AUTH_LDAP version is less than B.2.2.15.05 AND hpuxwsAPACHE.AUTH_LDAP2 version is less than B.2.2.15.05 AND hpuxwsAPACHE.MOD_JK version is less than B.2.2.15.05 AND hpuxwsAPACHE.MOD_JK2 version is less than B.2.2.15.05 AND hpuxwsAPACHE.MOD_PERL version is less than B.2.2.15.05 AND hpuxwsAPACHE.MOD_PERL2 version is less than B.2.2.15.05 AND hpuxwsAPACHE.PHP version is less than B.2.2.15.05 AND hpuxwsAPACHE.WEBPROXY version is less than B.2.2.15.05 AND hpuxwsAPACHE.PHP2 version is less than B.2.2.15.05 OR Criteria meets HP Security Bulletin HPSBUX02645 HP Release B.11.11 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.30.04 OR Criteria meets HP Security Bulletin HPSBUX02645 HP Release B.11.23 AND filesets tests hpuxwsAPCH32.APACHE version is less than B.2.0.64.01 AND hpuxwsAPCH32.APACHE2 version is less than B.2.0.64.01 AND hpuxwsAPCH32.AUTH_LDAP version is less than B.2.0.64.01 AND hpuxwsAPCH32.AUTH_LDAP2 version is less than B.2.0.64.01 AND hpuxwsAPCH32.MOD_JK version is less than B.2.0.64.01 AND hpuxwsAPCH32.MOD_JK2 version is less than B.2.0.64.01 AND hpuxwsAPCH32.MOD_PERL version is less than B.2.0.64.01 AND hpuxwsAPCH32.MOD_PERL2 version is less than B.2.0.64.01 AND hpuxwsAPCH32.PHP version is less than B.2.0.64.01 AND hpuxwsAPCH32.WEBPROXY version is less than B.2.0.64.01 AND hpuxwsAPCH32.PHP2 version is less than B.2.0.64.01 OR Criteria meets HP Security Bulletin HPSBUX02645 HP-UX B.11.31 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.30.04 OR Criteria meets HP Security Bulletin HPSBUX02645 HP Release B.11.23 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.30.04 OR Criteria meets HP Security Bulletin HPSBUX02645 HP-UX B.11.31 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.30.04 OR Criteria meets HP Security Bulletin HPSBUX02645 HP Release B.11.11 AND filesets tests hpuxwsAPACHE.APACHE version is less than B.2.0.64.01 AND hpuxwsAPACHE.APACHE2 version is less than B.2.0.64.01 AND hpuxwsAPACHE.AUTH_LDAP version is less than B.2.0.64.01 AND hpuxwsAPACHE.AUTH_LDAP2 version is less than B.2.0.64.01 AND hpuxwsAPACHE.MOD_JK version is less than B.2.0.64.01 AND hpuxwsAPACHE.MOD_JK2 version is less than B.2.0.64.01 AND hpuxwsAPACHE.MOD_PERL version is less than B.2.0.64.01 AND hpuxwsAPACHE.MOD_PERL2 version is less than B.2.0.64.01 AND hpuxwsAPACHE.WEBPROXY version is less than B.2.0.64.01 AND hpuxwsAPACHE.PHP version is less than B.2.0.64.01 AND hpuxwsAPACHE.PHP2 version is less than B.2.0.64.01 OR Criteria meets HP Security Bulletin HPSBUX02645 HP Release B.11.23 AND filesets tests hpuxwsAPACHE.APACHE version is less than B.2.2.15.05 AND hpuxwsAPACHE.APACHE2 version is less than B.2.2.15.05 AND hpuxwsAPACHE.AUTH_LDAP version is less than B.2.2.15.05 AND hpuxwsAPACHE.AUTH_LDAP2 version is less than B.2.2.15.05 AND hpuxwsAPACHE.MOD_JK version is less than B.2.2.15.05 AND hpuxwsAPACHE.MOD_JK2 version is less than B.2.2.15.05 AND hpuxwsAPACHE.MOD_PERL version is less than B.2.2.15.05 AND hpuxwsAPACHE.MOD_PERL2 version is less than B.2.2.15.05 AND hpuxwsAPACHE.WEBPROXY version is less than B.2.2.15.05 AND hpuxwsAPACHE.PHP version is less than B.2.2.15.05 AND hpuxwsAPACHE.PHP2 version is less than B.2.2.15.05 OR Criteria meets HP Security Bulletin HPSBUX02645 HP-UX B.11.31 AND filesets tests hpuxwsAPCH32.APACHE version is less than B.2.0.64.01 AND hpuxwsAPCH32.APACHE2 version is less than B.2.0.64.01 AND hpuxwsAPCH32.AUTH_LDAP version is less than B.2.0.64.01 AND hpuxwsAPCH32.AUTH_LDAP2 version is less than B.2.0.64.01 AND hpuxwsAPCH32.MOD_JK version is less than B.2.0.64.01 AND hpuxwsAPCH32.MOD_JK2 version is less than B.2.0.64.01 AND hpuxwsAPCH32.MOD_PERL version is less than B.2.0.64.01 AND hpuxwsAPCH32.MOD_PERL2 version is less than B.2.0.64.01 AND hpuxwsAPCH32.WEBPROXY version is less than B.2.0.64.01 AND hpuxwsAPCH32.PHP version is less than B.2.0.64.01 AND hpuxwsAPCH32.PHP2 version is less than B.2.0.64.01

Definition Id: oval:org.mitre.oval:def:12662

Oval ID:	oval:org.mitre.oval:def:12662
Title:	HP-UX Running Java, Remote Execution of Arbitrary Code, Disclosure of Information, and Other Vulnerabilities
Description:	The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-4476	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02685 platforms HP-UX B.11.31 AND HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-IPF32 version is less than 1.5.0.22.00 AND Jre15.JRE15-COM version is less than 1.5.0.22.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.22.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.22.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.22.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.22.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.22.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.22.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.22.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.22.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.22.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.22.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.22.00 AND Jdk15.JDK15-COM version is less than 1.5.0.22.00 OR Criteria meets HP Security Bulletin HPSBUX02685 platforms HP Release B.11.11 AND HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-PA20 version is less than 1.6.0.10.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.10.00 AND Jre60.JRE60-COM version is less than 1.6.0.10.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.10.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.10.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.10.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.10.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.10.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.10.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.10.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.10.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.10.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.10.00 AND Jdk60.JDK60-COM version is less than 1.6.0.10.00

Definition Id: oval:org.mitre.oval:def:12745

Oval ID:	oval:org.mitre.oval:def:12745
Title:	HP-UX Apache Web Server, Remote Information Disclosure, Cross-Site Scripting (XSS), Denial of Service (DoS)
Description:	The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-4476	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02645 HP Release B.11.23 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.30.04 OR Criteria meets HP Security Bulletin HPSBUX02645 HP-UX B.11.31 AND filesets tests hpuxwsAPACHE.APACHE version is less than B.2.2.15.05 AND hpuxwsAPACHE.APACHE2 version is less than B.2.2.15.05 AND hpuxwsAPACHE.AUTH_LDAP version is less than B.2.2.15.05 AND hpuxwsAPACHE.AUTH_LDAP2 version is less than B.2.2.15.05 AND hpuxwsAPACHE.MOD_JK version is less than B.2.2.15.05 AND hpuxwsAPACHE.MOD_JK2 version is less than B.2.2.15.05 AND hpuxwsAPACHE.MOD_PERL version is less than B.2.2.15.05 AND hpuxwsAPACHE.MOD_PERL2 version is less than B.2.2.15.05 AND hpuxwsAPACHE.PHP version is less than B.2.2.15.05 AND hpuxwsAPACHE.WEBPROXY version is less than B.2.2.15.05 AND hpuxwsAPACHE.PHP2 version is less than B.2.2.15.05 OR Criteria meets HP Security Bulletin HPSBUX02645 HP Release B.11.11 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.30.04 OR Criteria meets HP Security Bulletin HPSBUX02645 HP Release B.11.23 AND filesets tests hpuxwsAPCH32.APACHE version is less than B.2.0.64.01 AND hpuxwsAPCH32.APACHE2 version is less than B.2.0.64.01 AND hpuxwsAPCH32.AUTH_LDAP version is less than B.2.0.64.01 AND hpuxwsAPCH32.AUTH_LDAP2 version is less than B.2.0.64.01 AND hpuxwsAPCH32.MOD_JK version is less than B.2.0.64.01 AND hpuxwsAPCH32.MOD_JK2 version is less than B.2.0.64.01 AND hpuxwsAPCH32.MOD_PERL version is less than B.2.0.64.01 AND hpuxwsAPCH32.MOD_PERL2 version is less than B.2.0.64.01 AND hpuxwsAPCH32.PHP version is less than B.2.0.64.01 AND hpuxwsAPCH32.WEBPROXY version is less than B.2.0.64.01 AND hpuxwsAPCH32.PHP2 version is less than B.2.0.64.01 OR Criteria meets HP Security Bulletin HPSBUX02645 HP-UX B.11.31 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.30.04 OR Criteria meets HP Security Bulletin HPSBUX02645 HP Release B.11.23 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.30.04 OR Criteria meets HP Security Bulletin HPSBUX02645 HP-UX B.11.31 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.30.04 OR Criteria meets HP Security Bulletin HPSBUX02645 HP Release B.11.11 AND filesets tests hpuxwsAPACHE.APACHE version is less than B.2.0.64.01 AND hpuxwsAPACHE.APACHE2 version is less than B.2.0.64.01 AND hpuxwsAPACHE.AUTH_LDAP version is less than B.2.0.64.01 AND hpuxwsAPACHE.AUTH_LDAP2 version is less than B.2.0.64.01 AND hpuxwsAPACHE.MOD_JK version is less than B.2.0.64.01 AND hpuxwsAPACHE.MOD_JK2 version is less than B.2.0.64.01 AND hpuxwsAPACHE.MOD_PERL version is less than B.2.0.64.01 AND hpuxwsAPACHE.MOD_PERL2 version is less than B.2.0.64.01 AND hpuxwsAPACHE.WEBPROXY version is less than B.2.0.64.01 AND hpuxwsAPACHE.PHP version is less than B.2.0.64.01 AND hpuxwsAPACHE.PHP2 version is less than B.2.0.64.01 OR Criteria meets HP Security Bulletin HPSBUX02645 HP Release B.11.23 AND filesets tests hpuxwsAPACHE.APACHE version is less than B.2.2.15.05 AND hpuxwsAPACHE.APACHE2 version is less than B.2.2.15.05 AND hpuxwsAPACHE.AUTH_LDAP version is less than B.2.2.15.05 AND hpuxwsAPACHE.AUTH_LDAP2 version is less than B.2.2.15.05 AND hpuxwsAPACHE.MOD_JK version is less than B.2.2.15.05 AND hpuxwsAPACHE.MOD_JK2 version is less than B.2.2.15.05 AND hpuxwsAPACHE.MOD_PERL version is less than B.2.2.15.05 AND hpuxwsAPACHE.MOD_PERL2 version is less than B.2.2.15.05 AND hpuxwsAPACHE.WEBPROXY version is less than B.2.2.15.05 AND hpuxwsAPACHE.PHP version is less than B.2.2.15.05 AND hpuxwsAPACHE.PHP2 version is less than B.2.2.15.05 OR Criteria meets HP Security Bulletin HPSBUX02645 HP-UX B.11.31 AND filesets tests hpuxwsAPCH32.APACHE version is less than B.2.0.64.01 AND hpuxwsAPCH32.APACHE2 version is less than B.2.0.64.01 AND hpuxwsAPCH32.AUTH_LDAP version is less than B.2.0.64.01 AND hpuxwsAPCH32.AUTH_LDAP2 version is less than B.2.0.64.01 AND hpuxwsAPCH32.MOD_JK version is less than B.2.0.64.01 AND hpuxwsAPCH32.MOD_JK2 version is less than B.2.0.64.01 AND hpuxwsAPCH32.MOD_PERL version is less than B.2.0.64.01 AND hpuxwsAPCH32.MOD_PERL2 version is less than B.2.0.64.01 AND hpuxwsAPCH32.WEBPROXY version is less than B.2.0.64.01 AND hpuxwsAPCH32.PHP version is less than B.2.0.64.01 AND hpuxwsAPCH32.PHP2 version is less than B.2.0.64.01

Definition Id: oval:org.mitre.oval:def:12878

Oval ID:	oval:org.mitre.oval:def:12878
Title:	HP-UX Apache Web Server, Remote Information Disclosure, Cross-Site Scripting (XSS), Denial of Service (DoS)
Description:	Multiple cross-site scripting (XSS) vulnerabilities in the HTML Manager Interface in Apache Tomcat 5.5 before 5.5.32, 6.0 before 6.0.30, and 7.0 before 7.0.6 allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the display-name tag.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-0013	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02645 HP Release B.11.23 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.30.04 OR Criteria meets HP Security Bulletin HPSBUX02645 HP-UX B.11.31 AND filesets tests hpuxwsAPACHE.APACHE version is less than B.2.2.15.05 AND hpuxwsAPACHE.APACHE2 version is less than B.2.2.15.05 AND hpuxwsAPACHE.AUTH_LDAP version is less than B.2.2.15.05 AND hpuxwsAPACHE.AUTH_LDAP2 version is less than B.2.2.15.05 AND hpuxwsAPACHE.MOD_JK version is less than B.2.2.15.05 AND hpuxwsAPACHE.MOD_JK2 version is less than B.2.2.15.05 AND hpuxwsAPACHE.MOD_PERL version is less than B.2.2.15.05 AND hpuxwsAPACHE.MOD_PERL2 version is less than B.2.2.15.05 AND hpuxwsAPACHE.PHP version is less than B.2.2.15.05 AND hpuxwsAPACHE.WEBPROXY version is less than B.2.2.15.05 AND hpuxwsAPACHE.PHP2 version is less than B.2.2.15.05 OR Criteria meets HP Security Bulletin HPSBUX02645 HP Release B.11.11 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.30.04 OR Criteria meets HP Security Bulletin HPSBUX02645 HP Release B.11.23 AND filesets tests hpuxwsAPCH32.APACHE version is less than B.2.0.64.01 AND hpuxwsAPCH32.APACHE2 version is less than B.2.0.64.01 AND hpuxwsAPCH32.AUTH_LDAP version is less than B.2.0.64.01 AND hpuxwsAPCH32.AUTH_LDAP2 version is less than B.2.0.64.01 AND hpuxwsAPCH32.MOD_JK version is less than B.2.0.64.01 AND hpuxwsAPCH32.MOD_JK2 version is less than B.2.0.64.01 AND hpuxwsAPCH32.MOD_PERL version is less than B.2.0.64.01 AND hpuxwsAPCH32.MOD_PERL2 version is less than B.2.0.64.01 AND hpuxwsAPCH32.PHP version is less than B.2.0.64.01 AND hpuxwsAPCH32.WEBPROXY version is less than B.2.0.64.01 AND hpuxwsAPCH32.PHP2 version is less than B.2.0.64.01 OR Criteria meets HP Security Bulletin HPSBUX02645 HP-UX B.11.31 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.30.04 OR Criteria meets HP Security Bulletin HPSBUX02645 HP Release B.11.23 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.30.04 OR Criteria meets HP Security Bulletin HPSBUX02645 HP-UX B.11.31 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.30.04 OR Criteria meets HP Security Bulletin HPSBUX02645 HP Release B.11.11 AND filesets tests hpuxwsAPACHE.APACHE version is less than B.2.0.64.01 AND hpuxwsAPACHE.APACHE2 version is less than B.2.0.64.01 AND hpuxwsAPACHE.AUTH_LDAP version is less than B.2.0.64.01 AND hpuxwsAPACHE.AUTH_LDAP2 version is less than B.2.0.64.01 AND hpuxwsAPACHE.MOD_JK version is less than B.2.0.64.01 AND hpuxwsAPACHE.MOD_JK2 version is less than B.2.0.64.01 AND hpuxwsAPACHE.MOD_PERL version is less than B.2.0.64.01 AND hpuxwsAPACHE.MOD_PERL2 version is less than B.2.0.64.01 AND hpuxwsAPACHE.WEBPROXY version is less than B.2.0.64.01 AND hpuxwsAPACHE.PHP version is less than B.2.0.64.01 AND hpuxwsAPACHE.PHP2 version is less than B.2.0.64.01 OR Criteria meets HP Security Bulletin HPSBUX02645 HP Release B.11.23 AND filesets tests hpuxwsAPACHE.APACHE version is less than B.2.2.15.05 AND hpuxwsAPACHE.APACHE2 version is less than B.2.2.15.05 AND hpuxwsAPACHE.AUTH_LDAP version is less than B.2.2.15.05 AND hpuxwsAPACHE.AUTH_LDAP2 version is less than B.2.2.15.05 AND hpuxwsAPACHE.MOD_JK version is less than B.2.2.15.05 AND hpuxwsAPACHE.MOD_JK2 version is less than B.2.2.15.05 AND hpuxwsAPACHE.MOD_PERL version is less than B.2.2.15.05 AND hpuxwsAPACHE.MOD_PERL2 version is less than B.2.2.15.05 AND hpuxwsAPACHE.WEBPROXY version is less than B.2.2.15.05 AND hpuxwsAPACHE.PHP version is less than B.2.2.15.05 AND hpuxwsAPACHE.PHP2 version is less than B.2.2.15.05 OR Criteria meets HP Security Bulletin HPSBUX02645 HP-UX B.11.31 AND filesets tests hpuxwsAPCH32.APACHE version is less than B.2.0.64.01 AND hpuxwsAPCH32.APACHE2 version is less than B.2.0.64.01 AND hpuxwsAPCH32.AUTH_LDAP version is less than B.2.0.64.01 AND hpuxwsAPCH32.AUTH_LDAP2 version is less than B.2.0.64.01 AND hpuxwsAPCH32.MOD_JK version is less than B.2.0.64.01 AND hpuxwsAPCH32.MOD_JK2 version is less than B.2.0.64.01 AND hpuxwsAPCH32.MOD_PERL version is less than B.2.0.64.01 AND hpuxwsAPCH32.MOD_PERL2 version is less than B.2.0.64.01 AND hpuxwsAPCH32.WEBPROXY version is less than B.2.0.64.01 AND hpuxwsAPCH32.PHP version is less than B.2.0.64.01 AND hpuxwsAPCH32.PHP2 version is less than B.2.0.64.01

