9.3 - MDVSA-2010:084

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Informations
Name	MDVSA-2010:084	First vendor Publication	2010-04-28
Vendor	Mandriva	Last vendor Modification	2010-04-28
Severity (Vendor)	N/A	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Multiple Java OpenJDK security vulnerabilities has been identified and fixed:

- TLS: MITM attacks via session renegotiation (CVE-2009-3555). - Loader-constraint table allows arrays instead of only the b ase-classes (CVE-2010-0082). - Policy/PolicyFile leak dynamic ProtectionDomains. (CVE-2010-0084). - File TOCTOU deserialization vulnerability (CVE-2010-0085). - Inflater/Deflater clone issues (CVE-2010-0088). - Unsigned applet can retrieve the dragged information before drop action occurs (CVE-2010-0091). - AtomicReferenceArray causes SIGSEGV -> SEGV_MAPERR error (CVE-2010-0092). - System.arraycopy unable to reference elements beyond Integer.MAX_VALUE bytes (CVE-2010-0093). - Deserialization of RMIConnectionImpl objects should enforce stricter checks (CVE-2010-0094). - Subclasses of InetAddress may incorrectly interpret network addresses (CVE-2010-0095). - JAR unpack200 must verify input parameters (CVE-2010-0837). - CMM readMabCurveData Buffer Overflow Vulnerability (CVE-2010-0838). - Applet Trusted Methods Chaining Privilege Escalation Vulner ability (CVE-2010-0840). - No ClassCastException for HashAttributeSet constructors if run with -Xcomp (CVE-2010-0845) - ImagingLib arbitrary code execution vulnerability (CVE-2010-0847). - AWT Library Invalid Index Vulnerability (CVE-2010-0848).

Additional security issues that was fixed with IcedTea6 1.6.2: - deprecate MD2 in SSL cert validation (CVE-2009-2409). - ICC_Profile file existence detection information leak (CVE-2009-3728). - JRE AWT setDifflCM stack overflow (CVE-2009-3869). - JRE AWT setBytePixels heap overflow (CVE-2009-3871). - JPEG Image Writer quantization problem (CVE-2009-3873). - ImageI/O JPEG heap overflow (CVE-2009-3874). - MessageDigest.isEqual introduces timing attack vulnerabilities (CVE-2009-3875). - OpenJDK ASN.1/DER input stream parser denial of service (CVE-2009-3876, CVE-2009-3877) - GraphicsConfiguration information leak (CVE-2009-3879). - UI logging information leakage (CVE-2009-3880). - resurrected classloaders can still have children (CVE-2009-3881). - Numerous static security flaws in Swing (findbugs) (CVE-2009-3882). - Mutable statics in Windows PL&F (findbugs) (CVE-2009-3883). - zoneinfo file existence information leak (CVE-2009-3884). - BMP parsing DoS with UNC ICC links (CVE-2009-3885).

Additionally Paulo Cesar Pereira de Andrade (pcpa) at Mandriva found and fixed a bug in IcedTea6 1.8 that is also applied to the provided packages:

* plugin/icedteanp/IcedTeaNPPlugin.cc (plugin_filter_environment): Increment malloc size by one to account for NULL terminator. Bug# 474.

Packages for 2009.0 are provided due to the Extended Maintenance Program.

Original Source

Url : http://www.mandriva.com/security/advisories?name=MDVSA-2010:084

CWE : Common Weakness Enumeration

%	Id	Name
21 %	CWE-200	Information Exposure
21 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer
14 %	CWE-399	Resource Management Errors
14 %	CWE-295	Certificate Issues
7 %	CWE-310	Cryptographic Issues
7 %	CWE-264	Permissions, Privileges, and Access Controls
7 %	CWE-189	Numeric Errors (CWE/SANS Top 25)
7 %	CWE-22	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:10057

Oval ID:	oval:org.mitre.oval:def:10057
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0092	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:10088

Oval ID:	oval:org.mitre.oval:def:10088
Title:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section openssl-perl is earlier than 0:0.9.7a-33.26 AND openssl-devel is earlier than 0:0.9.7a-33.26 AND openssl is earlier than 0:0.9.7a-33.26 AND httpd-devel is earlier than 0:2.0.46-77.ent AND mod_ssl is earlier than 0:2.0.46-77.ent AND httpd is earlier than 0:2.0.46-77.ent OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section openssl-perl is earlier than 0:0.9.7a-43.17.el4_8.5 AND httpd-suexec is earlier than 0:2.0.52-41.ent.6 AND httpd-manual is earlier than 0:2.0.52-41.ent.6 AND nspr is earlier than 0:4.8.4-1.1.el4_8 AND mod_ssl is earlier than 0:2.0.52-41.ent.6 AND nss is earlier than 0:3.12.6-1.el4_8 AND nspr-devel is earlier than 0:4.8.4-1.1.el4_8 AND httpd is earlier than 0:2.0.52-41.ent.6 AND openssl-devel is earlier than 0:0.9.7a-43.17.el4_8.5 AND gnutls is earlier than 0:1.0.20-4.el4_8.7 AND openssl is earlier than 0:0.9.7a-43.17.el4_8.5 AND httpd-devel is earlier than 0:2.0.52-41.ent.6 AND nss-devel is earlier than 0:3.12.6-1.el4_8 AND gnutls-devel is earlier than 0:1.0.20-4.el4_8.7 AND nss-tools is earlier than 0:3.12.6-1.el4_8 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section openssl097a is earlier than 0:0.9.7a-9.el5_4.2 AND openssl-perl is earlier than 0:0.9.8e-12.el5_4.6 AND nss-pkcs11-devel is earlier than 0:3.12.6-1.el5_4 AND httpd-manual is earlier than 0:2.2.3-31.el5_4.2 AND nspr-devel is earlier than 0:4.8.4-1.el5_4 AND gnutls is earlier than 0:1.4.1-3.el5_4.8 AND openssl is earlier than 0:0.9.8e-12.el5_4.6 AND httpd-devel is earlier than 0:2.2.3-31.el5_4.2 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND mod_ssl is earlier than 0:2.2.3-31.el5_4.2 AND nspr is earlier than 0:4.8.4-1.el5_4 AND nss is earlier than 0:3.12.6-1.el5_4 AND httpd is earlier than 0:2.2.3-31.el5_4.2 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND openssl-devel is earlier than 0:0.9.8e-12.el5_4.6 AND gnutls-devel is earlier than 0:1.4.1-3.el5_4.8 AND nss-devel is earlier than 0:3.12.6-1.el5_4 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND nss-tools is earlier than 0:3.12.6-1.el5_4 AND gnutls-utils is earlier than 0:1.4.1-3.el5_4.8

Definition Id: oval:org.mitre.oval:def:10191

Oval ID:	oval:org.mitre.oval:def:10191
Title:	Multiple unspecified vulnerabilities in the Windows Pluggable Look and Feel (PLF) feature in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to "information leaks in mutable variables," aka Bug Id 6657138.
Description:	Multiple unspecified vulnerabilities in the Windows Pluggable Look and Feel (PL&F) feature in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to "information leaks in mutable variables," aka Bug Id 6657138.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3883	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5

Definition Id: oval:org.mitre.oval:def:10328

Oval ID:	oval:org.mitre.oval:def:10328
Title:	Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.
Description:	Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3876	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5

Definition Id: oval:org.mitre.oval:def:10392

Oval ID:	oval:org.mitre.oval:def:10392
Title:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow that allows arbitrary code execution via a crafted image.
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow that allows arbitrary code execution via a crafted image.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0847	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:10469

Oval ID:	oval:org.mitre.oval:def:10469
Title:	Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911.
Description:	Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3877	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5

Definition Id: oval:org.mitre.oval:def:10474

Oval ID:	oval:org.mitre.oval:def:10474
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0085	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:10482

Oval ID:	oval:org.mitre.oval:def:10482
Title:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow using an untrusted size value in the readMabCurveData function in the CMM module in the JVM.
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow using an untrusted size value in the readMabCurveData function in the CMM module in the JVM.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0838	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:10520

Oval ID:	oval:org.mitre.oval:def:10520
Title:	Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local International Color Consortium (ICC) profile files via a .. (dot dot) in a pathname, aka Bug Id 6631533.
Description:	Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local International Color Consortium (ICC) profile files via a .. (dot dot) in a pathname, aka Bug Id 6631533.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3728	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5

Definition Id: oval:org.mitre.oval:def:10680

Oval ID:	oval:org.mitre.oval:def:10680
Title:	Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0837	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:10741

Oval ID:	oval:org.mitre.oval:def:10741
Title:	Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357.
Description:	Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3869	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5

Definition Id: oval:org.mitre.oval:def:10761

Oval ID:	oval:org.mitre.oval:def:10761
Title:	The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the implementation of Component, KeyboardFocusManager, and DefaultKeyboardFocusManager, aka Bug Id 6664512.
Description:	The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the implementation of Component, KeyboardFocusManager, and DefaultKeyboardFocusManager, aka Bug Id 6664512.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3880	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5

Definition Id: oval:org.mitre.oval:def:10763

Oval ID:	oval:org.mitre.oval:def:10763
Title:	The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.
Description:	The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-2409	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section openssl-perl is earlier than 0:0.9.7a-33.26 AND seamonkey-nspr is earlier than 0:1.0.9-0.45.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.45.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.45.el3 AND seamonkey is earlier than 0:1.0.9-0.45.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.45.el3 AND openssl-devel is earlier than 0:0.9.7a-33.26 AND openssl is earlier than 0:0.9.7a-33.26 AND seamonkey-mail is earlier than 0:1.0.9-0.45.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.45.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.45.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.45.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.45.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section openssl-perl is earlier than 0:0.9.7a-43.17.el4_8.5 AND openssl-devel is earlier than 0:0.9.7a-43.17.el4_8.5 AND openssl is earlier than 0:0.9.7a-43.17.el4_8.5 AND nss-devel is earlier than 0:3.12.3.99.3-1.el4_8.2 AND nspr is earlier than 0:4.7.4-1.el4_8.1 AND nss is earlier than 0:3.12.3.99.3-1.el4_8.2 AND nss-tools is earlier than 0:3.12.3.99.3-1.el4_8.2 AND nspr-devel is earlier than 0:4.7.4-1.el4_8.1 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section openssl-perl is earlier than 0:0.9.8e-12.el5_4.1 AND nss-pkcs11-devel is earlier than 0:3.12.3.99.3-1.el5_3.2 AND nspr-devel is earlier than 0:4.7.4-1.el5_3.1 AND gnutls is earlier than 0:1.4.1-3.el5_4.8 AND openssl is earlier than 0:0.9.8e-12.el5_4.1 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5 AND nspr is earlier than 0:4.7.4-1.el5_3.1 AND nss is earlier than 0:3.12.3.99.3-1.el5_3.2 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5 AND openssl-devel is earlier than 0:0.9.8e-12.el5_4.1 AND gnutls-devel is earlier than 0:1.4.1-3.el5_4.8 AND nss-devel is earlier than 0:3.12.3.99.3-1.el5_3.2 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5 AND nss-tools is earlier than 0:3.12.3.99.3-1.el5_3.2 AND gnutls-utils is earlier than 0:1.4.1-3.el5_4.8

Definition Id: oval:org.mitre.oval:def:10851

Oval ID:	oval:org.mitre.oval:def:10851
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is due to missing privilege checks during deserialization of RMIConnectionImpl objects, which allows remote attackers to call system-level Java functions via the ClassLoader of a constructor that is being deserialized.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is due to missing privilege checks during deserialization of RMIConnectionImpl objects, which allows remote attackers to call system-level Java functions via the ClassLoader of a constructor that is being deserialized.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0094	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:11120

Oval ID:	oval:org.mitre.oval:def:11120
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0084	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:11173

Oval ID:	oval:org.mitre.oval:def:11173
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0088	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:11262

Oval ID:	oval:org.mitre.oval:def:11262
Title:	HP-UX Running Java, Remote Increase in Privilege, Denial of Service and Other Vulnerabilities
Description:	Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3869	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02503 SSRT100019 rev.1 HP Release B.11.11 AND filesets tests Jdk15.JDK15-IPF32 version is less than 1.5.0.19.00 AND Jre15.JRE15-COM version is less than 1.5.0.19.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.19.00 AND Jdk15.JDK15-COM version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.19.00 OR Criteria meets HP Security Bulletin HPSBUX02503 SSRT100019 rev.1 platforms HP-UX B.11.31 AND HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk14.JDK14-IPF32 version is less than 1.4.2.24.00 AND Jre14.JRE14-COM version is less than 1.4.2.24.00 AND Jdk14.JDK14-IPF64 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA11 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32 version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64 version is less than 1.4.2.24.00 AND Jdk14.JDK14-COM version is less than 1.4.2.24.00 OR Criteria meets HP Security Bulletin HPSBUX02503 SSRT100019 rev.1 platforms HP Release B.11.11 AND HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-PA20 version is less than 1.6.0.06.00 AND Jre60.JRE60-COM version is less than 1.6.0.06.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.06.00 AND Jdk60.JDK60-COM version is less than 1.6.0.06.00

Definition Id: oval:org.mitre.oval:def:11484

Oval ID:	oval:org.mitre.oval:def:11484
Title:	Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a resurrected ClassLoader, which allows remote attackers to gain privileges via unspecified vectors, related to an "information leak vulnerability," aka Bug Id 6636650.
Description:	Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a resurrected ClassLoader, which allows remote attackers to gain privileges via unspecified vectors, related to an "information leak vulnerability," aka Bug Id 6636650.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3881	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5

Definition Id: oval:org.mitre.oval:def:11566

Oval ID:	oval:org.mitre.oval:def:11566
Title:	Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via large subsample dimensions in a JPEG file that triggers a heap-based buffer overflow, aka Bug Id 6874643.
Description:	Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via large subsample dimensions in a JPEG file that triggers a heap-based buffer overflow, aka Bug Id 6874643.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3874	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5

Definition Id: oval:org.mitre.oval:def:11576

Oval ID:	oval:org.mitre.oval:def:11576
Title:	Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0082	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:11578

Oval ID:	oval:org.mitre.oval:def:11578
Title:	Security Vulnerability in the Transport Layer Security (TLS) and Secure Sockets Layer 3.0 (SSLv3) Protocols Involving Handshake Renegotiation Affects OpenSSL
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	3
Platform(s):	Sun Solaris 10	Product(s):
Definition Synopsis:
Solaris 10 (SPARC) meets Sun Alert 1021653.1 Solaris 10 (SPARC) is installed AND NOT Patch 143140-04 or later installed OR Solaris 10 (SPARC) meets Sun Alert 1021653.1 Solaris 10 (SPARC) is installed AND NOT Patch 145102-01 or later installed OR Solaris 10 (x86) meets Sun Alert 1021653.1 Solaris 10 (x86) is installed AND NOT Patch 141525-10 or later installed

Definition Id: oval:org.mitre.oval:def:11617

Oval ID:	oval:org.mitre.oval:def:11617
Title:	AIX OpenSSL session renegotiation vulnerability
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	3
Platform(s):	IBM AIX 5.2 IBM AIX 5.3 IBM AIX 6.1	Product(s):
Definition Synopsis:
OS check IBM AIX 5.3 is installed AND openssl.base versions less than 0.9.8.1102 OR OS based check IBM AIX 5.3 is installed AND openssl.base FIPS capable versions less than 12.9.8.1102 OR OS check openssl.base versions less than 0.9.8.1102 AND IBM AIX Version 6.1 check AND IBM AIX Version 6.1 check OR openssl.base FIPS capable versions less than 12.9.8.1102 AND IBM AIX Version 6.1 check AND IBM AIX Version 6.1 check OR IBM AIX 5.2 is installed AND openssl.base versions less than 0.9.8.805

Definition Id: oval:org.mitre.oval:def:11621

Oval ID:	oval:org.mitre.oval:def:11621
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0095	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:11686

Oval ID:	oval:org.mitre.oval:def:11686
Title:	The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265.
Description:	The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3884	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5

Definition Id: oval:org.mitre.oval:def:11746

Oval ID:	oval:org.mitre.oval:def:11746
Title:	HP-UX Running Java, Remote Increase in Privilege, Denial of Service and Other Vulnerabilities
Description:	The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, related to a "quantization problem," aka Bug Id 6862968.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3873	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02503 SSRT100019 rev.1 HP Release B.11.11 AND filesets tests Jdk15.JDK15-IPF32 version is less than 1.5.0.19.00 AND Jre15.JRE15-COM version is less than 1.5.0.19.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.19.00 AND Jdk15.JDK15-COM version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.19.00 OR Criteria meets HP Security Bulletin HPSBUX02503 SSRT100019 rev.1 platforms HP-UX B.11.31 AND HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk14.JDK14-IPF32 version is less than 1.4.2.24.00 AND Jre14.JRE14-COM version is less than 1.4.2.24.00 AND Jdk14.JDK14-IPF64 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA11 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32 version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64 version is less than 1.4.2.24.00 AND Jdk14.JDK14-COM version is less than 1.4.2.24.00 OR Criteria meets HP Security Bulletin HPSBUX02503 SSRT100019 rev.1 platforms HP Release B.11.11 AND HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-PA20 version is less than 1.6.0.06.00 AND Jre60.JRE60-COM version is less than 1.6.0.06.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.06.00 AND Jdk60.JDK60-COM version is less than 1.6.0.06.00

Definition Id: oval:org.mitre.oval:def:11847

Oval ID:	oval:org.mitre.oval:def:11847
Title:	The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to spoof HMAC-based digital signatures, and possibly bypass authentication, via unspecified vectors related to "timing attack vulnerabilities," aka Bug Id 6863503.
Description:	The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to spoof HMAC-based digital signatures, and possibly bypass authentication, via unspecified vectors related to "timing attack vulnerabilities," aka Bug Id 6863503.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3875	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5

Definition Id: oval:org.mitre.oval:def:11934

Oval ID:	oval:org.mitre.oval:def:11934
Title:	HP-UX Running Java, Remote Increase in Privilege, Denial of Service and Other Vulnerabilities
Description:	Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3876	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02503 SSRT100019 rev.1 HP Release B.11.11 AND filesets tests Jdk15.JDK15-IPF32 version is less than 1.5.0.19.00 AND Jre15.JRE15-COM version is less than 1.5.0.19.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.19.00 AND Jdk15.JDK15-COM version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.19.00 OR Criteria meets HP Security Bulletin HPSBUX02503 SSRT100019 rev.1 platforms HP-UX B.11.31 AND HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk14.JDK14-IPF32 version is less than 1.4.2.24.00 AND Jre14.JRE14-COM version is less than 1.4.2.24.00 AND Jdk14.JDK14-IPF64 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA11 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32 version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64 version is less than 1.4.2.24.00 AND Jdk14.JDK14-COM version is less than 1.4.2.24.00 OR Criteria meets HP Security Bulletin HPSBUX02503 SSRT100019 rev.1 platforms HP Release B.11.11 AND HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-PA20 version is less than 1.6.0.06.00 AND Jre60.JRE60-COM version is less than 1.6.0.06.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.06.00 AND Jdk60.JDK60-COM version is less than 1.6.0.06.00

Definition Id: oval:org.mitre.oval:def:12057

Oval ID:	oval:org.mitre.oval:def:12057
Title:	HP-UX Running Java, Remote Increase in Privilege, Denial of Service and Other Vulnerabilities
Description:	Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via large subsample dimensions in a JPEG file that triggers a heap-based buffer overflow, aka Bug Id 6874643.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3874	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02503 SSRT100019 rev.1 HP Release B.11.11 AND filesets tests Jdk15.JDK15-IPF32 version is less than 1.5.0.19.00 AND Jre15.JRE15-COM version is less than 1.5.0.19.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.19.00 AND Jdk15.JDK15-COM version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.19.00 OR Criteria meets HP Security Bulletin HPSBUX02503 SSRT100019 rev.1 platforms HP-UX B.11.31 AND HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk14.JDK14-IPF32 version is less than 1.4.2.24.00 AND Jre14.JRE14-COM version is less than 1.4.2.24.00 AND Jdk14.JDK14-IPF64 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA11 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32 version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64 version is less than 1.4.2.24.00 AND Jdk14.JDK14-COM version is less than 1.4.2.24.00 OR Criteria meets HP Security Bulletin HPSBUX02503 SSRT100019 rev.1 platforms HP Release B.11.11 AND HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-PA20 version is less than 1.6.0.06.00 AND Jre60.JRE60-COM version is less than 1.6.0.06.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.06.00 AND Jdk60.JDK60-COM version is less than 1.6.0.06.00

Definition Id: oval:org.mitre.oval:def:12112

Oval ID:	oval:org.mitre.oval:def:12112
Title:	HP-UX Running Java, Remote Increase in Privilege, Denial of Service and Other Vulnerabilities
Description:	The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to spoof HMAC-based digital signatures, and possibly bypass authentication, via unspecified vectors related to "timing attack vulnerabilities," aka Bug Id 6863503.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3875	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02503 SSRT100019 rev.1 HP Release B.11.11 AND filesets tests Jdk15.JDK15-IPF32 version is less than 1.5.0.19.00 AND Jre15.JRE15-COM version is less than 1.5.0.19.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.19.00 AND Jdk15.JDK15-COM version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.19.00 OR Criteria meets HP Security Bulletin HPSBUX02503 SSRT100019 rev.1 platforms HP-UX B.11.31 AND HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk14.JDK14-IPF32 version is less than 1.4.2.24.00 AND Jre14.JRE14-COM version is less than 1.4.2.24.00 AND Jdk14.JDK14-IPF64 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA11 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32 version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64 version is less than 1.4.2.24.00 AND Jdk14.JDK14-COM version is less than 1.4.2.24.00 OR Criteria meets HP Security Bulletin HPSBUX02503 SSRT100019 rev.1 platforms HP Release B.11.11 AND HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-PA20 version is less than 1.6.0.06.00 AND Jre60.JRE60-COM version is less than 1.6.0.06.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.06.00 AND Jdk60.JDK60-COM version is less than 1.6.0.06.00

Definition Id: oval:org.mitre.oval:def:12134

Oval ID:	oval:org.mitre.oval:def:12134
Title:	HP-UX Running Java, Remote Increase in Privilege, Denial of Service and Other Vulnerabilities
Description:	Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via crafted arguments, aka Bug Id 6872358.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3871	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02503 SSRT100019 rev.1 HP Release B.11.11 AND filesets tests Jdk15.JDK15-IPF32 version is less than 1.5.0.19.00 AND Jre15.JRE15-COM version is less than 1.5.0.19.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.19.00 AND Jdk15.JDK15-COM version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.19.00 OR Criteria meets HP Security Bulletin HPSBUX02503 SSRT100019 rev.1 platforms HP-UX B.11.31 AND HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk14.JDK14-IPF32 version is less than 1.4.2.24.00 AND Jre14.JRE14-COM version is less than 1.4.2.24.00 AND Jdk14.JDK14-IPF64 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA11 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32 version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64 version is less than 1.4.2.24.00 AND Jdk14.JDK14-COM version is less than 1.4.2.24.00 OR Criteria meets HP Security Bulletin HPSBUX02503 SSRT100019 rev.1 platforms HP Release B.11.11 AND HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-PA20 version is less than 1.6.0.06.00 AND Jre60.JRE60-COM version is less than 1.6.0.06.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.06.00 AND Jdk60.JDK60-COM version is less than 1.6.0.06.00

Definition Id: oval:org.mitre.oval:def:12232

Oval ID:	oval:org.mitre.oval:def:12232
Title:	HP-UX Running Java, Remote Increase in Privilege, Denial of Service and Other Vulnerabilities
Description:	Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3877	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02503 SSRT100019 rev.1 HP Release B.11.11 AND filesets tests Jdk15.JDK15-IPF32 version is less than 1.5.0.19.00 AND Jre15.JRE15-COM version is less than 1.5.0.19.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.19.00 AND Jdk15.JDK15-COM version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.19.00 OR Criteria meets HP Security Bulletin HPSBUX02503 SSRT100019 rev.1 platforms HP-UX B.11.31 AND HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk14.JDK14-IPF32 version is less than 1.4.2.24.00 AND Jre14.JRE14-COM version is less than 1.4.2.24.00 AND Jdk14.JDK14-IPF64 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA11 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32 version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64 version is less than 1.4.2.24.00 AND Jdk14.JDK14-COM version is less than 1.4.2.24.00 OR Criteria meets HP Security Bulletin HPSBUX02503 SSRT100019 rev.1 platforms HP Release B.11.11 AND HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-PA20 version is less than 1.6.0.06.00 AND Jre60.JRE60-COM version is less than 1.6.0.06.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.06.00 AND Jdk60.JDK60-COM version is less than 1.6.0.06.00

Definition Id: oval:org.mitre.oval:def:13085

Oval ID:	oval:org.mitre.oval:def:13085
Title:	USN-927-1 -- nss vulnerability
Description:	Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3 protocols. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user�s session. This update adds support for the new new renegotiation extension and will use it when the server supports it.
Family:	unix	Class:	patch
Reference(s):	USN-927-1 CVE-2009-3555	Version:	5
Platform(s):	Ubuntu 9.10	Product(s):	nss
Definition Synopsis:
Ubuntu 9.10 is installed Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc Packages section libnss3-dev DPKG is earlier than 3.12.6-0ubuntu0.9.10.1 AND libnss3-1d-dbg DPKG is earlier than 3.12.6-0ubuntu0.9.10.1 AND libnss3-0d DPKG is earlier than 3.12.6-0ubuntu0.9.10.1 AND libnss3-1d DPKG is earlier than 3.12.6-0ubuntu0.9.10.1 AND libnss3-tools DPKG is earlier than 3.12.6-0ubuntu0.9.10.1

Definition Id: oval:org.mitre.oval:def:13150

Oval ID:	oval:org.mitre.oval:def:13150
Title:	USN-923-1 -- openjdk-6 vulnerabilities
Description:	Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3 protocols. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user�s session. It was discovered that Loader-constraint table, Policy/PolicyFile, Inflater/Deflater, drag/drop access, and deserialization did not correctly handle certain sensitive objects. If a user were tricked into running a specially crafted applet, private information could be leaked to a remote attacker, leading to a loss of privacy. It was discovered that AtomicReferenceArray, System.arraycopy, InetAddress, and HashAttributeSet did not correctly handle certain situations. If a remote attacker could trigger specific error conditions, a Java application could crash, leading to a denial of service. It was discovered that Pack200, CMM readMabCurveData, ImagingLib, and the AWT library did not correctly check buffer lengths. If a user or automated system were tricked into handling specially crafted JAR files or images, a remote attacker could crash the Java application or possibly gain user privileges . It was discovered that applets did not correctly handle certain trust chains. If a user were tricked into running a specially crafted applet, a remote attacker could possibly run untrusted code with user privileges
Family:	unix	Class:	patch
Reference(s):	USN-923-1 CVE-2009-3555 CVE-2010-0082 CVE-2010-0084 CVE-2010-0085 CVE-2010-0088 CVE-2010-0091 CVE-2010-0094 CVE-2010-0092 CVE-2010-0093 CVE-2010-0095 CVE-2010-0845 CVE-2010-0837 CVE-2010-0838 CVE-2010-0847 CVE-2010-0848 CVE-2010-0840	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 8.10 Ubuntu 9.10 Ubuntu 9.04	Product(s):	openjdk-6
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section openjdk-6-jre-lib DPKG is earlier than 6b11-2ubuntu2.2 AND openjdk-6-doc DPKG is earlier than 6b11-2ubuntu2.2 AND openjdk-6-source DPKG is earlier than 6b11-2ubuntu2.2 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is i386 AND Packages section openjdk-6-jre-headless DPKG is earlier than 6b11-2ubuntu2.2 AND openjdk-6-demo DPKG is earlier than 6b11-2ubuntu2.2 AND openjdk-6-dbg DPKG is earlier than 6b11-2ubuntu2.2 AND openjdk-6-jdk DPKG is earlier than 6b11-2ubuntu2.2 AND openjdk-6-jre DPKG is earlier than 6b11-2ubuntu2.2 OR Release section Ubuntu 8.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section openjdk-6-jre-lib DPKG is earlier than 6b12-0ubuntu6.7 AND openjdk-6-doc DPKG is earlier than 6b12-0ubuntu6.7 AND openjdk-6-source-files DPKG is earlier than 6b12-0ubuntu6.7 AND openjdk-6-source DPKG is earlier than 6b12-0ubuntu6.7 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is i386 AND Packages section openjdk-6-jre DPKG is earlier than 6b12-0ubuntu6.7 AND openjdk-6-jre-headless DPKG is earlier than 6b12-0ubuntu6.7 AND openjdk-6-demo DPKG is earlier than 6b12-0ubuntu6.7 AND openjdk-6-dbg DPKG is earlier than 6b12-0ubuntu6.7 AND openjdk-6-jdk DPKG is earlier than 6b12-0ubuntu6.7 AND icedtea6-plugin DPKG is earlier than 6b12-0ubuntu6.7 OR Release section Ubuntu 9.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section openjdk-6-jre-lib DPKG is earlier than 6b16-1.6.1-3ubuntu3 AND openjdk-6-doc DPKG is earlier than 6b16-1.6.1-3ubuntu3 AND openjdk-6-source DPKG is earlier than 6b16-1.6.1-3ubuntu3 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section openjdk-6-jre DPKG is earlier than 6b16-1.6.1-3ubuntu3 AND openjdk-6-jre-headless DPKG is earlier than 6b16-1.6.1-3ubuntu3 AND openjdk-6-demo DPKG is earlier than 6b16-1.6.1-3ubuntu3 AND openjdk-6-dbg DPKG is earlier than 6b16-1.6.1-3ubuntu3 AND openjdk-6-jdk DPKG is earlier than 6b16-1.6.1-3ubuntu3 AND icedtea6-plugin DPKG is earlier than 6b16-1.6.1-3ubuntu3 OR Architecture depended section Supported architectures section Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section icedtea-6-jre-cacao DPKG is earlier than 6b16-1.6.1-3ubuntu3 AND openjdk-6-jre-zero DPKG is earlier than 6b16-1.6.1-3ubuntu3 OR Release section Ubuntu 9.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section openjdk-6-jre-lib DPKG is earlier than 6b14-1.4.1-0ubuntu13 AND openjdk-6-doc DPKG is earlier than 6b14-1.4.1-0ubuntu13 AND openjdk-6-source-files DPKG is earlier than 6b14-1.4.1-0ubuntu13 AND openjdk-6-source DPKG is earlier than 6b14-1.4.1-0ubuntu13 OR Architecture depended section Supported architectures section Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is i386 AND Packages section icedtea-6-jre-cacao DPKG is earlier than 6b14-1.4.1-0ubuntu13 AND openjdk-6-jre DPKG is earlier than 6b14-1.4.1-0ubuntu13 AND openjdk-6-jre-headless DPKG is earlier than 6b14-1.4.1-0ubuntu13 AND openjdk-6-demo DPKG is earlier than 6b14-1.4.1-0ubuntu13 AND openjdk-6-dbg DPKG is earlier than 6b14-1.4.1-0ubuntu13 AND openjdk-6-jdk DPKG is earlier than 6b14-1.4.1-0ubuntu13 AND icedtea6-plugin DPKG is earlier than 6b14-1.4.1-0ubuntu13 OR Architecture depended section Supported architectures section Installed architecture is lpia AND Installed architecture is amd64 AND Installed architecture is i386 AND openjdk-6-jre-zero DPKG is earlier than 6b14-1.4.1-0ubuntu13

Definition Id: oval:org.mitre.oval:def:13409

Oval ID:	oval:org.mitre.oval:def:13409
Title:	USN-830-1 -- openssl vulnerability
Description:	Dan Kaminsky discovered OpenSSL would still accept certificates with MD2 hash signatures. As a result, an attacker could potentially create a malicious trusted certificate to impersonate another site. This update handles this issue by completely disabling MD2 for certificate validation.
Family:	unix	Class:	patch
Reference(s):	USN-830-1 CVE-2009-2409	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 9.04 Ubuntu 6.06 Ubuntu 8.10	Product(s):	openssl
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Architecture section Architecture independent section Installed architecture is all AND openssl-doc DPKG is earlier than 0.9.8g-4ubuntu3.8 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libcrypto0.9.8-udeb DPKG is earlier than 0.9.8g-4ubuntu3.8 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8g-4ubuntu3.8 AND libssl0.9.8 DPKG is earlier than 0.9.8g-4ubuntu3.8 AND libssl-dev DPKG is earlier than 0.9.8g-4ubuntu3.8 AND openssl DPKG is earlier than 0.9.8g-4ubuntu3.8 OR Release section Ubuntu 9.04 is installed AND Architecture section Architecture independent section Installed architecture is all AND openssl-doc DPKG is earlier than 0.9.8g-15ubuntu3.3 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libcrypto0.9.8-udeb DPKG is earlier than 0.9.8g-15ubuntu3.3 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8g-15ubuntu3.3 AND libssl0.9.8 DPKG is earlier than 0.9.8g-15ubuntu3.3 AND libssl-dev DPKG is earlier than 0.9.8g-15ubuntu3.3 AND openssl DPKG is earlier than 0.9.8g-15ubuntu3.3 OR Release section Ubuntu 6.06 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is powerpc AND Packages section libssl0.9.8 DPKG is earlier than 0.9.8a-7ubuntu0.10 AND libcrypto0.9.8-udeb DPKG is earlier than 0.9.8a-7ubuntu0.10 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8a-7ubuntu0.10 AND openssl DPKG is earlier than 0.9.8a-7ubuntu0.10 AND libssl-dev DPKG is earlier than 0.9.8a-7ubuntu0.10 OR Release section Ubuntu 8.10 is installed AND Architecture section Architecture independent section Installed architecture is all AND openssl-doc DPKG is earlier than 0.9.8g-10.1ubuntu2.5 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libcrypto0.9.8-udeb DPKG is earlier than 0.9.8g-10.1ubuntu2.5 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8g-10.1ubuntu2.5 AND libssl0.9.8 DPKG is earlier than 0.9.8g-10.1ubuntu2.5 AND libssl-dev DPKG is earlier than 0.9.8g-10.1ubuntu2.5 AND openssl DPKG is earlier than 0.9.8g-10.1ubuntu2.5

Definition Id: oval:org.mitre.oval:def:13424

Oval ID:	oval:org.mitre.oval:def:13424
Title:	USN-990-1 -- openssl vulnerability
Description:	Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3 protocols. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user�s session. This update adds backported support for the new RFC5746 renegotiation extension and will use it when both the client and the server support it. ATTENTION: After applying this update, a patched server will allow both patched and unpatched clients to connect, but unpatched clients will not be able to renegotiate
Family:	unix	Class:	patch
Reference(s):	USN-990-1 CVE-2009-3555	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 10.04 Ubuntu 9.10 Ubuntu 6.06 Ubuntu 9.04	Product(s):	openssl
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND openssl-doc DPKG is earlier than 0.9.8g-4ubuntu3.10 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libcrypto0.9.8-udeb DPKG is earlier than 0.9.8g-4ubuntu3.10 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8g-4ubuntu3.10 AND libssl0.9.8 DPKG is earlier than 0.9.8g-4ubuntu3.10 AND libssl-dev DPKG is earlier than 0.9.8g-4ubuntu3.10 AND openssl DPKG is earlier than 0.9.8g-4ubuntu3.10 OR Release section Ubuntu 10.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND openssl-doc DPKG is earlier than 0.9.8k-7ubuntu8.1 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section libssl-dev DPKG is earlier than 0.9.8k-7ubuntu8.1 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8k-7ubuntu8.1 AND openssl DPKG is earlier than 0.9.8k-7ubuntu8.1 AND libcrypto0.9.8-udeb DPKG is earlier than 0.9.8k-7ubuntu8.1 AND libssl0.9.8 DPKG is earlier than 0.9.8k-7ubuntu8.1 AND libssl0.9.8-udeb DPKG is earlier than 0.9.8k-7ubuntu8.1 OR Release section Ubuntu 9.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND openssl-doc DPKG is earlier than 0.9.8g-16ubuntu3.2 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libcrypto0.9.8-udeb DPKG is earlier than 0.9.8g-16ubuntu3.2 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8g-16ubuntu3.2 AND libssl0.9.8 DPKG is earlier than 0.9.8g-16ubuntu3.2 AND libssl-dev DPKG is earlier than 0.9.8g-16ubuntu3.2 AND openssl DPKG is earlier than 0.9.8g-16ubuntu3.2 OR Release section Ubuntu 6.06 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is powerpc AND Packages section libssl0.9.8 DPKG is earlier than 0.9.8a-7ubuntu0.12 AND libcrypto0.9.8-udeb DPKG is earlier than 0.9.8a-7ubuntu0.12 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8a-7ubuntu0.12 AND openssl DPKG is earlier than 0.9.8a-7ubuntu0.12 AND libssl-dev DPKG is earlier than 0.9.8a-7ubuntu0.12 OR Release section Ubuntu 9.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND openssl-doc DPKG is earlier than 0.9.8g-15ubuntu3.5 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libcrypto0.9.8-udeb DPKG is earlier than 0.9.8g-15ubuntu3.5 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8g-15ubuntu3.5 AND libssl0.9.8 DPKG is earlier than 0.9.8g-15ubuntu3.5 AND libssl-dev DPKG is earlier than 0.9.8g-15ubuntu3.5 AND openssl DPKG is earlier than 0.9.8g-15ubuntu3.5

Definition Id: oval:org.mitre.oval:def:13440

Oval ID:	oval:org.mitre.oval:def:13440
Title:	USN-927-4 -- nss vulnerability
Description:	USN-927-1 fixed vulnerabilities in nss in Ubuntu 9.10. This update provides the corresponding updates for Ubuntu 8.04 LTS. Original advisory details: Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3 protocols. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user�s session. This update adds support for the new new renegotiation extension and will use it when the server supports it.
Family:	unix	Class:	patch
Reference(s):	USN-927-4 CVE-2009-3555	Version:	5
Platform(s):	Ubuntu 8.04	Product(s):	nss
Definition Synopsis:
Ubuntu 8.04 is installed Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc Packages section libnss3-dev DPKG is earlier than 3.12.6-0ubuntu0.8.04.1 AND libnss3-1d-dbg DPKG is earlier than 3.12.6-0ubuntu0.8.04.1 AND libnss3-0d DPKG is earlier than 3.12.6-0ubuntu0.8.04.1 AND libnss3-1d DPKG is earlier than 3.12.6-0ubuntu0.8.04.1 AND libnss3-tools DPKG is earlier than 3.12.6-0ubuntu0.8.04.1

Definition Id: oval:org.mitre.oval:def:13492

Oval ID:	oval:org.mitre.oval:def:13492
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0091	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Development Kit Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:13529

Oval ID:	oval:org.mitre.oval:def:13529
Title:	USN-990-2 -- apache2 vulnerability
Description:	USN-860-1 introduced a partial workaround to Apache that disabled client initiated TLS renegotiation in order to mitigate CVE-2009-3555. USN-990-1 introduced the new RFC5746 renegotiation extension in openssl, and completely resolves the issue. After updating openssl, an Apache server will allow both patched and unpatched web browsers to connect, but unpatched browsers will not be able to renegotiate. This update introduces the new SSLInsecureRenegotiation directive for Apache that may be used to re-enable insecure renegotiations with unpatched web browsers. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user�s session. This update adds backported support for the new RFC5746 renegotiation extension and will use it when both the client and the server support it.
Family:	unix	Class:	patch
Reference(s):	USN-990-2 CVE-2009-3555	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 10.04 Ubuntu 9.10 Ubuntu 6.06 Ubuntu 9.04	Product(s):	apache2
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section apache2-mpm-perchild DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-doc DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-src DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2 DPKG is earlier than 2.2.8-1ubuntu0.18 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section apache2-utils DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-mpm-worker DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2.2-common DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-mpm-prefork DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-threaded-dev DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-mpm-event DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-prefork-dev DPKG is earlier than 2.2.8-1ubuntu0.18 OR Release section Ubuntu 10.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND apache2-doc DPKG is earlier than 2.2.14-5ubuntu8.2 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section apache2.2-bin DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-utils DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-mpm-worker DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2.2-common DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-suexec-custom DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-suexec DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2 DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-mpm-prefork DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-threaded-dev DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-mpm-event DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-mpm-itk DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-prefork-dev DPKG is earlier than 2.2.14-5ubuntu8.2 OR Release section Ubuntu 9.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section apache2-doc DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-mpm-prefork DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-mpm-itk DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-mpm-worker DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-mpm-event DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2.2-common DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2 DPKG is earlier than 2.2.12-1ubuntu2.3 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section apache2.2-bin DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-utils DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-suexec-custom DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-suexec DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-threaded-dev DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-prefork-dev DPKG is earlier than 2.2.12-1ubuntu2.3 OR Release section Ubuntu 6.06 is installed AND Architecture section Architecture independet section Installed architecture is all AND apache2-doc DPKG is earlier than 2.0.55-4ubuntu2.11 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section libapr0 DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-utils DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-mpm-worker DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-mpm-perchild DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-common DPKG is earlier than 2.0.55-4ubuntu2.11 AND libapr0-dev DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2 DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-threaded-dev DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-mpm-prefork DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-prefork-dev DPKG is earlier than 2.0.55-4ubuntu2.11 OR Release section Ubuntu 9.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section apache2-doc DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-src DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2 DPKG is earlier than 2.2.11-2ubuntu2.7 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section apache2-utils DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-mpm-worker DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2.2-common DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-suexec-custom DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-suexec DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-mpm-prefork DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-threaded-dev DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-mpm-event DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-prefork-dev DPKG is earlier than 2.2.11-2ubuntu2.7

Definition Id: oval:org.mitre.oval:def:13532

Oval ID:	oval:org.mitre.oval:def:13532
Title:	USN-927-6 -- nss vulnerability
Description:	USN-927-1 fixed vulnerabilities in NSS on Ubuntu 9.10. This update provides the corresponding updates for Ubuntu 9.04. Original advisory details: Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3 protocols. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user�s session. This update adds support for the new new renegotiation extension and will use it when the server supports it.
Family:	unix	Class:	patch
Reference(s):	USN-927-6 CVE-2009-3555	Version:	5
Platform(s):	Ubuntu 9.04	Product(s):	nss
Definition Synopsis:
Ubuntu 9.04 is installed Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc Packages section libnss3-dev DPKG is earlier than 3.12.6-0ubuntu0.9.04.1 AND libnss3-1d-dbg DPKG is earlier than 3.12.6-0ubuntu0.9.04.1 AND libnss3-0d DPKG is earlier than 3.12.6-0ubuntu0.9.04.1 AND libnss3-1d DPKG is earlier than 3.12.6-0ubuntu0.9.04.1 AND libnss3-tools DPKG is earlier than 3.12.6-0ubuntu0.9.04.1

Definition Id: oval:org.mitre.oval:def:13623

Oval ID:	oval:org.mitre.oval:def:13623
Title:	DSA-1934-1 apache2 -- multiple issues
Description:	A design flaw has been found in the TLS and SSL protocol that allows an attacker to inject arbitrary content at the beginning of a TLS/SSL connection. The attack is related to the way how TLS and SSL handle session renegotiations. CVE-2009-3555 has been assigned to this vulnerability. As a partial mitigation against this attack, this apache2 update disables client-initiated renegotiations. This should fix the vulnerability for the majority of Apache configurations in use. NOTE: This is not a complete fix for the problem. The attack is still possible in configurations where the server initiates the renegotiation. This is the case for the following configurations: - - The "SSLVerifyClient" directive is used in a Directory or Location context. - - The "SSLCipherSuite" directive is used in a Directory or Location context. As a workaround, you may rearrange your configuration in a way that SSLVerifyClient and SSLCipherSuite are only used on the server or virtual host level. A complete fix for the problem will require a protocol change. Further information will be included in a separate announcement about this issue. In addition, this update fixes the following issues in Apache's mod_proxy_ftp: CVE-2009-3094: Insufficient input validation in the mod_proxy_ftp module allowed remote FTP servers to cause a denial of service via a malformed reply to an EPSV command. CVE-2009-3095: Insufficient input validation in the mod_proxy_ftp module allowed remote authenticated attackers to bypass intended access restrictions and send arbitrary FTP commands to an FTP server. For the stable distribution, these problems have been fixed in version 2.2.9-10+lenny6. This version also includes some non-security bug fixes that were scheduled for inclusion in the next stable point release. The oldstable distribution, these problems have been fixed in version 2.2.3-4+etch11. For the testing distribution and the unstable distribution, these problems will be fixed in version 2.2.14-2. This advisory also provides updated apache2-mpm-itk packages which have been recompiled against the new apache2 packages. Updated apache2-mpm-itk packages for the armel architecture are not included yet. They will be released as soon as they become available. We recommend that you upgrade your apache2 and apache2-mpm-itk packages.
Family:	unix	Class:	patch
Reference(s):	DSA-1934-1 CVE-2009-3094 CVE-2009-3095 CVE-2009-3555	Version:	5
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 4.0	Product(s):	apache2
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section apache2-doc DPKG is earlier than 2.2.9-10+lenny6 AND apache2-src DPKG is earlier than 2.2.9-10+lenny6 AND apache2 DPKG is earlier than 2.2.9-10+lenny6 OR Architecture depended section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section apache2-threaded-dev DPKG is earlier than 2.2.9-10+lenny6 AND apache2-utils DPKG is earlier than 2.2.9-10+lenny6 AND apache2-mpm-worker DPKG is earlier than 2.2.9-10+lenny6 AND apache2.2-common DPKG is earlier than 2.2.9-10+lenny6 AND apache2-suexec-custom DPKG is earlier than 2.2.9-10+lenny6 AND apache2-suexec DPKG is earlier than 2.2.9-10+lenny6 AND apache2-mpm-prefork DPKG is earlier than 2.2.9-10+lenny6 AND apache2-dbg DPKG is earlier than 2.2.9-10+lenny6 AND apache2-mpm-event DPKG is earlier than 2.2.9-10+lenny6 AND apache2-prefork-dev DPKG is earlier than 2.2.9-10+lenny6 AND apache2-mpm-itk DPKG is earlier than 2.2.6-02-1+lenny2+b2 OR Release section Debian GNU/Linux 4.0 is installed. AND Architecture section Architecture independent section Installed architecture is all AND Packages section apache2-mpm-perchild DPKG is earlier than 2.2.3-4+etch11 AND apache2-doc DPKG is earlier than 2.2.3-4+etch11 AND apache2-src DPKG is earlier than 2.2.3-4+etch11 AND apache2 DPKG is earlier than 2.2.3-4+etch11 AND apache2-utils DPKG is earlier than 2.2.3-4+etch11 AND apache2-mpm-worker DPKG is earlier than 2.2.3-4+etch11 AND apache2.2-common DPKG is earlier than 2.2.3-4+etch11 AND apache2-mpm-prefork DPKG is earlier than 2.2.3-4+etch11 AND apache2-threaded-dev DPKG is earlier than 2.2.3-4+etch11 AND apache2-mpm-event DPKG is earlier than 2.2.3-4+etch11 AND apache2-mpm-itk DPKG is earlier than 2.2.3-01-2+etch4+b1 AND apache2-prefork-dev DPKG is earlier than 2.2.3-4+etch11

Definition Id: oval:org.mitre.oval:def:13737

Oval ID:	oval:org.mitre.oval:def:13737
Title:	DSA-1874-1 nss -- several
Description:	Several vulnerabilities have been discovered in the Network Security Service libraries. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-2404 Moxie Marlinspike discovered that a buffer overflow in the regular expression parser could lead to the execution of arbitrary code. CVE-2009-2408 Dan Kaminsky discovered that NULL characters in certificate names could lead to man-in-the-middle attacks by tricking the user into accepting a rogue certificate. CVE-2009-2409 Certificates with MD2 hash signatures are no longer accepted since they’re no longer considered cryptographically secure. The old stable distribution doesn’t contain nss. For the stable distribution, these problems have been fixed in version 3.12.3.1-0lenny1. For the unstable distribution, these problems have been fixed in version 3.12.3.1-1. We recommend that you upgrade your nss packages.
Family:	unix	Class:	patch
Reference(s):	DSA-1874-1 CVE-2009-2404 CVE-2009-2408 CVE-2009-2409	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	nss
Definition Synopsis:
Debian GNU/Linux 5.0 is installed Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa Packages section libnss3-dev DPKG is earlier than 3.12.3.1-0lenny1 AND libnss3-1d-dbg DPKG is earlier than 3.12.3.1-0lenny1 AND libnss3-tools DPKG is earlier than 3.12.3.1-0lenny1 AND libnss3-1d DPKG is earlier than 3.12.3.1-0lenny1

Definition Id: oval:org.mitre.oval:def:13780

Oval ID:	oval:org.mitre.oval:def:13780
Title:	USN-810-2 -- nspr update
Description:	USN-810-1 fixed vulnerabilities in NSS. This update provides the NSPR needed to use the new NSS. Original advisory details: Moxie Marlinspike discovered that NSS did not properly handle regular expressions in certificate names. A remote attacker could create a specially crafted certificate to cause a denial of service or execute arbitrary code as the user invoking the program. Moxie Marlinspike and Dan Kaminsky independently discovered that NSS did not properly handle certificates with NULL characters in the certificate name. An attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. Dan Kaminsky discovered NSS would still accept certificates with MD2 hash signatures. As a result, an attacker could potentially create a malicious trusted certificate to impersonate another site
Family:	unix	Class:	patch
Reference(s):	USN-810-2 CVE-2009-2404 CVE-2009-2408 CVE-2009-2409	Version:	5
Platform(s):	Ubuntu 8.10 Ubuntu 8.04 Ubuntu 9.04	Product(s):	nspr
Definition Synopsis:
Release section Ubuntu 8.10 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section libnspr4-dev DPKG is earlier than 4.7.5-0ubuntu0.8.10.1 AND libnspr4-0d-dbg DPKG is earlier than 4.7.5-0ubuntu0.8.10.1 AND libnspr4-0d DPKG is earlier than 4.7.5-0ubuntu0.8.10.1 OR Release section Ubuntu 8.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section libnspr4-dev DPKG is earlier than 4.7.5-0ubuntu0.8.04.1 AND libnspr4-0d-dbg DPKG is earlier than 4.7.5-0ubuntu0.8.04.1 AND libnspr4-0d DPKG is earlier than 4.7.5-0ubuntu0.8.04.1 OR Release section Ubuntu 9.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section libnspr4-dev DPKG is earlier than 4.7.5-0ubuntu0.9.04.1 AND libnspr4-0d-dbg DPKG is earlier than 4.7.5-0ubuntu0.9.04.1 AND libnspr4-0d DPKG is earlier than 4.7.5-0ubuntu0.9.04.1

Definition Id: oval:org.mitre.oval:def:13803

Oval ID:	oval:org.mitre.oval:def:13803
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0085	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment Java Development Kit
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:13850

Oval ID:	oval:org.mitre.oval:def:13850
Title:	USN-810-1 -- nss vulnerabilities
Description:	Moxie Marlinspike discovered that NSS did not properly handle regular expressions in certificate names. A remote attacker could create a specially crafted certificate to cause a denial of service or execute arbitrary code as the user invoking the program. Moxie Marlinspike and Dan Kaminsky independently discovered that NSS did not properly handle certificates with NULL characters in the certificate name. An attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. Dan Kaminsky discovered NSS would still accept certificates with MD2 hash signatures. As a result, an attacker could potentially create a malicious trusted certificate to impersonate another site
Family:	unix	Class:	patch
Reference(s):	USN-810-1 CVE-2009-2404 CVE-2009-2408 CVE-2009-2409	Version:	5
Platform(s):	Ubuntu 8.10 Ubuntu 8.04 Ubuntu 9.04	Product(s):	nss
Definition Synopsis:
Release section Ubuntu 8.10 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section libnss3-dev DPKG is earlier than 3.12.3.1-0ubuntu0.8.10.1 AND libnss3-1d-dbg DPKG is earlier than 3.12.3.1-0ubuntu0.8.10.1 AND libnss3-0d DPKG is earlier than 3.12.3.1-0ubuntu0.8.10.1 AND libnss3-1d DPKG is earlier than 3.12.3.1-0ubuntu0.8.10.1 AND libnss3-tools DPKG is earlier than 3.12.3.1-0ubuntu0.8.10.1 OR Release section Ubuntu 8.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section libnss3-dev DPKG is earlier than 3.12.3.1-0ubuntu0.8.04.1 AND libnss3-1d-dbg DPKG is earlier than 3.12.3.1-0ubuntu0.8.04.1 AND libnss3-0d DPKG is earlier than 3.12.3.1-0ubuntu0.8.04.1 AND libnss3-1d DPKG is earlier than 3.12.3.1-0ubuntu0.8.04.1 AND libnss3-tools DPKG is earlier than 3.12.3.1-0ubuntu0.8.04.1 OR Release section Ubuntu 9.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section libnss3-dev DPKG is earlier than 3.12.3.1-0ubuntu0.9.04.1 AND libnss3-1d-dbg DPKG is earlier than 3.12.3.1-0ubuntu0.9.04.1 AND libnss3-0d DPKG is earlier than 3.12.3.1-0ubuntu0.9.04.1 AND libnss3-1d DPKG is earlier than 3.12.3.1-0ubuntu0.9.04.1 AND libnss3-tools DPKG is earlier than 3.12.3.1-0ubuntu0.9.04.1

Definition Id: oval:org.mitre.oval:def:13907

Oval ID:	oval:org.mitre.oval:def:13907
Title:	USN-859-1 -- openjdk-6 vulnerabilities
Description:	Dan Kaminsky discovered that SSL certificates signed with MD2 could be spoofed given enough time. As a result, an attacker could potentially create a malicious trusted certificate to impersonate another site. This update handles this issue by completely disabling MD2 for certificate validation in OpenJDK. It was discovered that ICC profiles could be identified with ".." pathnames. If a user were tricked into running a specially crafted applet, a remote attacker could gain information about a local system. Peter Vreugdenhil discovered multiple flaws in the processing of graphics in the AWT library. If a user were tricked into running a specially crafted applet, a remote attacker could crash the application or run arbitrary code with user privileges. Multiple flaws were discovered in JPEG and BMP image handling. If a user were tricked into loading a specially crafted image, a remote attacker could crash the application or run arbitrary code with user privileges. Coda Hale discovered that HMAC-based signatures were not correctly validated. Remote attackers could bypass certain forms of authentication, granting unexpected access. Multiple flaws were discovered in ASN.1 parsing. A remote attacker could send a specially crafted HTTP stream that would exhaust system memory and lead to a denial of service. It was discovered that the graphics configuration subsystem did not correctly handle arrays. If a user were tricked into running a specially crafted applet, a remote attacker could exploit this to crash the application or execute arbitrary code with user privileges. It was discovered that loggers and Swing did not correctly handle certain sensitive objects. If a user were tricked into running a specially crafted applet, private information could be leaked to a remote attacker, leading to a loss of privacy. It was discovered that the ClassLoader did not correctly handle certain options. If a user were tricked into running a specially crafted applet, a remote attacker could execute arbitrary code with user privileges. It was discovered that time zone file loading could be used to determine the existence of files on the local system. If a user were tricked into running a specially crafted applet, private information could be leaked to a remote attacker, leading to a loss of privacy
Family:	unix	Class:	patch
Reference(s):	USN-859-1 CVE-2009-2409 CVE-2009-3728 CVE-2009-3869 CVE-2009-3871 CVE-2009-3873 CVE-2009-3874 CVE-2009-3885 CVE-2009-3875 CVE-2009-3876 CVE-2009-3877 CVE-2009-3879 CVE-2009-3880 CVE-2009-3882 CVE-2009-3883 CVE-2009-3881 CVE-2009-3884	Version:	5
Platform(s):	Ubuntu 8.10 Ubuntu 9.10 Ubuntu 9.04	Product(s):	openjdk-6
Definition Synopsis:
Release section Ubuntu 8.10 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section openjdk-6-jre-lib DPKG is earlier than 6b12-0ubuntu6.6 AND openjdk-6-doc DPKG is earlier than 6b12-0ubuntu6.6 AND openjdk-6-source-files DPKG is earlier than 6b12-0ubuntu6.6 AND openjdk-6-source DPKG is earlier than 6b12-0ubuntu6.6 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section openjdk-6-jre DPKG is earlier than 6b12-0ubuntu6.6 AND openjdk-6-jre-headless DPKG is earlier than 6b12-0ubuntu6.6 AND openjdk-6-demo DPKG is earlier than 6b12-0ubuntu6.6 AND openjdk-6-dbg DPKG is earlier than 6b12-0ubuntu6.6 AND openjdk-6-jdk DPKG is earlier than 6b12-0ubuntu6.6 AND icedtea6-plugin DPKG is earlier than 6b12-0ubuntu6.6 OR Release section Ubuntu 9.10 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section openjdk-6-jre-lib DPKG is earlier than 6b16-1.6.1-3ubuntu1 AND openjdk-6-doc DPKG is earlier than 6b16-1.6.1-3ubuntu1 AND openjdk-6-source DPKG is earlier than 6b16-1.6.1-3ubuntu1 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section openjdk-6-jre DPKG is earlier than 6b16-1.6.1-3ubuntu1 AND openjdk-6-jre-headless DPKG is earlier than 6b16-1.6.1-3ubuntu1 AND openjdk-6-demo DPKG is earlier than 6b16-1.6.1-3ubuntu1 AND openjdk-6-dbg DPKG is earlier than 6b16-1.6.1-3ubuntu1 AND openjdk-6-jdk DPKG is earlier than 6b16-1.6.1-3ubuntu1 AND icedtea6-plugin DPKG is earlier than 6b16-1.6.1-3ubuntu1 OR Architecture depended section Supported architectures section Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section icedtea-6-jre-cacao DPKG is earlier than 6b16-1.6.1-3ubuntu1 AND openjdk-6-jre-zero DPKG is earlier than 6b16-1.6.1-3ubuntu1 OR Release section Ubuntu 9.04 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section openjdk-6-jre-lib DPKG is earlier than 6b14-1.4.1-0ubuntu12 AND openjdk-6-doc DPKG is earlier than 6b14-1.4.1-0ubuntu12 AND openjdk-6-source-files DPKG is earlier than 6b14-1.4.1-0ubuntu12 AND openjdk-6-source DPKG is earlier than 6b14-1.4.1-0ubuntu12 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section openjdk-6-jre DPKG is earlier than 6b14-1.4.1-0ubuntu12 AND openjdk-6-jre-headless DPKG is earlier than 6b14-1.4.1-0ubuntu12 AND openjdk-6-demo DPKG is earlier than 6b14-1.4.1-0ubuntu12 AND openjdk-6-dbg DPKG is earlier than 6b14-1.4.1-0ubuntu12 AND openjdk-6-jdk DPKG is earlier than 6b14-1.4.1-0ubuntu12 AND icedtea6-plugin DPKG is earlier than 6b14-1.4.1-0ubuntu12 OR Architecture depended section Supported architectures section Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Packages section icedtea-6-jre-cacao DPKG is earlier than 6b14-1.4.1-0ubuntu12 AND openjdk-6-jre-zero DPKG is earlier than 6b14-1.4.1-0ubuntu12 OR Supported platform section Installed architecture is powerpc AND icedtea-6-jre-cacao DPKG is earlier than 6b14-1.4.1-0ubuntu12