Definition Id: oval:org.mitre.oval:def:12879

Oval ID:	oval:org.mitre.oval:def:12879
Title:	DSA-2161-1 openjdk-6 -- denial of service
Description:	It was discovered that the floating point parser in OpenJDK, an implementation of the Java platform, can enter an infinite loop when processing certain input strings. Such input strings represent valid numbers and can be contained in data supplied by an attacker over the network, leading to a denial-of-service attack.
Family:	unix	Class:	patch
Reference(s):	DSA-2161-1 CVE-2010-4476	Version:	5
Platform(s):	Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	openjdk-6
Definition Synopsis:
Debian 6.0 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND Installed architecture is all AND openjdk-6 DPKG is earlier than 6b18-1.8.3-2+squeeze1

Definition Id: oval:org.mitre.oval:def:13969

Oval ID:	oval:org.mitre.oval:def:13969
Title:	HP-UX Apache Running Tomcat Servlet Engine, Remote Information Disclosure, Authentication Bypass, Cross-Site Scripting (XSS), Unauthorized Access, Denial of Service (DoS)
Description:	Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read-only, which allows local web applications to read or write files outside of the intended working directory, as demonstrated using a directory traversal attack.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-3718	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.34.01

Definition Id: oval:org.mitre.oval:def:14328

Oval ID:	oval:org.mitre.oval:def:14328
Title:	The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Description:	The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-4476	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Development Kit Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Development Kit is less than 1.6.0:update_24 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_24 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_24 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_24 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update28 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update28 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update28 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update28 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:14573

Oval ID:	oval:org.mitre.oval:def:14573
Title:	HP-UX Apache Running Tomcat Servlet Engine, Remote Information Disclosure, Authentication Bypass, Cross-Site Scripting (XSS), Unauthorized Access, Denial of Service (DoS)
Description:	Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service (infinite loop or JVM crash) by leveraging an untrusted web application.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-2526	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.34.01

Definition Id: oval:org.mitre.oval:def:14589

Oval ID:	oval:org.mitre.oval:def:14589
Title:	HP-UX Apache Running Tomcat Servlet Engine, Remote Information Disclosure, Authentication Bypass, Cross-Site Scripting (XSS), Unauthorized Access, Denial of Service (DoS)
Description:	The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-4476	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.34.01

Definition Id: oval:org.mitre.oval:def:14743

Oval ID:	oval:org.mitre.oval:def:14743
Title:	HP-UX Apache Running Tomcat Servlet Engine, Remote Information Disclosure, Authentication Bypass, Cross-Site Scripting (XSS), Unauthorized Access, Denial of Service (DoS)
Description:	native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 through 6.0.32, and 7.0.x before 7.0.20 on Linux, does not drop capabilities, which allows remote attackers to bypass read permissions for files via a request to an application.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-2729	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.34.01

Definition Id: oval:org.mitre.oval:def:14931

Oval ID:	oval:org.mitre.oval:def:14931
Title:	HP-UX Apache Running Tomcat Servlet Engine, Remote Information Disclosure, Authentication Bypass, Cross-Site Scripting (XSS), Unauthorized Access, Denial of Service (DoS)
Description:	Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.17, when the MemoryUserDatabase is used, creates log entries containing passwords upon encountering errors in JMX user creation, which allows local users to obtain sensitive information by reading a log file.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-2204	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.34.01

Definition Id: oval:org.mitre.oval:def:14933

Oval ID:	oval:org.mitre.oval:def:14933
Title:	HP-UX Apache Running Tomcat Servlet Engine, Remote Information Disclosure, Authentication Bypass, Cross-Site Scripting (XSS), Unauthorized Access, Denial of Service (DoS)
Description:	Certain AJP protocol connector implementations in Apache Tomcat 7.0.0 through 7.0.20, 6.0.0 through 6.0.33, 5.5.0 through 5.5.33, and possibly other versions allow remote attackers to spoof AJP requests, bypass authentication, and obtain sensitive information by causing the connector to interpret a request body as a new request.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-3190	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.34.01

Definition Id: oval:org.mitre.oval:def:14945

Oval ID:	oval:org.mitre.oval:def:14945
Title:	HP-UX Apache Running Tomcat Servlet Engine, Remote Information Disclosure, Authentication Bypass, Cross-Site Scripting (XSS), Unauthorized Access, Denial of Service (DoS)
Description:	Multiple cross-site scripting (XSS) vulnerabilities in the HTML Manager Interface in Apache Tomcat 5.5 before 5.5.32, 6.0 before 6.0.30, and 7.0 before 7.0.6 allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the display-name tag.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-0013	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.34.01

Definition Id: oval:org.mitre.oval:def:15171

Oval ID:	oval:org.mitre.oval:def:15171
Title:	USN-1298-1 -- Apache Commons Daemon vulnerability
Description:	commons-daemon: wrapper to launch Java applications as daemons Apache Commons Daemon would allow unintended access to files over the network.
Family:	unix	Class:	patch
Reference(s):	USN-1298-1 CVE-2011-2729	Version:	5
Platform(s):	Ubuntu 11.04 Ubuntu 11.10	Product(s):	Apache
Definition Synopsis:
Release section Ubuntu 11.04 is installed AND Installed architecture is all AND libcommons-daemon-java DPKG is earlier than 1.0.4-1ubuntu0.1 OR Release section Ubuntu 11.10 is installed AND Installed architecture is all AND libcommons-daemon-java DPKG is earlier than 1.0.6-1ubuntu0.1

Definition Id: oval:org.mitre.oval:def:15435

Oval ID:	oval:org.mitre.oval:def:15435
Title:	USN-1252-1 -- Tomcat vulnerabilities
Description:	tomcat6: Servlet and JSP engine Tomcat could be made to crash or expose sensitive information over the network.
Family:	unix	Class:	patch
Reference(s):	USN-1252-1 CVE-2011-1184 CVE-2011-2204 CVE-2011-2526 CVE-2011-3190	Version:	5
Platform(s):	Ubuntu 11.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 10.10	Product(s):	Tomcat
Definition Synopsis:
Release section Ubuntu 11.04 is installed AND Installed architecture is all AND libtomcat6-java DPKG is earlier than 6.0.28-10ubuntu2.2 OR Release section Ubuntu 11.10 is installed AND Installed architecture is all AND libtomcat6-java DPKG is earlier than 6.0.32-5ubuntu1.1 OR Release section Ubuntu 10.04 is installed AND Installed architecture is all AND libtomcat6-java DPKG is earlier than 6.0.24-2ubuntu1.9 OR Release section Ubuntu 10.10 is installed AND Installed architecture is all AND libtomcat6-java DPKG is earlier than 6.0.28-2ubuntu1.5

Definition Id: oval:org.mitre.oval:def:19269

Oval ID:	oval:org.mitre.oval:def:19269
Title:	HP-UX Apache Running Tomcat Servlet Engine, Remote Denial of Service (DoS), Access Restriction Bypass, Unauthorized Modification and Other Vulnerabilities
Description:	Multiple cross-site scripting (XSS) vulnerabilities in the HTML Manager Interface in Apache Tomcat 5.5 before 5.5.32, 6.0 before 6.0.30, and 7.0 before 7.0.6 allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the display-name tag.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-0013	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.36.01

Definition Id: oval:org.mitre.oval:def:19379

Oval ID:	oval:org.mitre.oval:def:19379
Title:	HP-UX Apache Running Tomcat Servlet Engine, Remote Denial of Service (DoS), Access Restriction Bypass, Unauthorized Modification and Other Vulnerabilities
Description:	Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read-only, which allows local web applications to read or write files outside of the intended working directory, as demonstrated using a directory traversal attack.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-3718	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.36.01

Definition Id: oval:org.mitre.oval:def:19450

Oval ID:	oval:org.mitre.oval:def:19450
Title:	HP-UX Apache Running Tomcat Servlet Engine, Remote Denial of Service (DoS), Access Restriction Bypass, Unauthorized Modification and Other Vulnerabilities
Description:	native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 through 6.0.32, and 7.0.x before 7.0.20 on Linux, does not drop capabilities, which allows remote attackers to bypass read permissions for files via a request to an application.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-2729	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.36.01

Definition Id: oval:org.mitre.oval:def:19465

Oval ID:	oval:org.mitre.oval:def:19465
Title:	HP-UX Apache Running Tomcat Servlet Engine, Remote Denial of Service (DoS), Access Restriction Bypass, Unauthorized Modification and Other Vulnerabilities
Description:	Certain AJP protocol connector implementations in Apache Tomcat 7.0.0 through 7.0.20, 6.0.0 through 6.0.33, 5.5.0 through 5.5.33, and possibly other versions allow remote attackers to spoof AJP requests, bypass authentication, and obtain sensitive information by causing the connector to interpret a request body as a new request.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-3190	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.36.01

Definition Id: oval:org.mitre.oval:def:19493

Oval ID:	oval:org.mitre.oval:def:19493
Title:	HP-UX Apache Running Tomcat Servlet Engine, Remote Denial of Service (DoS), Access Restriction Bypass, Unauthorized Modification and Other Vulnerabilities
Description:	The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-4476	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.36.01

Definition Id: oval:org.mitre.oval:def:19514

Oval ID:	oval:org.mitre.oval:def:19514
Title:	HP-UX Apache Running Tomcat Servlet Engine, Remote Denial of Service (DoS), Access Restriction Bypass, Unauthorized Modification and Other Vulnerabilities
Description:	Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service (infinite loop or JVM crash) by leveraging an untrusted web application.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-2526	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.36.01

Definition Id: oval:org.mitre.oval:def:19532

Oval ID:	oval:org.mitre.oval:def:19532
Title:	HP-UX Apache Running Tomcat Servlet Engine, Remote Denial of Service (DoS), Access Restriction Bypass, Unauthorized Modification and Other Vulnerabilities
Description:	Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.17, when the MemoryUserDatabase is used, creates log entries containing passwords upon encountering errors in JMX user creation, which allows local users to obtain sensitive information by reading a log file.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-2204	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.36.01

Definition Id: oval:org.mitre.oval:def:20649

Oval ID:	oval:org.mitre.oval:def:20649
Title:	VMware third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
Description:	The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-4476	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201110201-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201110201-SG is not installed OR Patch ESX400-201111201-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201111201-SG is not installed

Definition Id: oval:org.mitre.oval:def:20657

Oval ID:	oval:org.mitre.oval:def:20657
Title:	VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, Workstation, Player, ESXi and ESX address several security issues
Description:	Certain AJP protocol connector implementations in Apache Tomcat 7.0.0 through 7.0.20, 6.0.0 through 6.0.33, 5.5.0 through 5.5.33, and possibly other versions allow remote attackers to spoof AJP requests, bypass authentication, and obtain sensitive information by causing the connector to interpret a request body as a new request.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-3190	Version:	5
Platform(s):	VMWare ESX Server 4.0 VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX410-201208101-SG is not installed OR Patch ESX400-201209401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201209401-SG is not installed

Definition Id: oval:org.mitre.oval:def:21273

Oval ID:	oval:org.mitre.oval:def:21273
Title:	RHSA-2011:0290: java-1.6.0-ibm security update (Moderate)
Description:	The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:0290-01 CVE-2010-4476	Version:	4
Platform(s):	Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 5	Product(s):	java-1.6.0-ibm
Definition Synopsis:
Operation system section The operating system installed on the system is Red Hat Enterprise Linux 5 Packages section java-1.6.0-ibm-devel is earlier than 1:1.6.0.9.0-1jpp.4.el5 AND java-1.6.0-ibm-src is earlier than 1:1.6.0.9.0-1jpp.4.el5 AND java-1.6.0-ibm-javacomm is earlier than 1:1.6.0.9.0-1jpp.4.el5 AND java-1.6.0-ibm-accessibility is earlier than 1:1.6.0.9.0-1jpp.4.el5 AND java-1.6.0-ibm-plugin is earlier than 1:1.6.0.9.0-1jpp.4.el5 AND java-1.6.0-ibm-jdbc is earlier than 1:1.6.0.9.0-1jpp.4.el5 AND java-1.6.0-ibm is earlier than 1:1.6.0.9.0-1jpp.4.el5 AND java-1.6.0-ibm-demo is earlier than 1:1.6.0.9.0-1jpp.4.el5 AND Operation system section The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section java-1.6.0-ibm-devel is earlier than 1:1.6.0.9.0-1jpp.5.el6 AND java-1.6.0-ibm-src is earlier than 1:1.6.0.9.0-1jpp.5.el6 AND java-1.6.0-ibm-javacomm is earlier than 1:1.6.0.9.0-1jpp.5.el6 AND java-1.6.0-ibm-plugin is earlier than 1:1.6.0.9.0-1jpp.5.el6 AND java-1.6.0-ibm-jdbc is earlier than 1:1.6.0.9.0-1jpp.5.el6 AND java-1.6.0-ibm is earlier than 1:1.6.0.9.0-1jpp.5.el6 AND java-1.6.0-ibm-demo is earlier than 1:1.6.0.9.0-1jpp.5.el6

Definition Id: oval:org.mitre.oval:def:21420

Oval ID:	oval:org.mitre.oval:def:21420
Title:	RHSA-2011:0336: tomcat5 security update (Important)
Description:	The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:0336-01 CESA-2011:0336 CVE-2010-4476	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	tomcat5
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-server-lib is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-jasper is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-common-lib is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-webapps is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5 is earlier than 0:5.5.23-0jpp.17.el5_6

Definition Id: oval:org.mitre.oval:def:21713

Oval ID:	oval:org.mitre.oval:def:21713
Title:	RHSA-2011:0214: java-1.6.0-openjdk security update (Moderate)
Description:	The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:0214-01 CVE-2010-4476 CESA-2011:0214-CentOS 5	Version:	6
Platform(s):	Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Red Hat Enterprise Linux 5 and CentOS Linux 5 release section Operation system section The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages match section java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.18.b17.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.18.b17.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.18.b17.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.18.b17.el5 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.18.b17.el5 AND Red Hat Enterprise Linux 6 release section The operating system installed on the system is Red Hat Enterprise Linux 6 Packages match section java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.36.b17.el6_0 AND java-1.6.0-openjdk-debuginfo is earlier than 1:1.6.0.0-1.36.b17.el6_0 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.36.b17.el6_0 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.36.b17.el6_0 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.36.b17.el6_0 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.36.b17.el6_0

Definition Id: oval:org.mitre.oval:def:21809

Oval ID:	oval:org.mitre.oval:def:21809
Title:	RHSA-2011:0291: java-1.5.0-ibm security update (Moderate)
Description:	The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:0291-01 CVE-2010-4476	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6	Product(s):	java-1.5.0-ibm
Definition Synopsis:
Operation system section The operating system installed on the system is Red Hat Enterprise Linux 5 Packages section java-1.5.0-ibm-devel is earlier than 1:1.5.0.12.3-1jpp.2.el5 AND java-1.5.0-ibm is earlier than 1:1.5.0.12.3-1jpp.2.el5 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.12.3-1jpp.2.el5 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.12.3-1jpp.2.el5 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.12.3-1jpp.2.el5 AND java-1.5.0-ibm-accessibility is earlier than 1:1.5.0.12.3-1jpp.2.el5 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.12.3-1jpp.2.el5 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.12.3-1jpp.2.el5 AND Operation system section The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section java-1.5.0-ibm-devel is earlier than 1:1.5.0.12.3-1jpp.3.el6 AND java-1.5.0-ibm is earlier than 1:1.5.0.12.3-1jpp.3.el6 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.12.3-1jpp.3.el6 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.12.3-1jpp.3.el6 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.12.3-1jpp.3.el6 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.12.3-1jpp.3.el6 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.12.3-1jpp.3.el6