Definition Id: oval:org.mitre.oval:def:13923

Oval ID:	oval:org.mitre.oval:def:13923
Title:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow using an untrusted size value in the readMabCurveData function in the CMM module in the JVM.
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow using an untrusted size value in the readMabCurveData function in the CMM module in the JVM.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0838	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Development Kit Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed

Definition Id: oval:org.mitre.oval:def:13934

Oval ID:	oval:org.mitre.oval:def:13934
Title:	Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0082	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment Java Development Kit
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:13971

Oval ID:	oval:org.mitre.oval:def:13971
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka "Trusted Methods Chaining Remote Code Execution Vulnerability."
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka "Trusted Methods Chaining Remote Code Execution Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0840	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Development Kit Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:14061

Oval ID:	oval:org.mitre.oval:def:14061
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0084	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Development Kit Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:14105

Oval ID:	oval:org.mitre.oval:def:14105
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0095	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Development Kit Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:14210

Oval ID:	oval:org.mitre.oval:def:14210
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0092	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Development Kit Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed

Definition Id: oval:org.mitre.oval:def:14276

Oval ID:	oval:org.mitre.oval:def:14276
Title:	Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0837	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Development Kit Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed

Definition Id: oval:org.mitre.oval:def:14288

Oval ID:	oval:org.mitre.oval:def:14288
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0093	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Development Kit Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:14321

Oval ID:	oval:org.mitre.oval:def:14321
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0088	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment Java Development Kit
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:14350

Oval ID:	oval:org.mitre.oval:def:14350
Title:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0848	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment Java Development Kit
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:14351

Oval ID:	oval:org.mitre.oval:def:14351
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is due to missing privilege checks during deserialization of RMIConnectionImpl objects, which allows remote attackers to call system-level Java functions via the ClassLoader of a constructor that is being deserialized.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is due to missing privilege checks during deserialization of RMIConnectionImpl objects, which allows remote attackers to call system-level Java functions via the ClassLoader of a constructor that is being deserialized.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0094	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Development Kit Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed

Definition Id: oval:org.mitre.oval:def:14453

Oval ID:	oval:org.mitre.oval:def:14453
Title:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow that allows arbitrary code execution via a crafted image.
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow that allows arbitrary code execution via a crafted image.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0847	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment Java Development Kit
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:14521

Oval ID:	oval:org.mitre.oval:def:14521
Title:	Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0845	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Development Kit Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed

Definition Id: oval:org.mitre.oval:def:20357

Oval ID:	oval:org.mitre.oval:def:20357
Title:	Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	4
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX400-201103403-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201103403-SG is not installed

Definition Id: oval:org.mitre.oval:def:21255

Oval ID:	oval:org.mitre.oval:def:21255
Title:	RHSA-2010:0155: java-1.4.2-ibm security and bug fix update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0155-01 CVE-2009-3555	Version:	4
Platform(s):	Red Hat Enterprise Linux 5	Product(s):	java-1.4.2-ibm
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 5 Packages section java-1.4.2-ibm is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.13.4-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:21587

Oval ID:	oval:org.mitre.oval:def:21587
Title:	RHSA-2010:0165: nss security update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0165-01 CESA-2010:0165 CVE-2009-3555	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	nspr nss
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section nspr-devel is earlier than 0:4.8.4-1.el5_4 AND nspr is earlier than 0:4.8.4-1.el5_4 AND nss is earlier than 0:3.12.6-1.el5_4 AND nss-tools is earlier than 0:3.12.6-1.el5_4 AND nss-devel is earlier than 0:3.12.6-1.el5_4 AND nss-pkcs11-devel is earlier than 0:3.12.6-1.el5_4

Definition Id: oval:org.mitre.oval:def:21828

Oval ID:	oval:org.mitre.oval:def:21828
Title:	RHSA-2010:0166: gnutls security update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0166-01 CESA-2010:0166 CVE-2009-2409 CVE-2009-3555	Version:	29
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	gnutls
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section gnutls-devel is earlier than 0:1.4.1-3.el5_4.8 AND gnutls-utils is earlier than 0:1.4.1-3.el5_4.8 AND gnutls is earlier than 0:1.4.1-3.el5_4.8

Definition Id: oval:org.mitre.oval:def:21877

Oval ID:	oval:org.mitre.oval:def:21877
Title:	RHSA-2010:0164: openssl097a security update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0164-01 CESA-2010:0164 CVE-2009-3555	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	openssl097a
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x AND openssl097a is earlier than 0:0.9.7a-9.el5_4.2

Definition Id: oval:org.mitre.oval:def:21942

Oval ID:	oval:org.mitre.oval:def:21942
Title:	RHSA-2010:0339: java-1.6.0-openjdk security update (Important)
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0339-01 CESA-2010:0339 CVE-2009-3555 CVE-2010-0082 CVE-2010-0084 CVE-2010-0085 CVE-2010-0088 CVE-2010-0091 CVE-2010-0092 CVE-2010-0093 CVE-2010-0094 CVE-2010-0095 CVE-2010-0837 CVE-2010-0838 CVE-2010-0840 CVE-2010-0845 CVE-2010-0847 CVE-2010-0848	Version:	198
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:22032

Oval ID:	oval:org.mitre.oval:def:22032
Title:	ELSA-2009:1571: java-1.5.0-sun security update (Critical)
Description:	The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265.
Family:	unix	Class:	patch
Reference(s):	ELSA-2009:1571-01 CVE-2009-2409 CVE-2009-3728 CVE-2009-3867 CVE-2009-3868 CVE-2009-3869 CVE-2009-3871 CVE-2009-3873 CVE-2009-3874 CVE-2009-3875 CVE-2009-3876 CVE-2009-3877 CVE-2009-3879 CVE-2009-3880 CVE-2009-3881 CVE-2009-3882 CVE-2009-3883 CVE-2009-3884	Version:	73
Platform(s):	Oracle Linux 5	Product(s):	java-1.5.0-sun
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.5.0-sun-plugin is earlier than 0:1.5.0.22-1jpp.1.el5 AND java-1.5.0-sun is earlier than 0:1.5.0.22-1jpp.1.el5 AND java-1.5.0-sun-jdbc is earlier than 0:1.5.0.22-1jpp.1.el5 AND java-1.5.0-sun-demo is earlier than 0:1.5.0.22-1jpp.1.el5 AND java-1.5.0-sun-devel is earlier than 0:1.5.0.22-1jpp.1.el5 AND java-1.5.0-sun-src is earlier than 0:1.5.0.22-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:22412

Oval ID:	oval:org.mitre.oval:def:22412
Title:	ELSA-2009:1186: nspr and nss security, bug fix, and enhancement update (Critical)
Description:	The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.
Family:	unix	Class:	patch
Reference(s):	ELSA-2009:1186-01 CVE-2009-2404 CVE-2009-2408 CVE-2009-2409	Version:	17
Platform(s):	Oracle Linux 5	Product(s):	nspr nss
Definition Synopsis:
Oracle Linux 5.x rpm test nspr-devel is earlier than 0:4.7.4-1.el5_3.1 AND nspr is earlier than 0:4.7.4-1.el5_3.1 AND nss is earlier than 0:3.12.3.99.3-1.el5_3.2 AND nss-tools is earlier than 0:3.12.3.99.3-1.el5_3.2 AND nss-pkcs11-devel is earlier than 0:3.12.3.99.3-1.el5_3.2 AND nss-devel is earlier than 0:3.12.3.99.3-1.el5_3.2

Definition Id: oval:org.mitre.oval:def:22820

Oval ID:	oval:org.mitre.oval:def:22820
Title:	ELSA-2009:1579: httpd security update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	ELSA-2009:1579-02 CVE-2009-3094 CVE-2009-3095 CVE-2009-3555	Version:	17
Platform(s):	Oracle Linux 5	Product(s):	httpd
Definition Synopsis:
Oracle Linux 5.x rpm test httpd-manual is earlier than 0:2.2.3-31.el5_4.2 AND httpd-devel is earlier than 0:2.2.3-31.el5_4.2 AND mod_ssl is earlier than 0:2.2.3-31.el5_4.2 AND httpd is earlier than 0:2.2.3-31.el5_4.2

Definition Id: oval:org.mitre.oval:def:22842

Oval ID:	oval:org.mitre.oval:def:22842
Title:	ELSA-2009:1647: java-1.5.0-ibm security update (Critical)
Description:	Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911.
Family:	unix	Class:	patch
Reference(s):	ELSA-2009:1647-01 CVE-2009-3867 CVE-2009-3868 CVE-2009-3869 CVE-2009-3871 CVE-2009-3872 CVE-2009-3873 CVE-2009-3874 CVE-2009-3875 CVE-2009-3876 CVE-2009-3877	Version:	45
Platform(s):	Oracle Linux 5	Product(s):	java-1.5.0-ibm
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.11-1jpp.1.el5 AND java-1.5.0-ibm is earlier than 1:1.5.0.11-1jpp.1.el5 AND java-1.5.0-ibm-accessibility is earlier than 1:1.5.0.11-1jpp.1.el5 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.11-1jpp.1.el5 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.11-1jpp.1.el5 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.11-1jpp.1.el5 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.11-1jpp.1.el5 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.11-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:22907

Oval ID:	oval:org.mitre.oval:def:22907
Title:	ELSA-2009:1694: java-1.6.0-ibm security update (Critical)
Description:	Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911.
Family:	unix	Class:	patch
Reference(s):	ELSA-2009:1694-01 CVE-2009-0217 CVE-2009-3555 CVE-2009-3865 CVE-2009-3866 CVE-2009-3867 CVE-2009-3868 CVE-2009-3869 CVE-2009-3871 CVE-2009-3872 CVE-2009-3873 CVE-2009-3874 CVE-2009-3875 CVE-2009-3876 CVE-2009-3877	Version:	61
Platform(s):	Oracle Linux 5	Product(s):	java-1.6.0-ibm
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.6.0-ibm-javacomm is earlier than 1:1.6.0.7-1jpp.2.el5 AND java-1.6.0-ibm is earlier than 1:1.6.0.7-1jpp.2.el5 AND java-1.6.0-ibm-accessibility is earlier than 1:1.6.0.7-1jpp.2.el5 AND java-1.6.0-ibm-devel is earlier than 1:1.6.0.7-1jpp.2.el5 AND java-1.6.0-ibm-src is earlier than 1:1.6.0.7-1jpp.2.el5 AND java-1.6.0-ibm-demo is earlier than 1:1.6.0.7-1jpp.2.el5 AND java-1.6.0-ibm-plugin is earlier than 1:1.6.0.7-1jpp.2.el5 AND java-1.6.0-ibm-jdbc is earlier than 1:1.6.0.7-1jpp.2.el5

Definition Id: oval:org.mitre.oval:def:22913

Oval ID:	oval:org.mitre.oval:def:22913
Title:	ELSA-2010:0155: java-1.4.2-ibm security and bug fix update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0155-01 CVE-2009-3555	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	java-1.4.2-ibm
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.4.2-ibm is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.13.4-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:22972

Oval ID:	oval:org.mitre.oval:def:22972
Title:	ELSA-2009:1643: java-1.4.2-ibm security update (Critical)
Description:	Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911.
Family:	unix	Class:	patch
Reference(s):	ELSA-2009:1643-01 CVE-2009-3867 CVE-2009-3868 CVE-2009-3869 CVE-2009-3871 CVE-2009-3872 CVE-2009-3873 CVE-2009-3874 CVE-2009-3875 CVE-2009-3876 CVE-2009-3877	Version:	45
Platform(s):	Oracle Linux 5	Product(s):	java-1.4.2-ibm
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.4.2-ibm is earlier than 0:1.4.2.13.3-1jpp.1.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.13.3-1jpp.1.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.13.3-1jpp.1.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.13.3-1jpp.1.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.13.3-1jpp.1.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.13.3-1jpp.1.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.13.3-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:22979

Oval ID:	oval:org.mitre.oval:def:22979
Title:	ELSA-2009:1584: java-1.6.0-openjdk security update (Important)
Description:	The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265.
Family:	unix	Class:	patch
Reference(s):	ELSA-2009:1584-01 CVE-2009-2409 CVE-2009-3728 CVE-2009-3869 CVE-2009-3871 CVE-2009-3873 CVE-2009-3874 CVE-2009-3875 CVE-2009-3876 CVE-2009-3877 CVE-2009-3879 CVE-2009-3880 CVE-2009-3881 CVE-2009-3882 CVE-2009-3883 CVE-2009-3884	Version:	65
Platform(s):	Oracle Linux 5	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5

Definition Id: oval:org.mitre.oval:def:22993

Oval ID:	oval:org.mitre.oval:def:22993
Title:	ELSA-2010:0165: nss security update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0165-01 CVE-2009-3555	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	nspr nss
Definition Synopsis:
Oracle Linux 5.x rpm test nspr-devel is earlier than 0:4.8.4-1.el5_4 AND nspr is earlier than 0:4.8.4-1.el5_4 AND nss is earlier than 0:3.12.6-1.el5_4 AND nss-tools is earlier than 0:3.12.6-1.el5_4 AND nss-devel is earlier than 0:3.12.6-1.el5_4 AND nss-pkcs11-devel is earlier than 0:3.12.6-1.el5_4

Definition Id: oval:org.mitre.oval:def:22994

Oval ID:	oval:org.mitre.oval:def:22994
Title:	ELSA-2010:0339: java-1.6.0-openjdk security update (Important)
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0339-01 CVE-2009-3555 CVE-2010-0082 CVE-2010-0084 CVE-2010-0085 CVE-2010-0088 CVE-2010-0091 CVE-2010-0092 CVE-2010-0093 CVE-2010-0094 CVE-2010-0095 CVE-2010-0837 CVE-2010-0838 CVE-2010-0840 CVE-2010-0845 CVE-2010-0847 CVE-2010-0848	Version:	65
Platform(s):	Oracle Linux 5	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:23000

Oval ID:	oval:org.mitre.oval:def:23000
Title:	ELSA-2010:0166: gnutls security update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0166-01 CVE-2009-2409 CVE-2009-3555	Version:	13
Platform(s):	Oracle Linux 5	Product(s):	gnutls
Definition Synopsis:
Oracle Linux 5.x rpm test gnutls-devel is earlier than 0:1.4.1-3.el5_4.8 AND gnutls-utils is earlier than 0:1.4.1-3.el5_4.8 AND gnutls is earlier than 0:1.4.1-3.el5_4.8

Definition Id: oval:org.mitre.oval:def:23090

Oval ID:	oval:org.mitre.oval:def:23090
Title:	ELSA-2010:0164: openssl097a security update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0164-01 CVE-2009-3555	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	openssl097a
Definition Synopsis:
Oracle Linux 5.x AND openssl097a is earlier than 0:0.9.7a-9.el5_4.2

Definition Id: oval:org.mitre.oval:def:25097

Oval ID:	oval:org.mitre.oval:def:25097
Title:	Vulnerability in OpenSSL before 0.9.8i, allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	4
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 0.9.1c before 0.9.8i AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 0.9.1c before 0.9.8i (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8i ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8i ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8i under Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:25180

Oval ID:	oval:org.mitre.oval:def:25180
Title:	Vulnerability in OpenSSL 0.9.8 through 0.9.8k, might allow remote attackers to spoof certificates
Description:	The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-2409	Version:	4
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 0.9.8 before 0.9.8k AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 0.9.8 before 0.9.8k (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 0.9.8 before 0.9.8k ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.8 before 0.9.8k ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.8 before 0.9.8k Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:27295

Oval ID:	oval:org.mitre.oval:def:27295
Title:	DEPRECATED: ELSA-2010-0164 -- openssl097a security update (moderate)
Description:	[0.9.7a-9.2] - CVE-2009-3555 - support the secure renegotiation RFC (#533125)
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0164 CVE-2009-3555	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	openssl097a
Definition Synopsis:
Oracle Linux 5.x AND openssl097a is earlier than 0:0.9.7a-9.el5_4.2

Definition Id: oval:org.mitre.oval:def:27748

Oval ID:	oval:org.mitre.oval:def:27748
Title:	DEPRECATED: ELSA-2010-0162 -- openssl security update (important)
Description:	[0.9.8e-12.6] - fix CVE-2009-3245 - add missing bn_wexpand return checks (#570924) [0.9.8e-12.5] - fix CVE-2010-0433 - do not pass NULL princ to krb5_kt_get_entry which in the RHEL-5 and newer versions will crash in such case (#569774) [0.9.8e-12.4] - do not disable SSLv2 in the renegotiation patch - SSLv2 does not support renegotiation - allow unsafe renegotiation on clients with SSL_OP_LEGACY_SERVER_CONNECT [0.9.8e-12.3] - mention the RFC5746 in the CVE-2009-3555 doc [0.9.8e-12.2] - fix CVE-2009-3555 - support the safe renegotiation extension and do not allow legacy renegotiation on the server by default (#533125)
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0162 CVE-2010-0433 CVE-2009-3245 CVE-2009-3555	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	openssl
Definition Synopsis:
Oracle Linux 5.x Packages match section openssl is earlier than 0:0.9.8e-12.el5_4.6 AND openssl-devel is earlier than 0:0.9.8e-12.el5_4.6 AND openssl-perl is earlier than 0:0.9.8e-12.el5_4.6

Definition Id: oval:org.mitre.oval:def:27881

Oval ID:	oval:org.mitre.oval:def:27881
Title:	DEPRECATED: ELSA-2010-0166 -- gnutls security update (moderate)
Description:	[1.4.1-3.8] - fix safe renegotiation on SSL3 protocol [1.4.1-3.7] - implement safe renegotiation - CVE-2009-3555 (#533125) - do not allow MD2 in certificate signatures by default - CVE-2009-2409 (#510197)
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0166 CVE-2009-2409 CVE-2009-3555	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	gnutls
Definition Synopsis:
Oracle Linux 5.x Packages match section gnutls is earlier than 0:1.4.1-3.el5_4.8 AND gnutls-devel is earlier than 0:1.4.1-3.el5_4.8 AND gnutls-utils is earlier than 0:1.4.1-3.el5_4.8

Definition Id: oval:org.mitre.oval:def:28188

Oval ID:	oval:org.mitre.oval:def:28188
Title:	DEPRECATED: ELSA-2010-0768 -- java-1.6.0-openjdk security and bug fix update (important)
Description:	[1.6.0.0-1.16.b17.0.1.el5] - Add oracle-enterprise.patch [1.6.0.0-1.16.b17.el5] - Updated 1.7.5 tarball (contains additional security fixes) - Resolves: bz639951 [1.6.0.0-1.15.b17.el5] - Rebuild - Resolves: bz639951 [1.6.0.0-1.14.b17.el5] - Synched with el6 branch - Updated to IcedTea 1.7.5 - Resolves: bz639951 - Also resolves 619800 and 621303
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0768 CVE-2010-3541 CVE-2010-3548 CVE-2010-3549 CVE-2010-3551 CVE-2010-3553 CVE-2010-3554 CVE-2010-3557 CVE-2010-3561 CVE-2010-3562 CVE-2010-3564 CVE-2010-3565 CVE-2010-3567 CVE-2010-3568 CVE-2010-3569 CVE-2010-3573 CVE-2010-3574 CVE-2009-3555	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Oracle Linux 5.x Packages match section java-1.6.0-openjdk is earlier than 0:1.6.0.0-1.16.b17.0.1.el5 AND java-1.6.0-openjdk-demo is earlier than 0:1.6.0.0-1.16.b17.0.1.el5 AND java-1.6.0-openjdk-devel is earlier than 0:1.6.0.0-1.16.b17.0.1.el5 AND java-1.6.0-openjdk-javadoc is earlier than 0:1.6.0.0-1.16.b17.0.1.el5 AND java-1.6.0-openjdk-src is earlier than 0:1.6.0.0-1.16.b17.0.1.el5

Definition Id: oval:org.mitre.oval:def:28253

Oval ID:	oval:org.mitre.oval:def:28253
Title:	DEPRECATED: ELSA-2010-0054 -- openssl security update (moderate)
Description:	[0.9.8e-12.1] - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables (#510197) - fix CVE-2009-4355 - do not leak memory when CRYPTO_cleanup_all_ex_data() is called prematurely by application (#546707)
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0054 CVE-2009-4355 CVE-2009-2409	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	openssl
Definition Synopsis:
Oracle Linux 5.x Packages match section openssl is earlier than 0:0.9.8e-12.el5_4.1 AND openssl-devel is earlier than 0:0.9.8e-12.el5_4.1 AND openssl-perl is earlier than 0:0.9.8e-12.el5_4.1

Definition Id: oval:org.mitre.oval:def:28269

Oval ID:	oval:org.mitre.oval:def:28269
Title:	DEPRECATED: ELSA-2010-0339 -- java-1.6.0-openjdk security update (important)
Description:	[1:1.6.0.0-1.11.b16.0.1.el5] - Add oracle-enterprise.patch [1:1.6.0.0-1.11.b16.el5] - Remove javaws alternative due to conflict with java-1.6.0-sun's alternatives [1:1.6.0-1.10.b16] - Update to openjdk build b16 - Update to icedtea6-1.6 - Added tzdata-java requirement - Added autoconf and automake build requirement - Added tzdata-java requirement - Added java-1.6.0-openjdk-gcc-stack-markings.patch - Added java-1.6.0-openjdk-memory-barriers.patch - Added java-1.6.0-openjdk-jar-misc.patch - Added java-1.6.0-openjdk-linux-separate-debuginfo.patch - Added java-1.6.0-openjdk-securitypatches-20100323.patch - Added STRIP_KEEP_SYMTAB=libjvm* to install section, fix bz530402 - Resolves: rhbz#576124 [1:1.6.0-1.8.b09] - Added java-1.6.0-openjdk-debuginfo.patch - Added java-1.6.0-openjdk-elf-debuginfo.patch
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0339 CVE-2010-0082 CVE-2010-0084 CVE-2010-0085 CVE-2010-0088 CVE-2010-0091 CVE-2010-0092 CVE-2010-0093 CVE-2010-0094 CVE-2010-0095 CVE-2010-0837 CVE-2010-0838 CVE-2010-0840 CVE-2010-0845 CVE-2010-0847 CVE-2010-0848 CVE-2009-3555	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Oracle Linux 5.x Packages match section java-1.6.0-openjdk is earlier than 0:1.6.0.0-1.11.b16.0.1.el5 AND java-1.6.0-openjdk-demo is earlier than 0:1.6.0.0-1.11.b16.0.1.el5 AND java-1.6.0-openjdk-devel is earlier than 0:1.6.0.0-1.11.b16.0.1.el5 AND java-1.6.0-openjdk-javadoc is earlier than 0:1.6.0.0-1.11.b16.0.1.el5 AND java-1.6.0-openjdk-src is earlier than 0:1.6.0.0-1.11.b16.0.1.el5

Definition Id: oval:org.mitre.oval:def:28898

Oval ID:	oval:org.mitre.oval:def:28898
Title:	RHSA-2009:1584 -- java-1.6.0-openjdk security update (Important)
Description:	Updated java-1.6.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. The Java Runtime Environment (JRE) contains the software and tools that users need to run applications written using the Java programming language.
Family:	unix	Class:	patch
Reference(s):	RHSA-2009:1584 CESA-2009:1584-CentOS 5 CVE-2009-2409 CVE-2009-3728 CVE-2009-3869 CVE-2009-3871 CVE-2009-3873 CVE-2009-3874 CVE-2009-3875 CVE-2009-3876 CVE-2009-3877 CVE-2009-3879 CVE-2009-3880 CVE-2009-3881 CVE-2009-3882 CVE-2009-3883 CVE-2009-3884	Version:	3
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Operation system section The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages match section java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5

Definition Id: oval:org.mitre.oval:def:29071

Oval ID:	oval:org.mitre.oval:def:29071
Title:	USN-810-3 -- NSS regression
Description:	USN-810-1 fixed vulnerabilities in NSS. Jozsef Kadlecsik noticed that the new libraries on amd64 did not correctly set stack memory flags, and caused applications using NSS (e.g. Firefox) to have an executable stack. This reduced the effectiveness of some defensive security protections. This update fixes the problem.
Family:	unix	Class:	patch
Reference(s):	USN-810-3 CVE-2009-2404 CVE-2009-2408 CVE-2009-2409	Version:	3
Platform(s):	Ubuntu 9.04 Ubuntu 8.10 Ubuntu 8.04	Product(s):	nss
Definition Synopsis:
Ubuntu 9.04 release section Ubuntu 9.04 is installed AND libnss3-1d is earlier than 0:3.12.3.1-0ubuntu0.9.04.2 AND Ubuntu 8.10 release section Ubuntu 8.10 is installed AND libnss3-1d is earlier than 0:3.12.3.1-0ubuntu0.8.10.2 AND Ubuntu 8.04 release section Ubuntu 8.04 is installed AND libnss3-1d is earlier than 0:3.12.3.1-0ubuntu0.8.04.2

Definition Id: oval:org.mitre.oval:def:29169

Oval ID:	oval:org.mitre.oval:def:29169
Title:	RHSA-2009:1186 -- nspr and nss security, bug fix, and enhancement update (Critical)
Description:	Updated nspr and nss packages that fix security issues, bugs, and add an enhancement are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team.
Family:	unix	Class:	patch
Reference(s):	RHSA-2009:1186 CVE-2009-2404 CVE-2009-2408 CVE-2009-2409	Version:	3
Platform(s):	Red Hat Enterprise Linux 5	Product(s):	nspr nss
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 5 Packages match section nspr-devel is earlier than 0:4.7.4-1.el5_3.1 AND nss-devel is earlier than 0:3.12.3.99.3-1.el5_3.2 AND nss-pkcs11-devel is earlier than 0:3.12.3.99.3-1.el5_3.2 AND nspr is earlier than 0:4.7.4-1.el5_3.1 AND nss is earlier than 0:3.12.3.99.3-1.el5_3.2 AND nss-tools is earlier than 0:3.12.3.99.3-1.el5_3.2

Definition Id: oval:org.mitre.oval:def:29317

Oval ID:	oval:org.mitre.oval:def:29317
Title:	RHSA-2009:1579 -- httpd security update (Moderate)
Description:	Updated httpd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server. A flaw was found in the way the TLS/SSL (Transport Layer Security/Secure Sockets Layer) protocols handle session renegotiation. A man-in-the-middle attacker could use this flaw to prefix arbitrary plain text to a client's session (for example, an HTTPS connection to a website). This could force the server to process an attacker's request as if authenticated using the victim's credentials. This update partially mitigates this flaw for SSL sessions to HTTP servers using mod_ssl by rejecting client-requested renegotiation. (CVE-2009-3555)
Family:	unix	Class:	patch
Reference(s):	RHSA-2009:1579 CESA-2009:1579-CentOS 3 CESA-2009:1579-CentOS 5 CVE-2009-3094 CVE-2009-3095 CVE-2009-3555	Version:	3
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 3 CentOS Linux 3 CentOS Linux 5	Product(s):	httpd
Definition Synopsis:
Red Hat Enterprise Linux 5 release section The operating system installed on the system is Red Hat Enterprise Linux 5 Packages match section httpd-devel is earlier than 0:2.2.3-31.el5_4.2 AND httpd-manual is earlier than 0:2.2.3-31.el5_4.2 AND httpd is earlier than 0:2.2.3-31.el5_4.2 AND mod_ssl is earlier than 0:2.2.3-31.el5_4.2 AND Red Hat Enterprise Linux 3 release section The operating system installed on the system is Red Hat Enterprise Linux 3 Packages match section httpd is earlier than 0:2.0.46-77.ent AND httpd-devel is earlier than 0:2.0.46-77.ent AND mod_ssl is earlier than 0:2.0.46-77.ent AND CentOS Linux 5 release section The operating system installed on the system is CentOS Linux 5.x Packages match section httpd is earlier than 0:2.2.3-31.el5.centos.2 AND httpd-devel is earlier than 0:2.2.3-31.el5.centos.2 AND httpd-manual is earlier than 0:2.2.3-31.el5.centos.2 AND mod_ssl is earlier than 0:2.2.3-31.el5.centos.2

Definition Id: oval:org.mitre.oval:def:6631

Oval ID:	oval:org.mitre.oval:def:6631
Title:	Network Security Services Library Supports Certificates With Weak MD2 Hash Signatures
Description:	The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-2409	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201005401-SG is not installed

Definition Id: oval:org.mitre.oval:def:6657

Oval ID:	oval:org.mitre.oval:def:6657
Title:	OpenJDK ICC_Profile File Existence Detection Information Leak
Description:	Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local International Color Consortium (ICC) profile files via a .. (dot dot) in a pathname, aka Bug Id 6631533.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3728	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201005402-SG is not installed

Definition Id: oval:org.mitre.oval:def:6698

Oval ID:	oval:org.mitre.oval:def:6698
Title:	OpenJDK JRE AWT setBytePixels Heap Overflow Vulnerability
Description:	Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via crafted arguments, aka Bug Id 6872358.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3871	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201005402-SG is not installed

Definition Id: oval:org.mitre.oval:def:6805

Oval ID:	oval:org.mitre.oval:def:6805
Title:	OpenJDK ASN.1/DER Input Stream Parser Denial of Service via Crafted DER Encoded Data
Description:	Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3876	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201005402-SG is not installed

Definition Id: oval:org.mitre.oval:def:6906

Oval ID:	oval:org.mitre.oval:def:6906
Title:	OpenJDK Resurrected Classloaders Can Still Have Children
Description:	Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a resurrected ClassLoader, which allows remote attackers to gain privileges via unspecified vectors, related to an "information leak vulnerability," aka Bug Id 6636650.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3881	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201005402-SG is not installed

Definition Id: oval:org.mitre.oval:def:6960

Oval ID:	oval:org.mitre.oval:def:6960
Title:	OpenJDK Zoneinfo File Existence Information Leak
Description:	The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3884	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201005402-SG is not installed

Definition Id: oval:org.mitre.oval:def:6968

Oval ID:	oval:org.mitre.oval:def:6968
Title:	OpenJDK Information Leaks in Mutable Variables
Description:	Multiple unspecified vulnerabilities in the Windows Pluggable Look and Feel (PL&F) feature in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to "information leaks in mutable variables," aka Bug Id 6657138.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3883	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201005402-SG is not installed

Definition Id: oval:org.mitre.oval:def:6970

Oval ID:	oval:org.mitre.oval:def:6970
Title:	OpenJDK JPEG Image Writer quantization problem
Description:	The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, related to a "quantization problem," aka Bug Id 6862968.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3873	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201005402-SG is not installed

Definition Id: oval:org.mitre.oval:def:7094

Oval ID:	oval:org.mitre.oval:def:7094
Title:	OpenJDK BMP Parsing DoS With UNC ICC Links
Description:	Sun Java SE 5.0 before Update 22 and 6 before Update 17 on Windows allows remote attackers to cause a denial of service via a BMP file containing a link to a UNC share pathname for an International Color Consortium (ICC) profile file, probably a related issue to CVE-2007-2789, aka Bug Id 6632445.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3885	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201005402-SG is not installed

Definition Id: oval:org.mitre.oval:def:7148

Oval ID:	oval:org.mitre.oval:def:7148
Title:	OpenJDK ASN.1/DER Input Stream Parser Denial of Service via Crafted HTTP Headers
Description:	Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3877	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201005402-SG is not installed

Definition Id: oval:org.mitre.oval:def:7155

Oval ID:	oval:org.mitre.oval:def:7155
Title:	VMware ESX, Service Console update for OpenSSL, GnuTLS, NSS and NSPR.
Description:	The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-2409	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201009401-SG is not installed.