Definition Id: oval:org.mitre.oval:def:21859

Oval ID:	oval:org.mitre.oval:def:21859
Title:	RHSA-2011:0282: java-1.6.0-sun security update (Critical)
Description:	The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:0282-01 CVE-2010-4422 CVE-2010-4447 CVE-2010-4448 CVE-2010-4450 CVE-2010-4451 CVE-2010-4452 CVE-2010-4454 CVE-2010-4462 CVE-2010-4463 CVE-2010-4465 CVE-2010-4466 CVE-2010-4467 CVE-2010-4468 CVE-2010-4469 CVE-2010-4470 CVE-2010-4471 CVE-2010-4472 CVE-2010-4473 CVE-2010-4475 CVE-2010-4476	Version:	250
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6	Product(s):	java-1.6.0-sun
Definition Synopsis:
Operation system section The operating system installed on the system is Red Hat Enterprise Linux 5 Packages section java-1.6.0-sun-jdbc is earlier than 1:1.6.0.24-1jpp.1.el5 AND java-1.6.0-sun is earlier than 1:1.6.0.24-1jpp.1.el5 AND java-1.6.0-sun-plugin is earlier than 1:1.6.0.24-1jpp.1.el5 AND java-1.6.0-sun-devel is earlier than 1:1.6.0.24-1jpp.1.el5 AND java-1.6.0-sun-demo is earlier than 1:1.6.0.24-1jpp.1.el5 AND java-1.6.0-sun-src is earlier than 1:1.6.0.24-1jpp.1.el5 AND Operation system section The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section java-1.6.0-sun-jdbc is earlier than 1:1.6.0.24-1jpp.1.el6 AND java-1.6.0-sun is earlier than 1:1.6.0.24-1jpp.1.el6 AND java-1.6.0-sun-plugin is earlier than 1:1.6.0.24-1jpp.1.el6 AND java-1.6.0-sun-devel is earlier than 1:1.6.0.24-1jpp.1.el6 AND java-1.6.0-sun-demo is earlier than 1:1.6.0.24-1jpp.1.el6 AND java-1.6.0-sun-src is earlier than 1:1.6.0.24-1jpp.1.el6

Definition Id: oval:org.mitre.oval:def:21907

Oval ID:	oval:org.mitre.oval:def:21907
Title:	RHSA-2011:0292: java-1.4.2-ibm security update (Moderate)
Description:	The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:0292-01 CVE-2010-4476	Version:	4
Platform(s):	Red Hat Enterprise Linux 5	Product(s):	java-1.4.2-ibm
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 5 Packages section java-1.4.2-ibm is earlier than 0:1.4.2.13.8-1jpp.3.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.13.8-1jpp.3.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.13.8-1jpp.3.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.13.8-1jpp.3.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.13.8-1jpp.3.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.13.8-1jpp.3.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.13.8-1jpp.3.el5

Definition Id: oval:org.mitre.oval:def:21956

Oval ID:	oval:org.mitre.oval:def:21956
Title:	RHSA-2011:0791: tomcat6 security and bug fix update (Moderate)
Description:	Multiple cross-site scripting (XSS) vulnerabilities in the HTML Manager Interface in Apache Tomcat 5.5 before 5.5.32, 6.0 before 6.0.30, and 7.0 before 7.0.6 allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the display-name tag.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:0791-01 CVE-2010-3718 CVE-2010-4172 CVE-2011-0013	Version:	42
Platform(s):	Red Hat Enterprise Linux 6	Product(s):	tomcat6
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section tomcat6-jsp-2.1-api is earlier than 0:6.0.24-33.el6 AND tomcat6-webapps is earlier than 0:6.0.24-33.el6 AND tomcat6-lib is earlier than 0:6.0.24-33.el6 AND tomcat6-docs-webapp is earlier than 0:6.0.24-33.el6 AND tomcat6-javadoc is earlier than 0:6.0.24-33.el6 AND tomcat6-el-2.1-api is earlier than 0:6.0.24-33.el6 AND tomcat6-admin-webapps is earlier than 0:6.0.24-33.el6 AND tomcat6-servlet-2.5-api is earlier than 0:6.0.24-33.el6 AND tomcat6 is earlier than 0:6.0.24-33.el6

Definition Id: oval:org.mitre.oval:def:22673

Oval ID:	oval:org.mitre.oval:def:22673
Title:	DEPRECATED: ELSA-2011:0282: java-1.6.0-sun security update (Critical)
Description:	The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:0282-01 CVE-2010-4422 CVE-2010-4447 CVE-2010-4448 CVE-2010-4450 CVE-2010-4451 CVE-2010-4452 CVE-2010-4454 CVE-2010-4462 CVE-2010-4463 CVE-2010-4465 CVE-2010-4466 CVE-2010-4467 CVE-2010-4468 CVE-2010-4469 CVE-2010-4470 CVE-2010-4471 CVE-2010-4472 CVE-2010-4473 CVE-2010-4475 CVE-2010-4476	Version:	82
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	java-1.6.0-sun
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test java-1.6.0-sun-jdbc is earlier than 1:1.6.0.24-1jpp.1.el5 AND java-1.6.0-sun is earlier than 1:1.6.0.24-1jpp.1.el5 AND java-1.6.0-sun-plugin is earlier than 1:1.6.0.24-1jpp.1.el5 AND java-1.6.0-sun-devel is earlier than 1:1.6.0.24-1jpp.1.el5 AND java-1.6.0-sun-demo is earlier than 1:1.6.0.24-1jpp.1.el5 AND java-1.6.0-sun-src is earlier than 1:1.6.0.24-1jpp.1.el5 OR rpm test Oracle Linux 6.x AND rpm test java-1.6.0-sun-jdbc is earlier than 1:1.6.0.24-1jpp.1.el6 AND java-1.6.0-sun is earlier than 1:1.6.0.24-1jpp.1.el6 AND java-1.6.0-sun-plugin is earlier than 1:1.6.0.24-1jpp.1.el6 AND java-1.6.0-sun-devel is earlier than 1:1.6.0.24-1jpp.1.el6 AND java-1.6.0-sun-demo is earlier than 1:1.6.0.24-1jpp.1.el6 AND java-1.6.0-sun-src is earlier than 1:1.6.0.24-1jpp.1.el6

Definition Id: oval:org.mitre.oval:def:22826

Oval ID:	oval:org.mitre.oval:def:22826
Title:	ELSA-2011:0292: java-1.4.2-ibm security update (Moderate)
Description:	The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:0292-01 CVE-2010-4476	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	java-1.4.2-ibm
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.4.2-ibm is earlier than 0:1.4.2.13.8-1jpp.3.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.13.8-1jpp.3.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.13.8-1jpp.3.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.13.8-1jpp.3.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.13.8-1jpp.3.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.13.8-1jpp.3.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.13.8-1jpp.3.el5

Definition Id: oval:org.mitre.oval:def:22836

Oval ID:	oval:org.mitre.oval:def:22836
Title:	DEPRECATED: ELSA-2011:0290: java-1.6.0-ibm security update (Moderate)
Description:	The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:0290-01 CVE-2010-4476	Version:	7
Platform(s):	Oracle Linux 6 Oracle Linux 5	Product(s):	java-1.6.0-ibm
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test java-1.6.0-ibm-devel is earlier than 1:1.6.0.9.0-1jpp.4.el5 AND java-1.6.0-ibm-src is earlier than 1:1.6.0.9.0-1jpp.4.el5 AND java-1.6.0-ibm-javacomm is earlier than 1:1.6.0.9.0-1jpp.4.el5 AND java-1.6.0-ibm-accessibility is earlier than 1:1.6.0.9.0-1jpp.4.el5 AND java-1.6.0-ibm-plugin is earlier than 1:1.6.0.9.0-1jpp.4.el5 AND java-1.6.0-ibm-jdbc is earlier than 1:1.6.0.9.0-1jpp.4.el5 AND java-1.6.0-ibm is earlier than 1:1.6.0.9.0-1jpp.4.el5 AND java-1.6.0-ibm-demo is earlier than 1:1.6.0.9.0-1jpp.4.el5 OR rpm test Oracle Linux 6.x AND rpm test java-1.6.0-ibm-devel is earlier than 1:1.6.0.9.0-1jpp.5.el6 AND java-1.6.0-ibm-src is earlier than 1:1.6.0.9.0-1jpp.5.el6 AND java-1.6.0-ibm-javacomm is earlier than 1:1.6.0.9.0-1jpp.5.el6 AND java-1.6.0-ibm-plugin is earlier than 1:1.6.0.9.0-1jpp.5.el6 AND java-1.6.0-ibm-jdbc is earlier than 1:1.6.0.9.0-1jpp.5.el6 AND java-1.6.0-ibm is earlier than 1:1.6.0.9.0-1jpp.5.el6 AND java-1.6.0-ibm-demo is earlier than 1:1.6.0.9.0-1jpp.5.el6

Definition Id: oval:org.mitre.oval:def:22908

Oval ID:	oval:org.mitre.oval:def:22908
Title:	DEPRECATED: ELSA-2011:0291: java-1.5.0-ibm security update (Moderate)
Description:	The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:0291-01 CVE-2010-4476	Version:	7
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	java-1.5.0-ibm
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test java-1.5.0-ibm-devel is earlier than 1:1.5.0.12.3-1jpp.2.el5 AND java-1.5.0-ibm is earlier than 1:1.5.0.12.3-1jpp.2.el5 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.12.3-1jpp.2.el5 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.12.3-1jpp.2.el5 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.12.3-1jpp.2.el5 AND java-1.5.0-ibm-accessibility is earlier than 1:1.5.0.12.3-1jpp.2.el5 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.12.3-1jpp.2.el5 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.12.3-1jpp.2.el5 OR rpm test Oracle Linux 6.x AND rpm test java-1.5.0-ibm-devel is earlier than 1:1.5.0.12.3-1jpp.3.el6 AND java-1.5.0-ibm is earlier than 1:1.5.0.12.3-1jpp.3.el6 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.12.3-1jpp.3.el6 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.12.3-1jpp.3.el6 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.12.3-1jpp.3.el6 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.12.3-1jpp.3.el6 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.12.3-1jpp.3.el6

Definition Id: oval:org.mitre.oval:def:22977

Oval ID:	oval:org.mitre.oval:def:22977
Title:	ELSA-2011:0336: tomcat5 security update (Important)
Description:	The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:0336-01 CVE-2010-4476	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	tomcat5
Definition Synopsis:
Oracle Linux 5.x rpm test tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-server-lib is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-jasper is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-common-lib is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-webapps is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5 is earlier than 0:5.5.23-0jpp.17.el5_6

Definition Id: oval:org.mitre.oval:def:23319

Oval ID:	oval:org.mitre.oval:def:23319
Title:	ELSA-2011:0214: java-1.6.0-openjdk security update (Moderate)
Description:	The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:0214-01 CVE-2010-4476	Version:	6
Platform(s):	Oracle Linux 6	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Oracle Linux 6.x rpm test java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.36.b17.el6_0 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.36.b17.el6_0 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.36.b17.el6_0 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.36.b17.el6_0 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.36.b17.el6_0

Definition Id: oval:org.mitre.oval:def:23406

Oval ID:	oval:org.mitre.oval:def:23406
Title:	ELSA-2011:0290: java-1.6.0-ibm security update (Moderate)
Description:	The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:0290-01 CVE-2010-4476	Version:	6
Platform(s):	Oracle Linux 6 Oracle Linux 5	Product(s):	java-1.6.0-ibm
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test java-1.6.0-ibm-devel is earlier than 1:1.6.0.9.0-1jpp.4.el5 AND java-1.6.0-ibm-src is earlier than 1:1.6.0.9.0-1jpp.4.el5 AND java-1.6.0-ibm-javacomm is earlier than 1:1.6.0.9.0-1jpp.4.el5 AND java-1.6.0-ibm-accessibility is earlier than 1:1.6.0.9.0-1jpp.4.el5 AND java-1.6.0-ibm-plugin is earlier than 1:1.6.0.9.0-1jpp.4.el5 AND java-1.6.0-ibm-jdbc is earlier than 1:1.6.0.9.0-1jpp.4.el5 AND java-1.6.0-ibm is earlier than 1:1.6.0.9.0-1jpp.4.el5 AND java-1.6.0-ibm-demo is earlier than 1:1.6.0.9.0-1jpp.4.el5 OR rpm test Oracle Linux 6.x AND rpm test java-1.6.0-ibm-devel is earlier than 1:1.6.0.9.0-1jpp.5.el6 AND java-1.6.0-ibm-src is earlier than 1:1.6.0.9.0-1jpp.5.el6 AND java-1.6.0-ibm-javacomm is earlier than 1:1.6.0.9.0-1jpp.5.el6 AND java-1.6.0-ibm-plugin is earlier than 1:1.6.0.9.0-1jpp.5.el6 AND java-1.6.0-ibm-jdbc is earlier than 1:1.6.0.9.0-1jpp.5.el6 AND java-1.6.0-ibm is earlier than 1:1.6.0.9.0-1jpp.5.el6 AND java-1.6.0-ibm-demo is earlier than 1:1.6.0.9.0-1jpp.5.el6

Definition Id: oval:org.mitre.oval:def:23523

Oval ID:	oval:org.mitre.oval:def:23523
Title:	ELSA-2011:0791: tomcat6 security and bug fix update (Moderate)
Description:	Multiple cross-site scripting (XSS) vulnerabilities in the HTML Manager Interface in Apache Tomcat 5.5 before 5.5.32, 6.0 before 6.0.30, and 7.0 before 7.0.6 allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the display-name tag.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:0791-01 CVE-2010-3718 CVE-2010-4172 CVE-2011-0013	Version:	17
Platform(s):	Oracle Linux 6	Product(s):	tomcat6
Definition Synopsis:
Oracle Linux 6.x rpm test tomcat6-jsp-2.1-api is earlier than 0:6.0.24-33.el6 AND tomcat6-webapps is earlier than 0:6.0.24-33.el6 AND tomcat6-lib is earlier than 0:6.0.24-33.el6 AND tomcat6-docs-webapp is earlier than 0:6.0.24-33.el6 AND tomcat6-javadoc is earlier than 0:6.0.24-33.el6 AND tomcat6-el-2.1-api is earlier than 0:6.0.24-33.el6 AND tomcat6-admin-webapps is earlier than 0:6.0.24-33.el6 AND tomcat6-servlet-2.5-api is earlier than 0:6.0.24-33.el6 AND tomcat6 is earlier than 0:6.0.24-33.el6

Definition Id: oval:org.mitre.oval:def:23595

Oval ID:	oval:org.mitre.oval:def:23595
Title:	ELSA-2011:0291: java-1.5.0-ibm security update (Moderate)
Description:	The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:0291-01 CVE-2010-4476	Version:	6
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	java-1.5.0-ibm
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test java-1.5.0-ibm-devel is earlier than 1:1.5.0.12.3-1jpp.2.el5 AND java-1.5.0-ibm is earlier than 1:1.5.0.12.3-1jpp.2.el5 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.12.3-1jpp.2.el5 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.12.3-1jpp.2.el5 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.12.3-1jpp.2.el5 AND java-1.5.0-ibm-accessibility is earlier than 1:1.5.0.12.3-1jpp.2.el5 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.12.3-1jpp.2.el5 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.12.3-1jpp.2.el5 OR rpm test Oracle Linux 6.x AND rpm test java-1.5.0-ibm-devel is earlier than 1:1.5.0.12.3-1jpp.3.el6 AND java-1.5.0-ibm is earlier than 1:1.5.0.12.3-1jpp.3.el6 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.12.3-1jpp.3.el6 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.12.3-1jpp.3.el6 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.12.3-1jpp.3.el6 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.12.3-1jpp.3.el6 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.12.3-1jpp.3.el6

Definition Id: oval:org.mitre.oval:def:23615

Oval ID:	oval:org.mitre.oval:def:23615
Title:	ELSA-2011:0282: java-1.6.0-sun security update (Critical)
Description:	The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:0282-01 CVE-2010-4422 CVE-2010-4447 CVE-2010-4448 CVE-2010-4450 CVE-2010-4451 CVE-2010-4452 CVE-2010-4454 CVE-2010-4462 CVE-2010-4463 CVE-2010-4465 CVE-2010-4466 CVE-2010-4467 CVE-2010-4468 CVE-2010-4469 CVE-2010-4470 CVE-2010-4471 CVE-2010-4472 CVE-2010-4473 CVE-2010-4475 CVE-2010-4476	Version:	81
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	java-1.6.0-sun
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test java-1.6.0-sun-jdbc is earlier than 1:1.6.0.24-1jpp.1.el5 AND java-1.6.0-sun is earlier than 1:1.6.0.24-1jpp.1.el5 AND java-1.6.0-sun-plugin is earlier than 1:1.6.0.24-1jpp.1.el5 AND java-1.6.0-sun-devel is earlier than 1:1.6.0.24-1jpp.1.el5 AND java-1.6.0-sun-demo is earlier than 1:1.6.0.24-1jpp.1.el5 AND java-1.6.0-sun-src is earlier than 1:1.6.0.24-1jpp.1.el5 OR rpm test Oracle Linux 6.x AND rpm test java-1.6.0-sun-jdbc is earlier than 1:1.6.0.24-1jpp.1.el6 AND java-1.6.0-sun is earlier than 1:1.6.0.24-1jpp.1.el6 AND java-1.6.0-sun-plugin is earlier than 1:1.6.0.24-1jpp.1.el6 AND java-1.6.0-sun-devel is earlier than 1:1.6.0.24-1jpp.1.el6 AND java-1.6.0-sun-demo is earlier than 1:1.6.0.24-1jpp.1.el6 AND java-1.6.0-sun-src is earlier than 1:1.6.0.24-1jpp.1.el6

Definition Id: oval:org.mitre.oval:def:27948

Oval ID:	oval:org.mitre.oval:def:27948
Title:	DEPRECATED: ELSA-2011-0336 -- tomcat5 security update (important)
Description:	[0:5.5.23-0jpp.17] - Resolves: rhbz 674599 JDK Double.parseDouble DoS
Family:	unix	Class:	patch
Reference(s):	ELSA-2011-0336 CVE-2010-4476	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	tomcat5
Definition Synopsis:
Oracle Linux 5.x Packages match section tomcat5 is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-common-lib is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-jasper is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-server-lib is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.17.el5_6 AND tomcat5-webapps is earlier than 0:5.5.23-0jpp.17.el5_6

Definition Id: oval:org.mitre.oval:def:28054

Oval ID:	oval:org.mitre.oval:def:28054
Title:	DEPRECATED: ELSA-2011-0214 -- java-1.6.0-openjdk security update (moderate)
Description:	[1.6.0.0-1.36.b17] - removed plugin. How it comes in?! - Resolves: rhbz#676295 [1.6.0.0-1.33.b17] - bumped release number, it was accidentaly reduced, and now lower version then last one was released. - Resolves: rhbz#676295 [1.6.0.0-1.22.b17] - Updated to 1.7.9 tarball - removed patch6, fixed upstrream - Resolves: rhbz#676295
Family:	unix	Class:	patch
Reference(s):	ELSA-2011-0214 CVE-2010-4476	Version:	4
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Oracle Linux 5 release section Oracle Linux 5.x Packages match section java-1.6.0-openjdk is earlier than 0:1.6.0.0-1.18.b17.0.1.el5 AND java-1.6.0-openjdk-demo is earlier than 0:1.6.0.0-1.18.b17.0.1.el5 AND java-1.6.0-openjdk-devel is earlier than 0:1.6.0.0-1.18.b17.0.1.el5 AND java-1.6.0-openjdk-javadoc is earlier than 0:1.6.0.0-1.18.b17.0.1.el5 AND java-1.6.0-openjdk-src is earlier than 0:1.6.0.0-1.18.b17.0.1.el5 AND Oracle Linux 6 release section Oracle Linux 6.x Packages match section java-1.6.0-openjdk is earlier than 0:1.6.0.0-1.36.b17.el6_0 AND java-1.6.0-openjdk-demo is earlier than 0:1.6.0.0-1.36.b17.el6_0 AND java-1.6.0-openjdk-devel is earlier than 0:1.6.0.0-1.36.b17.el6_0 AND java-1.6.0-openjdk-javadoc is earlier than 0:1.6.0.0-1.36.b17.el6_0 AND java-1.6.0-openjdk-src is earlier than 0:1.6.0.0-1.36.b17.el6_0

Definition Id: oval:org.mitre.oval:def:28146

Oval ID:	oval:org.mitre.oval:def:28146
Title:	DEPRECATED: ELSA-2011-0791 -- tomcat6 security and bug fix update (moderate)
Description:	[6.0.24-33] - resolves: rhbz 695284 - multiple instances logging fiasco [6.0.24-32] - Resolves: rhbz 698624 - inet4address can't be cast to String [6.0.24-31] - Resolves: rhbz 656403 - cve-2010-4172 jsp syntax error [6.0.24-30] - Resolves: rhbz#697504 initscript logging location [6.0.24-29] - Resolves: rhbz#656403, rhbz#675926, rhbz#676011 - CVE-2010-4172, CVE-2010-3718, CVE-2011-0013, CVE-2010-4476, - CVE-2011-0534 [6.0.24-28] - Resovles rhbz#695284 - wrapper logs to different locations - CVE-2010-4172, CVE-2011-0013, CVE-2010-3718 commented out - until needed. [6.0.24-27] - naming-factory-dbcp missing fix in tomcat6.conf - Add Obsoletes for log4j [6.0.24-26] - Add log4j to package lib. Corrected typo in log4 Provides - epock versus epoch [6.0.24-25] - Installed permissions do not allow tomcat to start - incrementing NVR so yum won't get confused with the zstream
Family:	unix	Class:	patch
Reference(s):	ELSA-2011-0791 CVE-2010-3718 CVE-2010-4172 CVE-2011-0013	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	tomcat6
Definition Synopsis:
Oracle Linux 6.x Packages match section tomcat6 is earlier than 0:6.0.24-33.el6 AND tomcat6-admin-webapps is earlier than 0:6.0.24-33.el6 AND tomcat6-docs-webapp is earlier than 0:6.0.24-33.el6 AND tomcat6-el-2.1-api is earlier than 0:6.0.24-33.el6 AND tomcat6-javadoc is earlier than 0:6.0.24-33.el6 AND tomcat6-jsp-2.1-api is earlier than 0:6.0.24-33.el6 AND tomcat6-lib is earlier than 0:6.0.24-33.el6 AND tomcat6-servlet-2.5-api is earlier than 0:6.0.24-33.el6 AND tomcat6-webapps is earlier than 0:6.0.24-33.el6