Definition Id: oval:org.mitre.oval:def:7300

Oval ID:	oval:org.mitre.oval:def:7300
Title:	OpenJDK Information Leaks in Mutable Variables
Description:	Multiple unspecified vulnerabilities in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to "information leaks in mutable variables," aka Bug Id 6657026.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3882	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201005402-SG is not installed

Definition Id: oval:org.mitre.oval:def:7315

Oval ID:	oval:org.mitre.oval:def:7315
Title:	TLS/SSL Renegotiation Vulnerability
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	23
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla SeaMonkey
Definition Synopsis:
Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Check for vulnerable version Mozilla Firefox Mainline version is 3.5.x before 3.5.9 AND Mozilla Firefox Mainline version is 3.6.x before 3.6.2 OR Check for vulnerable Seamonkey Mozilla Seamonkey is installed AND Mozilla Seamonkey version less than 2.0.4 OR Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Mozilla Thunderbird version less than 3.0.4 OR Vulnerable Microsoft Windows XP x86 Microsoft Windows XP (32-bit) is installed AND the version of schannel.dll is less than 5.1.2600.6006 OR Vulnerable Microsoft Windows XP x64, Windows Server 2003 x86/x64/ia64 XP x64/server 2003 x86/x64/ia64 Microsoft Windows XP x64 is installed AND Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Microsoft Windows Server 2003 (ia64) Gold is installed AND the version of schannel.dll is less than 5.2.3790.4724 OR Vulnerable Microsoft Windows Vista x86/x64, Server 2008 x86/x64/ia64 Vista x86/x64, Server 2008 x86/x64/ia64 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (ia-64) is installed AND GDR or LDR Service branch the version of schannel.dll is less than 6.0.6001.18490 OR LDR the version of schannel.dll is greater than or equal to 6.0.6001.22000 AND the version of schannel.dll is less than 6.0.6001.22709 OR Vulnerable Microsoft Windows Vista x86/x64, Server 2008 x86/x64/ia64 Vista x86/x64, Server 2008 x86/x64/ia64 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (ia-64) is installed AND GDR or LDR Service branch the version of schannel.dll is less than 6.0.6002.18269 OR LDR the version of schannel.dll is greater than or equal to 6.0.6002.22000 AND the version of schannel.dll is less than 6.0.6002.22422 OR Vulnerable Microsoft Windows 7 x86/x64, Windows Server 2008 R2 x64/ia64 7 x86/x64, Server 2008 R2 x64/ia64 Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND GDR or LDR Service branch the version of schannel.dll is less than 6.1.7600.16612 OR LDR the version of schannel.dll is greater than or equal to 6.1.7600.20000 AND the version of schannel.dll is less than 6.1.7600.20735

Definition Id: oval:org.mitre.oval:def:7316

Oval ID:	oval:org.mitre.oval:def:7316
Title:	OpenJDK UI Logging Information Leakage
Description:	The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the implementation of Component, KeyboardFocusManager, and DefaultKeyboardFocusManager, aka Bug Id 6664512.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3880	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201005402-SG is not installed

Definition Id: oval:org.mitre.oval:def:7400

Oval ID:	oval:org.mitre.oval:def:7400
Title:	OpenJDK JRE AWT setDifflCM Stack Overflow Vulnerability
Description:	Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3869	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201005402-SG is not installed

Definition Id: oval:org.mitre.oval:def:7442

Oval ID:	oval:org.mitre.oval:def:7442
Title:	OpenJDK ImageI/O JPEG Heap Overflow Vulnerability
Description:	Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via large subsample dimensions in a JPEG file that triggers a heap-based buffer overflow, aka Bug Id 6874643.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3874	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201005402-SG is not installed

Definition Id: oval:org.mitre.oval:def:7478

Oval ID:	oval:org.mitre.oval:def:7478
Title:	VMware ESX, Service Console update for OpenSSL, GnuTLS, NSS and NSPR.
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201009401-SG is not installed.

Definition Id: oval:org.mitre.oval:def:7545

Oval ID:	oval:org.mitre.oval:def:7545
Title:	OpenJDK GraphicsConfiguration Information Leak
Description:	Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and attack vectors, related to failure to clone arrays that are returned by the getConfigurations function, aka Bug Id 6822057.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3879	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201005402-SG is not installed

Definition Id: oval:org.mitre.oval:def:7549

Oval ID:	oval:org.mitre.oval:def:7549
Title:	OpenJDK MessageDigest.isEqual Introduces Timing Attack Vulnerabilities
Description:	The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to spoof HMAC-based digital signatures, and possibly bypass authentication, via unspecified vectors related to "timing attack vulnerabilities," aka Bug Id 6863503.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3875	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201005402-SG is not installed

Definition Id: oval:org.mitre.oval:def:7913

Oval ID:	oval:org.mitre.oval:def:7913
Title:	HP-UX Running Java, Remote Increase in Privilege, Denial of Service and Other Vulnerabilities
Description:	The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to spoof HMAC-based digital signatures, and possibly bypass authentication, via unspecified vectors related to "timing attack vulnerabilities," aka Bug Id 6863503.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3875	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
IF HP Release B.11.11 AND HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk14.JDK14-IPF32 version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64 version is less than 1.4.2.24.00 AND Jdk14.JDK14-IPF64 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA11 version is less than 1.4.2.24.00 AND Jre14.JRE14-COM version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32 version is less than 1.4.2.24.00 AND Jdk14.JDK14-COM version is less than 1.4.2.24.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.19.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.19.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.19.00 AND Jre15.JRE15-COM version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.19.00 AND Jdk15.JDK15-COM version is less than 1.5.0.19.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.06.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.06.00 AND Jdk60.JDK60-COM version is less than 1.6.0.06.00 AND Jre60.JRE60-COM version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.06.00

Definition Id: oval:org.mitre.oval:def:7973

Oval ID:	oval:org.mitre.oval:def:7973
Title:	Security Vulnerability in the Transport Layer Security (TLS) and Secure Sockets Layer 3.0 (SSLv3) Protocols Involving Handshake Renegotiation Affects Applications Utilizing Network Security Services (NSS)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	1
Platform(s):	Sun Solaris 8 Sun Solaris 9 Sun Solaris 10	Product(s):
Definition Synopsis:
Solaris 8 (SPARC) meets Sun Alert 273350 Solaris 8 (SPARC) is installed AND NOT Patch 119209-22 or later installed AND SUNWtls is installed OR Solaris 9 (SPARC) meets Sun Alert 273350 Solaris 9 (SPARC) is installed AND NOT Patch 119211-22 or later installed AND SUNWtls is installed OR Solaris 10 (SPARC) meets Sun Alert 273350 Solaris 10 (SPARC) is installed AND NOT Patch 119213-21 or later installed AND SUNWtls is installed OR Solaris 9 (x86) meets Sun Alert 273350 Solaris 9 (x86) is installed AND NOT Patch 119212-22 or later installed AND SUNWtls is installed OR Solaris 10 (x86) meets Sun Alert 273350 Solaris 10 (x86) is installed AND NOT Patch 119214-21 or later installed AND SUNWtls is installed

Definition Id: oval:org.mitre.oval:def:8111

Oval ID:	oval:org.mitre.oval:def:8111
Title:	DSA-1874 nss -- several vulnerabilities
Description:	Several vulnerabilities have been discovered in the Network Security Service libraries. The Common Vulnerabilities and Exposures project identifies the following problems: Moxie Marlinspike discovered that a buffer overflow in the regular expression parser could lead to the execution of arbitrary code. Dan Kaminsky discovered that NULL characters in certificate names could lead to man-in-the-middle attacks by tricking the user into accepting a rogue certificate. Certificates with MD2 hash signatures are no longer accepted since they're no longer considered cryptographically secure. The old stable distribution (etch) doesn't contain nss.
Family:	unix	Class:	patch
Reference(s):	DSA-1874 CVE-2009-2404 CVE-2009-2408 CVE-2009-2409	Version:	3
Platform(s):	Debian GNU/Linux 5.0	Product(s):	nss
Definition Synopsis:
Debian GNU/Linux 5.0 is installed Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa Packages section libnss3-dev is earlier than 3.12.3.1-0lenny1 AND libnss3-1d-dbg is earlier than 3.12.3.1-0lenny1 AND libnss3-tools is earlier than 3.12.3.1-0lenny1 AND libnss3-1d is earlier than 3.12.3.1-0lenny1

Definition Id: oval:org.mitre.oval:def:8201

Oval ID:	oval:org.mitre.oval:def:8201
Title:	DSA-1934 apache2 -- multiple issues
Description:	A design flaw has been found in the TLS and SSL protocol that allows an attacker to inject arbitrary content at the beginning of a TLS/SSL connection. The attack is related to the way how TLS and SSL handle session renegotiations. CVE-2009-3555 has been assigned to this vulnerability. As a partial mitigation against this attack, this apache2 update disables client-initiated renegotiations. This should fix the vulnerability for the majority of Apache configurations in use. NOTE: This is not a complete fix for the problem. The attack is still possible in configurations where the server initiates the renegotiation. This is the case for the following configurations (the information in the changelog of the updated packages is slightly inaccurate): As a workaround, you may rearrange your configuration in a way that SSLVerifyClient and SSLCipherSuite are only used on the server or virtual host level. A complete fix for the problem will require a protocol change. Further information will be included in a separate announcement about this issue. In addition, this update fixes the following issues in Apache's mod_proxy_ftp: Insufficient input validation in the mod_proxy_ftp module allowed remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command. Insufficient input validation in the mod_proxy_ftp module allowed remote authenticated attackers to bypass intended access restrictions and send arbitrary FTP commands to an FTP server. The oldstable distribution (etch), these problems have been fixed in version 2.2.3-4+etch11.
Family:	unix	Class:	patch
Reference(s):	DSA-1934 CVE-2009-3094 CVE-2009-3095 CVE-2009-3555	Version:	3
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 4.0	Product(s):	apache2
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section apache2-doc is earlier than 2.2.9-10+lenny6 AND apache2-src is earlier than 2.2.9-10+lenny6 AND apache2 is earlier than 2.2.9-10+lenny6 OR Architecture dependent section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section apache2-utils is earlier than 2.2.9-10+lenny6 AND apache2-mpm-worker is earlier than 2.2.9-10+lenny6 AND apache2.2-common is earlier than 2.2.9-10+lenny6 AND apache2-suexec-custom is earlier than 2.2.9-10+lenny6 AND apache2-suexec is earlier than 2.2.9-10+lenny6 AND apache2-threaded-dev is earlier than 2.2.9-10+lenny6 AND apache2-dbg is earlier than 2.2.9-10+lenny6 AND apache2-mpm-event is earlier than 2.2.9-10+lenny6 AND apache2-mpm-prefork is earlier than 2.2.9-10+lenny6 AND apache2-prefork-dev is earlier than 2.2.9-10+lenny6 OR Architecture dependent section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is hppa AND Installed architecture is sparc AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is mipsel AND Installed architecture is arm AND apache2-mpm-itk is earlier than 2.2.6-02-1+lenny2+b2 OR Release section Debian GNU/Linux 4.0 is installed. AND Architecture section Architecture independent section Installed architecture is all AND Packages section apache2-mpm-perchild is earlier than 2.2.3-4+etch11 AND apache2-doc is earlier than 2.2.3-4+etch11 AND apache2-src is earlier than 2.2.3-4+etch11 AND apache2 is earlier than 2.2.3-4+etch11 AND apache2-utils is earlier than 2.2.3-4+etch11 AND apache2-mpm-worker is earlier than 2.2.3-4+etch11 AND apache2.2-common is earlier than 2.2.3-4+etch11 AND apache2-mpm-prefork is earlier than 2.2.3-4+etch11 AND apache2-threaded-dev is earlier than 2.2.3-4+etch11 AND apache2-mpm-event is earlier than 2.2.3-4+etch11 AND apache2-mpm-itk is earlier than 2.2.3-01-2+etch4+b1 AND apache2-prefork-dev is earlier than 2.2.3-4+etch11

Definition Id: oval:org.mitre.oval:def:8275

Oval ID:	oval:org.mitre.oval:def:8275
Title:	HP-UX Running Java, Remote Increase in Privilege, Denial of Service and Other Vulnerabilities
Description:	Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via crafted arguments, aka Bug Id 6872358.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3871	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
IF HP Release B.11.11 AND HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk14.JDK14-IPF32 version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64 version is less than 1.4.2.24.00 AND Jdk14.JDK14-IPF64 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA11 version is less than 1.4.2.24.00 AND Jre14.JRE14-COM version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32 version is less than 1.4.2.24.00 AND Jdk14.JDK14-COM version is less than 1.4.2.24.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.19.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.19.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.19.00 AND Jre15.JRE15-COM version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.19.00 AND Jdk15.JDK15-COM version is less than 1.5.0.19.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.06.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.06.00 AND Jdk60.JDK60-COM version is less than 1.6.0.06.00 AND Jre60.JRE60-COM version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.06.00

Definition Id: oval:org.mitre.oval:def:8330

Oval ID:	oval:org.mitre.oval:def:8330
Title:	HP-UX Running Java, Remote Increase in Privilege, Denial of Service and Other Vulnerabilities
Description:	Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3877	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
IF HP Release B.11.11 AND HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk14.JDK14-IPF32 version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64 version is less than 1.4.2.24.00 AND Jdk14.JDK14-IPF64 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA11 version is less than 1.4.2.24.00 AND Jre14.JRE14-COM version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32 version is less than 1.4.2.24.00 AND Jdk14.JDK14-COM version is less than 1.4.2.24.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.19.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.19.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.19.00 AND Jre15.JRE15-COM version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.19.00 AND Jdk15.JDK15-COM version is less than 1.5.0.19.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.06.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.06.00 AND Jdk60.JDK60-COM version is less than 1.6.0.06.00 AND Jre60.JRE60-COM version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.06.00

Definition Id: oval:org.mitre.oval:def:8366

Oval ID:	oval:org.mitre.oval:def:8366
Title:	HP-UX Running Apache, Remote Unauthorized Data Injection, Denial of Service (DoS)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.11 AND HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests hpuxwsAPACHE.APACHE2 version is less than B.2.0.59.13 AND hpuxwsAPCH32.PHP version is less than B.2.0.59.13 AND hpuxwsAPCH32.PHP2 version is less than B.2.0.59.13 AND hpuxwsAPACHE.AUTH_LDAP version is less than B.2.0.59.13 AND hpuxwsAPACHE.AUTH_LDAP2 version is less than B.2.0.59.13 AND hpuxwsAPCH32.APACHE version is less than B.2.0.59.13 AND hpuxwsAPACHE.MOD_JK version is less than B.2.0.59.13 AND hpuxwsAPCH32.APACHE2 version is less than B.2.0.59.13 AND hpuxwsAPACHE.MOD_JK2 version is less than B.2.0.59.13 AND hpuxwsAPACHE.MOD_PERL version is less than B.2.0.59.13 AND hpuxwsAPCH32.AUTH_LDAP version is less than B.2.0.59.13 AND hpuxwsAPCH32.AUTH_LDAP2 version is less than B.2.0.59.13 AND hpuxwsAPACHE.MOD_PERL2 version is less than B.2.0.59.13 AND hpuxwsAPACHE.PHP version is less than B.2.0.59.13 AND hpuxwsAPCH32.MOD_JK version is less than B.2.0.59.13 AND hpuxwsAPACHE.PHP2 version is less than B.2.0.59.13 AND hpuxwsAPCH32.MOD_JK2 version is less than B.2.0.59.13 AND hpuxwsAPCH32.WEBPROXY version is less than B.2.0.59.13 AND hpuxwsAPACHE.WEBPROXY version is less than B.2.0.59.13 AND hpuxwsAPCH32.MOD_PERL version is less than B.2.0.59.13 AND hpuxwsAPCH32.MOD_PERL2 version is less than B.2.0.59.13 AND hpuxwsAPACHE.APACHE version is less than B.2.0.59.13

Definition Id: oval:org.mitre.oval:def:8396

Oval ID:	oval:org.mitre.oval:def:8396
Title:	HP-UX Running Java, Remote Increase in Privilege, Denial of Service and Other Vulnerabilities
Description:	The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, related to a "quantization problem," aka Bug Id 6862968.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3873	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
IF HP Release B.11.11 AND HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk14.JDK14-IPF32 version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64 version is less than 1.4.2.24.00 AND Jdk14.JDK14-IPF64 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA11 version is less than 1.4.2.24.00 AND Jre14.JRE14-COM version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32 version is less than 1.4.2.24.00 AND Jdk14.JDK14-COM version is less than 1.4.2.24.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.19.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.19.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.19.00 AND Jre15.JRE15-COM version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.19.00 AND Jdk15.JDK15-COM version is less than 1.5.0.19.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.06.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.06.00 AND Jdk60.JDK60-COM version is less than 1.6.0.06.00 AND Jre60.JRE60-COM version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.06.00

Definition Id: oval:org.mitre.oval:def:8535

Oval ID:	oval:org.mitre.oval:def:8535
Title:	HP-UX Running OpenSSL, Remote Unauthorized Data Injection, Denial of Service (DoS)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02482 HP Release B.11.23 AND filesets tests openssl.OPENSSL-PVT version is less than A.00.09.08l.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08l.002 AND openssl.OPENSSL-CER version is less than A.00.09.08l.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08l.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08l.002 AND openssl.OPENSSL-INC version is less than A.00.09.08l.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08l.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08l.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08l.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08l.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08l.002 OR Criteria meets HP Security Bulletin HPSBUX02482 HP Release B.11.11 AND filesets tests openssl.OPENSSL-PVT version is less than A.00.09.08l.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08l.001 AND openssl.OPENSSL-CER version is less than A.00.09.08l.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08l.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08l.001 AND openssl.OPENSSL-INC version is less than A.00.09.08l.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08l.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08l.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08l.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08l.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08l.001 OR Criteria meets HP Security Bulletin HPSBUX02482 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-PRNG version is less than A.00.09.08l.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08l.003 AND openssl.OPENSSL-CER version is less than A.00.09.08l.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08l.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08l.003 AND openssl.OPENSSL-INC version is less than A.00.09.08l.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08l.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08l.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08l.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08l.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08l.003

Definition Id: oval:org.mitre.oval:def:8566

Oval ID:	oval:org.mitre.oval:def:8566
Title:	HP-UX Running Java, Remote Increase in Privilege, Denial of Service and Other Vulnerabilities
Description:	Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3869	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
IF HP Release B.11.11 AND HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk14.JDK14-IPF32 version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64 version is less than 1.4.2.24.00 AND Jdk14.JDK14-IPF64 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA11 version is less than 1.4.2.24.00 AND Jre14.JRE14-COM version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32 version is less than 1.4.2.24.00 AND Jdk14.JDK14-COM version is less than 1.4.2.24.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.19.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.19.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.19.00 AND Jre15.JRE15-COM version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.19.00 AND Jdk15.JDK15-COM version is less than 1.5.0.19.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.06.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.06.00 AND Jdk60.JDK60-COM version is less than 1.6.0.06.00 AND Jre60.JRE60-COM version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.06.00

Definition Id: oval:org.mitre.oval:def:8594

Oval ID:	oval:org.mitre.oval:def:8594
Title:	VMware Network Security Services (NSS) certificate spoofing vulnerability by using MD2 design flaw
Description:	The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-2409	Version:	4
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-200912403-SG is not installed

Definition Id: oval:org.mitre.oval:def:8603

Oval ID:	oval:org.mitre.oval:def:8603
Title:	HP-UX Running Java, Remote Increase in Privilege, Denial of Service and Other Vulnerabilities
Description:	Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via large subsample dimensions in a JPEG file that triggers a heap-based buffer overflow, aka Bug Id 6874643.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3874	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
IF HP Release B.11.11 AND HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk14.JDK14-IPF32 version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64 version is less than 1.4.2.24.00 AND Jdk14.JDK14-IPF64 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA11 version is less than 1.4.2.24.00 AND Jre14.JRE14-COM version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32 version is less than 1.4.2.24.00 AND Jdk14.JDK14-COM version is less than 1.4.2.24.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.19.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.19.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.19.00 AND Jre15.JRE15-COM version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.19.00 AND Jdk15.JDK15-COM version is less than 1.5.0.19.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.06.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.06.00 AND Jdk60.JDK60-COM version is less than 1.6.0.06.00 AND Jre60.JRE60-COM version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.06.00

Definition Id: oval:org.mitre.oval:def:8608

Oval ID:	oval:org.mitre.oval:def:8608
Title:	HP-UX Running Java, Remote Increase in Privilege, Denial of Service and Other Vulnerabilities
Description:	Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3876	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
IF HP Release B.11.11 AND HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk14.JDK14-IPF32 version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64 version is less than 1.4.2.24.00 AND Jdk14.JDK14-IPF64 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA11 version is less than 1.4.2.24.00 AND Jre14.JRE14-COM version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11 version is less than 1.4.2.24.00 AND Jdk14.JDK14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-PA11-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20 version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF64-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-PA20W-HS version is less than 1.4.2.24.00 AND Jre14.JRE14-IPF32 version is less than 1.4.2.24.00 AND Jdk14.JDK14-COM version is less than 1.4.2.24.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.19.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.19.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.19.00 AND Jre15.JRE15-COM version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.19.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.19.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.19.00 AND Jdk15.JDK15-COM version is less than 1.5.0.19.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.06.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.06.00 AND Jdk60.JDK60-COM version is less than 1.6.0.06.00 AND Jre60.JRE60-COM version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.06.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.06.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.06.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.06.00

Definition Id: oval:org.mitre.oval:def:8841

Oval ID:	oval:org.mitre.oval:def:8841
Title:	Multiple unspecified vulnerabilities in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to "information leaks in mutable variables," aka Bug Id 6657026.
Description:	Multiple unspecified vulnerabilities in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to "information leaks in mutable variables," aka Bug Id 6657026.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3882	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5

Definition Id: oval:org.mitre.oval:def:9360

Oval ID:	oval:org.mitre.oval:def:9360
Title:	Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via crafted arguments, aka Bug Id 6872358.
Description:	Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via crafted arguments, aka Bug Id 6872358.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3871	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5

Definition Id: oval:org.mitre.oval:def:9568

Oval ID:	oval:org.mitre.oval:def:9568
Title:	Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and attack vectors, related to failure to clone arrays that are returned by the getConfigurations function, aka Bug Id 6822057.
Description:	Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and attack vectors, related to failure to clone arrays that are returned by the getConfigurations function, aka Bug Id 6822057.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3879	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5

Definition Id: oval:org.mitre.oval:def:9602

Oval ID:	oval:org.mitre.oval:def:9602
Title:	The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, related to a "quantization problem," aka Bug Id 6862968.
Description:	The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, related to a "quantization problem," aka Bug Id 6862968.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3873	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5

Definition Id: oval:org.mitre.oval:def:9855

Oval ID:	oval:org.mitre.oval:def:9855
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0091	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:9877

Oval ID:	oval:org.mitre.oval:def:9877
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0093	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:9896

Oval ID:	oval:org.mitre.oval:def:9896
Title:	Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0845	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:9899

Oval ID:	oval:org.mitre.oval:def:9899
Title:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0848	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:9974

Oval ID:	oval:org.mitre.oval:def:9974
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka "Trusted Methods Chaining Remote Code Execution Vulnerability."
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka "Trusted Methods Chaining Remote Code Execution Vulnerability."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0840	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