CPE : Common Platform Enumeration

Type	Description	Count
Application	Apache Apache Commons Daemon cpe:2.3:a:apache:apache_commons_daemon:1.0.6:::::::* cpe:2.3:a:apache:apache_commons_daemon:1.0.5:::::::* cpe:2.3:a:apache:apache_commons_daemon:1.0.4:::::::* cpe:2.3:a:apache:apache_commons_daemon:1.0.3:::::::*	4
Application	Apache Tomcat cpe:2.3:a:apache:tomcat:7.0.9:::::::* cpe:2.3:a:apache:tomcat:7.0.8:::::::* cpe:2.3:a:apache:tomcat:7.0.7:::::::* cpe:2.3:a:apache:tomcat:7.0.6:::::::* cpe:2.3:a:apache:tomcat:7.0.5:::::::* cpe:2.3:a:apache:tomcat:7.0.4:::::::* cpe:2.3:a:apache:tomcat:7.0.3:::::::* cpe:2.3:a:apache:tomcat:7.0.20:::::::* cpe:2.3:a:apache:tomcat:7.0.2:::::::* cpe:2.3:a:apache:tomcat:7.0.19:::::::* cpe:2.3:a:apache:tomcat:7.0.17:::::::* cpe:2.3:a:apache:tomcat:7.0.16:::::::* cpe:2.3:a:apache:tomcat:7.0.14:::::::* cpe:2.3:a:apache:tomcat:7.0.13:::::::* cpe:2.3:a:apache:tomcat:7.0.12:::::::* cpe:2.3:a:apache:tomcat:7.0.11:::::::* cpe:2.3:a:apache:tomcat:7.0.10:::::::* cpe:2.3:a:apache:tomcat:7.0.1:::::::* cpe:2.3:a:apache:tomcat:7.0.0:::::::* cpe:2.3:a:apache:tomcat:7.0.0:beta:::::: cpe:2.3:a:apache:tomcat:6.0.9:::::::* cpe:2.3:a:apache:tomcat:6.0.8:::::::* cpe:2.3:a:apache:tomcat:6.0.7:::::::* cpe:2.3:a:apache:tomcat:6.0.6:::::::* cpe:2.3:a:apache:tomcat:6.0.5:::::::* cpe:2.3:a:apache:tomcat:6.0.4:::::::* cpe:2.3:a:apache:tomcat:6.0.33:::::::* cpe:2.3:a:apache:tomcat:6.0.32:::::::* cpe:2.3:a:apache:tomcat:6.0.31:::::::* cpe:2.3:a:apache:tomcat:6.0.30:::::::* cpe:2.3:a:apache:tomcat:6.0.3:::::::* cpe:2.3:a:apache:tomcat:6.0.29:::::::* cpe:2.3:a:apache:tomcat:6.0.28:::::::* cpe:2.3:a:apache:tomcat:6.0.27:::::::* cpe:2.3:a:apache:tomcat:6.0.26:::::::* cpe:2.3:a:apache:tomcat:6.0.24:::::::* cpe:2.3:a:apache:tomcat:6.0.20:::::::* cpe:2.3:a:apache:tomcat:6.0.2:::::::* cpe:2.3:a:apache:tomcat:6.0.19:::::::* cpe:2.3:a:apache:tomcat:6.0.18:::::::* cpe:2.3:a:apache:tomcat:6.0.17:::::::* cpe:2.3:a:apache:tomcat:6.0.16:::::::* cpe:2.3:a:apache:tomcat:6.0.15:::::::* cpe:2.3:a:apache:tomcat:6.0.14:::::::* cpe:2.3:a:apache:tomcat:6.0.13:::::::* cpe:2.3:a:apache:tomcat:6.0.12:::::::* cpe:2.3:a:apache:tomcat:6.0.11:::::::* cpe:2.3:a:apache:tomcat:6.0.10:::::::* cpe:2.3:a:apache:tomcat:6.0.1:::::::* cpe:2.3:a:apache:tomcat:6.0.0:::::::* cpe:2.3:a:apache:tomcat:6.0:::::::* cpe:2.3:a:apache:tomcat:5.5.9:::::::* cpe:2.3:a:apache:tomcat:5.5.8:::::::* cpe:2.3:a:apache:tomcat:5.5.7:::::::* cpe:2.3:a:apache:tomcat:5.5.6:::::::* cpe:2.3:a:apache:tomcat:5.5.5:::::::* cpe:2.3:a:apache:tomcat:5.5.4:::::::* cpe:2.3:a:apache:tomcat:5.5.33:::::::* cpe:2.3:a:apache:tomcat:5.5.32:::::::* cpe:2.3:a:apache:tomcat:5.5.31:::::::* cpe:2.3:a:apache:tomcat:5.5.30:::::::* cpe:2.3:a:apache:tomcat:5.5.3:::::::* cpe:2.3:a:apache:tomcat:5.5.29:::::::* cpe:2.3:a:apache:tomcat:5.5.28:::::::* cpe:2.3:a:apache:tomcat:5.5.27:::::::* cpe:2.3:a:apache:tomcat:5.5.26:::::::* cpe:2.3:a:apache:tomcat:5.5.25:::::::* cpe:2.3:a:apache:tomcat:5.5.24:::::::* cpe:2.3:a:apache:tomcat:5.5.23:::::::* cpe:2.3:a:apache:tomcat:5.5.22:::::::* cpe:2.3:a:apache:tomcat:5.5.21:::::::* cpe:2.3:a:apache:tomcat:5.5.20:::::::* cpe:2.3:a:apache:tomcat:5.5.2:::::::* cpe:2.3:a:apache:tomcat:5.5.19:::::::* cpe:2.3:a:apache:tomcat:5.5.18:::::::* cpe:2.3:a:apache:tomcat:5.5.17:::::::* cpe:2.3:a:apache:tomcat:5.5.16:::::::* cpe:2.3:a:apache:tomcat:5.5.15:::::::* cpe:2.3:a:apache:tomcat:5.5.14:::::::* cpe:2.3:a:apache:tomcat:5.5.13:::::::* cpe:2.3:a:apache:tomcat:5.5.12:::::::* cpe:2.3:a:apache:tomcat:5.5.11:::::::* cpe:2.3:a:apache:tomcat:5.5.10:::::::* cpe:2.3:a:apache:tomcat:5.5.1:::::::* cpe:2.3:a:apache:tomcat:5.5.0:::::::*	85
Application	Sun Jdk cpe:2.3:a:sun:jdk:1.6.0:update_4:::::: cpe:2.3:a:sun:jdk:1.6.0:update_18:::::: cpe:2.3:a:sun:jdk:1.6.0:update1:::::: cpe:2.3:a:sun:jdk:1.6.0:update1_b06:::::: cpe:2.3:a:sun:jdk:1.6.0:update2:::::: cpe:2.3:a:sun:jdk:1.6.0:update_14:::::: cpe:2.3:a:sun:jdk:1.6.0:update_10:::::: cpe:2.3:a:sun:jdk:1.6.0:update_7:::::: cpe:2.3:a:sun:jdk:1.6.0:update_17:::::: cpe:2.3:a:sun:jdk:1.6.0:update_13:::::: cpe:2.3:a:sun:jdk:1.6.0:update_6:::::: cpe:2.3:a:sun:jdk:1.6.0:update_20:::::: cpe:2.3:a:sun:jdk:1.6.0:update_5:::::: cpe:2.3:a:sun:jdk:1.6.0:update_16:::::: cpe:2.3:a:sun:jdk:1.6.0:update_3:::::: cpe:2.3:a:sun:jdk:1.6.0:update_19:::::: cpe:2.3:a:sun:jdk:1.6.0:update_15:::::: cpe:2.3:a:sun:jdk:1.6.0:update_21:::::: cpe:2.3:a:sun:jdk:1.6.0:update_12:::::: cpe:2.3:a:sun:jdk:1.6.0:update_11:::::: cpe:2.3:a:sun:jdk:1.6.0:update9:::::: cpe:2.3:a:sun:jdk:1.6.0:update10:::::: cpe:2.3:a:sun:jdk:1.6.0:update14:::::: cpe:2.3:a:sun:jdk:1.6.0:update6:::::: cpe:2.3:a:sun:jdk:1.6.0:update11:::::: cpe:2.3:a:sun:jdk:1.6.0:update3:::::: cpe:2.3:a:sun:jdk:1.6.0:update5:::::: cpe:2.3:a:sun:jdk:1.6.0:update13:::::: cpe:2.3:a:sun:jdk:1.6.0:update12:::::: cpe:2.3:a:sun:jdk:1.6.0:update4:::::: cpe:2.3:a:sun:jdk:1.6.0:update15:::::: cpe:2.3:a:sun:jdk:1.6.0:update7:::::: cpe:2.3:a:sun:jdk:1.6.0:update8:::::: cpe:2.3:a:sun:jdk:1.6.0:update16:::::: cpe:2.3:a:sun:jdk:1.6.0:update_8:::::: cpe:2.3:a:sun:jdk:1.6.0:update_1:::::: cpe:2.3:a:sun:jdk:1.6.0:update_9:::::: cpe:2.3:a:sun:jdk:1.6.0:update18:::::: cpe:2.3:a:sun:jdk:1.6.0:update17:::::: cpe:2.3:a:sun:jdk:1.6.0:update19:::::: cpe:2.3:a:sun:jdk:1.6.0:update_22:::::: cpe:2.3:a:sun:jdk:1.6.0:update_23:::::: cpe:2.3:a:sun:jdk:1.6.0:update_25:::::: cpe:2.3:a:sun:jdk:1.6.0:update_24:::::: cpe:2.3:a:sun:jdk:1.6.0:update_26:::::: cpe:2.3:a:sun:jdk:1.6.0:update_27:::::: cpe:2.3:a:sun:jdk:1.6.0:update_20:x64:::::* cpe:2.3:a:sun:jdk:1.6.0:-:::::: cpe:2.3:a:sun:jdk:1.6:::::::* cpe:2.3:a:sun:jdk:1.5.0_03::solaris::::: cpe:2.3:a:sun:jdk:1.5.0_03::windows::::: cpe:2.3:a:sun:jdk:1.5.0_03::linux::::: cpe:2.3:a:sun:jdk:1.5.0:update25:::::: cpe:2.3:a:sun:jdk:1.5.0:update10:::::: cpe:2.3:a:sun:jdk:1.5.0:update5:::::: cpe:2.3:a:sun:jdk:1.5.0:update7:::::: cpe:2.3:a:sun:jdk:1.5.0:update6:::::: cpe:2.3:a:sun:jdk:1.5.0:update3:::::: cpe:2.3:a:sun:jdk:1.5.0:update16:::::: cpe:2.3:a:sun:jdk:1.5.0:update4:::::: cpe:2.3:a:sun:jdk:1.5.0:update17:::::: cpe:2.3:a:sun:jdk:1.5.0:update9:::::: cpe:2.3:a:sun:jdk:1.5.0:update19:::::: cpe:2.3:a:sun:jdk:1.5.0:update15:::::: cpe:2.3:a:sun:jdk:1.5.0:update21:::::: cpe:2.3:a:sun:jdk:1.5.0:update2:::::: cpe:2.3:a:sun:jdk:1.5.0:update12:::::: cpe:2.3:a:sun:jdk:1.5.0:update23:::::: cpe:2.3:a:sun:jdk:1.5.0:update8:::::: cpe:2.3:a:sun:jdk:1.5.0:update18:::::: cpe:2.3:a:sun:jdk:1.5.0:update11:::::: cpe:2.3:a:sun:jdk:1.5.0:update24:::::: cpe:2.3:a:sun:jdk:1.5.0:update22:::::: cpe:2.3:a:sun:jdk:1.5.0:update20:::::: cpe:2.3:a:sun:jdk:1.5.0:update14:::::: cpe:2.3:a:sun:jdk:1.5.0:update13:::::: cpe:2.3:a:sun:jdk:1.5.0:update1:::::: cpe:2.3:a:sun:jdk:1.5.0:update_1:::::: cpe:2.3:a:sun:jdk:1.5.0:update_16:::::: cpe:2.3:a:sun:jdk:1.5.0:update11_b03:::::: cpe:2.3:a:sun:jdk:1.5.0:update_10:::::: cpe:2.3:a:sun:jdk:1.5.0:update_4:::::: cpe:2.3:a:sun:jdk:1.5.0:update_9:::::: cpe:2.3:a:sun:jdk:1.5.0:update_14:::::: cpe:2.3:a:sun:jdk:1.5.0:update_20:::::: cpe:2.3:a:sun:jdk:1.5.0:update_21:::::: cpe:2.3:a:sun:jdk:1.5.0:update_7:::::: cpe:2.3:a:sun:jdk:1.5.0:update_18:::::: cpe:2.3:a:sun:jdk:1.5.0:update_6:::::: cpe:2.3:a:sun:jdk:1.5.0:update7_b03:::::: cpe:2.3:a:sun:jdk:1.5.0:update_12:::::: cpe:2.3:a:sun:jdk:1.5.0:update_2:::::: cpe:2.3:a:sun:jdk:1.5.0:update_13:::::: cpe:2.3:a:sun:jdk:1.5.0:update_3:::::: cpe:2.3:a:sun:jdk:1.5.0:update_15:::::: cpe:2.3:a:sun:jdk:1.5.0:update_17:::::: cpe:2.3:a:sun:jdk:1.5.0:update_19:::::: cpe:2.3:a:sun:jdk:1.5.0:update_5:::::: cpe:2.3:a:sun:jdk:1.5.0:update_22:::::: cpe:2.3:a:sun:jdk:1.5.0:update_8:::::: cpe:2.3:a:sun:jdk:1.5.0:update_11:::::: cpe:2.3:a:sun:jdk:1.5.0:update26:::::: cpe:2.3:a:sun:jdk:1.5.0:update27:::::: cpe:2.3:a:sun:jdk:1.5.0:update35:::::: cpe:2.3:a:sun:jdk:1.5.0:update29:::::: cpe:2.3:a:sun:jdk:1.5.0:update33:::::: cpe:2.3:a:sun:jdk:1.5.0:update31:::::: cpe:2.3:a:sun:jdk:1.5.0:update28:::::: cpe:2.3:a:sun:jdk:1.5.0:-:::::: cpe:2.3:a:sun:jdk:1.4.2_9:::::::* cpe:2.3:a:sun:jdk:1.4.2_8:::::::* cpe:2.3:a:sun:jdk:1.4.2_7:::::::* cpe:2.3:a:sun:jdk:1.4.2_6:::::::* cpe:2.3:a:sun:jdk:1.4.2_5:::::::* cpe:2.3:a:sun:jdk:1.4.2_4:::::::* cpe:2.3:a:sun:jdk:1.4.2_37:::::::* cpe:2.3:a:sun:jdk:1.4.2_36:::::::* cpe:2.3:a:sun:jdk:1.4.2_35:::::::* cpe:2.3:a:sun:jdk:1.4.2_34:::::::* cpe:2.3:a:sun:jdk:1.4.2_33:::::::* cpe:2.3:a:sun:jdk:1.4.2_32:::::::* cpe:2.3:a:sun:jdk:1.4.2_31:::::::* cpe:2.3:a:sun:jdk:1.4.2_30:::::::* cpe:2.3:a:sun:jdk:1.4.2_3:::::::* cpe:2.3:a:sun:jdk:1.4.2_29:::::::* cpe:2.3:a:sun:jdk:1.4.2_28:::::::* cpe:2.3:a:sun:jdk:1.4.2_27:::::::* cpe:2.3:a:sun:jdk:1.4.2_26:::::::* cpe:2.3:a:sun:jdk:1.4.2_25:::::::* cpe:2.3:a:sun:jdk:1.4.2_24:::::::* cpe:2.3:a:sun:jdk:1.4.2_24::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_23:::::::* cpe:2.3:a:sun:jdk:1.4.2_22:::::::* cpe:2.3:a:sun:jdk:1.4.2_21:::::::* cpe:2.3:a:sun:jdk:1.4.2_20:::::::* cpe:2.3:a:sun:jdk:1.4.2_2:::::::* cpe:2.3:a:sun:jdk:1.4.2_19:::::::* cpe:2.3:a:sun:jdk:1.4.2_18:::::::* cpe:2.3:a:sun:jdk:1.4.2_17:::::::* cpe:2.3:a:sun:jdk:1.4.2_16:::::::* cpe:2.3:a:sun:jdk:1.4.2_15:::::::* cpe:2.3:a:sun:jdk:1.4.2_14:::::::* cpe:2.3:a:sun:jdk:1.4.2_13:::::::* cpe:2.3:a:sun:jdk:1.4.2_12:::::::* cpe:2.3:a:sun:jdk:1.4.2_11:::::::* cpe:2.3:a:sun:jdk:1.4.2_10:::::::* cpe:2.3:a:sun:jdk:1.4.2_1:::::::* cpe:2.3:a:sun:jdk:1.4.2_08::windows::::: cpe:2.3:a:sun:jdk:1.4.2_08::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_08::linux::::: cpe:2.3:a:sun:jdk:1.4.2_05::windows::::: cpe:2.3:a:sun:jdk:1.4.2_05::linux::::: cpe:2.3:a:sun:jdk:1.4.2_05::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_04::linux::::: cpe:2.3:a:sun:jdk:1.4.2_04::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_04::windows::::: cpe:2.3:a:sun:jdk:1.4.2_03::windows::::: cpe:2.3:a:sun:jdk:1.4.2_03::linux::::: cpe:2.3:a:sun:jdk:1.4.2_03::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_02::linux::::: cpe:2.3:a:sun:jdk:1.4.2_01::linux::::: cpe:2.3:a:sun:jdk:1.4.2::solaris::::: cpe:2.3:a:sun:jdk:1.4.2::windows::::: cpe:2.3:a:sun:jdk:1.4.2::linux::::: cpe:2.3:a:sun:jdk:1.4.2:-:::::: cpe:2.3:a:sun:jdk:1.4.1_07:::::::* cpe:2.3:a:sun:jdk:1.4.1_06:::::::* cpe:2.3:a:sun:jdk:1.4.1_05:::::::* cpe:2.3:a:sun:jdk:1.4.1_04:::::::* cpe:2.3:a:sun:jdk:1.4.1_03:::::::* cpe:2.3:a:sun:jdk:1.4.1_03::solaris::::: cpe:2.3:a:sun:jdk:1.4.1_03::windows::::: cpe:2.3:a:sun:jdk:1.4.1_03::linux::::: cpe:2.3:a:sun:jdk:1.4.1_02:::::::* cpe:2.3:a:sun:jdk:1.4.1_02::windows::::: cpe:2.3:a:sun:jdk:1.4.1_02::linux::::: cpe:2.3:a:sun:jdk:1.4.1_02::solaris::::: cpe:2.3:a:sun:jdk:1.4.1_01:::::::* cpe:2.3:a:sun:jdk:1.4.1_01::linux::::: cpe:2.3:a:sun:jdk:1.4.1_01::solaris::::: cpe:2.3:a:sun:jdk:1.4.1_01::windows::::: cpe:2.3:a:sun:jdk:1.4.1:::::::* cpe:2.3:a:sun:jdk:1.4.1::windows::::: cpe:2.3:a:sun:jdk:1.4.1::solaris::::: cpe:2.3:a:sun:jdk:1.4.1::linux::::: cpe:2.3:a:sun:jdk:1.4.0_4::solaris::::: cpe:2.3:a:sun:jdk:1.4.0_4::windows::::: cpe:2.3:a:sun:jdk:1.4.0_4::linux::::: cpe:2.3:a:sun:jdk:1.4.0_04:::::::* cpe:2.3:a:sun:jdk:1.4.0_03:::::::* cpe:2.3:a:sun:jdk:1.4.0_03::linux::::: cpe:2.3:a:sun:jdk:1.4.0_03::solaris::::: cpe:2.3:a:sun:jdk:1.4.0_03::windows::::: cpe:2.3:a:sun:jdk:1.4.0_02:::::::* cpe:2.3:a:sun:jdk:1.4.0_02::linux::::: cpe:2.3:a:sun:jdk:1.4.0_02::solaris