CPE : Common Platform Enumeration

Type	Description	Count
Application	Apache Http Server cpe:2.3:a:apache:http_server:2.2.9:::::::* cpe:2.3:a:apache:http_server:2.2.8:::::::* cpe:2.3:a:apache:http_server:2.2.7:::::::* cpe:2.3:a:apache:http_server:2.2.6:::::::* cpe:2.3:a:apache:http_server:2.2.5:::::::* cpe:2.3:a:apache:http_server:2.2.4:::::::* cpe:2.3:a:apache:http_server:2.2.3:::::::* cpe:2.3:a:apache:http_server:2.2.3::windows::::: cpe:2.3:a:apache:http_server:2.2.2:::::::* cpe:2.3:a:apache:http_server:2.2.2::windows::::: cpe:2.3:a:apache:http_server:2.2.14:::::::* cpe:2.3:a:apache:http_server:2.2.13:::::::* cpe:2.3:a:apache:http_server:2.2.12:::::::* cpe:2.3:a:apache:http_server:2.2.11:::::::* cpe:2.3:a:apache:http_server:2.2.10:::::::* cpe:2.3:a:apache:http_server:2.2.1:::::::* cpe:2.3:a:apache:http_server:2.2.0:::::::* cpe:2.3:a:apache:http_server:2.2:::::::* cpe:2.3:a:apache:http_server:2.1.9:::::::* cpe:2.3:a:apache:http_server:2.1.8:::::::* cpe:2.3:a:apache:http_server:2.1.7:::::::* cpe:2.3:a:apache:http_server:2.1.6:::::::* cpe:2.3:a:apache:http_server:2.1.5:::::::* cpe:2.3:a:apache:http_server:2.1.4:::::::* cpe:2.3:a:apache:http_server:2.1.3:::::::* cpe:2.3:a:apache:http_server:2.1.2:::::::* cpe:2.3:a:apache:http_server:2.1.1:::::::* cpe:2.3:a:apache:http_server:2.1.0:::::::* cpe:2.3:a:apache:http_server:2.1:::::::* cpe:2.3:a:apache:http_server:2.0.9:::::::* cpe:2.3:a:apache:http_server:2.0.65:::::::* cpe:2.3:a:apache:http_server:2.0.64:::::::* cpe:2.3:a:apache:http_server:2.0.63:::::::* cpe:2.3:a:apache:http_server:2.0.61:::::::* cpe:2.3:a:apache:http_server:2.0.60:::::::* cpe:2.3:a:apache:http_server:2.0.59:::::::* cpe:2.3:a:apache:http_server:2.0.58:::::::* cpe:2.3:a:apache:http_server:2.0.58::win32::::: cpe:2.3:a:apache:http_server:2.0.57:::::::* cpe:2.3:a:apache:http_server:2.0.56:::::::* cpe:2.3:a:apache:http_server:2.0.55:::::::* cpe:2.3:a:apache:http_server:2.0.54:::::::* cpe:2.3:a:apache:http_server:2.0.53:::::::* cpe:2.3:a:apache:http_server:2.0.52:::::::* cpe:2.3:a:apache:http_server:2.0.51:::::::* cpe:2.3:a:apache:http_server:2.0.50:::::::* cpe:2.3:a:apache:http_server:2.0.49:::::::* cpe:2.3:a:apache:http_server:2.0.48:::::::* cpe:2.3:a:apache:http_server:2.0.47:::::::* cpe:2.3:a:apache:http_server:2.0.46:::::::* cpe:2.3:a:apache:http_server:2.0.46::win32::::: cpe:2.3:a:apache:http_server:2.0.45:::::::* cpe:2.3:a:apache:http_server:2.0.44:::::::* cpe:2.3:a:apache:http_server:2.0.43:::::::* cpe:2.3:a:apache:http_server:2.0.42:::::::* cpe:2.3:a:apache:http_server:2.0.41:::::::* cpe:2.3:a:apache:http_server:2.0.40:::::::* cpe:2.3:a:apache:http_server:2.0.39:::::::* cpe:2.3:a:apache:http_server:2.0.38:::::::* cpe:2.3:a:apache:http_server:2.0.37:::::::* cpe:2.3:a:apache:http_server:2.0.36:::::::* cpe:2.3:a:apache:http_server:2.0.35:::::::* cpe:2.3:a:apache:http_server:2.0.34:beta:::::: cpe:2.3:a:apache:http_server:2.0.34:beta:win32:::::* cpe:2.3:a:apache:http_server:2.0.34:::::::* cpe:2.3:a:apache:http_server:2.0.33:::::::* cpe:2.3:a:apache:http_server:2.0.32:beta:::::: cpe:2.3:a:apache:http_server:2.0.32:::::::* cpe:2.3:a:apache:http_server:2.0.32:beta:win32:::::* cpe:2.3:a:apache:http_server:2.0.31:::::::* cpe:2.3:a:apache:http_server:2.0.30:::::::* cpe:2.3:a:apache:http_server:2.0.29:::::::* cpe:2.3:a:apache:http_server:2.0.28:beta:::::: cpe:2.3:a:apache:http_server:2.0.28:::::::* cpe:2.3:a:apache:http_server:2.0.28:beta:win32:::::* cpe:2.3:a:apache:http_server:2.0.27:::::::* cpe:2.3:a:apache:http_server:2.0.26:::::::* cpe:2.3:a:apache:http_server:2.0.25:::::::* cpe:2.3:a:apache:http_server:2.0.24:::::::* cpe:2.3:a:apache:http_server:2.0.23:::::::* cpe:2.3:a:apache:http_server:2.0.22:::::::* cpe:2.3:a:apache:http_server:2.0.21:::::::* cpe:2.3:a:apache:http_server:2.0.20:::::::* cpe:2.3:a:apache:http_server:2.0.19:::::::* cpe:2.3:a:apache:http_server:2.0.18:::::::* cpe:2.3:a:apache:http_server:2.0.17:::::::* cpe:2.3:a:apache:http_server:2.0.16:::::::* cpe:2.3:a:apache:http_server:2.0.15:::::::* cpe:2.3:a:apache:http_server:2.0.14:::::::* cpe:2.3:a:apache:http_server:2.0.13:::::::* cpe:2.3:a:apache:http_server:2.0.12:::::::* cpe:2.3:a:apache:http_server:2.0.11:::::::* cpe:2.3:a:apache:http_server:2.0.0:::::::* cpe:2.3:a:apache:http_server:2.0:::::::* cpe:2.3:a:apache:http_server:2.0:alpha9:::::: cpe:2.3:a:apache:http_server:1.99:::::::* cpe:2.3:a:apache:http_server:1.4.0:::::::* cpe:2.3:a:apache:http_server:1.3.9:::::::* cpe:2.3:a:apache:http_server:1.3.9::win32::::: cpe:2.3:a:apache:http_server:1.3.8:::::::* cpe:2.3:a:apache:http_server:1.3.7:::::::* cpe:2.3:a:apache:http_server:1.3.7::dev::::: cpe:2.3:a:apache:http_server:1.3.68:::::::* cpe:2.3:a:apache:http_server:1.3.65:::::::* cpe:2.3:a:apache:http_server:1.3.6:::::::* cpe:2.3:a:apache:http_server:1.3.6::win32::::: cpe:2.3:a:apache:http_server:1.3.5:::::::* cpe:2.3:a:apache:http_server:1.3.42:::::::* cpe:2.3:a:apache:http_server:1.3.41:::::::* cpe:2.3:a:apache:http_server:1.3.40:::::::* cpe:2.3:a:apache:http_server:1.3.4:::::::* cpe:2.3:a:apache:http_server:1.3.39:::::::* cpe:2.3:a:apache:http_server:1.3.38:::::::* cpe:2.3:a:apache:http_server:1.3.37:::::::* cpe:2.3:a:apache:http_server:1.3.36:::::::* cpe:2.3:a:apache:http_server:1.3.35:::::::* cpe:2.3:a:apache:http_server:1.3.34:::::::* cpe:2.3:a:apache:http_server:1.3.33:::::::* cpe:2.3:a:apache:http_server:1.3.32:::::::* cpe:2.3:a:apache:http_server:1.3.31:::::::* cpe:2.3:a:apache:http_server:1.3.30:::::::* cpe:2.3:a:apache:http_server:1.3.3:::::::* cpe:2.3:a:apache:http_server:1.3.29:::::::* cpe:2.3:a:apache:http_server:1.3.28:::::::* cpe:2.3:a:apache:http_server:1.3.27:::::::* cpe:2.3:a:apache:http_server:1.3.26:::::::* cpe:2.3:a:apache:http_server:1.3.26::win32::::: cpe:2.3:a:apache:http_server:1.3.25:::::::* cpe:2.3:a:apache:http_server:1.3.25::win32::::: cpe:2.3:a:apache:http_server:1.3.24:::::::* cpe:2.3:a:apache:http_server:1.3.24::win32::::: cpe:2.3:a:apache:http_server:1.3.23:::::::* cpe:2.3:a:apache:http_server:1.3.23::win32::::: cpe:2.3:a:apache:http_server:1.3.22:::::::* cpe:2.3:a:apache:http_server:1.3.22::win32::::: cpe:2.3:a:apache:http_server:1.3.20:::::::* cpe:2.3:a:apache:http_server:1.3.20::win32::::: cpe:2.3:a:apache:http_server:1.3.2:::::::* cpe:2.3:a:apache:http_server:1.3.19:::::::* cpe:2.3:a:apache:http_server:1.3.19::win32::::: cpe:2.3:a:apache:http_server:1.3.18:::::::* cpe:2.3:a:apache:http_server:1.3.18::win32::::: cpe:2.3:a:apache:http_server:1.3.17:::::::* cpe:2.3:a:apache:http_server:1.3.17::win32::::: cpe:2.3:a:apache:http_server:1.3.16:::::::* cpe:2.3:a:apache:http_server:1.3.16::win32::::: cpe:2.3:a:apache:http_server:1.3.15:::::::* cpe:2.3:a:apache:http_server:1.3.15::win32::::: cpe:2.3:a:apache:http_server:1.3.14:::::::* cpe:2.3:a:apache:http_server:1.3.14::win32::::: cpe:2.3:a:apache:http_server:1.3.14::mac_os::::: cpe:2.3:a:apache:http_server:1.3.13:::::::* cpe:2.3:a:apache:http_server:1.3.13::win32::::: cpe:2.3:a:apache:http_server:1.3.12:::::::* cpe:2.3:a:apache:http_server:1.3.12::win32::::: cpe:2.3:a:apache:http_server:1.3.11:::::::* cpe:2.3:a:apache:http_server:1.3.11::win32::::: cpe:2.3:a:apache:http_server:1.3.10:::::::* cpe:2.3:a:apache:http_server:1.3.1.1:::::::* cpe:2.3:a:apache:http_server:1.3.1:::::::* cpe:2.3:a:apache:http_server:1.3.0:::::::* cpe:2.3:a:apache:http_server:1.3:::::::* cpe:2.3:a:apache:http_server:1.2.9:::::::* cpe:2.3:a:apache:http_server:1.2.6:::::::* cpe:2.3:a:apache:http_server:1.2.5:::::::* cpe:2.3:a:apache:http_server:1.2.4:::::::* cpe:2.3:a:apache:http_server:1.2.0:::::::* cpe:2.3:a:apache:http_server:1.15.17:::::::* cpe:2.3:a:apache:http_server:1.1.1:::::::* cpe:2.3:a:apache:http_server:1.1:::::::* cpe:2.3:a:apache:http_server:1.0.5:::::::* cpe:2.3:a:apache:http_server:1.0.3:::::::* cpe:2.3:a:apache:http_server:1.0.2:::::::* cpe:2.3:a:apache:http_server:1.0:::::::* cpe:2.3:a:apache:http_server:0.8.14:::::::* cpe:2.3:a:apache:http_server:0.8.11:::::::* cpe:2.3:a:apache:http_server:::::::: cpe:2.3:a:apache:http_server:::win32:::::* cpe:2.3:a:apache:http_server:-:::::::*	179
Application	f5 Nginx cpe:2.3:a:f5:nginx:0.8.9:::::::* cpe:2.3:a:f5:nginx:0.8.8:::::::* cpe:2.3:a:f5:nginx:0.8.7:::::::* cpe:2.3:a:f5:nginx:0.8.6:::::::* cpe:2.3:a:f5:nginx:0.8.5:::::::* cpe:2.3:a:f5:nginx:0.8.4:::::::* cpe:2.3:a:f5:nginx:0.8.3:::::::* cpe:2.3:a:f5:nginx:0.8.22:::::::* cpe:2.3:a:f5:nginx:0.8.21:::::::* cpe:2.3:a:f5:nginx:0.8.20:::::::* cpe:2.3:a:f5:nginx:0.8.2:::::::* cpe:2.3:a:f5:nginx:0.8.19:::::::* cpe:2.3:a:f5:nginx:0.8.18:::::::* cpe:2.3:a:f5:nginx:0.8.17:::::::* cpe:2.3:a:f5:nginx:0.8.16:::::::* cpe:2.3:a:f5:nginx:0.8.15:::::::* cpe:2.3:a:f5:nginx:0.8.14:::::::* cpe:2.3:a:f5:nginx:0.8.13:::::::* cpe:2.3:a:f5:nginx:0.8.12:::::::* cpe:2.3:a:f5:nginx:0.8.11:::::::* cpe:2.3:a:f5:nginx:0.8.10:::::::* cpe:2.3:a:f5:nginx:0.8.1:::::::* cpe:2.3:a:f5:nginx:0.8.0:::::::* cpe:2.3:a:f5:nginx:0.7.9:::::::* cpe:2.3:a:f5:nginx:0.7.8:::::::* cpe:2.3:a:f5:nginx:0.7.7:::::::* cpe:2.3:a:f5:nginx:0.7.69:::::::* cpe:2.3:a:f5:nginx:0.7.68:::::::* cpe:2.3:a:f5:nginx:0.7.67:::::::* cpe:2.3:a:f5:nginx:0.7.66:::::::* cpe:2.3:a:f5:nginx:0.7.65:::::::* cpe:2.3:a:f5:nginx:0.7.64:::::::* cpe:2.3:a:f5:nginx:0.7.63:::::::* cpe:2.3:a:f5:nginx:0.7.62:::::::* cpe:2.3:a:f5:nginx:0.7.61:::::::* cpe:2.3:a:f5:nginx:0.7.60:::::::* cpe:2.3:a:f5:nginx:0.7.6:::::::* cpe:2.3:a:f5:nginx:0.7.59:::::::* cpe:2.3:a:f5:nginx:0.7.58:::::::* cpe:2.3:a:f5:nginx:0.7.57:::::::* cpe:2.3:a:f5:nginx:0.7.56:::::::* cpe:2.3:a:f5:nginx:0.7.55:::::::* cpe:2.3:a:f5:nginx:0.7.54:::::::* cpe:2.3:a:f5:nginx:0.7.53:::::::* cpe:2.3:a:f5:nginx:0.7.52:::::::* cpe:2.3:a:f5:nginx:0.7.51:::::::* cpe:2.3:a:f5:nginx:0.7.50:::::::* cpe:2.3:a:f5:nginx:0.7.5:::::::* cpe:2.3:a:f5:nginx:0.7.49:::::::* cpe:2.3:a:f5:nginx:0.7.48:::::::* cpe:2.3:a:f5:nginx:0.7.47:::::::* cpe:2.3:a:f5:nginx:0.7.46:::::::* cpe:2.3:a:f5:nginx:0.7.45:::::::* cpe:2.3:a:f5:nginx:0.7.44:::::::* cpe:2.3:a:f5:nginx:0.7.43:::::::* cpe:2.3:a:f5:nginx:0.7.42:::::::* cpe:2.3:a:f5:nginx:0.7.41:::::::* cpe:2.3:a:f5:nginx:0.7.40:::::::* cpe:2.3:a:f5:nginx:0.7.4:::::::* cpe:2.3:a:f5:nginx:0.7.39:::::::* cpe:2.3:a:f5:nginx:0.7.38:::::::* cpe:2.3:a:f5:nginx:0.7.37:::::::* cpe:2.3:a:f5:nginx:0.7.36:::::::* cpe:2.3:a:f5:nginx:0.7.35:::::::* cpe:2.3:a:f5:nginx:0.7.34:::::::* cpe:2.3:a:f5:nginx:0.7.33:::::::* cpe:2.3:a:f5:nginx:0.7.32:::::::* cpe:2.3:a:f5:nginx:0.7.31:::::::* cpe:2.3:a:f5:nginx:0.7.30:::::::* cpe:2.3:a:f5:nginx:0.7.3:::::::* cpe:2.3:a:f5:nginx:0.7.29:::::::* cpe:2.3:a:f5:nginx:0.7.28:::::::* cpe:2.3:a:f5:nginx:0.7.27:::::::* cpe:2.3:a:f5:nginx:0.7.26:::::::* cpe:2.3:a:f5:nginx:0.7.25:::::::* cpe:2.3:a:f5:nginx:0.7.24:::::::* cpe:2.3:a:f5:nginx:0.7.23:::::::* cpe:2.3:a:f5:nginx:0.7.22:::::::* cpe:2.3:a:f5:nginx:0.7.21:::::::* cpe:2.3:a:f5:nginx:0.7.20:::::::* cpe:2.3:a:f5:nginx:0.7.2:::::::* cpe:2.3:a:f5:nginx:0.7.19:::::::* cpe:2.3:a:f5:nginx:0.7.18:::::::* cpe:2.3:a:f5:nginx:0.7.17:::::::* cpe:2.3:a:f5:nginx:0.7.16:::::::* cpe:2.3:a:f5:nginx:0.7.15:::::::* cpe:2.3:a:f5:nginx:0.7.14:::::::* cpe:2.3:a:f5:nginx:0.7.13:::::::* cpe:2.3:a:f5:nginx:0.7.12:::::::* cpe:2.3:a:f5:nginx:0.7.11:::::::* cpe:2.3:a:f5:nginx:0.7.10:::::::* cpe:2.3:a:f5:nginx:0.7.1:::::::* cpe:2.3:a:f5:nginx:0.7.0:::::::* cpe:2.3:a:f5:nginx:0.6.9:::::::* cpe:2.3:a:f5:nginx:0.6.8:::::::* cpe:2.3:a:f5:nginx:0.6.7:::::::* cpe:2.3:a:f5:nginx:0.6.6:::::::* cpe:2.3:a:f5:nginx:0.6.5:::::::* cpe:2.3:a:f5:nginx:0.6.4:::::::* cpe:2.3:a:f5:nginx:0.6.39:::::::* cpe:2.3:a:f5:nginx:0.6.38:::::::* cpe:2.3:a:f5:nginx:0.6.37:::::::* cpe:2.3:a:f5:nginx:0.6.36:::::::* cpe:2.3:a:f5:nginx:0.6.35:::::::* cpe:2.3:a:f5:nginx:0.6.34:::::::* cpe:2.3:a:f5:nginx:0.6.33:::::::* cpe:2.3:a:f5:nginx:0.6.32:::::::* cpe:2.3:a:f5:nginx:0.6.31:::::::* cpe:2.3:a:f5:nginx:0.6.30:::::::* cpe:2.3:a:f5:nginx:0.6.3:::::::* cpe:2.3:a:f5:nginx:0.6.29:::::::* cpe:2.3:a:f5:nginx:0.6.28:::::::* cpe:2.3:a:f5:nginx:0.6.27:::::::* cpe:2.3:a:f5:nginx:0.6.26:::::::* cpe:2.3:a:f5:nginx:0.6.25:::::::* cpe:2.3:a:f5:nginx:0.6.24:::::::* cpe:2.3:a:f5:nginx:0.6.23:::::::* cpe:2.3:a:f5:nginx:0.6.22:::::::* cpe:2.3:a:f5:nginx:0.6.21:::::::* cpe:2.3:a:f5:nginx:0.6.20:::::::* cpe:2.3:a:f5:nginx:0.6.2:::::::* cpe:2.3:a:f5:nginx:0.6.19:::::::* cpe:2.3:a:f5:nginx:0.6.18:::::::* cpe:2.3:a:f5:nginx:0.6.17:::::::* cpe:2.3:a:f5:nginx:0.6.16:::::::* cpe:2.3:a:f5:nginx:0.6.15:::::::* cpe:2.3:a:f5:nginx:0.6.14:::::::* cpe:2.3:a:f5:nginx:0.6.13:::::::* cpe:2.3:a:f5:nginx:0.6.12:::::::* cpe:2.3:a:f5:nginx:0.6.11:::::::* cpe:2.3:a:f5:nginx:0.6.10:::::::* cpe:2.3:a:f5:nginx:0.6.1:::::::* cpe:2.3:a:f5:nginx:0.6.0:::::::* cpe:2.3:a:f5:nginx:0.5.9:::::::* cpe:2.3:a:f5:nginx:0.5.8:::::::* cpe:2.3:a:f5:nginx:0.5.7:::::::* cpe:2.3:a:f5:nginx:0.5.6:::::::* cpe:2.3:a:f5:nginx:0.5.5:::::::* cpe:2.3:a:f5:nginx:0.5.4:::::::* cpe:2.3:a:f5:nginx:0.5.38:::::::* cpe:2.3:a:f5:nginx:0.5.37:::::::* cpe:2.3:a:f5:nginx:0.5.36:::::::* cpe:2.3:a:f5:nginx:0.5.35:::::::* cpe:2.3:a:f5:nginx:0.5.34:::::::* cpe:2.3:a:f5:nginx:0.5.33:::::::* cpe:2.3:a:f5:nginx:0.5.32:::::::* cpe:2.3:a:f5:nginx:0.5.31:::::::* cpe:2.3:a:f5:nginx:0.5.30:::::::* cpe:2.3:a:f5:nginx:0.5.3:::::::* cpe:2.3:a:f5:nginx:0.5.29:::::::* cpe:2.3:a:f5:nginx:0.5.28:::::::* cpe:2.3:a:f5:nginx:0.5.27:::::::* cpe:2.3:a:f5:nginx:0.5.26:::::::* cpe:2.3:a:f5:nginx:0.5.25:::::::* cpe:2.3:a:f5:nginx:0.5.24:::::::* cpe:2.3:a:f5:nginx:0.5.23:::::::* cpe:2.3:a:f5:nginx:0.5.22:::::::* cpe:2.3:a:f5:nginx:0.5.21:::::::* cpe:2.3:a:f5:nginx:0.5.20:::::::* cpe:2.3:a:f5:nginx:0.5.2:::::::* cpe:2.3:a:f5:nginx:0.5.19:::::::* cpe:2.3:a:f5:nginx:0.5.18:::::::* cpe:2.3:a:f5:nginx:0.5.17:::::::* cpe:2.3:a:f5:nginx:0.5.16:::::::* cpe:2.3:a:f5:nginx:0.5.15:::::::* cpe:2.3:a:f5:nginx:0.5.14:::::::* cpe:2.3:a:f5:nginx:0.5.13:::::::* cpe:2.3:a:f5:nginx:0.5.12:::::::* cpe:2.3:a:f5:nginx:0.5.11:::::::* cpe:2.3:a:f5:nginx:0.5.10:::::::* cpe:2.3:a:f5:nginx:0.5.1:::::::* cpe:2.3:a:f5:nginx:0.5.0:::::::* cpe:2.3:a:f5:nginx:0.4.9:::::::* cpe:2.3:a:f5:nginx:0.4.8:::::::* cpe:2.3:a:f5:nginx:0.4.7:::::::* cpe:2.3:a:f5:nginx:0.4.6:::::::* cpe:2.3:a:f5:nginx:0.4.5:::::::* cpe:2.3:a:f5:nginx:0.4.4:::::::* cpe:2.3:a:f5:nginx:0.4.3:::::::* cpe:2.3:a:f5:nginx:0.4.2:::::::* cpe:2.3:a:f5:nginx:0.4.14:::::::* cpe:2.3:a:f5:nginx:0.4.13:::::::* cpe:2.3:a:f5:nginx:0.4.12:::::::* cpe:2.3:a:f5:nginx:0.4.11:::::::* cpe:2.3:a:f5:nginx:0.4.10:::::::* cpe:2.3:a:f5:nginx:0.4.1:::::::* cpe:2.3:a:f5:nginx:0.4.0:::::::* cpe:2.3:a:f5:nginx:0.3.9:::::::* cpe:2.3:a:f5:nginx:0.3.8:::::::* cpe:2.3:a:f5:nginx:0.3.7:::::::* cpe:2.3:a:f5:nginx:0.3.61:::::::* cpe:2.3:a:f5:nginx:0.3.60:::::::* cpe:2.3:a:f5:nginx:0.3.6:::::::* cpe:2.3:a:f5:nginx:0.3.59:::::::* cpe:2.3:a:f5:nginx:0.3.58:::::::* cpe:2.3:a:f5:nginx:0.3.57:::::::* cpe:2.3:a:f5:nginx:0.3.56:::::::* cpe:2.3:a:f5:nginx:0.3.55:::::::* cpe:2.3:a:f5:nginx:0.3.54:::::::* cpe:2.3:a:f5:nginx:0.3.53:::::::* cpe:2.3:a:f5:nginx:0.3.52:::::::* cpe:2.3:a:f5:nginx:0.3.51:::::::* cpe:2.3:a:f5:nginx:0.3.50:::::::* cpe:2.3:a:f5:nginx:0.3.5:::::::* cpe:2.3:a:f5:nginx:0.3.49:::::::* cpe:2.3:a:f5:nginx:0.3.48:::::::* cpe:2.3:a:f5:nginx:0.3.47:::::::* cpe:2.3:a:f5:nginx:0.3.46:::::::* cpe:2.3:a:f5:nginx:0.3.45:::::::* cpe:2.3:a:f5:nginx:0.3.44:::::::* cpe:2.3:a:f5:nginx:0.3.43:::::::* cpe:2.3:a:f5:nginx:0.3.42:::::::* cpe:2.3:a:f5:nginx:0.3.41:::::::* cpe:2.3:a:f5:nginx:0.3.40:::::::* cpe:2.3:a:f5:nginx:0.3.4:::::::* cpe:2.3:a:f5:nginx:0.3.39:::::::* cpe:2.3:a:f5:nginx:0.3.38:::::::* cpe:2.3:a:f5:nginx:0.3.37:::::::* cpe:2.3:a:f5:nginx:0.3.36:::::::* cpe:2.3:a:f5:nginx:0.3.35:::::::* cpe:2.3:a:f5:nginx:0.3.34:::::::* cpe:2.3:a:f5:nginx:0.3.33:::::::* cpe:2.3:a:f5:nginx:0.3.32:::::::* cpe:2.3:a:f5:nginx:0.3.31:::::::* cpe:2.3:a:f5:nginx:0.3.30:::::::* cpe:2.3:a:f5:nginx:0.3.3:::::::* cpe:2.3:a:f5:nginx:0.3.29:::::::* cpe:2.3:a:f5:nginx:0.3.28:::::::* cpe:2.3:a:f5:nginx:0.3.27:::::::* cpe:2.3:a:f5:nginx:0.3.26:::::::* cpe:2.3:a:f5:nginx:0.3.25:::::::* cpe:2.3:a:f5:nginx:0.3.24:::::::* cpe:2.3:a:f5:nginx:0.3.23:::::::* cpe:2.3:a:f5:nginx:0.3.22:::::::* cpe:2.3:a:f5:nginx:0.3.21:::::::* cpe:2.3:a:f5:nginx:0.3.20:::::::* cpe:2.3:a:f5:nginx:0.3.2:::::::* cpe:2.3:a:f5:nginx:0.3.19:::::::* cpe:2.3:a:f5:nginx:0.3.18:::::::* cpe:2.3:a:f5:nginx:0.3.17:::::::* cpe:2.3:a:f5:nginx:0.3.16:::::::* cpe:2.3:a:f5:nginx:0.3.15:::::::* cpe:2.3:a:f5:nginx:0.3.14:::::::* cpe:2.3:a:f5:nginx:0.3.13:::::::* cpe:2.3:a:f5:nginx:0.3.12:::::::* cpe:2.3:a:f5:nginx:0.3.11:::::::* cpe:2.3:a:f5:nginx:0.3.10:::::::* cpe:2.3:a:f5:nginx:0.3.1:::::::* cpe:2.3:a:f5:nginx:0.3.0:::::::* cpe:2.3:a:f5:nginx:0.2.6:::::::* cpe:2.3:a:f5:nginx:0.2.5:::::::* cpe:2.3:a:f5:nginx:0.2.4:::::::* cpe:2.3:a:f5:nginx:0.2.3:::::::* cpe:2.3:a:f5:nginx:0.2.2:::::::* cpe:2.3:a:f5:nginx:0.2.1:::::::* cpe:2.3:a:f5:nginx:0.2.0:::::::* cpe:2.3:a:f5:nginx:0.1.9:::::::* cpe:2.3:a:f5:nginx:0.1.8:::::::* cpe:2.3:a:f5:nginx:0.1.7:::::::* cpe:2.3:a:f5:nginx:0.1.6:::::::* cpe:2.3:a:f5:nginx:0.1.5:::::::* cpe:2.3:a:f5:nginx:0.1.45:::::::* cpe:2.3:a:f5:nginx:0.1.44:::::::* cpe:2.3:a:f5:nginx:0.1.43:::::::* cpe:2.3:a:f5:nginx:0.1.42:::::::* cpe:2.3:a:f5:nginx:0.1.41:::::::* cpe:2.3:a:f5:nginx:0.1.40:::::::* cpe:2.3:a:f5:nginx:0.1.4:::::::* cpe:2.3:a:f5:nginx:0.1.39:::::::* cpe:2.3:a:f5:nginx:0.1.38:::::::* cpe:2.3:a:f5:nginx:0.1.37:::::::* cpe:2.3:a:f5:nginx:0.1.36:::::::* cpe:2.3:a:f5:nginx:0.1.35:::::::* cpe:2.3:a:f5:nginx:0.1.34:::::::* cpe:2.3:a:f5:nginx:0.1.33:::::::* cpe:2.3:a:f5:nginx:0.1.32:::::::* cpe:2.3:a:f5:nginx:0.1.31:::::::* cpe:2.3:a:f5:nginx:0.1.30:::::::* cpe:2.3:a:f5:nginx:0.1.3:::::::* cpe:2.3:a:f5:nginx:0.1.29:::::::* cpe:2.3:a:f5:nginx:0.1.28:::::::* cpe:2.3:a:f5:nginx:0.1.27:::::::* cpe:2.3:a:f5:nginx:0.1.26:::::::* cpe:2.3:a:f5:nginx:0.1.25:::::::* cpe:2.3:a:f5:nginx:0.1.24:::::::* cpe:2.3:a:f5:nginx:0.1.23:::::::* cpe:2.3:a:f5:nginx:0.1.22:::::::* cpe:2.3:a:f5:nginx:0.1.21:::::::* cpe:2.3:a:f5:nginx:0.1.20:::::::* cpe:2.3:a:f5:nginx:0.1.2:::::::* cpe:2.3:a:f5:nginx:0.1.19:::::::* cpe:2.3:a:f5:nginx:0.1.18:::::::* cpe:2.3:a:f5:nginx:0.1.17:::::::* cpe:2.3:a:f5:nginx:0.1.16:::::::* cpe:2.3:a:f5:nginx:0.1.15:::::::* cpe:2.3:a:f5:nginx:0.1.14:::::::* cpe:2.3:a:f5:nginx:0.1.13:::::::* cpe:2.3:a:f5:nginx:0.1.12:::::::* cpe:2.3:a:f5:nginx:0.1.11:::::::* cpe:2.3:a:f5:nginx:0.1.10:::::::* cpe:2.3:a:f5:nginx:0.1.1:::::::* cpe:2.3:a:f5:nginx:0.1.0:::::::* cpe:2.3:a:f5:nginx:r2::::open_source_subscription::: cpe:2.3:a:f5:nginx:r1::::open_source_subscription::: cpe:2.3:a:f5:nginx::::::::	305
Application	Gnu Gnutls cpe:2.3:a:gnu:gnutls:2.8.5:::::::* cpe:2.3:a:gnu:gnutls:2.8.4:::::::* cpe:2.3:a:gnu:gnutls:2.8.3:::::::* cpe:2.3:a:gnu:gnutls:2.8.2:::::::* cpe:2.3:a:gnu:gnutls:2.8.1:::::::* cpe:2.3:a:gnu:gnutls:2.8.0:::::::* cpe:2.3:a:gnu:gnutls:2.7.4:::::::* cpe:2.3:a:gnu:gnutls:2.7.3:::::::* cpe:2.3:a:gnu:gnutls:2.7.2:::::::* cpe:2.3:a:gnu:gnutls:2.7.1:::::::* cpe:2.3:a:gnu:gnutls:2.7.0:::::::* cpe:2.3:a:gnu:gnutls:2.6.6:::::::* cpe:2.3:a:gnu:gnutls:2.6.5:::::::* cpe:2.3:a:gnu:gnutls:2.6.4:::::::* cpe:2.3:a:gnu:gnutls:2.6.3:::::::* cpe:2.3:a:gnu:gnutls:2.6.2:::::::* cpe:2.3:a:gnu:gnutls:2.6.1:::::::* cpe:2.3:a:gnu:gnutls:2.6.0:::::::* cpe:2.3:a:gnu:gnutls:2.5.0:::::::* cpe:2.3:a:gnu:gnutls:2.4.3:::::::* cpe:2.3:a:gnu:gnutls:2.4.2:::::::* cpe:2.3:a:gnu:gnutls:2.4.1:::::::* cpe:2.3:a:gnu:gnutls:2.4.0:::::::* cpe:2.3:a:gnu:gnutls:2.3.9:::::::* cpe:2.3:a:gnu:gnutls:2.3.8:::::::* cpe:2.3:a:gnu:gnutls:2.3.7:::::::* cpe:2.3:a:gnu:gnutls:2.3.6:::::::* cpe:2.3:a:gnu:gnutls:2.3.5:::::::* cpe:2.3:a:gnu:gnutls:2.3.4:::::::* cpe:2.3:a:gnu:gnutls:2.3.3:::::::* cpe:2.3:a:gnu:gnutls:2.3.2:::::::* cpe:2.3:a:gnu:gnutls:2.3.11:::::::* cpe:2.3:a:gnu:gnutls:2.3.10:::::::* cpe:2.3:a:gnu:gnutls:2.3.1:::::::* cpe:2.3:a:gnu:gnutls:2.3.0:::::::* cpe:2.3:a:gnu:gnutls:2.2.5:::::::* cpe:2.3:a:gnu:gnutls:2.2.4:::::::* cpe:2.3:a:gnu:gnutls:2.2.3:::::::* cpe:2.3:a:gnu:gnutls:2.2.2:::::::* cpe:2.3:a:gnu:gnutls:2.2.1:::::::* cpe:2.3:a:gnu:gnutls:2.2.0:::::::* cpe:2.3:a:gnu:gnutls:2.1.8:::::::* cpe:2.3:a:gnu:gnutls:2.1.7:::::::* cpe:2.3:a:gnu:gnutls:2.1.6:::::::* cpe:2.3:a:gnu:gnutls:2.1.5:::::::* cpe:2.3:a:gnu:gnutls:2.1.4:::::::* cpe:2.3:a:gnu:gnutls:2.1.3:::::::* cpe:2.3:a:gnu:gnutls:2.1.2:::::::* cpe:2.3:a:gnu:gnutls:2.1.1:::::::* cpe:2.3:a:gnu:gnutls:2.1.0:::::::* cpe:2.3:a:gnu:gnutls:2.0.4:::::::* cpe:2.3:a:gnu:gnutls:2.0.3:::::::* cpe:2.3:a:gnu:gnutls:2.0.2:::::::* cpe:2.3:a:gnu:gnutls:2.0.1:::::::* cpe:2.3:a:gnu:gnutls:2.0.0:::::::* cpe:2.3:a:gnu:gnutls:1.7.9:::::::* cpe:2.3:a:gnu:gnutls:1.7.8:::::::* cpe:2.3:a:gnu:gnutls:1.7.7:::::::* cpe:2.3:a:gnu:gnutls:1.7.6:::::::* cpe:2.3:a:gnu:gnutls:1.7.5:::::::* cpe:2.3:a:gnu:gnutls:1.7.4:::::::* cpe:2.3:a:gnu:gnutls:1.7.3:::::::* cpe:2.3:a:gnu:gnutls:1.7.2:::::::* cpe:2.3:a:gnu:gnutls:1.7.19:::::::* cpe:2.3:a:gnu:gnutls:1.7.18:::::::* cpe:2.3:a:gnu:gnutls:1.7.17:::::::* cpe:2.3:a:gnu:gnutls:1.7.16:::::::* cpe:2.3:a:gnu:gnutls:1.7.15:::::::* cpe:2.3:a:gnu:gnutls:1.7.14:::::::* cpe:2.3:a:gnu:gnutls:1.7.13:::::::* cpe:2.3:a:gnu:gnutls:1.7.12:::::::* cpe:2.3:a:gnu:gnutls:1.7.11:::::::* cpe:2.3:a:gnu:gnutls:1.7.10:::::::* cpe:2.3:a:gnu:gnutls:1.7.1:::::::* cpe:2.3:a:gnu:gnutls:1.7.0:::::::* cpe:2.3:a:gnu:gnutls:1.6.3:::::::* cpe:2.3:a:gnu:gnutls:1.6.2:::::::* cpe:2.3:a:gnu:gnutls:1.6.1:::::::* cpe:2.3:a:gnu:gnutls:1.6.0:::::::* cpe:2.3:a:gnu:gnutls:1.5.5:::::::* cpe:2.3:a:gnu:gnutls:1.5.4:::::::* cpe:2.3:a:gnu:gnutls:1.5.3:::::::* cpe:2.3:a:gnu:gnutls:1.5.2:::::::* cpe:2.3:a:gnu:gnutls:1.5.1:::::::* cpe:2.3:a:gnu:gnutls:1.5.0:::::::* cpe:2.3:a:gnu:gnutls:1.4.5:::::::* cpe:2.3:a:gnu:gnutls:1.4.4:::::::* cpe:2.3:a:gnu:gnutls:1.4.3:::::::* cpe:2.3:a:gnu:gnutls:1.4.2:::::::* cpe:2.3:a:gnu:gnutls:1.4.1:::::::* cpe:2.3:a:gnu:gnutls:1.4.0:::::::* cpe:2.3:a:gnu:gnutls:1.3.5:::::::* cpe:2.3:a:gnu:gnutls:1.3.4:::::::* cpe:2.3:a:gnu:gnutls:1.3.3:::::::* cpe:2.3:a:gnu:gnutls:1.3.2:::::::* cpe:2.3:a:gnu:gnutls:1.3.1:::::::* cpe:2.3:a:gnu:gnutls:1.3.0:::::::* cpe:2.3:a:gnu:gnutls:1.2.9:::::::* cpe:2.3:a:gnu:gnutls:1.2.8.1a1:::::::* cpe:2.3:a:gnu:gnutls:1.2.8:::::::* cpe:2.3:a:gnu:gnutls:1.2.7:::::::* cpe:2.3:a:gnu:gnutls:1.2.6:::::::* cpe:2.3:a:gnu:gnutls:1.2.5:::::::* cpe:2.3:a:gnu:gnutls:1.2.4:::::::* cpe:2.3:a:gnu:gnutls:1.2.3:::::::* cpe:2.3:a:gnu:gnutls:1.2.2:::::::* cpe:2.3:a:gnu:gnutls:1.2.11:::::::* cpe:2.3:a:gnu:gnutls:1.2.10:::::::* cpe:2.3:a:gnu:gnutls:1.2.1:::::::* cpe:2.3:a:gnu:gnutls:1.2.0:::::::* cpe:2.3:a:gnu:gnutls:1.1.23:::::::* cpe:2.3:a:gnu:gnutls:1.1.22:::::::* cpe:2.3:a:gnu:gnutls:1.1.21:::::::* cpe:2.3:a:gnu:gnutls:1.1.20:::::::* cpe:2.3:a:gnu:gnutls:1.1.19:::::::* cpe:2.3:a:gnu:gnutls:1.1.18:::::::* cpe:2.3:a:gnu:gnutls:1.1.17:::::::* cpe:2.3:a:gnu:gnutls:1.1.16:::::::* cpe:2.3:a:gnu:gnutls:1.1.15:::::::* cpe:2.3:a:gnu:gnutls:1.1.14:::::::* cpe:2.3:a:gnu:gnutls:1.1.13:::::::* cpe:2.3:a:gnu:gnutls:1.0.25:::::::* cpe:2.3:a:gnu:gnutls:1.0.24:::::::* cpe:2.3:a:gnu:gnutls:1.0.23:::::::* cpe:2.3:a:gnu:gnutls:1.0.22:::::::* cpe:2.3:a:gnu:gnutls:1.0.21:::::::* cpe:2.3:a:gnu:gnutls:1.0.20:::::::* cpe:2.3:a:gnu:gnutls:1.0.19:::::::* cpe:2.3:a:gnu:gnutls:1.0.18:::::::* cpe:2.3:a:gnu:gnutls:1.0.17:::::::* cpe:2.3:a:gnu:gnutls:1.0.16:::::::* cpe:2.3:a:gnu:gnutls::::::::	132