::::: cpe:2.3:a:sun:jdk:1.4.0_02::windows::::: cpe:2.3:a:sun:jdk:1.4.0_01:::::::* cpe:2.3:a:sun:jdk:1.4.0_01::windows::::: cpe:2.3:a:sun:jdk:1.4.0:-:::::: cpe:2.3:a:sun:jdk:1.4::linux::::: cpe:2.3:a:sun:jdk:1.4::windows::::: cpe:2.3:a:sun:jdk:1.4::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_28:::::::* cpe:2.3:a:sun:jdk:1.3.1_27:::::::* cpe:2.3:a:sun:jdk:1.3.1_26:::::::* cpe:2.3:a:sun:jdk:1.3.1_25:::::::* cpe:2.3:a:sun:jdk:1.3.1_24:::::::* cpe:2.3:a:sun:jdk:1.3.1_23:::::::* cpe:2.3:a:sun:jdk:1.3.1_22:::::::* cpe:2.3:a:sun:jdk:1.3.1_21:::::::* cpe:2.3:a:sun:jdk:1.3.1_20:::::::* cpe:2.3:a:sun:jdk:1.3.1_19:::::::* cpe:2.3:a:sun:jdk:1.3.1_18:::::::* cpe:2.3:a:sun:jdk:1.3.1_17:::::::* cpe:2.3:a:sun:jdk:1.3.1_16:::::::* cpe:2.3:a:sun:jdk:1.3.1_15:::::::* cpe:2.3:a:sun:jdk:1.3.1_15::linux::::: cpe:2.3:a:sun:jdk:1.3.1_15::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_15::windows::::: cpe:2.3:a:sun:jdk:1.3.1_14:::::::* cpe:2.3:a:sun:jdk:1.3.1_14::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_14::windows::::: cpe:2.3:a:sun:jdk:1.3.1_14::linux::::: cpe:2.3:a:sun:jdk:1.3.1_13:::::::* cpe:2.3:a:sun:jdk:1.3.1_13::windows::::: cpe:2.3:a:sun:jdk:1.3.1_13::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_13::linux::::: cpe:2.3:a:sun:jdk:1.3.1_12:::::::* cpe:2.3:a:sun:jdk:1.3.1_12::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_12::windows::::: cpe:2.3:a:sun:jdk:1.3.1_12::linux::::: cpe:2.3:a:sun:jdk:1.3.1_11:::::::* cpe:2.3:a:sun:jdk:1.3.1_11::linux::::: cpe:2.3:a:sun:jdk:1.3.1_11::windows::::: cpe:2.3:a:sun:jdk:1.3.1_11::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_10:::::::* cpe:2.3:a:sun:jdk:1.3.1_10::linux::::: cpe:2.3:a:sun:jdk:1.3.1_10::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_10::windows::::: cpe:2.3:a:sun:jdk:1.3.1_09:::::::* cpe:2.3:a:sun:jdk:1.3.1_09::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_09::linux::::: cpe:2.3:a:sun:jdk:1.3.1_09::windows::::: cpe:2.3:a:sun:jdk:1.3.1_08:::::::* cpe:2.3:a:sun:jdk:1.3.1_08::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_08::windows::::: cpe:2.3:a:sun:jdk:1.3.1_08::linux::::: cpe:2.3:a:sun:jdk:1.3.1_07:::::::* cpe:2.3:a:sun:jdk:1.3.1_07::windows::::: cpe:2.3:a:sun:jdk:1.3.1_07::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_07::linux::::: cpe:2.3:a:sun:jdk:1.3.1_06:::::::* cpe:2.3:a:sun:jdk:1.3.1_06::windows::::: cpe:2.3:a:sun:jdk:1.3.1_06::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_06::linux::::: cpe:2.3:a:sun:jdk:1.3.1_05:::::::* cpe:2.3:a:sun:jdk:1.3.1_05::linux::::: cpe:2.3:a:sun:jdk:1.3.1_05::windows::::: cpe:2.3:a:sun:jdk:1.3.1_05::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_04:::::::* cpe:2.3:a:sun:jdk:1.3.1_04::windows::::: cpe:2.3:a:sun:jdk:1.3.1_03:::::::* cpe:2.3:a:sun:jdk:1.3.1_03::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_03::windows::::: cpe:2.3:a:sun:jdk:1.3.1_03::linux::::: cpe:2.3:a:sun:jdk:1.3.1_02:::::::* cpe:2.3:a:sun:jdk:1.3.1_02::windows::::: cpe:2.3:a:sun:jdk:1.3.1_02::linux::::: cpe:2.3:a:sun:jdk:1.3.1_02::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_01a:::::::* cpe:2.3:a:sun:jdk:1.3.1_01a::windows::::: cpe:2.3:a:sun:jdk:1.3.1_01:::::::* cpe:2.3:a:sun:jdk:1.3.1_01::linux::::: cpe:2.3:a:sun:jdk:1.3.1_01::solaris::::: cpe:2.3:a:sun:jdk:1.3.1:update19:::::: cpe:2.3:a:sun:jdk:1.3.1:update20:::::: cpe:2.3:a:sun:jdk:1.3.1:-:::::: cpe:2.3:a:sun:jdk:1.3.0_05:::::::* cpe:2.3:a:sun:jdk:1.3.0_05::linux::::: cpe:2.3:a:sun:jdk:1.3.0_05::windows::::: cpe:2.3:a:sun:jdk:1.3.0_05::solaris::::: cpe:2.3:a:sun:jdk:1.3.0_04:::::::* cpe:2.3:a:sun:jdk:1.3.0_03:::::::* cpe:2.3:a:sun:jdk:1.3.0_02:::::::* cpe:2.3:a:sun:jdk:1.3.0_02::windows::::: cpe:2.3:a:sun:jdk:1.3.0_02::solaris::::: cpe:2.3:a:sun:jdk:1.3.0_02::linux::::: cpe:2.3:a:sun:jdk:1.3.0_01:::::::* cpe:2.3:a:sun:jdk:1.3.0:::::::* cpe:2.3:a:sun:jdk:1.3_05::solaris::::: cpe:2.3:a:sun:jdk:1.3_02::solaris::::: cpe:2.3:a:sun:jdk:1.3::solaris::::: cpe:2.3:a:sun:jdk:1.2.2_12::windows::::: cpe:2.3:a:sun:jdk:1.2.2_11::linux::::: cpe:2.3:a:sun:jdk:1.2.2_11::windows::::: cpe:2.3:a:sun:jdk:1.2.2_11::solaris::::: cpe:2.3:a:sun:jdk:1.2.2_10::solaris::::: cpe:2.3:a:sun:jdk:1.2.2_10::windows::::: cpe:2.3:a:sun:jdk:1.2.2_10::linux::::: cpe:2.3:a:sun:jdk:1.2.2_07a::solaris::::: cpe:2.3:a:sun:jdk:1.2.2_07::windows::::: cpe:2.3:a:sun:jdk:1.2.2_07::linux::::: cpe:2.3:a:sun:jdk:1.2.2_07::solaris::::: cpe:2.3:a:sun:jdk:1.2.2:update4:::::: cpe:2.3:a:sun:jdk:1.2.2:update5:::::: cpe:2.3:a:sun:jdk:1.2.2::solaris::::: cpe:2.3:a:sun:jdk:1.2.1:update3:::::: cpe:2.3:a:sun:jdk:1.2.1:-:::::: cpe:2.3:a:sun:jdk:1.2.0:::::::* cpe:2.3:a:sun:jdk:1.1.8:update13:::::: cpe:2.3:a:sun:jdk:1.1.8:update14:::::: cpe:2.3:a:sun:jdk:1.1.8:update2:::::: cpe:2.3:a:sun:jdk:1.1.8:update8:::::: cpe:2.3:a:sun:jdk:1.1.8:update10:::::: cpe:2.3:a:sun:jdk:1.1.8:update7:::::: cpe:2.3:a:sun:jdk:1.1.7b:update5:::::: cpe:2.3:a:sun:jdk:1.1.7b:-:::::: cpe:2.3:a:sun:jdk:1.1.6:update7:::::: cpe:2.3:a:sun:jdk:1.1.6:-:::::: cpe:2.3:a:sun:jdk:1.1.0:::::::*	321
Application	Sun Jre cpe:2.3:a:sun:jre:1.6.0:update_4:::::: cpe:2.3:a:sun:jre:1.6.0:update_16:::::: cpe:2.3:a:sun:jre:1.6.0:update_14:::::: cpe:2.3:a:sun:jre:1.6.0:update_10:::::: cpe:2.3:a:sun:jre:1.6.0:update_20:::::: cpe:2.3:a:sun:jre:1.6.0:update_18:::::: cpe:2.3:a:sun:jre:1.6.0:update_11:::::: cpe:2.3:a:sun:jre:1.6.0:update_13:::::: cpe:2.3:a:sun:jre:1.6.0:update_6:::::: cpe:2.3:a:sun:jre:1.6.0:update_1:::::: cpe:2.3:a:sun:jre:1.6.0:update_17:::::: cpe:2.3:a:sun:jre:1.6.0:update_7:::::: cpe:2.3:a:sun:jre:1.6.0:update_12:::::: cpe:2.3:a:sun:jre:1.6.0:update_15:::::: cpe:2.3:a:sun:jre:1.6.0:update_3:::::: cpe:2.3:a:sun:jre:1.6.0:update_2:::::: cpe:2.3:a:sun:jre:1.6.0:update_21:::::: cpe:2.3:a:sun:jre:1.6.0:update_5:::::: cpe:2.3:a:sun:jre:1.6.0:update_19:::::: cpe:2.3:a:sun:jre:1.6.0:update11:::::: cpe:2.3:a:sun:jre:1.6.0:update15:::::: cpe:2.3:a:sun:jre:1.6.0:update16:::::: cpe:2.3:a:sun:jre:1.6.0:update5:::::: cpe:2.3:a:sun:jre:1.6.0:update10:::::: cpe:2.3:a:sun:jre:1.6.0:update9:::::: cpe:2.3:a:sun:jre:1.6.0:update8:::::: cpe:2.3:a:sun:jre:1.6.0:update14:::::: cpe:2.3:a:sun:jre:1.6.0:update7:::::: cpe:2.3:a:sun:jre:1.6.0:update12:::::: cpe:2.3:a:sun:jre:1.6.0:update6:::::: cpe:2.3:a:sun:jre:1.6.0:update13:::::: cpe:2.3:a:sun:jre:1.6.0:update4:::::: cpe:2.3:a:sun:jre:1.6.0:update_8:::::: cpe:2.3:a:sun:jre:1.6.0:update_9:::::: cpe:2.3:a:sun:jre:1.6.0:update17:::::: cpe:2.3:a:sun:jre:1.6.0:update19:::::: cpe:2.3:a:sun:jre:1.6.0:update18:::::: cpe:2.3:a:sun:jre:1.6.0:update_22:::::: cpe:2.3:a:sun:jre:1.6.0:update_23:::::: cpe:2.3:a:sun:jre:1.6.0:update_25:::::: cpe:2.3:a:sun:jre:1.6.0:update_24:::::: cpe:2.3:a:sun:jre:1.6.0:update_26:::::: cpe:2.3:a:sun:jre:1.6.0:update_27:::::: cpe:2.3:a:sun:jre:1.6.0:-:::::: cpe:2.3:a:sun:jre:1.5.0_11-b03:::::::* cpe:2.3:a:sun:jre:1.5.0:update16:::::: cpe:2.3:a:sun:jre:1.5.0:update17:::::: cpe:2.3:a:sun:jre:1.5.0:update15:::::: cpe:2.3:a:sun:jre:1.5.0:update22:::::: cpe:2.3:a:sun:jre:1.5.0:update12:::::: cpe:2.3:a:sun:jre:1.5.0:update10:::::: cpe:2.3:a:sun:jre:1.5.0:update6:::::: cpe:2.3:a:sun:jre:1.5.0:update13:::::: cpe:2.3:a:sun:jre:1.5.0:update14:::::: cpe:2.3:a:sun:jre:1.5.0:update24:::::: cpe:2.3:a:sun:jre:1.5.0:update11:::::: cpe:2.3:a:sun:jre:1.5.0:update18:::::: cpe:2.3:a:sun:jre:1.5.0:update8:::::: cpe:2.3:a:sun:jre:1.5.0:update1:::::: cpe:2.3:a:sun:jre:1.5.0:update9:::::: cpe:2.3:a:sun:jre:1.5.0:update21:::::: cpe:2.3:a:sun:jre:1.5.0:update20:::::: cpe:2.3:a:sun:jre:1.5.0:update3:::::: cpe:2.3:a:sun:jre:1.5.0:update25:::::: cpe:2.3:a:sun:jre:1.5.0:update4:::::: cpe:2.3:a:sun:jre:1.5.0:update5:::::: cpe:2.3:a:sun:jre:1.5.0:update2:::::: cpe:2.3:a:sun:jre:1.5.0:update7:::::: cpe:2.3:a:sun:jre:1.5.0:update23:::::: cpe:2.3:a:sun:jre:1.5.0:update19:::::: cpe:2.3:a:sun:jre:1.5.0:update_6:::::: cpe:2.3:a:sun:jre:1.5.0:update_7:::::: cpe:2.3:a:sun:jre:1.5.0:update_15:::::: cpe:2.3:a:sun:jre:1.5.0:update_1:::::: cpe:2.3:a:sun:jre:1.5.0:update_3:::::: cpe:2.3:a:sun:jre:1.5.0:update_8:::::: cpe:2.3:a:sun:jre:1.5.0:update_17:::::: cpe:2.3:a:sun:jre:1.5.0:update_2:::::: cpe:2.3:a:sun:jre:1.5.0:update_18:::::: cpe:2.3:a:sun:jre:1.5.0:update_12:::::: cpe:2.3:a:sun:jre:1.5.0:update_9:::::: cpe:2.3:a:sun:jre:1.5.0:update_21:::::: cpe:2.3:a:sun:jre:1.5.0:update_19:::::: cpe:2.3:a:sun:jre:1.5.0:update_14:::::: cpe:2.3:a:sun:jre:1.5.0:update_16:::::: cpe:2.3:a:sun:jre:1.5.0:update_4:::::: cpe:2.3:a:sun:jre:1.5.0:update_13:::::: cpe:2.3:a:sun:jre:1.5.0:update_20:::::: cpe:2.3:a:sun:jre:1.5.0:update_5:::::: cpe:2.3:a:sun:jre:1.5.0:update_11:::::: cpe:2.3:a:sun:jre:1.5.0:update27:::::: cpe:2.3:a:sun:jre:1.5.0:update26:::::: cpe:2.3:a:sun:jre:1.5.0:update35:::::: cpe:2.3:a:sun:jre:1.5.0:update28:::::: cpe:2.3:a:sun:jre:1.5.0:update31:::::: cpe:2.3:a:sun:jre:1.5.0:update33:::::: cpe:2.3:a:sun:jre:1.5.0:update29:::::: cpe:2.3:a:sun:jre:1.5.0:-:::::: cpe:2.3:a:sun:jre:1.4.2_9:::::::* cpe:2.3:a:sun:jre:1.4.2_8:::::::* cpe:2.3:a:sun:jre:1.4.2_7:::::::* cpe:2.3:a:sun:jre:1.4.2_6:::::::* cpe:2.3:a:sun:jre:1.4.2_5:::::::* cpe:2.3:a:sun:jre:1.4.2_4:::::::* cpe:2.3:a:sun:jre:1.4.2_37:::::::* cpe:2.3:a:sun:jre:1.4.2_36:::::::* cpe:2.3:a:sun:jre:1.4.2_35:::::::* cpe:2.3:a:sun:jre:1.4.2_34:::::::* cpe:2.3:a:sun:jre:1.4.2_33:::::::* cpe:2.3:a:sun:jre:1.4.2_32:::::::* cpe:2.3:a:sun:jre:1.4.2_31:::::::* cpe:2.3:a:sun:jre:1.4.2_30:::::::* cpe:2.3:a:sun:jre:1.4.2_3:::::::* cpe:2.3:a:sun:jre:1.4.2_29:::::::* cpe:2.3:a:sun:jre:1.4.2_28:::::::* cpe:2.3:a:sun:jre:1.4.2_27:::::::* cpe:2.3:a:sun:jre:1.4.2_26:::::::* cpe:2.3:a:sun:jre:1.4.2_25:::::::* cpe:2.3:a:sun:jre:1.4.2_24:::::::* cpe:2.3:a:sun:jre:1.4.2_23:::::::* cpe:2.3:a:sun:jre:1.4.2_22:::::::* cpe:2.3:a:sun:jre:1.4.2_21:::::::* cpe:2.3:a:sun:jre:1.4.2_20:::::::* cpe:2.3:a:sun:jre:1.4.2_2:::::::* cpe:2.3:a:sun:jre:1.4.2_19:::::::* cpe:2.3:a:sun:jre:1.4.2_18:::::::* cpe:2.3:a:sun:jre:1.4.2_17:::::::* cpe:2.3:a:sun:jre:1.4.2_16:::::::* cpe:2.3:a:sun:jre:1.4.2_15:::::::* cpe:2.3:a:sun:jre:1.4.2_14:::::::* cpe:2.3:a:sun:jre:1.4.2_13:::::::* cpe:2.3:a:sun:jre:1.4.2_12:::::::* cpe:2.3:a:sun:jre:1.4.2_11:::::::* cpe:2.3:a:sun:jre:1.4.2_10:::::::* cpe:2.3:a:sun:jre:1.4.2_1:::::::* cpe:2.3:a:sun:jre:1.4.2_09:::::::* cpe:2.3:a:sun:jre:1.4.2_08:::::::* cpe:2.3:a:sun:jre:1.4.2_07:::::::* cpe:2.3:a:sun:jre:1.4.2_06:::::::* cpe:2.3:a:sun:jre:1.4.2_05:::::::* cpe:2.3:a:sun:jre:1.4.2_04:::::::* cpe:2.3:a:sun:jre:1.4.2_03:::::::* cpe:2.3:a:sun:jre:1.4.2_02:::::::* cpe:2.3:a:sun:jre:1.4.2_01:::::::* cpe:2.3:a:sun:jre:1.4.2:update1:solaris:::::* cpe:2.3:a:sun:jre:1.4.2:update4:linux:::::* cpe:2.3:a:sun:jre:1.4.2::solaris::::: cpe:2.3:a:sun:jre:1.4.2:update2:linux:::::* cpe:2.3:a:sun:jre:1.4.2:update1:linux:::::* cpe:2.3:a:sun:jre:1.4.2:update1:windows:::::* cpe:2.3:a:sun:jre:1.4.2:update4:solaris:::::* cpe:2.3:a:sun:jre:1.4.2:update3:windows:::::* cpe:2.3:a:sun:jre:1.4.2:update2:solaris:::::* cpe:2.3:a:sun:jre:1.4.2:update5:windows:::::* cpe:2.3:a:sun:jre:1.4.2::linux::::: cpe:2.3:a:sun:jre:1.4.2:update5:linux:::::* cpe:2.3:a:sun:jre:1.4.2:update2:windows:::::* cpe:2.3:a:sun:jre:1.4.2:update3:linux:::::* cpe:2.3:a:sun:jre:1.4.2::windows::::: cpe:2.3:a:sun:jre:1.4.2:update3:solaris:::::* cpe:2.3:a:sun:jre:1.4.2:update4:windows:::::* cpe:2.3:a:sun:jre:1.4.2:update5:solaris:::::* cpe:2.3:a:sun:jre:1.4.2:update20:::::: cpe:2.3:a:sun:jre:1.4.2:update17:::::: cpe:2.3:a:sun:jre:1.4.2:update19:::::: cpe:2.3:a:sun:jre:1.4.2:update18:::::: cpe:2.3:a:sun:jre:1.4.2:update16:::::: cpe:2.3:a:sun:jre:1.4.2:update28:::::: cpe:2.3:a:sun:jre:1.4.2:-:::::: cpe:2.3:a:sun:jre:1.4.1_07::windows::::: cpe:2.3:a:sun:jre:1.4.1_07::solaris::::: cpe:2.3:a:sun:jre:1.4.1_07::linux::::: cpe:2.3:a:sun:jre:1.4.1_07:::::::* cpe:2.3:a:sun:jre:1.4.1_06::solaris::::: cpe:2.3:a:sun:jre:1.4.1_06:::::::* cpe:2.3:a:sun:jre:1.4.1_06::linux::::: cpe:2.3:a:sun:jre:1.4.1_06::windows::::: cpe:2.3:a:sun:jre:1.4.1_05::linux::::: cpe:2.3:a:sun:jre:1.4.1_05::windows::::: cpe:2.3:a:sun:jre:1.4.1_05:::::::* cpe:2.3:a:sun:jre:1.4.1_05::solaris::::: cpe:2.3:a:sun:jre:1.4.1_04:::::::* cpe:2.3:a:sun:jre:1.4.1_04::windows::::: cpe:2.3:a:sun:jre:1.4.1_04::linux::::: cpe:2.3:a:sun:jre:1.4.1_04::solaris::::: cpe:2.3:a:sun:jre:1.4.1_03::solaris::::: cpe:2.3:a:sun:jre:1.4.1_03:::::::* cpe:2.3:a:sun:jre:1.4.1_03::windows::::: cpe:2.3:a:sun:jre:1.4.1_03::linux::::: cpe:2.3:a:sun:jre:1.4.1_02::solaris::::: cpe:2.3:a:sun:jre:1.4.1_02::linux::::: cpe:2.3:a:sun:jre:1.4.1_02::windows::::: cpe:2.3:a:sun:jre:1.4.1_02:::::::* cpe:2.3:a:sun:jre:1.4.1_01::solaris::::: cpe:2.3:a:sun:jre:1.4.1_01::windows::::: cpe:2.3:a:sun:jre:1.4.1_01::linux::::: cpe:2.3:a:sun:jre:1.4.1_01:::::::* cpe:2.3:a:sun:jre:1.4.1:update3:::::: cpe:2.3:a:sun:jre:1.4.1::linux::::: cpe:2.3:a:sun:jre:1.4.1:update3:linux:::::* cpe:2.3:a:sun:jre:1.4.1:update3:solaris:::::* cpe:2.3:a:sun:jre:1.4.1::windows::::: cpe:2.3:a:sun:jre:1.4.1::solaris::::: cpe:2.3:a:sun:jre:1.4.1:update3:windows:::::* cpe:2.3:a:sun:jre:1.4.1:update2:::::: cpe:2.3:a:sun:jre:1.4.1:update4:::::: cpe:2.3:a:sun:jre:1.4.1:update1:::::: cpe:2.3:a:sun:jre:1.4.1:update7:::::: cpe:2.3:a:sun:jre:1.4.1:update6:::::: cpe:2.3:a:sun:jre:1.4.1:update5:::::: cpe:2.3:a:sun:jre:1.4.1:-:::::: cpe:2.3:a:sun:jre:1.4.0_04::solaris::::: cpe:2.3:a:sun:jre:1.4.0_04::windows::::: cpe:2.3:a:sun:jre:1.4.0_04::linux::::: cpe:2.3:a:sun:jre:1.4.0_04:::::::* cpe:2.3:a:sun:jre:1.4.0_03::solaris::::: cpe:2.3:a:sun:jre:1.4.0_03::linux::::: cpe:2.3:a:sun:jre:1.4.0_03::windows::::: cpe:2.3:a:sun:jre:1.4.0_03:::::::* cpe:2.3:a:sun:jre:1.4.0_02::linux::::: cpe:2.3:a:sun:jre:1.4.0_02::windows::::: cpe:2.3:a:sun:jre:1.4.0_02::solaris::::: cpe:2.3:a:sun:jre:1.4.0_02:::::::* cpe:2.3:a:sun:jre:1.4.0_01::solaris::::: cpe:2.3:a:sun:jre:1.4.0_01::windows::::: cpe:2.3:a:sun:jre:1.4.0_01::linux::::: cpe:2.3:a:sun:jre:1.4.0_01:::::::* cpe:2.3:a:sun:jre:1.4.0:::::::* cpe:2.3:a:sun:jre:1.4:::::::* cpe:2.3:a:sun:jre:1.4::linux::::: cpe:2.3:a:sun:jre:1.4::solaris::::: cpe:2.3:a:sun:jre:1.4::windows::::: cpe:2.3:a:sun:jre:1.3.1_9:::::::* cpe:2.3:a:sun:jre:1.3.1_8:::::::* cpe:2.3:a:sun:jre:1.3.1_7:::::::* cpe:2.3:a:sun:jre:1.3.1_6:::::::* cpe:2.3:a:sun:jre:1.3.1_5:::::::* cpe:2.3:a:sun:jre:1.3.1_4:::::::* cpe:2.3:a:sun:jre:1.3.1_3:::::::* cpe:2.3:a:sun:jre:1.3.1_28:::::::* cpe:2.3:a:sun:jre:1.3.1_27:::::::* cpe:2.3:a:sun:jre:1.3.1_26:::::::* cpe:2.3:a:sun:jre:1.3.1_25:::::::* cpe:2.3:a:sun:jre:1.3.1_24:::::::* cpe:2.3:a:sun:jre:1.3.1_23:::::::* cpe:2.3:a:sun:jre:1.3.1_22:::::::* cpe:2.3:a:sun:jre:1.3.1_21:::::::* cpe:2.3:a:sun:jre:1.3.1_20:::::::* cpe:2.3:a:sun:jre:1.3.1_2:::::::* cpe:2.3:a:sun:jre:1.3.1_19:::::::* cpe:2.3:a:sun:jre:1.3.1_18:::::::* cpe:2.3:a:sun:jre:1.3.1_17:::::::* cpe:2.3:a:sun:jre:1.3.1_16:::::::* cpe:2.3:a:sun:jre:1.3.1_15:::::::* cpe:2.3:a:sun:jre:1.3.1_14:::::::* cpe:2.3:a:sun:jre:1.3.1_13:::::::* cpe:2.3:a:sun:jre:1.3.1_12:::::::* cpe:2.3:a:sun:jre:1.3.1_11:::::::* cpe:2.3:a:sun:jre:1.3.1_10:::::::* cpe:2.3:a:sun:jre:1.3.1_1:::::::* cpe:2.3:a:sun:jre:1.3.1_09:::::::* cpe:2.3:a:sun:jre:1.3.1_09::linux::::: cpe:2.3:a:sun:jre:1.3.1_09::solaris::::: cpe:2.3:a:sun:jre:1.3.1_09::windows::::: cpe:2.3:a:sun:jre:1.3.1_08:::::::* cpe:2.3:a:sun:jre:1.3.1_07:::::::* cpe:2.3:a:sun:jre:1.3.1_07::solaris::::: cpe:2.3:a:sun:jre:1.3.1_07::linux::::: cpe:2.3:a:sun:jre:1.3.1_07::windows::::: cpe:2.3:a:sun:jre:1.3.1_06:::::::* cpe:2.3:a:sun:jre:1.3.1_06::solaris::::: cpe:2.3:a:sun:jre:1.3.1_06::linux::::: cpe:2.3:a:sun:jre:1.3.1_06::windows::::: cpe:2.3:a:sun:jre:1.3.1_05:::::::* cpe:2.3:a:sun:jre:1.3.1_05::linux::::: cpe:2.3:a:sun:jre:1.3.1_05::windows::::: cpe:2.3:a:sun:jre:1.3.1_05::solaris::::: cpe:2.3:a:sun:jre:1.3.1_04:::::::* cpe:2.3:a:sun:jre:1.3.1_03:::::::* cpe:2.3:a:sun:jre:1.3.1_03::windows::::: cpe:2.3:a:sun:jre:1.3.1_03::solaris::::: cpe:2.3:a:sun:jre:1.3.1_03::linux::::: cpe:2.3:a:sun:jre:1.3.1_02::solaris::::: cpe:2.3:a:sun:jre:1.3.1_02::windows::::: cpe:2.3:a:sun:jre:1.3.1_02::linux::::: cpe:2.3:a:sun:jre:1.3.1_02:::::::* cpe:2.3:a:sun:jre:1.3.1_01a:::::::* cpe:2.3:a:sun:jre:1.3.1_01:::::::* cpe:2.3:a:sun:jre:1.3.1:update2:::::: cpe:2.3:a:sun:jre:1.3.1:update1:::::: cpe:2.3:a:sun:jre:1.3.1:update16:::::: cpe:2.3:a:sun:jre:1.3.1:update18:::::: cpe:2.3:a:sun:jre:1.3.1:update20:::::: cpe:2.3:a:sun:jre:1.3.1:update19:::::: cpe:2.3:a:sun:jre:1.3.1:update1a:::::: cpe:2.3:a:sun:jre:1.3.1:update8:::::: cpe:2.3:a:sun:jre:1.3.1:update15:::::: cpe:2.3:a:sun:jre:1.3.1:update4:::::: cpe:2.3:a:sun:jre:1.3.1:update4:windows:::::* cpe:2.3:a:sun:jre:1.3.1::linux::::: cpe:2.3:a:sun:jre:1.3.1:update8:solaris:::::* cpe:2.3:a:sun:jre:1.3.1:update1a:windows:::::* cpe:2.3:a:sun:jre:1.3.1:update1:linux:::::* cpe:2.3:a:sun:jre:1.3.1:update4:solaris:::::* cpe:2.3:a:sun:jre:1.3.1:update8:windows:::::* cpe:2.3:a:sun:jre:1.3.1:update1:windows:::::* cpe:2.3:a:sun:jre:1.3.1:update1:solaris:::::* cpe:2.3:a:sun:jre:1.3.1:update8:linux:::::* cpe:2.3:a:sun:jre:1.3.1:update12:::::: cpe:2.3:a:sun:jre:1.3.1:update17:::::: cpe:2.3:a:sun:jre:1.3.1:-:::::: cpe:2.3:a:sun:jre:1.3.0:update5:::::: cpe:2.3:a:sun:jre:1.3.0:update4:::::: cpe:2.3:a:sun:jre:1.3.0:update1:::::: cpe:2.3:a:sun:jre:1.3.0:update3:::::: cpe:2.3:a:sun:jre:1.3.0:update2:::::: cpe:2.3:a:sun:jre:1.3.0:update4:windows:::::* cpe:2.3:a:sun:jre:1.3.0:update5:linux:::::* cpe:2.3:a:sun:jre:1.3.0:update5:solaris:::::* cpe:2.3:a:sun:jre:1.3.0:update3:linux:::::* cpe:2.3:a:sun:jre:1.3.0::windows::::: cpe:2.3:a:sun:jre:1.3.0:update4:linux:::::* cpe:2.3:a:sun:jre:1.3.0:update2:solaris:::::* cpe:2.3:a:sun:jre:1.3.0:update1:linux:::::* cpe:2.3:a:sun:jre:1.3.0::linux::::: cpe:2.3:a:sun:jre:1.3.0:update5:windows:::::* cpe:2.3:a:sun:jre:1.3.0:update2:linux:::::* cpe:2.3:a:sun:jre:1.3.0::solaris::::: cpe:2.3:a:sun:jre:1.3.0:update2:windows:::::* cpe:2.3:a:sun:jre:1.3.0:-:::::: cpe:2.3:a:sun:jre:1.2.2_07::solaris::::: cpe:2.3:a:sun:jre:1.2.2_012::solaris::::: cpe:2.3:a:sun:jre:1.2.2_011::solaris::::: cpe:2.3:a:sun:jre:1.2.2_011::linux::::: cpe:2.3:a:sun:jre:1.2.2_011::windows::::: cpe:2.3:a:sun:jre:1.2.2_007::linux::::: cpe:2.3:a:sun:jre:1.2.2_007::solaris::::: cpe:2.3:a:sun:jre:1.2.2_007::windows::::: cpe:2.3:a:sun:jre:1.2.2_006::linux::::: cpe:2.3:a:sun:jre:1.2.2_005::linux::::: cpe:2.3:a:sun:jre:1.2.2_004::linux::::: cpe:2.3:a:sun:jre:1.2.2_003::linux::::: cpe:2.3:a:sun:jre:1.2.2_003::linux_production::::: cpe:2.3:a:sun:jre:1.2.2::solaris::::: cpe:2.3:a:sun:jre:1.2.2:update10:linux:::::* cpe:2.3:a:sun:jre:1.2.2:update10:solaris:::::* cpe:2.3:a:sun:jre:1.2.2::windows::::: cpe:2.3:a:sun:jre:1.2.2:update10:windows:::::* cpe:2.3:a:sun:jre:1.2.2::linux_production::::: cpe:2.3:a:sun:jre:1.2.2:update10:::::: cpe:2.3:a:sun:jre:1.2:::::::* cpe:2.3:a:sun:jre:1.1.8:update13:::::: cpe:2.3:a:sun:jre:1.1.8:update7:::::: cpe:2.3:a:sun:jre:1.1.8:update8:::::: cpe:2.3:a:sun:jre:1.1.8:update14:::::: cpe:2.3:a:sun:jre:1.1:::::::*	356
Application	Sun Sdk cpe:2.3:a:sun:sdk:1.4.2_9:::::::* cpe:2.3:a:sun:sdk:1.4.2_8:::::::* cpe:2.3:a:sun:sdk:1.4.2_7:::::::* cpe:2.3:a:sun:sdk:1.4.2_6:::::::* cpe:2.3:a:sun:sdk:1.4.2_5:::::::* cpe:2.3:a:sun:sdk:1.4.2_4:::::::* cpe:2.3:a:sun:sdk:1.4.2_3:::::::* cpe:2.3:a:sun:sdk:1.4.2_28:::::::* cpe:2.3:a:sun:sdk:1.4.2_27:::::::* cpe:2.3:a:sun:sdk:1.4.2_26:::::::* cpe:2.3:a:sun:sdk:1.4.2_25:::::::* cpe:2.3:a:sun:sdk:1.4.2_24:::::::* cpe:2.3:a:sun:sdk:1.4.2_23:::::::* cpe:2.3:a:sun:sdk:1.4.2_22:::::::* cpe:2.3:a:sun:sdk:1.4.2_21:::::::* cpe:2.3:a:sun:sdk:1.4.2_20:::::::* cpe:2.3:a:sun:sdk:1.4.2_2:::::::* cpe:2.3:a:sun:sdk:1.4.2_19:::::::* cpe:2.3:a:sun:sdk:1.4.2_18:::::::* cpe:2.3:a:sun:sdk:1.4.2_17:::::::* cpe:2.3:a:sun:sdk:1.4.2_16:::::::* cpe:2.3:a:sun:sdk:1.4.2_15:::::::* cpe:2.3:a:sun:sdk:1.4.2_14:::::::* cpe:2.3:a:sun:sdk:1.4.2_13:::::::* cpe:2.3:a:sun:sdk:1.4.2_12:::::::* cpe:2.3:a:sun:sdk:1.4.2_11:::::::* cpe:2.3:a:sun:sdk:1.4.2_10:::::::* cpe:2.3:a:sun:sdk:1.4.2_1:::::::* cpe:2.3:a:sun:sdk:1.4.2_09:::::::* cpe:2.3:a:sun:sdk:1.4.2_08:::::::* cpe:2.3:a:sun:sdk:1.4.2_07:::::::* cpe:2.3:a:sun:sdk:1.4.2_06:::::::* cpe:2.3:a:sun:sdk:1.4.2_05:::::::* cpe:2.3:a:sun:sdk:1.4.2_04:::::::* cpe:2.3:a:sun:sdk:1.4.2_03:::::::* cpe:2.3:a:sun:sdk:1.4.2_02:::::::* cpe:2.3:a:sun:sdk:1.4.2_01:::::::* cpe:2.3:a:sun:sdk:1.4.2:::::::* cpe:2.3:a:sun:sdk:1.4.1_07:::::::* cpe:2.3:a:sun:sdk:1.4.1_06:::::::* cpe:2.3:a:sun:sdk:1.4.1_05:::::::* cpe:2.3:a:sun:sdk:1.4.1_04:::::::* cpe:2.3:a:sun:sdk:1.4.1_03:::::::* cpe:2.3:a:sun:sdk:1.4.1_02:::::::* cpe:2.3:a:sun:sdk:1.4.1_01:::::::* cpe:2.3:a:sun:sdk:1.4.1:::::::* cpe:2.3:a:sun:sdk:1.4.0_04:::::::* cpe:2.3:a:sun:sdk:1.4.0_03:::::::* cpe:2.3:a:sun:sdk:1.4.0_02:::::::* cpe:2.3:a:sun:sdk:1.4.0_01:::::::* cpe:2.3:a:sun:sdk:1.4.0:::::::* cpe:2.3:a:sun:sdk:1.4:::::::* cpe:2.3:a:sun:sdk:1.3.1_9:::::::* cpe:2.3:a:sun:sdk:1.3.1_8:::::::* cpe:2.3:a:sun:sdk:1.3.1_7:::::::* cpe:2.3:a:sun:sdk:1.3.1_6:::::::* cpe:2.3:a:sun:sdk:1.3.1_5:::::::* cpe:2.3:a:sun:sdk:1.3.1_4:::::::* cpe:2.3:a:sun:sdk:1.3.1_3:::::::* cpe:2.3:a:sun:sdk:1.3.1_28:::::::* cpe:2.3:a:sun:sdk:1.3.1_27:::::::* cpe:2.3:a:sun:sdk:1.3.1_26:::::::* cpe:2.3:a:sun:sdk:1.3.1_25:::::::* cpe:2.3:a:sun:sdk:1.3.1_24:::::::* cpe:2.3:a:sun:sdk:1.3.1_23:::::::* cpe:2.3:a:sun:sdk:1.3.1_22:::::::* cpe:2.3:a:sun:sdk:1.3.1_21:::::::* cpe:2.3:a:sun:sdk:1.3.1_20:::::::* cpe:2.3:a:sun:sdk:1.3.1_2:::::::* cpe:2.3:a:sun:sdk:1.3.1_19:::::::* cpe:2.3:a:sun:sdk:1.3.1_18:::::::* cpe:2.3:a:sun:sdk:1.3.1_17:::::::* cpe:2.3:a:sun:sdk:1.3.1_16:::::::* cpe:2.3:a:sun:sdk:1.3.1_15:::::::* cpe:2.3:a:sun:sdk:1.3.1_14:::::::* cpe:2.3:a:sun:sdk:1.3.1_13:::::::* cpe:2.3:a:sun:sdk:1.3.1_12:::::::* cpe:2.3:a:sun:sdk:1.3.1_11:::::::* cpe:2.3:a:sun:sdk:1.3.1_10:::::::* cpe:2.3:a:sun:sdk:1.3.1_1:::::::* cpe:2.3:a:sun:sdk:1.3.1_09:::::::* cpe:2.3:a:sun:sdk:1.3.1_08:::::::* cpe:2.3:a:sun:sdk:1.3.1_07:::::::* cpe:2.3:a:sun:sdk:1.3.1_06:::::::* cpe:2.3:a:sun:sdk:1.3.1_05:::::::* cpe:2.3:a:sun:sdk:1.3.1_04:::::::* cpe:2.3:a:sun:sdk:1.3.1_03:::::::* cpe:2.3:a:sun:sdk:1.3.1_02:::::::* cpe:2.3:a:sun:sdk:1.3.1_01a:::::::* cpe:2.3:a:sun:sdk:1.3.1_01:::::::* cpe:2.3:a:sun:sdk:1.3.1:::::::* cpe:2.3:a:sun:sdk:1.3.0_05:::::::* cpe:2.3:a:sun:sdk:1.3.0_04:::::::* cpe:2.3:a:sun:sdk:1.3.0_03:::::::* cpe:2.3:a:sun:sdk:1.3.0_02:::::::* cpe:2.3:a:sun:sdk:1.3.0_01:::::::* cpe:2.3:a:sun:sdk:1.3.0:::::::* cpe:2.3:a:sun:sdk:1.3.0::standard::::: cpe:2.3:a:sun:sdk:1.3_05:::::::* cpe:2.3:a:sun:sdk:1.3_02:::::::* cpe:2.3:a:sun:sdk:1.2.2_10:::::::* cpe:2.3:a:sun:sdk:1.2.2_010:::::::* cpe:2.3:a:sun:sdk:1.1.8_007:::::::* cpe:2.3:a:sun:sdk:1.1.3:::::::*	104