Application	Mozilla Network Security Services cpe:2.3:a:mozilla:network_security_services:3.9.5:::::::* cpe:2.3:a:mozilla:network_security_services:3.9.4:::::::* cpe:2.3:a:mozilla:network_security_services:3.9.3:::::::* cpe:2.3:a:mozilla:network_security_services:3.9.2:::::::* cpe:2.3:a:mozilla:network_security_services:3.9.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.9:::::::* cpe:2.3:a:mozilla:network_security_services:3.8:::::::* cpe:2.3:a:mozilla:network_security_services:3.7.7:::::::* cpe:2.3:a:mozilla:network_security_services:3.7.5:::::::* cpe:2.3:a:mozilla:network_security_services:3.7.3:::::::* cpe:2.3:a:mozilla:network_security_services:3.7.2:::::::* cpe:2.3:a:mozilla:network_security_services:3.7.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.7:::::::* cpe:2.3:a:mozilla:network_security_services:3.6.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.6:::::::* cpe:2.3:a:mozilla:network_security_services:3.5:::::::* cpe:2.3:a:mozilla:network_security_services:3.4.3:::::::* cpe:2.3:a:mozilla:network_security_services:3.4.2:::::::* cpe:2.3:a:mozilla:network_security_services:3.4.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.4:::::::* cpe:2.3:a:mozilla:network_security_services:3.3.2:::::::* cpe:2.3:a:mozilla:network_security_services:3.3.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.3:::::::* cpe:2.3:a:mozilla:network_security_services:3.2.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.2:::::::* cpe:2.3:a:mozilla:network_security_services:3.12.2:::::::* cpe:2.3:a:mozilla:network_security_services:3.12.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.12:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.9:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.8:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.7:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.6:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.5:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.4:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.3:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.2:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.10:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.11:::::::* cpe:2.3:a:mozilla:network_security_services:3.10.2:::::::* cpe:2.3:a:mozilla:network_security_services:3.10.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.10:::::::* cpe:2.3:a:mozilla:network_security_services:3.1.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.1:::::::* cpe:2.3:a:mozilla:network_security_services:::::::: cpe:2.3:a:mozilla:network_security_services:-:::::::*	46
Application	Mozilla Nss cpe:2.3:a:mozilla:nss:3.9.5:::::::* cpe:2.3:a:mozilla:nss:3.9:::::::* cpe:2.3:a:mozilla:nss:3.8:::::::* cpe:2.3:a:mozilla:nss:3.7.7:::::::* cpe:2.3:a:mozilla:nss:3.7.5:::::::* cpe:2.3:a:mozilla:nss:3.7.3:::::::* cpe:2.3:a:mozilla:nss:3.7.2:::::::* cpe:2.3:a:mozilla:nss:3.7.1:::::::* cpe:2.3:a:mozilla:nss:3.7:::::::* cpe:2.3:a:mozilla:nss:3.6.1:::::::* cpe:2.3:a:mozilla:nss:3.6:::::::* cpe:2.3:a:mozilla:nss:3.5:::::::* cpe:2.3:a:mozilla:nss:3.4.3:::::::* cpe:2.3:a:mozilla:nss:3.4.2:::::::* cpe:2.3:a:mozilla:nss:3.4.1:::::::* cpe:2.3:a:mozilla:nss:3.4:::::::* cpe:2.3:a:mozilla:nss:3.3.2:::::::* cpe:2.3:a:mozilla:nss:3.3.1:::::::* cpe:2.3:a:mozilla:nss:3.3:::::::* cpe:2.3:a:mozilla:nss:3.2.1:::::::* cpe:2.3:a:mozilla:nss:3.2:::::::* cpe:2.3:a:mozilla:nss:3.12.4:::::::* cpe:2.3:a:mozilla:nss:3.12.2:::::::* cpe:2.3:a:mozilla:nss:3.12.1:::::::* cpe:2.3:a:mozilla:nss:3.12:::::::* cpe:2.3:a:mozilla:nss:3.11.8:::::::* cpe:2.3:a:mozilla:nss:3.11.7:::::::* cpe:2.3:a:mozilla:nss:3.11.4:::::::* cpe:2.3:a:mozilla:nss:3.11.2:::::::* cpe:2.3:a:mozilla:nss:3.10:::::::* cpe:2.3:a:mozilla:nss:3.0:::::::* cpe:2.3:a:mozilla:nss::::::::	32
Application	Openssl cpe:2.3:a:openssl:openssl:1.0::openvms::::: cpe:2.3:a:openssl:openssl:0.9.8zg:::::::* cpe:2.3:a:openssl:openssl:0.9.8zf:::::::* cpe:2.3:a:openssl:openssl:0.9.8ze:::::::* cpe:2.3:a:openssl:openssl:0.9.8zc:::::::* cpe:2.3:a:openssl:openssl:0.9.8zb:::::::* cpe:2.3:a:openssl:openssl:0.9.8za:::::::* cpe:2.3:a:openssl:openssl:0.9.8z:::::::* cpe:2.3:a:openssl:openssl:0.9.8y:::::::* cpe:2.3:a:openssl:openssl:0.9.8x:::::::* cpe:2.3:a:openssl:openssl:0.9.8w:::::::* cpe:2.3:a:openssl:openssl:0.9.8v:::::::* cpe:2.3:a:openssl:openssl:0.9.8u:::::::* cpe:2.3:a:openssl:openssl:0.9.8t:::::::* cpe:2.3:a:openssl:openssl:0.9.8s:::::::* cpe:2.3:a:openssl:openssl:0.9.8r:::::::* cpe:2.3:a:openssl:openssl:0.9.8q:::::::* cpe:2.3:a:openssl:openssl:0.9.8o:::::::* cpe:2.3:a:openssl:openssl:0.9.8n:::::::* cpe:2.3:a:openssl:openssl:0.9.8m:-:::::: cpe:2.3:a:openssl:openssl:0.9.8m:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.8l:::::::* cpe:2.3:a:openssl:openssl:0.9.8k:::::::* cpe:2.3:a:openssl:openssl:0.9.8j:::::::* cpe:2.3:a:openssl:openssl:0.9.8i:::::::* cpe:2.3:a:openssl:openssl:0.9.8h:::::::* cpe:2.3:a:openssl:openssl:0.9.8g:::::::* cpe:2.3:a:openssl:openssl:0.9.8g::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8g::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8f:::::::* cpe:2.3:a:openssl:openssl:0.9.8f::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8f::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8f::::::x86: cpe:2.3:a:openssl:openssl:0.9.8e:::::::* cpe:2.3:a:openssl:openssl:0.9.8e::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8e::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8e::::::x86: cpe:2.3:a:openssl:openssl:0.9.8d:::::::* cpe:2.3:a:openssl:openssl:0.9.8d::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8d::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8d::::::x86: cpe:2.3:a:openssl:openssl:0.9.8c:::::::* cpe:2.3:a:openssl:openssl:0.9.8c::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8c::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8c::::::x86: cpe:2.3:a:openssl:openssl:0.9.7m:::::::* cpe:2.3:a:openssl:openssl:0.9.7m::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7m::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7m::::::x86: cpe:2.3:a:openssl:openssl:0.9.7l:::::::* cpe:2.3:a:openssl:openssl:0.9.7l::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7l::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7l::::::x86: cpe:2.3:a:openssl:openssl:0.9.7k:::::::* cpe:2.3:a:openssl:openssl:0.9.7k::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7k::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7k::::::x86: cpe:2.3:a:openssl:openssl:0.9.7j:::::::* cpe:2.3:a:openssl:openssl:0.9.7j::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7j::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7j::::::x86: cpe:2.3:a:openssl:openssl:0.9.7i:::::::* cpe:2.3:a:openssl:openssl:0.9.7i::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7i::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7i::::::x86: cpe:2.3:a:openssl:openssl:0.9.7h:::::::* cpe:2.3:a:openssl:openssl:0.9.7h::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7h::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7h::::::x86: cpe:2.3:a:openssl:openssl:0.9.7g:::::::* cpe:2.3:a:openssl:openssl:0.9.7g::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7g::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7g::::::x86: cpe:2.3:a:openssl:openssl:0.9.7f:::::::* cpe:2.3:a:openssl:openssl:0.9.7f::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7f::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7f::::::x86: cpe:2.3:a:openssl:openssl:0.9.7e:::::::* cpe:2.3:a:openssl:openssl:0.9.7e::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7e::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7e::::::x86: cpe:2.3:a:openssl:openssl:0.9.7d:::::::* cpe:2.3:a:openssl:openssl:0.9.7d::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7d::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7d::::::x86: cpe:2.3:a:openssl:openssl:0.9.7c:::::::* cpe:2.3:a:openssl:openssl:0.9.7c::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7c::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7c::::::x86: cpe:2.3:a:openssl:openssl:0.9.7b:::::::* cpe:2.3:a:openssl:openssl:0.9.7b::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7b::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7b::::::x86: cpe:2.3:a:openssl:openssl:0.9.7a:::::::* cpe:2.3:a:openssl:openssl:0.9.7a::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7a::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7a::::::x86: cpe:2.3:a:openssl:openssl:0.9.7:beta3:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.7:-:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta5:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta6:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta4:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta2:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta4:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta1:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta5:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta3:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7:beta6:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta5:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta4:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta6:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta1:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta3:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta2:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7::::::x86: cpe:2.3:a:openssl:openssl:0.9.7:beta1:::::x86:* cpe:2.3:a:openssl:openssl:0.9.7:beta2:::::x86:* cpe:2.3:a:openssl:openssl:0.9.7:beta3:::::x86:* cpe:2.3:a:openssl:openssl:0.9.7:beta4:::::x86:* cpe:2.3:a:openssl:openssl:0.9.7:beta5:::::x86:* cpe:2.3:a:openssl:openssl:0.9.7:beta6:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6m:::::::* cpe:2.3:a:openssl:openssl:0.9.6m::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6m::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6m::::::x86: cpe:2.3:a:openssl:openssl:0.9.6l:::::::* cpe:2.3:a:openssl:openssl:0.9.6l::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6l::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6l::::::x86: cpe:2.3:a:openssl:openssl:0.9.6k:::::::* cpe:2.3:a:openssl:openssl:0.9.6k::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6k::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6k::::::x86: cpe:2.3:a:openssl:openssl:0.9.6j:::::::* cpe:2.3:a:openssl:openssl:0.9.6j::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6j::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6j::::::x86: cpe:2.3:a:openssl:openssl:0.9.6i:::::::* cpe:2.3:a:openssl:openssl:0.9.6i::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6i::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6i::::::x86: cpe:2.3:a:openssl:openssl:0.9.6h:::::::* cpe:2.3:a:openssl:openssl:0.9.6h:bogus:::::: cpe:2.3:a:openssl:openssl:0.9.6h::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6h::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6h::::::x86: cpe:2.3:a:openssl:openssl:0.9.6g:::::::* cpe:2.3:a:openssl:openssl:0.9.6g::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6g::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6g::::::x86: cpe:2.3:a:openssl:openssl:0.9.6f:::::::* cpe:2.3:a:openssl:openssl:0.9.6f::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6f::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6f::::::x86: cpe:2.3:a:openssl:openssl:0.9.6e:::::::* cpe:2.3:a:openssl:openssl:0.9.6e::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6e::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6e::::::x86: cpe:2.3:a:openssl:openssl:0.9.6d:-:::::: cpe:2.3:a:openssl:openssl:0.9.6d::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6d::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6d::::::x86: cpe:2.3:a:openssl:openssl:0.9.6c:::::::* cpe:2.3:a:openssl:openssl:0.9.6c::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6c::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6c::::::x86: cpe:2.3:a:openssl:openssl:0.9.6b:::::::* cpe:2.3:a:openssl:openssl:0.9.6b::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6b::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6b::::::x86: cpe:2.3:a:openssl:openssl:0.9.6a:-:::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta3:::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta2:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6a::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta3:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6a:beta1:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6a:beta1:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6a:beta2:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6a:beta3:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6a::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6a::::::x86: cpe:2.3:a:openssl:openssl:0.9.6a:beta1:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6a:beta2:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6a:beta3:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.6:-:::::: cpe:2.3:a:openssl:openssl:0.9.6:beta3:::::: cpe:2.3:a:openssl:openssl:0.9.6:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.6:beta2:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6:beta1:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6:beta3:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6:beta1:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6:beta3:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6:beta2:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6::::::x86: cpe:2.3:a:openssl:openssl:0.9.6:beta1:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6:beta2:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6:beta3:::::x86:* cpe:2.3:a:openssl:openssl:0.9.5a:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.5a:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.5a:-:::::: cpe:2.3:a:openssl:openssl:0.9.5a:beta2:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.5a::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.5a:beta1:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.5a::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.5a:beta1:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.5a:beta2:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.5a::::::x86: cpe:2.3:a:openssl:openssl:0.9.5a:beta1:::::x86:* cpe:2.3:a:openssl:openssl:0.9.5a:beta2:::::x86:* cpe:2.3:a:openssl:openssl:0.9.5:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.5:-:::::: cpe:2.3:a:openssl:openssl:0.9.5:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.5:beta2:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.5:beta1:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.5::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.5:beta1:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.5:beta2:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.5::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.5::::::x86: cpe:2.3:a:openssl:openssl:0.9.5:beta1:::::x86:* cpe:2.3:a:openssl:openssl:0.9.5:beta2:::::x86:* cpe:2.3:a:openssl:openssl:0.9.4:::::::* cpe:2.3:a:openssl:openssl:0.9.4::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.4::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.4::::::x86: cpe:2.3:a:openssl:openssl:0.9.3a:::::::* cpe:2.3:a:openssl:openssl:0.9.3a::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.3a::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.3a::::::x86: cpe:2.3:a:openssl:openssl:0.9.3:-:::::: cpe:2.3:a:openssl:openssl:0.9.3::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.3::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.3::::::x86: cpe:2.3:a:openssl:openssl:0.9.2b:::::::* cpe:2.3:a:openssl:openssl:0.9.2b::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.2b::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.2b::::::x86: cpe:2.3:a:openssl:openssl:0.9.1c:::::::* cpe:2.3:a:openssl:openssl:0.9.1c::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.1c::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.1c::::::x86: cpe:2.3:a:openssl:openssl:0.9.1b:::::::* cpe:2.3:a:openssl:openssl:0.9.0b:::::::* cpe:2.3:a:openssl:openssl:::::::: cpe:2.3:a:openssl:openssl:::openvms:::::* cpe:2.3:a:openssl:openssl:-:::::::*	255
Application	Oracle Jre cpe:2.3:a:oracle:jre:1.6.0:update18:::::: cpe:2.3:a:oracle:jre:1.5.0:update23:::::: cpe:2.3:a:oracle:jre:1.4.2_25:::::::*	3
Application	Sun Jdk cpe:2.3:a:sun:jdk:1.6.0:update_4:::::: cpe:2.3:a:sun:jdk:1.6.0:update_18:::::: cpe:2.3:a:sun:jdk:1.6.0:update1:::::: cpe:2.3:a:sun:jdk:1.6.0:update1_b06:::::: cpe:2.3:a:sun:jdk:1.6.0:update2:::::: cpe:2.3:a:sun:jdk:1.6.0:update_14:::::: cpe:2.3:a:sun:jdk:1.6.0:update_10:::::: cpe:2.3:a:sun:jdk:1.6.0:update_7:::::: cpe:2.3:a:sun:jdk:1.6.0:update_17:::::: cpe:2.3:a:sun:jdk:1.6.0:update_13:::::: cpe:2.3:a:sun:jdk:1.6.0:update_6:::::: cpe:2.3:a:sun:jdk:1.6.0:update_20:::::: cpe:2.3:a:sun:jdk:1.6.0:update_5:::::: cpe:2.3:a:sun:jdk:1.6.0:update_16:::::: cpe:2.3:a:sun:jdk:1.6.0:update_3:::::: cpe:2.3:a:sun:jdk:1.6.0:update_19:::::: cpe:2.3:a:sun:jdk:1.6.0:update_15:::::: cpe:2.3:a:sun:jdk:1.6.0:update_21:::::: cpe:2.3:a:sun:jdk:1.6.0:update_12:::::: cpe:2.3:a:sun:jdk:1.6.0:update_11:::::: cpe:2.3:a:sun:jdk:1.6.0:update9:::::: cpe:2.3:a:sun:jdk:1.6.0:update10:::::: cpe:2.3:a:sun:jdk:1.6.0:update14:::::: cpe:2.3:a:sun:jdk:1.6.0:update6:::::: cpe:2.3:a:sun:jdk:1.6.0:update11:::::: cpe:2.3:a:sun:jdk:1.6.0:update3:::::: cpe:2.3:a:sun:jdk:1.6.0:update5:::::: cpe:2.3:a:sun:jdk:1.6.0:update13:::::: cpe:2.3:a:sun:jdk:1.6.0:update12:::::: cpe:2.3:a:sun:jdk:1.6.0:update4:::::: cpe:2.3:a:sun:jdk:1.6.0:update15:::::: cpe:2.3:a:sun:jdk:1.6.0:update7:::::: cpe:2.3:a:sun:jdk:1.6.0:update8:::::: cpe:2.3:a:sun:jdk:1.6.0:update16:::::: cpe:2.3:a:sun:jdk:1.6.0:update_8:::::: cpe:2.3:a:sun:jdk:1.6.0:update_1:::::: cpe:2.3:a:sun:jdk:1.6.0:update_9:::::: cpe:2.3:a:sun:jdk:1.6.0:update18:::::: cpe:2.3:a:sun:jdk:1.6.0:update17:::::: cpe:2.3:a:sun:jdk:1.6.0:update19:::::: cpe:2.3:a:sun:jdk:1.6.0:update_22:::::: cpe:2.3:a:sun:jdk:1.6.0:update_23:::::: cpe:2.3:a:sun:jdk:1.6.0:update_25:::::: cpe:2.3:a:sun:jdk:1.6.0:update_24:::::: cpe:2.3:a:sun:jdk:1.6.0:update_26:::::: cpe:2.3:a:sun:jdk:1.6.0:update_27:::::: cpe:2.3:a:sun:jdk:1.6.0:update_20:x64:::::* cpe:2.3:a:sun:jdk:1.6.0:-:::::: cpe:2.3:a:sun:jdk:1.6:::::::* cpe:2.3:a:sun:jdk:1.5.0_03::solaris::::: cpe:2.3:a:sun:jdk:1.5.0_03::windows::::: cpe:2.3:a:sun:jdk:1.5.0_03::linux::::: cpe:2.3:a:sun:jdk:1.5.0:update25:::::: cpe:2.3:a:sun:jdk:1.5.0:update10:::::: cpe:2.3:a:sun:jdk:1.5.0:update5:::::: cpe:2.3:a:sun:jdk:1.5.0:update7:::::: cpe:2.3:a:sun:jdk:1.5.0:update6:::::: cpe:2.3:a:sun:jdk:1.5.0:update3:::::: cpe:2.3:a:sun:jdk:1.5.0:update16:::::: cpe:2.3:a:sun:jdk:1.5.0:update4:::::: cpe:2.3:a:sun:jdk:1.5.0:update17:::::: cpe:2.3:a:sun:jdk:1.5.0:update9:::::: cpe:2.3:a:sun:jdk:1.5.0:update19:::::: cpe:2.3:a:sun:jdk:1.5.0:update15:::::: cpe:2.3:a:sun:jdk:1.5.0:update21:::::: cpe:2.3:a:sun:jdk:1.5.0:update2:::::: cpe:2.3:a:sun:jdk:1.5.0:update12:::::: cpe:2.3:a:sun:jdk:1.5.0:update23:::::: cpe:2.3:a:sun:jdk:1.5.0:update8:::::: cpe:2.3:a:sun:jdk:1.5.0:update18:::::: cpe:2.3:a:sun:jdk:1.5.0:update11:::::: cpe:2.3:a:sun:jdk:1.5.0:update24:::::: cpe:2.3:a:sun:jdk:1.5.0:update22:::::: cpe:2.3:a:sun:jdk:1.5.0:update20:::::: cpe:2.3:a:sun:jdk:1.5.0:update14:::::: cpe:2.3:a:sun:jdk:1.5.0:update13:::::: cpe:2.3:a:sun:jdk:1.5.0:update1:::::: cpe:2.3:a:sun:jdk:1.5.0:update_1:::::: cpe:2.3:a:sun:jdk:1.5.0:update_16:::::: cpe:2.3:a:sun:jdk:1.5.0:update11_b03:::::: cpe:2.3:a:sun:jdk:1.5.0:update_10:::::: cpe:2.3:a:sun:jdk:1.5.0:update_4:::::: cpe:2.3:a:sun:jdk:1.5.0:update_9:::::: cpe:2.3:a:sun:jdk:1.5.0:update_14:::::: cpe:2.3:a:sun:jdk:1.5.0:update_20:::::: cpe:2.3:a:sun:jdk:1.5.0:update_21:::::: cpe:2.3:a:sun:jdk:1.5.0:update_7:::::: cpe:2.3:a:sun:jdk:1.5.0:update_18:::::: cpe:2.3:a:sun:jdk:1.5.0:update_6:::::: cpe:2.3:a:sun:jdk:1.5.0:update7_b03:::::: cpe:2.3:a:sun:jdk:1.5.0:update_12:::::: cpe:2.3:a:sun:jdk:1.5.0:update_2:::::: cpe:2.3:a:sun:jdk:1.5.0:update_13:::::: cpe:2.3:a:sun:jdk:1.5.0:update_3:::::: cpe:2.3:a:sun:jdk:1.5.0:update_15:::::: cpe:2.3:a:sun:jdk:1.5.0:update_17:::::: cpe:2.3:a:sun:jdk:1.5.0:update_19:::::: cpe:2.3:a:sun:jdk:1.5.0:update_5:::::: cpe:2.3:a:sun:jdk:1.5.0:update_22:::::: cpe:2.3:a:sun:jdk:1.5.0:update_8:::::: cpe:2.3:a:sun:jdk:1.5.0:update_11:::::: cpe:2.3:a:sun:jdk:1.5.0:update26:::::: cpe:2.3:a:sun:jdk:1.5.0:update27:::::: cpe:2.3:a:sun:jdk:1.5.0:update35:::::: cpe:2.3:a:sun:jdk:1.5.0:update29:::::: cpe:2.3:a:sun:jdk:1.5.0:update33:::::: cpe:2.3:a:sun:jdk:1.5.0:update31:::::: cpe:2.3:a:sun:jdk:1.5.0:update28:::::: cpe:2.3:a:sun:jdk:1.5.0:-:::::: cpe:2.3:a:sun:jdk:1.4.2_9:::::::* cpe:2.3:a:sun:jdk:1.4.2_8:::::::* cpe:2.3:a:sun:jdk:1.4.2_7:::::::* cpe:2.3:a:sun:jdk:1.4.2_6:::::::* cpe:2.3:a:sun:jdk:1.4.2_5:::::::* cpe:2.3:a:sun:jdk:1.4.2_4:::::::* cpe:2.3:a:sun:jdk:1.4.2_37:::::::* cpe:2.3:a:sun:jdk:1.4.2_36:::::::* cpe:2.3:a:sun:jdk:1.4.2_35:::::::* cpe:2.3:a:sun:jdk:1.4.2_34:::::::* cpe:2.3:a:sun:jdk:1.4.2_33:::::::* cpe:2.3:a:sun:jdk:1.4.2_32:::::::* cpe:2.3:a:sun:jdk:1.4.2_31:::::::* cpe:2.3:a:sun:jdk:1.4.2_30:::::::* cpe:2.3:a:sun:jdk:1.4.2_3:::::::* cpe:2.3:a:sun:jdk:1.4.2_29:::::::* cpe:2.3:a:sun:jdk:1.4.2_28:::::::* cpe:2.3:a:sun:jdk:1.4.2_27:::::::* cpe:2.3:a:sun:jdk:1.4.2_26:::::::* cpe:2.3:a:sun:jdk:1.4.2_25:::::::* cpe:2.3:a:sun:jdk:1.4.2_24:::::::* cpe:2.3:a:sun:jdk:1.4.2_24::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_23:::::::* cpe:2.3:a:sun:jdk:1.4.2_22:::::::* cpe:2.3:a:sun:jdk:1.4.2_21:::::::* cpe:2.3:a:sun:jdk:1.4.2_20:::::::* cpe:2.3:a:sun:jdk:1.4.2_2:::::::* cpe:2.3:a:sun:jdk:1.4.2_19:::::::* cpe:2.3:a:sun:jdk:1.4.2_18:::::::* cpe:2.3:a:sun:jdk:1.4.2_17:::::::* cpe:2.3:a:sun:jdk:1.4.2_16:::::::* cpe:2.3:a:sun:jdk:1.4.2_15:::::::* cpe:2.3:a:sun:jdk:1.4.2_14:::::::* cpe:2.3:a:sun:jdk:1.4.2_13:::::::* cpe:2.3:a:sun:jdk:1.4.2_12:::::::* cpe:2.3:a:sun:jdk:1.4.2_11:::::::* cpe:2.3:a:sun:jdk:1.4.2_10:::::::* cpe:2.3:a:sun:jdk:1.4.2_1:::::::* cpe:2.3:a:sun:jdk:1.4.2_08::windows::::: cpe:2.3:a:sun:jdk:1.4.2_08::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_08::linux::::: cpe:2.3:a:sun:jdk:1.4.2_05::windows::::: cpe:2.3:a:sun:jdk:1.4.2_05::linux::::: cpe:2.3:a:sun:jdk:1.4.2_05::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_04::linux::::: cpe:2.3:a:sun:jdk:1.4.2_04::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_04::windows::::: cpe:2.3:a:sun:jdk:1.4.2_03::windows::::: cpe:2.3:a:sun:jdk:1.4.2_03::linux::::: cpe:2.3:a:sun:jdk:1.4.2_03::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_02::linux::::: cpe:2.3:a:sun:jdk:1.4.2_01::linux::::: cpe:2.3:a:sun:jdk:1.4.2::solaris::::: cpe:2.3:a:sun:jdk:1.4.2::windows::::: cpe:2.3:a:sun:jdk:1.4.2::linux::::: cpe:2.3:a:sun:jdk:1.4.2:-:::::: cpe:2.3:a:sun:jdk:1.4.1_07:::::::* cpe:2.3:a:sun:jdk:1.4.1_06:::::::* cpe:2.3:a:sun:jdk:1.4.1_05:::::::* cpe:2.3:a:sun:jdk:1.4.1_04:::::::* cpe:2.3:a:sun:jdk:1.4.1_03:::::::* cpe:2.3:a:sun:jdk:1.4.1_03::solaris::::: cpe:2.3:a:sun:jdk:1.4.1_03::windows::::: cpe:2.3:a:sun:jdk:1.4.1_03::linux::::: cpe:2.3:a:sun:jdk:1.4.1_02:::::::* cpe:2.3:a:sun:jdk:1.4.1_02::windows::::: cpe:2.3:a:sun:jdk:1.4.1_02::linux::::: cpe:2.3:a:sun:jdk:1.4.1_02::solaris::::: cpe:2.3:a:sun:jdk:1.4.1_01:::::::* cpe:2.3:a:sun:jdk:1.4.1_01::linux::::: cpe:2.3:a:sun:jdk:1.4.1_01::solaris::::: cpe:2.3:a:sun:jdk:1.4.1_01::windows::::: cpe:2.3:a:sun:jdk:1.4.1:::::::* cpe:2.3:a:sun:jdk:1.4.1::windows::::: cpe:2.3:a:sun:jdk:1.4.1::solaris::::: cpe:2.3:a:sun:jdk:1.4.1::linux::::: cpe:2.3:a:sun:jdk:1.4.0_4::solaris::::: cpe:2.3:a:sun:jdk:1.4.0_4::windows::::: cpe:2.3:a:sun:jdk:1.4.0_4::linux::::: cpe:2.3:a:sun:jdk:1.4.0_04:::::::* cpe:2.3:a:sun:jdk:1.4.0_03:::::::* cpe:2.3:a:sun:jdk:1.4.0_03::linux::::: cpe:2.3:a:sun:jdk:1.4.0_03::solaris::::: cpe:2.3:a:sun:jdk:1.4.0_03::windows::::: cpe:2.3:a:sun:jdk:1.4.0_02:::::::* cpe:2.3:a:sun:jdk:1.4.0_02::linux::::: cpe:2.3:a:sun:jdk:1.4.0_02::solaris::::: cpe:2.3:a:sun:jdk:1.4.0_02::windows::::: cpe:2.3:a:sun:jdk:1.4.0_01:::::::* cpe:2.3:a:sun:jdk:1.4.0_01::windows::::: cpe:2.3:a:sun:jdk:1.4.0:-:::::: cpe:2.3:a:sun:jdk:1.4::linux::::: cpe:2.3:a:sun:jdk:1.4::windows::::: cpe:2.3:a:sun:jdk:1.4::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_28:::::::* cpe:2.3:a:sun:jdk:1.3.1_27:::::::* cpe:2.3:a:sun:jdk:1.3.1_26:::::::* cpe:2.3:a:sun:jdk:1.3.1_25:::::::* cpe:2.3:a:sun:jdk:1.3.1_24:::::::* cpe:2.3:a:sun:jdk:1.3.1_23:::::::* cpe:2.3:a:sun:jdk:1.3.1_22:::::::* cpe:2.3:a:sun:jdk:1.3.1_21:::::::* cpe:2.3:a:sun:jdk:1.3.1_20:::::::* cpe:2.3:a:sun:jdk:1.3.1_19:::::::* cpe:2.3:a:sun:jdk:1.3.1_18:::::::* cpe:2.3:a:sun:jdk:1.3.1_17:::::::* cpe:2.3:a:sun:jdk:1.3.1_16:::::::* cpe:2.3:a:sun:jdk:1.3.1_15:::::::* cpe:2.3:a:sun:jdk:1.3.1_15::linux::::: cpe:2.3:a:sun:jdk:1.3.1_15::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_15::windows::::: cpe:2.3:a:sun:jdk:1.3.1_14:::::::* cpe:2.3:a:sun:jdk:1.3.1_14::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_14::windows::::: cpe:2.3:a:sun:jdk:1.3.1_14::linux::::: cpe:2.3:a:sun:jdk:1.3.1_13:::::::* cpe:2.3:a:sun:jdk:1.3.1_13::windows::::: cpe:2.3:a:sun:jdk:1.3.1_13::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_13::linux::::: cpe:2.3:a:sun:jdk:1.3.1_12:::::::* cpe:2.3:a:sun:jdk:1.3.1_12::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_12::windows::::: cpe:2.3:a:sun:jdk:1.3.1_12::linux::::: cpe:2.3:a:sun:jdk:1.3.1_11:::::::* cpe:2.3:a:sun:jdk:1.3.1_11::linux::::: cpe:2.3:a:sun:jdk:1.3.1_11::windows::::: cpe:2.3:a:sun:jdk:1.3.1_11::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_10:::::::* cpe:2.3:a:sun:jdk:1.3.1_10::linux::::: cpe:2.3:a:sun:jdk:1.3.1_10::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_10::windows::::: cpe:2.3:a:sun:jdk:1.3.1_09:::::::* cpe:2.3:a:sun:jdk:1.3.1_09::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_09::linux::::: cpe:2.3:a:sun:jdk:1.3.1_09::windows::::: cpe:2.3:a:sun:jdk:1.3.1_08:::::::* cpe:2.3:a:sun:jdk:1.3.1_08::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_08::windows::::: cpe:2.3:a:sun:jdk:1.3.1_08::linux::::: cpe:2.3:a:sun:jdk:1.3.1_07:::::::* cpe:2.3:a:sun:jdk:1.3.1_07::windows::::: cpe:2.3:a:sun:jdk:1.3.1_07::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_07::linux::::: cpe:2.3:a:sun:jdk:1.3.1_06:::::::* cpe:2.3:a:sun:jdk:1.3.1_06::windows::::: cpe:2.3:a:sun:jdk:1.3.1_06::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_06::linux::::: cpe:2.3:a:sun:jdk:1.3.1_05:::::::* cpe:2.3:a:sun:jdk:1.3.1_05::linux::::: cpe:2.3:a:sun:jdk:1.3.1_05::windows::::: cpe:2.3:a:sun:jdk:1.3.1_05::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_04:::::::* cpe:2.3:a:sun:jdk:1.3.1_04::windows::::: cpe:2.3:a:sun:jdk:1.3.1_03:::::::* cpe:2.3:a:sun:jdk:1.3.1_03::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_03::windows::::: cpe:2.3:a:sun:jdk:1.3.1_03::linux::::: cpe:2.3:a:sun:jdk:1.3.1_02:::::::* cpe:2.3:a:sun:jdk:1.3.1_02::windows::::: cpe:2.3:a:sun:jdk:1.3.1_02::linux::::: cpe:2.3:a:sun:jdk:1.3.1_02::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_01a:::::::* cpe:2.3:a:sun:jdk:1.3.1_01a::windows::::: cpe:2.3:a:sun:jdk:1.3.1_01:::::::* cpe:2.3:a:sun:jdk:1.3.1_01::linux::::: cpe:2.3:a:sun:jdk:1.3.1_01::solaris::::: cpe:2.3:a:sun:jdk:1.3.1:update19:::::: cpe:2.3:a:sun:jdk:1.3.1:update20:::::: cpe:2.3:a:sun:jdk:1.3.1:-:::::: cpe:2.3:a:sun:jdk:1.3.0_05:::::::* cpe:2.3:a:sun:jdk:1.3.0_05::linux::::: cpe:2.3:a:sun:jdk:1.3.0_05::windows::::: cpe:2.3:a:sun:jdk:1.3.0_05::solaris::::: cpe:2.3:a:sun:jdk:1.3.0_04:::::::* cpe:2.3:a:sun:jdk:1.3.0_03:::::::* cpe:2.3:a:sun:jdk:1.3.0_02:::::::* cpe:2.3:a:sun:jdk:1.3.0_02::windows::::: cpe:2.3:a:sun:jdk:1.3.0_02::solaris::::: cpe:2.3:a:sun:jdk:1.3.0_02::linux::::: cpe:2.3:a:sun:jdk:1.3.0_01:::::::* cpe:2.3:a:sun:jdk:1.3.0:::::::* cpe:2.3:a:sun:jdk:1.3_05::solaris::::: cpe:2.3:a:sun:jdk:1.3_02::solaris::::: cpe:2.3:a:sun:jdk:1.3::solaris::::: cpe:2.3:a:sun:jdk:1.2.2_12::windows::::: cpe:2.3:a:sun:jdk:1.2.2_11::linux::::: cpe:2.3:a:sun:jdk:1.2.2_11::windows::::: cpe:2.3:a:sun:jdk:1.2.2_11::solaris::::: cpe:2.3:a:sun:jdk:1.2.2_10::solaris::::: cpe:2.3:a:sun:jdk:1.2.2_10::windows::::: cpe:2.3:a:sun:jdk:1.2.2_10::linux::::: cpe:2.3:a:sun:jdk:1.2.2_07a::solaris::::: cpe:2.3:a:sun:jdk:1.2.2_07::windows::::: cpe:2.3:a:sun:jdk:1.2.2_07::linux::::: cpe:2.3:a:sun:jdk:1.2.2_07::solaris::::: cpe:2.3:a:sun:jdk:1.2.2:update4:::::: cpe:2.3:a:sun:jdk:1.2.2:update5:::::: cpe:2.3:a:sun:jdk:1.2.2::solaris::::: cpe:2.3:a:sun:jdk:1.2.1:update3:::::: cpe:2.3:a:sun:jdk:1.2.1:-:::::: cpe:2.3:a:sun:jdk:1.2.0:::::::* cpe:2.3:a:sun:jdk:1.1.8:update13:::::: cpe:2.3:a:sun:jdk:1.1.8:update14:::::: cpe:2.3:a:sun:jdk:1.1.8:update2:::::: cpe:2.3:a:sun:jdk:1.1.8:update8:::::: cpe:2.3:a:sun:jdk:1.1.8:update10:::::: cpe:2.3:a:sun:jdk:1.1.8:update7:::::: cpe:2.3:a:sun:jdk:1.1.7b:update5:::::: cpe:2.3:a:sun:jdk:1.1.7b:-:::::: cpe:2.3:a:sun:jdk:1.1.6:update7:::::: cpe:2.3:a:sun:jdk:1.1.6:-:::::: cpe:2.3:a:sun:jdk:1.1.0:::::::*	321
Application	Sun Jre cpe:2.3:a:sun:jre:1.6.0_10:::::::* cpe:2.3:a:sun:jre:1.6.0_0:::::::* cpe:2.3:a:sun:jre:1.6.0:update_4:::::: cpe:2.3:a:sun:jre:1.6.0:update_16:::::: cpe:2.3:a:sun:jre:1.6.0:update_14:::::: cpe:2.3:a:sun:jre:1.6.0:update_10:::::: cpe:2.3:a:sun:jre:1.6.0:update_20:::::: cpe:2.3:a:sun:jre:1.6.0:update_18:::::: cpe:2.3:a:sun:jre:1.6.0:update_11:::::: cpe:2.3:a:sun:jre:1.6.0:update_13:::::: cpe:2.3:a:sun:jre:1.6.0:update_6:::::: cpe:2.3:a:sun:jre:1.6.0:update_1:::::: cpe:2.3:a:sun:jre:1.6.0:update_17:::::: cpe:2.3:a:sun:jre:1.6.0:update_7:::::: cpe:2.3:a:sun:jre:1.6.0:update_12:::::: cpe:2.3:a:sun:jre:1.6.0:update_15:::::: cpe:2.3:a:sun:jre:1.6.0:update_3:::::: cpe:2.3:a:sun:jre:1.6.0:update_2:::::: cpe:2.3:a:sun:jre:1.6.0:update_21:::::: cpe:2.3:a:sun:jre:1.6.0:update_5:::::: cpe:2.3:a:sun:jre:1.6.0:update_19:::::: cpe:2.3:a:sun:jre:1.6.0:update11:::::: cpe:2.3:a:sun:jre:1.6.0:update15:::::: cpe:2.3:a:sun:jre:1.6.0:update16:::::: cpe:2.3:a:sun:jre:1.6.0:update5:::::: cpe:2.3:a:sun:jre:1.6.0:update10:::::: cpe:2.3:a:sun:jre:1.6.0:update9:::::: cpe:2.3:a:sun:jre:1.6.0:update8:::::: cpe:2.3:a:sun:jre:1.6.0:update14:::::: cpe:2.3:a:sun:jre:1.6.0:update7:::::: cpe:2.3:a:sun:jre:1.6.0:update12:::::: cpe:2.3:a:sun:jre:1.6.0:update6:::::: cpe:2.3:a:sun:jre:1.6.0:update13:::::: cpe:2.3:a:sun:jre:1.6.0:update4:::::: cpe:2.3:a:sun:jre:1.6.0:update_8:::::: cpe:2.3:a:sun:jre:1.6.0:update_9:::::: cpe:2.3:a:sun:jre:1.6.0:update17:::::: cpe:2.3:a:sun:jre:1.6.0:update19:::::: cpe:2.3:a:sun:jre:1.6.0:update18:::::: cpe:2.3:a:sun:jre:1.6.0:update_22:::::: cpe:2.3:a:sun:jre:1.6.0:update_23:::::: cpe:2.3:a:sun:jre:1.6.0:update_25:::::: cpe:2.3:a:sun:jre:1.6.0:update_24:::::: cpe:2.3:a:sun:jre:1.6.0:update_26:::::: cpe:2.3:a:sun:jre:1.6.0:update_27:::::: cpe:2.3:a:sun:jre:1.6.0:-:::::: cpe:2.3:a:sun:jre:1.5.0_11-b03:::::::* cpe:2.3:a:sun:jre:1.5.0:update16:::::: cpe:2.3:a:sun:jre:1.5.0:update17:::::: cpe:2.3:a:sun:jre:1.5.0:update15:::::: cpe:2.3:a:sun:jre:1.5.0:update22:::::: cpe:2.3:a:sun:jre:1.5.0:update12:::::: cpe:2.3:a:sun:jre:1.5.0:update10:::::: cpe:2.3:a:sun:jre:1.5.0:update6:::::: cpe:2.3:a:sun:jre:1.5.0:update13:::::: cpe:2.3:a:sun:jre:1.5.0:update14:::::: cpe:2.3:a:sun:jre:1.5.0:update24:::::: cpe:2.3:a:sun:jre:1.5.0:update11:::::: cpe:2.3:a:sun:jre:1.5.0:update18:::::: cpe:2.3:a:sun:jre:1.5.0:update8:::::: cpe:2.3:a:sun:jre:1.5.0:update1:::::: cpe:2.3:a:sun:jre:1.5.0:update9:::::: cpe:2.3:a:sun:jre:1.5.0:update21:::::: cpe:2.3:a:sun:jre:1.5.0:update20:::::: cpe:2.3:a:sun:jre:1.5.0:update3:::::: cpe:2.3:a:sun:jre:1.5.0:update25:::::: cpe:2.3:a:sun:jre:1.5.0:update4:::::: cpe:2.3:a:sun:jre:1.5.0:update5:::::: cpe:2.3:a:sun:jre:1.5.0:update2:::::: cpe:2.3:a:sun:jre:1.5.0:update7:::::: cpe:2.3:a:sun:jre:1.5.0:update23:::::: cpe:2.3:a:sun:jre:1.5.0:update19:::::: cpe:2.3:a:sun:jre:1.5.0:update_6:::::: cpe:2.3:a:sun:jre:1.5.0:update_7:::::: cpe:2.3:a:sun:jre:1.5.0:update_15:::::: cpe:2.3:a:sun:jre:1.5.0:update_1:::::: cpe:2.3:a:sun:jre:1.5.0:update_3:::::: cpe:2.3:a:sun:jre:1.5.0:update_8:::::: cpe:2.3:a:sun:jre:1.5.0:update_17:::::: cpe:2.3:a:sun:jre:1.5.0:update_2:::::: cpe:2.3:a:sun:jre:1.5.0:update_18:::::: cpe:2.3:a:sun:jre:1.5.0:update_12:::::: cpe:2.3:a:sun:jre:1.5.0:update_9:::::: cpe:2.3:a:sun:jre:1.5.0:update_21:::::: cpe:2.3:a:sun:jre:1.5.0:update_19:::::: cpe:2.3:a:sun:jre:1.5.0:update_14:::::: cpe:2.3:a:sun:jre:1.5.0:update_16:::::: cpe:2.3:a:sun:jre:1.5.0:update_4:::::: cpe:2.3:a:sun:jre:1.5.0:update_13:::::: cpe:2.3:a:sun:jre:1.5.0:update_20:::::: cpe:2.3:a:sun:jre:1.5.0:update_5:::::: cpe:2.3:a:sun:jre:1.5.0:update_11:::::: cpe:2.3:a:sun:jre:1.5.0:update27:::::: cpe:2.3:a:sun:jre:1.5.0:update26:::::: cpe:2.3:a:sun:jre:1.5.0:update35:::::: cpe:2.3:a:sun:jre:1.5.0:update28:::::: cpe:2.3:a:sun:jre:1.5.0:update31:::::: cpe:2.3:a:sun:jre:1.5.0:update33:::::: cpe:2.3:a:sun:jre:1.5.0:update29:::::: cpe:2.3:a:sun:jre:1.5.0:-:::::: cpe:2.3:a:sun:jre:1.4.2_9:::::::* cpe:2.3:a:sun:jre:1.4.2_8:::::::* cpe:2.3:a:sun:jre:1.4.2_7:::::::* cpe:2.3:a:sun:jre:1.4.2_6:::::::* cpe:2.3:a:sun:jre:1.4.2_5:::::::* cpe:2.3:a:sun:jre:1.4.2_4:::::::* cpe:2.3:a:sun:jre:1.4.2_37:::::::* cpe:2.3:a:sun:jre:1.4.2_36:::::::* cpe:2.3:a:sun:jre:1.4.2_35:::::::* cpe:2.3:a:sun:jre:1.4.2_34:::::::* cpe:2.3:a:sun:jre:1.4.2_33:::::::* cpe:2.3:a:sun:jre:1.4.2_32:::::::* cpe:2.3:a:sun:jre:1.4.2_31:::::::* cpe:2.3:a:sun:jre:1.4.2_30:::::::* cpe:2.3:a:sun:jre:1.4.2_3:::::::* cpe:2.3:a:sun:jre:1.4.2_29:::::::* cpe:2.3:a:sun:jre:1.4.2_28:::::::* cpe:2.3:a:sun:jre:1.4.2_27:::::::* cpe:2.3:a:sun:jre:1.4.2_26:::::::* cpe:2.3:a:sun:jre:1.4.2_25:::::::* cpe:2.3:a:sun:jre:1.4.2_24:::::::* cpe:2.3:a:sun:jre:1.4.2_23:::::::* cpe:2.3:a:sun:jre:1.4.2_22:::::::* cpe:2.3:a:sun:jre:1.4.2_21:::::::* cpe:2.3:a:sun:jre:1.4.2_20:::::::* cpe:2.3:a:sun:jre:1.4.2_2:::::::* cpe:2.3:a:sun:jre:1.4.2_19:::::::* cpe:2.3:a:sun:jre:1.4.2_18:::::::* cpe:2.3:a:sun:jre:1.4.2_17:::::::* cpe:2.3:a:sun:jre:1.4.2_16:::::::* cpe:2.3:a:sun:jre:1.4.2_15:::::::* cpe:2.3:a:sun:jre:1.4.2_14:::::::* cpe:2.3:a:sun:jre:1.4.2_13:::::::* cpe:2.3:a:sun:jre:1.4.2_12:::::::* cpe:2.3:a:sun:jre:1.4.2_11:::::::* cpe:2.3:a:sun:jre:1.4.2_10:::::::* cpe:2.3:a:sun:jre:1.4.2_1:::::::* cpe:2.3:a:sun:jre:1.4.2_09:::::::* cpe:2.3:a:sun:jre:1.4.2_08:::::::* cpe:2.3:a:sun:jre:1.4.2_07:::::::* cpe:2.3:a:sun:jre:1.4.2_06:::::::* cpe:2.3:a:sun:jre:1.4.2_05:::::::* cpe:2.3:a:sun:jre:1.4.2_04:::::::* cpe:2.3:a:sun:jre:1.4.2_03:::::::* cpe:2.3:a:sun:jre:1.4.2_02:::::::* cpe:2.3:a:sun:jre:1.4.2_01:::::::* cpe:2.3:a:sun:jre:1.4.2:update1:solaris:::::* cpe:2.3:a:sun:jre:1.4.2:update4:linux:::::* cpe:2.3:a:sun:jre:1.4.2::solaris::::: cpe:2.3:a:sun:jre:1.4.2:update2:linux:::::* cpe:2.3:a:sun:jre:1.4.2:update1:linux:::::* cpe:2.3:a:sun:jre:1.4.2:update1:windows:::::* cpe:2.3:a:sun:jre:1.4.2:update4:solaris:::::* cpe:2.3:a:sun:jre:1.4.2:update3:windows:::::* cpe:2.3:a:sun:jre:1.4.2:update2:solaris:::::* cpe:2.3:a:sun:jre:1.4.2:update5:windows:::::* cpe:2.3:a:sun:jre:1.4.2::linux::::: cpe:2.3:a:sun:jre:1.4.2:update5:linux:::::* cpe:2.3:a:sun:jre:1.4.2:update2:windows:::::* cpe:2.3:a:sun:jre:1.4.2:update3:linux:::::* cpe:2.3:a:sun:jre:1.4.2::windows::::: cpe:2.3:a:sun:jre:1.4.2:update3:solaris:::::* cpe:2.3:a:sun:jre:1.4.2:update4:windows:::::* cpe:2.3:a:sun:jre:1.4.2:update5:solaris:::::* cpe:2.3:a:sun:jre:1.4.2:update20:::::: cpe:2.3:a:sun:jre:1.4.2:update17:::::: cpe:2.3:a:sun:jre:1.4.2:update19:::::: cpe:2.3:a:sun:jre:1.4.2:update18:::::: cpe:2.3:a:sun:jre:1.4.2:update16:::::: cpe:2.3:a:sun:jre:1.4.2:update28:::::: cpe:2.3:a:sun:jre:1.4.2:-:::::: cpe:2.3:a:sun:jre:1.4.1_07::windows::::: cpe:2.3:a:sun:jre:1.4.1_07::solaris::::: cpe:2.3:a:sun:jre:1.4.1_07::linux::::: cpe:2.3:a:sun:jre:1.4.1_07:::::::* cpe:2.3:a:sun:jre:1.4.1_06::solaris::::: cpe:2.3:a:sun:jre:1.4.1_06:::::::* cpe:2.3:a:sun:jre:1.4.1_06::linux::::: cpe:2.3:a:sun:jre:1.4.1_06::windows::::: cpe:2.3:a:sun:jre:1.4.1_05::linux::::: cpe:2.3:a:sun:jre:1.4.1_05::windows::::: cpe:2.3:a:sun:jre:1.4.1_05:::::::* cpe:2.3:a:sun:jre:1.4.1_05::solaris::::: cpe:2.3:a:sun:jre:1.4.1_04:::::::* cpe:2.3:a:sun:jre:1.4.1_04::windows::::: cpe:2.3:a:sun:jre:1.4.1_04::linux::::: cpe:2.3:a:sun:jre:1.4.1_04::solaris::::: cpe:2.3:a:sun:jre:1.4.1_03::solaris::::: cpe:2.3:a:sun:jre:1.4.1_03:::::::* cpe:2.3:a:sun:jre:1.4.1_03::windows::::: cpe:2.3:a:sun:jre:1.4.1_03::linux::::: cpe:2.3:a:sun:jre:1.4.1_02::solaris::::: cpe:2.3:a:sun:jre:1.4.1_02::linux::::: cpe:2.3:a:sun:jre:1.4.1_02::windows::::: cpe:2.3:a:sun:jre:1.4.1_02:::::::* cpe:2.3:a:sun:jre:1.4.1_01::solaris::::: cpe:2.3:a:sun:jre:1.4.1_01::windows::::: cpe:2.3:a:sun:jre:1.4.1_01::linux::::: cpe:2.3:a:sun:jre:1.4.1_01:::::::* cpe:2.3:a:sun:jre:1.4.1:update3:::::: cpe:2.3:a:sun:jre:1.4.1::linux::::: cpe:2.3:a:sun:jre:1.4.1:update3:linux:::::* cpe:2.3:a:sun:jre:1.4.1:update3:solaris:::::* cpe:2.3:a:sun:jre:1.4.1::windows::::: cpe:2.3:a:sun:jre:1.4.1::solaris::::: cpe:2.3:a:sun:jre:1.4.1:update3:windows:::::* cpe:2.3:a:sun:jre:1.4.1:update2:::::: cpe:2.3:a:sun:jre:1.4.1:update4:::::: cpe:2.3:a:sun:jre:1.4.1:update1:::::: cpe:2.3:a:sun:jre:1.4.1:update7:::::: cpe:2.3:a:sun:jre:1.4.1:update6:::::: cpe:2.3:a:sun:jre:1.4.1:update5:::::: cpe:2.3:a:sun:jre:1.4.1:-:::::: cpe:2.3:a:sun:jre:1.4.0_04::solaris::::: cpe:2.3:a:sun:jre:1.4.0_04::windows::::: cpe:2.3:a:sun:jre:1.4.0_04::linux::::: cpe:2.3:a:sun:jre:1.4.0_04:::::::* cpe:2.3:a:sun:jre:1.4.0_03::solaris::::: cpe:2.3:a:sun:jre:1.4.0_03::linux::::: cpe:2.3:a:sun:jre:1.4.0_03::windows::::: cpe:2.3:a:sun:jre:1.4.0_03:::::::* cpe:2.3:a:sun:jre:1.4.0_02::linux::::: cpe:2.3:a:sun:jre:1.4.0_02::windows::::: cpe:2.3:a:sun:jre:1.4.0_02::solaris::::: cpe:2.3:a:sun:jre:1.4.0_02:::::::* cpe:2.3:a:sun:jre:1.4.0_01::solaris::::: cpe:2.3:a:sun:jre:1.4.0_01::windows::::: cpe:2.3:a:sun:jre:1.4.0_01::linux::::: cpe:2.3:a:sun:jre:1.4.0_01:::::::* cpe:2.3:a:sun:jre:1.4.0:::::::* cpe:2.3:a:sun:jre:1.4:::::::* cpe:2.3:a:sun:jre:1.4::linux::::: cpe:2.3:a:sun:jre:1.4::solaris::::: cpe:2.3:a:sun:jre:1.4::windows::::: cpe:2.3:a:sun:jre:1.3.1_9:::::::* cpe:2.3:a:sun:jre:1.3.1_8:::::::* cpe:2.3:a:sun:jre:1.3.1_7:::::::* cpe:2.3:a:sun:jre:1.3.1_6:::::::* cpe:2.3:a:sun:jre:1.3.1_5:::::::* cpe:2.3:a:sun:jre:1.3.1_4:::::::* cpe:2.3:a:sun:jre:1.3.1_3:::::::* cpe:2.3:a:sun:jre:1.3.1_28:::::::* cpe:2.3:a:sun:jre:1.3.1_27:::::::* cpe:2.3:a:sun:jre:1.3.1_26:::::::* cpe:2.3:a:sun:jre:1.3.1_25:::::::* cpe:2.3:a:sun:jre:1.3.1_24:::::::* cpe:2.3:a:sun:jre:1.3.1_23:::::::* cpe:2.3:a:sun:jre:1.3.1_22:::::::* cpe:2.3:a:sun:jre:1.3.1_21:::::::* cpe:2.3:a:sun:jre:1.3.1_20:::::::* cpe:2.3:a:sun:jre:1.3.1_2:::::::* cpe:2.3:a:sun:jre:1.3.1_19:::::::* cpe:2.3:a:sun:jre:1.3.1_18:::::::* cpe:2.3:a:sun:jre:1.3.1_17:::::::* cpe:2.3:a:sun:jre:1.3.1_16:::::::* cpe:2.3:a:sun:jre:1.3.1_15:::::::* cpe:2.3:a:sun:jre:1.3.1_14:::::::* cpe:2.3:a:sun:jre:1.3.1_13:::::::* cpe:2.3:a:sun:jre:1.3.1_12:::::::* cpe:2.3:a:sun:jre:1.3.1_11:::::::* cpe:2.3:a:sun:jre:1.3.1_10:::::::* cpe:2.3:a:sun:jre:1.3.1_1:::::::* cpe:2.3:a:sun:jre:1.3.1_09:::::::* cpe:2.3:a:sun:jre:1.3.1_09::linux::::: cpe:2.3:a:sun:jre:1.3.1_09::solaris::::: cpe:2.3:a:sun:jre:1.3.1_09::windows::::: cpe:2.3:a:sun:jre:1.3.1_08:::::::* cpe:2.3:a:sun:jre:1.3.1_07:::::::* cpe:2.3:a:sun:jre:1.3.1_07::solaris::::: cpe:2.3:a:sun:jre:1.3.1_07::linux::::: cpe:2.3:a:sun:jre:1.3.1_07::windows::::: cpe:2.3:a:sun:jre:1.3.1_06:::::::* cpe:2.3:a:sun:jre:1.3.1_06::solaris::::: cpe:2.3:a:sun:jre:1.3.1_06::linux::::: cpe:2.3:a:sun:jre:1.3.1_06::windows::::: cpe:2.3:a:sun:jre:1.3.1_05:::::::* cpe:2.3:a:sun:jre:1.3.1_05::linux::::: cpe:2.3:a:sun:jre:1.3.1_05::windows::::: cpe:2.3:a:sun:jre:1.3.1_05::solaris::::: cpe:2.3:a:sun:jre:1.3.1_04:::::::* cpe:2.3:a:sun:jre:1.3.1_03:::::::* cpe:2.3:a:sun:jre:1.3.1_03::windows::::: cpe:2.3:a:sun:jre:1.3.1_03::solaris::::: cpe:2.3:a:sun:jre:1.3.1_03::linux::::: cpe:2.3:a:sun:jre:1.3.1_02::solaris::::: cpe:2.3:a:sun:jre:1.3.1_02::windows::::: cpe:2.3:a:sun:jre:1.3.1_02::linux::::: cpe:2.3:a:sun:jre:1.3.1_02:::::::* cpe:2.3:a:sun:jre:1.3.1_01a:::::::* cpe:2.3:a:sun:jre:1.3.1_01:::::::* cpe:2.3:a:sun:jre:1.3.1:update2:::::: cpe:2.3:a:sun:jre:1.3.1:update1:::::: cpe:2.3:a:sun:jre:1.3.1:update16:::::: cpe:2.3:a:sun:jre:1.3.1:update18:::::: cpe:2.3:a:sun:jre:1.3.1:update20:::::: cpe:2.3:a:sun:jre:1.3.1:update19:::::: cpe:2.3:a:sun:jre:1.3.1:update1a:::::: cpe:2.3:a:sun:jre:1.3.1:update8:::::: cpe:2.3:a:sun:jre:1.3.1:update15:::::: cpe:2.3:a:sun:jre:1.3.1:update4:::::: cpe:2.3:a:sun:jre:1.3.1:update4:windows:::::* cpe:2.3:a:sun:jre:1.3.1::linux::::: cpe:2.3:a:sun:jre:1.3.1:update8:solaris:::::* cpe:2.3:a:sun:jre:1.3.1:update1a:windows:::::* cpe:2.3:a:sun:jre:1.3.1:update1:linux:::::* cpe:2.3:a:sun:jre:1.3.1:update4:solaris:::::* cpe:2.3:a:sun:jre:1.3.1:update8:windows:::::* cpe:2.3:a:sun:jre:1.3.1:update1:windows:::::* cpe:2.3:a:sun:jre:1.3.1:update1:solaris:::::* cpe:2.3:a:sun:jre:1.3.1:update8:linux:::::* cpe:2.3:a:sun:jre:1.3.1:update12:::::: cpe:2.3:a:sun:jre:1.3.1:update17:::::: cpe:2.3:a:sun:jre:1.3.1:-:::::: cpe:2.3:a:sun:jre:1.3.0:update5:::::: cpe:2.3:a:sun:jre:1.3.0:update4:::::: cpe:2.3:a:sun:jre:1.3.0:update1:::::: cpe:2.3:a:sun:jre:1.3.0:update3:::::: cpe:2.3:a:sun:jre:1.3.0:update2:::::: cpe:2.3:a:sun:jre:1.3.0:update4:windows:::::* cpe:2.3:a:sun:jre:1.3.0:update5:linux:::::* cpe:2.3:a:sun:jre:1.3.0:update5:solaris:::::* cpe:2.3:a:sun:jre:1.3.0:update3:linux:::::* cpe:2.3:a:sun:jre:1.3.0::windows::::: cpe:2.3:a:sun:jre:1.3.0:update4:linux:::::* cpe:2.3:a:sun:jre:1.3.0:update2:solaris:::::* cpe:2.3:a:sun:jre:1.3.0:update1:linux:::::* cpe:2.3:a:sun:jre:1.3.0::linux::::: cpe:2.3:a:sun:jre:1.3.0:update5:windows:::::* cpe:2.3:a:sun:jre:1.3.0:update2:linux:::::* cpe:2.3:a:sun:jre:1.3.0::solaris::::: cpe:2.3:a:sun:jre:1.3.0:update2:windows:::::* cpe:2.3:a:sun:jre:1.3.0:-:::::: cpe:2.3:a:sun:jre:1.2.2_07::solaris::::: cpe:2.3:a:sun:jre:1.2.2_012::solaris::::: cpe:2.3:a:sun:jre:1.2.2_011::solaris::::: cpe:2.3:a:sun:jre:1.2.2_011::linux::::: cpe:2.3:a:sun:jre:1.2.2_011::windows::::: cpe:2.3:a:sun:jre:1.2.2_007::linux::::: cpe:2.3:a:sun:jre:1.2.2_007::solaris::::: cpe:2.3:a:sun:jre:1.2.2_007::windows::::: cpe:2.3:a:sun:jre:1.2.2_006::linux::::: cpe:2.3:a:sun:jre:1.2.2_005::linux::::: cpe:2.3:a:sun:jre:1.2.2_004::linux::::: cpe:2.3:a:sun:jre:1.2.2_003::linux::::: cpe:2.3:a:sun:jre:1.2.2_003::linux_production::::: cpe:2.3:a:sun:jre:1.2.2::solaris::::: cpe:2.3:a:sun:jre:1.2.2:update10:linux:::::* cpe:2.3:a:sun:jre:1.2.2:update10:solaris:::::* cpe:2.3:a:sun:jre:1.2.2::windows::::: cpe:2.3:a:sun:jre:1.2.2:update10:windows:::::* cpe:2.3:a:sun:jre:1.2.2::linux_production::::: cpe:2.3:a:sun:jre:1.2.2:update10:::::: cpe:2.3:a:sun:jre:1.2:::::::* cpe:2.3:a:sun:jre:1.1.8:update13:::::: cpe:2.3:a:sun:jre:1.1.8:update7:::::: cpe:2.3:a:sun:jre:1.1.8:update8:::::: cpe:2.3:a:sun:jre:1.1.8:update14:::::: cpe:2.3:a:sun:jre:1.1:::::::*	358
Application	Sun Openjdk cpe:2.3:a:sun:openjdk::::::::	1
Application	Sun Sdk cpe:2.3:a:sun:sdk:1.4.2_9:::::::* cpe:2.3:a:sun:sdk:1.4.2_8:::::::* cpe:2.3:a:sun:sdk:1.4.2_7:::::::* cpe:2.3:a:sun:sdk:1.4.2_6:::::::* cpe:2.3:a:sun:sdk:1.4.2_5:::::::* cpe:2.3:a:sun:sdk:1.4.2_4:::::::* cpe:2.3:a:sun:sdk:1.4.2_3:::::::* cpe:2.3:a:sun:sdk:1.4.2_25:::::::* cpe:2.3:a:sun:sdk:1.4.2_24:::::::* cpe:2.3:a:sun:sdk:1.4.2_23:::::::* cpe:2.3:a:sun:sdk:1.4.2_22:::::::* cpe:2.3:a:sun:sdk:1.4.2_21:::::::* cpe:2.3:a:sun:sdk:1.4.2_20:::::::* cpe:2.3:a:sun:sdk:1.4.2_2:::::::* cpe:2.3:a:sun:sdk:1.4.2_19:::::::* cpe:2.3:a:sun:sdk:1.4.2_18:::::::* cpe:2.3:a:sun:sdk:1.4.2_17:::::::* cpe:2.3:a:sun:sdk:1.4.2_16:::::::* cpe:2.3:a:sun:sdk:1.4.2_15:::::::* cpe:2.3:a:sun:sdk:1.4.2_14:::::::* cpe:2.3:a:sun:sdk:1.4.2_13:::::::* cpe:2.3:a:sun:sdk:1.4.2_12:::::::* cpe:2.3:a:sun:sdk:1.4.2_11:::::::* cpe:2.3:a:sun:sdk:1.4.2_10:::::::* cpe:2.3:a:sun:sdk:1.4.2_1:::::::* cpe:2.3:a:sun:sdk:1.4.2_09:::::::* cpe:2.3:a:sun:sdk:1.4.2_08:::::::* cpe:2.3:a:sun:sdk:1.4.2_07:::::::* cpe:2.3:a:sun:sdk:1.4.2_06:::::::* cpe:2.3:a:sun:sdk:1.4.2_05:::::::* cpe:2.3:a:sun:sdk:1.4.2_04:::::::* cpe:2.3:a:sun:sdk:1.4.2_03:::::::* cpe:2.3:a:sun:sdk:1.4.2_02:::::::* cpe:2.3:a:sun:sdk:1.4.2_01:::::::* cpe:2.3:a:sun:sdk:1.4.2:::::::* cpe:2.3:a:sun:sdk:1.4.1_07:::::::* cpe:2.3:a:sun:sdk:1.4.1_06:::::::* cpe:2.3:a:sun:sdk:1.4.1_05:::::::* cpe:2.3:a:sun:sdk:1.4.1_04:::::::* cpe:2.3:a:sun:sdk:1.4.1_03:::::::* cpe:2.3:a:sun:sdk:1.4.1_02:::::::* cpe:2.3:a:sun:sdk:1.4.1_01:::::::* cpe:2.3:a:sun:sdk:1.4.1:::::::* cpe:2.3:a:sun:sdk:1.4.0_04:::::::* cpe:2.3:a:sun:sdk:1.4.0_03:::::::* cpe:2.3:a:sun:sdk:1.4.0_02:::::::* cpe:2.3:a:sun:sdk:1.4.0_01:::::::* cpe:2.3:a:sun:sdk:1.4.0:::::::* cpe:2.3:a:sun:sdk:1.4:::::::* cpe:2.3:a:sun:sdk:1.3.1_9:::::::* cpe:2.3:a:sun:sdk:1.3.1_8:::::::* cpe:2.3:a:sun:sdk:1.3.1_7:::::::* cpe:2.3:a:sun:sdk:1.3.1_6:::::::* cpe:2.3:a:sun:sdk:1.3.1_5:::::::* cpe:2.3:a:sun:sdk:1.3.1_4:::::::* cpe:2.3:a:sun:sdk:1.3.1_3:::::::* cpe:2.3:a:sun:sdk:1.3.1_28:::::::* cpe:2.3:a:sun:sdk:1.3.1_27:::::::* cpe:2.3:a:sun:sdk:1.3.1_26:::::::* cpe:2.3:a:sun:sdk:1.3.1_25:::::::* cpe:2.3:a:sun:sdk:1.3.1_24:::::::* cpe:2.3:a:sun:sdk:1.3.1_23:::::::* cpe:2.3:a:sun:sdk:1.3.1_22:::::::* cpe:2.3:a:sun:sdk:1.3.1_21:::::::* cpe:2.3:a:sun:sdk:1.3.1_20:::::::* cpe:2.3:a:sun:sdk:1.3.1_2:::::::* cpe:2.3:a:sun:sdk:1.3.1_19:::::::* cpe:2.3:a:sun:sdk:1.3.1_18:::::::* cpe:2.3:a:sun:sdk:1.3.1_17:::::::* cpe:2.3:a:sun:sdk:1.3.1_16:::::::* cpe:2.3:a:sun:sdk:1.3.1_15:::::::* cpe:2.3:a:sun:sdk:1.3.1_14:::::::* cpe:2.3:a:sun:sdk:1.3.1_13:::::::* cpe:2.3:a:sun:sdk:1.3.1_12:::::::* cpe:2.3:a:sun:sdk:1.3.1_11:::::::* cpe:2.3:a:sun:sdk:1.3.1_10:::::::* cpe:2.3:a:sun:sdk:1.3.1_1:::::::* cpe:2.3:a:sun:sdk:1.3.1_09:::::::* cpe:2.3:a:sun:sdk:1.3.1_08:::::::* cpe:2.3:a:sun:sdk:1.3.1_07:::::::* cpe:2.3:a:sun:sdk:1.3.1_06:::::::* cpe:2.3:a:sun:sdk:1.3.1_05:::::::* cpe:2.3:a:sun:sdk:1.3.1_04:::::::* cpe:2.3:a:sun:sdk:1.3.1_03:::::::* cpe:2.3:a:sun:sdk:1.3.1_02:::::::* cpe:2.3:a:sun:sdk:1.3.1_01a:::::::* cpe:2.3:a:sun:sdk:1.3.1_01:::::::* cpe:2.3:a:sun:sdk:1.3.1:::::::* cpe:2.3:a:sun:sdk:1.3.0_05:::::::* cpe:2.3:a:sun:sdk:1.3.0_04:::::::* cpe:2.3:a:sun:sdk:1.3.0_03:::::::* cpe:2.3:a:sun:sdk:1.3.0_02:::::::* cpe:2.3:a:sun:sdk:1.3.0_01:::::::* cpe:2.3:a:sun:sdk:1.3.0:::::::* cpe:2.3:a:sun:sdk:1.3.0::standard::::: cpe:2.3:a:sun:sdk:1.3_05:::::::* cpe:2.3:a:sun:sdk:1.3_02:::::::* cpe:2.3:a:sun:sdk:1.2.2_10:::::::* cpe:2.3:a:sun:sdk:1.2.2_010:::::::* cpe:2.3:a:sun:sdk:1.1.8_007:::::::* cpe:2.3:a:sun:sdk:1.1.3:::::::*	101
Os	Canonical Ubuntu Linux cpe:2.3:o:canonical:ubuntu_linux:10.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:10.04::::lts::: cpe:2.3:o:canonical:ubuntu_linux:9.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:9.04:::::::* cpe:2.3:o:canonical:ubuntu_linux:8.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:8.04::::-::: cpe:2.3:o:canonical:ubuntu_linux:8.04::::lts:::	7
Os	Debian Debian Linux cpe:2.3:o:debian:debian_linux:8.0:::::::* cpe:2.3:o:debian:debian_linux:7.0:::::::* cpe:2.3:o:debian:debian_linux:6.0:::::::* cpe:2.3:o:debian:debian_linux:5.0:::::::* cpe:2.3:o:debian:debian_linux:4.0:::::::*	5
Os	Fedoraproject Fedora cpe:2.3:o:fedoraproject:fedora:14:::::::* cpe:2.3:o:fedoraproject:fedora:13:::::::* cpe:2.3:o:fedoraproject:fedora:12:::::::* cpe:2.3:o:fedoraproject:fedora:11:::::::*	4
Os	Opensuse cpe:2.3:o:opensuse:opensuse:11.2:::::::* cpe:2.3:o:opensuse:opensuse:11.1:::::::* cpe:2.3:o:opensuse:opensuse:11.0:::::::*	3