OpenVAS Exploits

Date	Description
2012-08-10	Name : Gentoo Security Advisory GLSA 201206-24 (apache tomcat) File : nvt/glsa_201206_24.nasl
2012-07-30	Name : CentOS Update for java CESA-2011:0214 centos5 x86_64 File : nvt/gb_CESA-2011_0214_java_centos5_x86_64.nasl
2012-07-30	Name : CentOS Update for tomcat5 CESA-2011:1845 centos5 x86_64 File : nvt/gb_CESA-2011_1845_tomcat5_centos5_x86_64.nasl
2012-07-30	Name : CentOS Update for tomcat5 CESA-2011:0336 centos5 x86_64 File : nvt/gb_CESA-2011_0336_tomcat5_centos5_x86_64.nasl
2012-07-30	Name : CentOS Update for tomcat6 CESA-2011:1780 centos6 File : nvt/gb_CESA-2011_1780_tomcat6_centos6.nasl
2012-07-09	Name : RedHat Update for tomcat6 RHSA-2011:1780-01 File : nvt/gb_RHSA-2011_1780-01_tomcat6.nasl
2012-06-06	Name : RedHat Update for tomcat6 RHSA-2011:0791-01 File : nvt/gb_RHSA-2011_0791-01_tomcat6.nasl
2012-06-06	Name : RedHat Update for tomcat6 RHSA-2011:0335-01 File : nvt/gb_RHSA-2011_0335-01_tomcat6.nasl
2012-04-02	Name : Fedora Update for tomcat6 FEDORA-2011-13426 File : nvt/gb_fedora_2011_13426_tomcat6_fc16.nasl
2012-04-02	Name : Fedora Update for apache-commons-daemon FEDORA-2011-10880 File : nvt/gb_fedora_2011_10880_apache-commons-daemon_fc16.nasl
2012-03-16	Name : VMSA-2012-0005 VMware vCenter Server, Orchestrator, Update Manager, vShield, ... File : nvt/gb_VMSA-2012-0005.nasl
2012-03-15	Name : VMSA-2011-0013.2 VMware third party component updates for VMware vCenter Serv... File : nvt/gb_VMSA-2011-0013.nasl
2012-02-12	Name : Gentoo Security Advisory GLSA 201111-02 (sun-jre-bin sun-jdk emul-linux-x86-j... File : nvt/glsa_201111_02.nasl
2012-02-12	Name : Debian Security Advisory DSA 2401-1 (tomcat6) File : nvt/deb_2401_1.nasl
2012-02-06	Name : Mac OS X Multiple Vulnerabilities (2012-001) File : nvt/gb_macosx_su12-001.nasl
2011-12-23	Name : CentOS Update for tomcat5 CESA-2011:1845 centos5 i386 File : nvt/gb_CESA-2011_1845_tomcat5_centos5_i386.nasl
2011-12-23	Name : RedHat Update for tomcat5 RHSA-2011:1845-01 File : nvt/gb_RHSA-2011_1845-01_tomcat5.nasl
2011-12-16	Name : Ubuntu Update for commons-daemon USN-1298-1 File : nvt/gb_ubuntu_USN_1298_1.nasl
2011-11-11	Name : Fedora Update for tomcat6 FEDORA-2011-15005 File : nvt/gb_fedora_2011_15005_tomcat6_fc15.nasl
2011-11-11	Name : Ubuntu Update for tomcat6 USN-1252-1 File : nvt/gb_ubuntu_USN_1252_1.nasl
2011-10-21	Name : Fedora Update for tomcat6 FEDORA-2011-13456 File : nvt/gb_fedora_2011_13456_tomcat6_fc15.nasl
2011-10-21	Name : Fedora Update for tomcat6 FEDORA-2011-13457 File : nvt/gb_fedora_2011_13457_tomcat6_fc14.nasl
2011-10-21	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2011-14638 File : nvt/gb_fedora_2011_14638_java-1.6.0-openjdk_fc14.nasl
2011-10-21	Name : Mandriva Update for tomcat5 MDVSA-2011:156 (tomcat5) File : nvt/gb_mandriva_MDVSA_2011_156.nasl
2011-10-20	Name : Mac OS X v10.6.8 Multiple Vulnerabilities (2011-006) File : nvt/gb_macosx_su11-006.nasl
2011-09-09	Name : Apache Tomcat 'sendfile' Request Attributes Information Disclosure Vulnerability File : nvt/gb_tomcat_48667.nasl
2011-09-08	Name : Apache Tomcat 'MemoryUserDatabase' Information Disclosure Vulnerability File : nvt/gb_tomcat_48456.nasl
2011-09-08	Name : Apache Tomcat AJP Protocol Security Bypass Vulnerability File : nvt/gb_tomcat_49353.nasl
2011-08-31	Name : Fedora Update for apache-commons-daemon FEDORA-2011-10936 File : nvt/gb_fedora_2011_10936_apache-commons-daemon_fc15.nasl
2011-08-29	Name : Java for Mac OS X 10.5 Update 9 File : nvt/secpod_macosx_java_10_5_upd_9.nasl
2011-08-29	Name : Java for Mac OS X 10.6 Update 4 File : nvt/secpod_macosx_java_10_6_upd_4.nasl
2011-08-17	Name : Apache Commons Daemon 'jsvc' Information Disclosure Vulnerability File : nvt/gb_tomcat_49143.nasl
2011-08-12	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2011-9523 File : nvt/gb_fedora_2011_9523_java-1.6.0-openjdk_fc14.nasl
2011-08-09	Name : CentOS Update for tomcat5 CESA-2011:0336 centos5 i386 File : nvt/gb_CESA-2011_0336_tomcat5_centos5_i386.nasl
2011-08-09	Name : CentOS Update for java CESA-2011:0214 centos5 i386 File : nvt/gb_CESA-2011_0214_java_centos5_i386.nasl
2011-06-20	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2011-8003 File : nvt/gb_fedora_2011_8003_java-1.6.0-openjdk_fc14.nasl
2011-06-20	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2011-8020 File : nvt/gb_fedora_2011_8020_java-1.6.0-openjdk_fc13.nasl
2011-06-06	Name : HP-UX Update for Java HPSBUX02685 File : nvt/gb_hp_ux_HPSBUX02685.nasl
2011-05-05	Name : HP-UX Update for Apache Web Server HPSBUX02645 File : nvt/gb_hp_ux_HPSBUX02645.nasl
2011-04-01	Name : Ubuntu Update for tomcat6 vulnerabilities USN-1097-1 File : nvt/gb_ubuntu_USN_1097_1.nasl
2011-04-01	Name : Mandriva Update for java-1.6.0-openjdk MDVSA-2011:054 (java-1.6.0-openjdk) File : nvt/gb_mandriva_MDVSA_2011_054.nasl
2011-03-15	Name : RedHat Update for tomcat5 RHSA-2011:0336-01 File : nvt/gb_RHSA-2011_0336-01_tomcat5.nasl
2011-03-07	Name : Ubuntu Update for openjdk-6 vulnerabilities USN-1079-1 File : nvt/gb_ubuntu_USN_1079_1.nasl
2011-03-07	Name : Debian Security Advisory DSA 2161-1 (openjdk-6) File : nvt/deb_2161_1.nasl
2011-03-07	Name : Debian Security Advisory DSA 2161-2 (openjdk-6) File : nvt/deb_2161_2.nasl
2011-03-07	Name : Debian Security Advisory DSA 2160-1 (tomcat6) File : nvt/deb_2160_1.nasl
2011-03-05	Name : FreeBSD Ports: tomcat55 File : nvt/freebsd_tomcat55.nasl
2011-02-28	Name : SuSE Update for java-1_6_0-sun SUSE-SA:2011:010 File : nvt/gb_suse_2011_010.nasl
2011-02-28	Name : Oracle Java SE Multiple Unspecified Vulnerabilities (Windows) File : nvt/secpod_oracle_java_mult_unspecified_vuln_win_feb11.nasl
2011-02-22	Name : Mandriva Update for tomcat5 MDVSA-2011:030 (tomcat5) File : nvt/gb_mandriva_MDVSA_2011_030.nasl
2011-02-18	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2011-1645 File : nvt/gb_fedora_2011_1645_java-1.6.0-openjdk_fc14.nasl
2011-02-18	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2011-1631 File : nvt/gb_fedora_2011_1631_java-1.6.0-openjdk_fc13.nasl
2011-02-16	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2011-1263 File : nvt/gb_fedora_2011_1263_java-1.6.0-openjdk_fc14.nasl
2011-02-16	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2011-1231 File : nvt/gb_fedora_2011_1231_java-1.6.0-openjdk_fc13.nasl
2011-02-11	Name : RedHat Update for java-1.6.0-openjdk RHSA-2011:0214-01 File : nvt/gb_RHSA-2011_0214-01_java-1.6.0-openjdk.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
74818	Apache Tomcat AJP Message Injection Authentication Bypass Apache Tomcat contains a flaw related to the processing of certain requests. The issue is triggered when a remote attacker injects arbitrary AJP messages. This may disclose sensitive information to an attacker or allow them to bypass authentication.
74541	Apache Tomcat Commons Daemon Jsvc Permissions Weakness Arbitrary File Access
73798	Apache Tomcat sendfile Request Start / Endpoint Parsing Local DoS
73797	Apache Tomcat sendfile Request Attribute Validation Weakness Local Access Res...
73429	Apache Tomcat JMX MemoryUserDatabase Local Password Disclosure
71558	Apache Tomcat SecurityManager ServletContext Attribute Traversal Arbitrary Fi... Apache Tomcat contains a flaw that allows a local attacker to traverse outside of a restricted path. The issue is due to the 'SecurityManager' not properly making the 'ServletContext' attribute read-only, allowing for directory traversal style attacks (e.g., ../../). This directory traversal attack would allow the attacker to manipulate arbitrary files.
71557	Apache Tomcat HTML Manager Multiple XSS The HTML Manager Interface in Apache Tomcat contains multiple flaws that allow a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate certain unspecified input related to the display-name tag before returning it to the user. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.
70965	Oracle Java SE / Java for Business Double.parseDouble Method Floating Point ... Oracle Java SE and Java for Business contain a flaw that may allow a remote denial of service. The issue is triggered when the 'Double.parseDouble' method in JRE allows remote attackers to trigger an infinite loop with a crafted string, resulting in a denial of service.

Information Assurance Vulnerability Management (IAVM)

Date	Description
2012-05-03	IAVM : 2012-B-0048 - Multiple Vulnerabilities in HP Systems Insight Manager Severity : Category I - VMSKEY : V0032178
2011-12-15	IAVM : 2011-A-0173 - Multiple Vulnerabilities in VMware ESX 4.0 Severity : Category I - VMSKEY : V0030824
2011-12-01	IAVM : 2011-A-0160 - Multiple Vulnerabilities in VMware vCenter Server 4.0 and vCenter Update Mana... Severity : Category I - VMSKEY : V0030769

Snort® IPS/IDS

Date	Description
2014-01-10	Java floating point number denial of service - via POST RuleID : 18471 - Revision : 8 - Type : SERVER-WEBAPP
2014-01-10	Java floating point number denial of service - via URI RuleID : 18470 - Revision : 9 - Type : SERVER-WEBAPP

Nessus® Vulnerability Scanner

Date	Description
2016-03-04	Name : The remote VMware ESX / ESXi host is missing a security-related patch. File : vmware_VMSA-2011-0013_remote.nasl - Type : ACT_GATHER_INFO
2016-03-03	Name : The remote VMware ESXi / ESX host is missing a security-related patch. File : vmware_VMSA-2012-0005_remote.nasl - Type : ACT_GATHER_INFO
2014-11-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0680.nasl - Type : ACT_GATHER_INFO
2014-11-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0682.nasl - Type : ACT_GATHER_INFO
2014-06-30	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201406-32.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_java-1_6_0-sun-110217.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_tomcat6-110211.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_tomcat6-110815.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_tomcat6-110916.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_jakarta-commons-daemon-110916.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_java-1_6_0-sun-110314.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_tomcat6-110815.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_tomcat6-110916.nasl - Type : ACT_GATHER_INFO
2013-09-04	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2011-25.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-0214.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-0335.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-0336.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-1780.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-1845.nasl - Type : ACT_GATHER_INFO
2013-06-05	Name : The remote host has a virtualization management application installed that is... File : vmware_vcenter_vmsa-2012-0005.nasl - Type : ACT_GATHER_INFO
2013-03-09	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1079-2.nasl - Type : ACT_GATHER_INFO
2013-03-09	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1079-3.nasl - Type : ACT_GATHER_INFO
2013-02-22	Name : The remote Unix host contains a programming platform that is affected by mult... File : oracle_java_cpu_feb_2011_unix.nasl - Type : ACT_GATHER_INFO
2013-01-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0880.nasl - Type : ACT_GATHER_INFO
2013-01-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0074.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110210_java_1_6_0_openjdk_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110217_java__jdk_1_6_0__on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110309_tomcat5_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110309_tomcat6_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110519_tomcat6_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20111205_tomcat6_on_SL6.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20111220_tomcat5_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-06-25	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201206-24.nasl - Type : ACT_GATHER_INFO
2012-06-21	Name : The remote database server is affected by multiple denial of service vulnerab... File : db2_9fp11.nasl - Type : ACT_GATHER_INFO
2012-06-15	Name : The remote Windows host contains software that is affected by multiple vulner... File : hp_systems_insight_manager_700_multiple_vulns.nasl - Type : ACT_GATHER_INFO
2012-03-16	Name : The remote VMware ESXi / ESX host is missing one or more security-related pat... File : vmware_VMSA-2012-0005.nasl - Type : ACT_GATHER_INFO
2012-02-03	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2401.nasl - Type : ACT_GATHER_INFO
2012-02-02	Name : The remote host is missing a Mac OS X update that fixes multiple security vul... File : macosx_SecUpd2012-001.nasl - Type : ACT_GATHER_INFO
2011-12-23	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2011-1780.nasl - Type : ACT_GATHER_INFO
2011-12-21	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2011-1845.nasl - Type : ACT_GATHER_INFO
2011-12-21	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1845.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_4_2-ibm-7440.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_6_0-ibm-7443.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_tomcat5-7689.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_tomcat5-7756.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1298-1.nasl - Type : ACT_GATHER_INFO
2011-12-12	Name : The remote web server is affected by multiple vulnerabilities. File : tomcat_6_0_35.nasl - Type : ACT_GATHER_INFO
2011-12-06	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1780.nasl - Type : ACT_GATHER_INFO
2011-11-23	Name : The remote database server is affected by multiple denial of service vulnerab... File : db2_97fp5.nasl - Type : ACT_GATHER_INFO
2011-11-09	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1252-1.nasl - Type : ACT_GATHER_INFO
2011-11-07	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201111-02.nasl - Type : ACT_GATHER_INFO
2011-10-28	Name : The remote VMware ESXi / ESX host is missing one or more security-related pat... File : vmware_VMSA-2011-0013.nasl - Type : ACT_GATHER_INFO
2011-10-24	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_tomcat5-7755.nasl - Type : ACT_GATHER_INFO
2011-10-21	Name : The remote Fedora host is missing a security update. File : fedora_2011-13456.nasl - Type : ACT_GATHER_INFO
2011-10-21	Name : The remote Fedora host is missing a security update. File : fedora_2011-13457.nasl - Type : ACT_GATHER_INFO
2011-10-19	Name : The remote Fedora host is missing a security update. File : fedora_2011-13426.nasl - Type : ACT_GATHER_INFO
2011-10-19	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2011-156.nasl - Type : ACT_GATHER_INFO
2011-10-13	Name : The remote host is missing a Mac OS X update that fixes several security issues. File : macosx_SecUpd2011-006.nasl - Type : ACT_GATHER_INFO
2011-09-26	Name : The remote web server is affected by multiple vulnerabilities. File : tomcat_5_5_34.nasl - Type : ACT_GATHER_INFO
2011-09-02	Name : The remote web server is affected by an authentication bypass vulnerability t... File : tomcat_7_0_21.nasl - Type : ACT_GATHER_INFO
2011-09-01	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_tomcat5-7688.nasl - Type : ACT_GATHER_INFO
2011-08-30	Name : The remote web server is affected by multiple vulnerabilities. File : tomcat_6_0_33.nasl - Type : ACT_GATHER_INFO
2011-08-29	Name : The remote Fedora host is missing a security update. File : fedora_2011-10936.nasl - Type : ACT_GATHER_INFO
2011-08-24	Name : The remote Fedora host is missing a security update. File : fedora_2011-10880.nasl - Type : ACT_GATHER_INFO
2011-08-16	Name : The remote web server is affected by an information disclosure vulnerability. File : tomcat_7_0_20.nasl - Type : ACT_GATHER_INFO
2011-08-03	Name : The remote web server is affected by multiple vulnerabilities. File : tomcat_7_0_19.nasl - Type : ACT_GATHER_INFO
2011-05-20	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0791.nasl - Type : ACT_GATHER_INFO
2011-05-13	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12706.nasl - Type : ACT_GATHER_INFO
2011-05-13	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_4_2-ibm-110504.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_java-1_6_0-sun-110217.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_tomcat6-110211.nasl - Type : ACT_GATHER_INFO
2011-04-15	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2011-0214.nasl - Type : ACT_GATHER_INFO
2011-04-15	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2011-0336.nasl - Type : ACT_GATHER_INFO
2011-03-30	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1097-1.nasl - Type : ACT_GATHER_INFO
2011-03-28	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2011-054.nasl - Type : ACT_GATHER_INFO
2011-03-22	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_6_0-ibm-110307.nasl - Type : ACT_GATHER_INFO
2011-03-22	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_6_0-ibm-7369.nasl - Type : ACT_GATHER_INFO
2011-03-21	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_5_0-ibm-7350.nasl - Type : ACT_GATHER_INFO
2011-03-18	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12687.nasl - Type : ACT_GATHER_INFO
2011-03-17	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12683.nasl - Type : ACT_GATHER_INFO
2011-03-11	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12682.nasl - Type : ACT_GATHER_INFO
2011-03-11	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_4_2-ibm-110223.nasl - Type : ACT_GATHER_INFO
2011-03-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_4_2-ibm-7348.nasl - Type : ACT_GATHER_INFO
2011-03-10	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0335.nasl - Type : ACT_GATHER_INFO
2011-03-10	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0336.nasl - Type : ACT_GATHER_INFO
2011-03-09	Name : The remote host has a version of Java that is affected by multiple vulnerabil... File : macosx_java_10_5_update9.nasl - Type : ACT_GATHER_INFO
2011-03-09	Name : The remote host has a version of Java that is affected by multiple vulnerabil... File : macosx_java_10_6_update4.nasl - Type : ACT_GATHER_INFO
2011-03-03	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_tomcat5-7337.nasl - Type : ACT_GATHER_INFO
2011-03-02	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1079-1.nasl - Type : ACT_GATHER_INFO
2011-02-23	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0290.nasl - Type : ACT_GATHER_INFO
2011-02-23	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0291.nasl - Type : ACT_GATHER_INFO
2011-02-23	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0292.nasl - Type : ACT_GATHER_INFO
2011-02-23	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_6_0-sun-110217.nasl - Type : ACT_GATHER_INFO
2011-02-23	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_6_0-sun-7342.nasl - Type : ACT_GATHER_INFO
2011-02-20	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2011-030.nasl - Type : ACT_GATHER_INFO
2011-02-18	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0282.nasl - Type : ACT_GATHER_INFO
2011-02-16	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_553ec4ed38d611e094b1000c29ba66d2.nasl - Type : ACT_GATHER_INFO
2011-02-16	Name : The remote Windows host contains a programming platform that is affected by m... File : oracle_java_cpu_feb_2011.nasl - Type : ACT_GATHER_INFO
2011-02-15	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2161.nasl - Type : ACT_GATHER_INFO
2011-02-14	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2160.nasl - Type : ACT_GATHER_INFO
2011-02-14	Name : The remote Fedora host is missing a security update. File : fedora_2011-1231.nasl - Type : ACT_GATHER_INFO
2011-02-14	Name : The remote Fedora host is missing a security update. File : fedora_2011-1263.nasl - Type : ACT_GATHER_INFO
2011-02-14	Name : The remote web server is affected by multiple vulnerabilities. File : tomcat_6_0_30.nasl - Type : ACT_GATHER_INFO
2011-02-14	Name : The remote web server is affected by a cross-site scripting vulnerability. File : tomcat_7_0_6.nasl - Type : ACT_GATHER_INFO
2011-02-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0214.nasl - Type : ACT_GATHER_INFO
2011-02-11	Name : The remote web server is affected by a cross-site scripting vulnerability. File : tomcat_5_5_32.nasl - Type : ACT_GATHER_INFO
2011-02-11	Name : The remote web server is affected by a security bypass vulnerability. File : tomcat_7_0_4.nasl - Type : ACT_GATHER_INFO
2010-07-16	Name : The remote Apache Tomcat server is affected by multiple vulnerabilities. File : tomcat_transfer_encoding.nasl - Type : ACT_ATTACK

Global Informations

Type	Count
CWE ID(s)	5
Oval ID(s)	44
CPE ID(s)	870
osvdb(s)	8
Openvas Exploit(s)	55
IAVM(s)	3
Snort® Rule(s)	2
Nessus® Exploit(s)	108

	Related
7.5	CVE-2011-3190
5	CVE-2011-2729
5	CVE-2010-4476
4.4	CVE-2011-2526
4.3	CVE-2011-0013
1.9	CVE-2011-2204
1.2	CVE-2010-3718
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 7 more Alert(s)