SAINT Exploits

Description	Link
Java Runtime CMM readMabCurveData Buffer Overflow	More info here
Java Runtime Environment AWT setDiffICM buffer overflow	More info here

ExploitDB Exploits

id	Description
2010-09-27	Java RMIConnectionImpl Deserialization Privilege Escalation Exploit
2010-09-20	Sun Java JRE AWT setDiffICM Buffer Overflow
2010-12-15	Java Statement.invoke() Trusted Method Chain Exploit
2010-09-20	MOAUB #20 - Java CMM readMabCurveData Stack Overflow
2009-12-21	TLS Renegotiation Vulnerability PoC Exploit

OpenVAS Exploits

Date	Description
2012-08-10	Name : Gentoo Security Advisory GLSA 201206-18 (GnuTLS) File : nvt/glsa_201206_18.nasl
2012-04-30	Name : Gentoo Security Advisory GLSA 201203-22 (nginx) File : nvt/glsa_201203_22.nasl
2012-04-16	Name : VMSA-2010-0009: ESXi utilities and ESX Service Console third party updates File : nvt/gb_VMSA-2010-0009.nasl
2012-03-16	Name : VMSA-2011-0003.2 Third party component updates for VMware vCenter Server, vCe... File : nvt/gb_VMSA-2011-0003.nasl
2012-02-12	Name : Gentoo Security Advisory GLSA 201110-05 (gnutls) File : nvt/glsa_201110_05.nasl
2011-08-09	Name : CentOS Update for seamonkey CESA-2009:1432 centos3 i386 File : nvt/gb_CESA-2009_1432_seamonkey_centos3_i386.nasl
2011-08-09	Name : CentOS Update for httpd CESA-2009:1579 centos3 i386 File : nvt/gb_CESA-2009_1579_httpd_centos3_i386.nasl
2011-08-09	Name : CentOS Update for httpd CESA-2009:1579 centos5 i386 File : nvt/gb_CESA-2009_1579_httpd_centos5_i386.nasl
2011-08-09	Name : CentOS Update for httpd CESA-2009:1580 centos4 i386 File : nvt/gb_CESA-2009_1580_httpd_centos4_i386.nasl
2011-08-09	Name : CentOS Update for java CESA-2009:1584 centos5 i386 File : nvt/gb_CESA-2009_1584_java_centos5_i386.nasl
2011-08-09	Name : CentOS Update for openssl CESA-2010:0054 centos5 i386 File : nvt/gb_CESA-2010_0054_openssl_centos5_i386.nasl
2011-08-09	Name : CentOS Update for openssl CESA-2010:0162 centos5 i386 File : nvt/gb_CESA-2010_0162_openssl_centos5_i386.nasl
2011-08-09	Name : CentOS Update for openssl097a CESA-2010:0164 centos5 i386 File : nvt/gb_CESA-2010_0164_openssl097a_centos5_i386.nasl
2011-08-09	Name : CentOS Update for nspr CESA-2010:0165 centos5 i386 File : nvt/gb_CESA-2010_0165_nspr_centos5_i386.nasl
2011-08-09	Name : CentOS Update for gnutls CESA-2010:0166 centos5 i386 File : nvt/gb_CESA-2010_0166_gnutls_centos5_i386.nasl
2011-08-09	Name : CentOS Update for java CESA-2010:0339 centos5 i386 File : nvt/gb_CESA-2010_0339_java_centos5_i386.nasl
2011-08-09	Name : CentOS Update for java CESA-2010:0768 centos5 i386 File : nvt/gb_CESA-2010_0768_java_centos5_i386.nasl
2011-03-09	Name : Gentoo Security Advisory GLSA 201006-18 (sun-jre-bin sun-jdk emul-linux-x86-j... File : nvt/glsa_201006_18.nasl
2011-03-07	Name : Debian Security Advisory DSA 2161-2 (openjdk-6) File : nvt/deb_2161_2.nasl
2011-01-04	Name : HP-UX Update for Java HPSBUX02608 File : nvt/gb_hp_ux_HPSBUX02608.nasl
2010-12-02	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2010-16312 File : nvt/gb_fedora_2010_16312_java-1.6.0-openjdk_fc14.nasl
2010-11-23	Name : Fedora Update for openssl FEDORA-2010-17826 File : nvt/gb_fedora_2010_17826_openssl_fc12.nasl
2010-11-16	Name : Fedora Update for nss FEDORA-2010-15989 File : nvt/gb_fedora_2010_15989_nss_fc12.nasl
2010-11-16	Name : Fedora Update for proftpd FEDORA-2010-17220 File : nvt/gb_fedora_2010_17220_proftpd_fc12.nasl
2010-11-04	Name : Ubuntu Update for openjdk-6, openjdk-6b18 vulnerabilities USN-1010-1 File : nvt/gb_ubuntu_USN_1010_1.nasl
2010-10-22	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2010-16240 File : nvt/gb_fedora_2010_16240_java-1.6.0-openjdk_fc12.nasl
2010-10-22	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2010-16294 File : nvt/gb_fedora_2010_16294_java-1.6.0-openjdk_fc13.nasl
2010-10-19	Name : RedHat Update for java-1.6.0-openjdk RHSA-2010:0768-01 File : nvt/gb_RHSA-2010_0768-01_java-1.6.0-openjdk.nasl
2010-09-27	Name : Ubuntu Update for openssl vulnerability USN-990-1 File : nvt/gb_ubuntu_USN_990_1.nasl
2010-09-27	Name : Ubuntu Update for apache2 vulnerability USN-990-2 File : nvt/gb_ubuntu_USN_990_2.nasl
2010-08-11	Name : Remote Code Execution Vulnerabilities in SChannel (980436) File : nvt/secpod_ms10-049.nasl
2010-07-26	Name : Ubuntu Update for nss vulnerability USN-927-6 File : nvt/gb_ubuntu_USN_927_6.nasl
2010-07-02	Name : Ubuntu Update for nss vulnerability USN-927-4 File : nvt/gb_ubuntu_USN_927_4.nasl
2010-07-02	Name : Ubuntu Update for nspr update USN-927-5 File : nvt/gb_ubuntu_USN_927_5.nasl
2010-06-28	Name : Fedora Update for gnutls FEDORA-2010-9487 File : nvt/gb_fedora_2010_9487_gnutls_fc12.nasl
2010-06-25	Name : Fedora Update for openssl FEDORA-2010-9421 File : nvt/gb_fedora_2010_9421_openssl_fc11.nasl
2010-06-25	Name : Fedora Update for gnutls FEDORA-2010-9518 File : nvt/gb_fedora_2010_9518_gnutls_fc13.nasl
2010-06-18	Name : Fedora Update for openssl FEDORA-2010-9639 File : nvt/gb_fedora_2010_9639_openssl_fc12.nasl
2010-06-07	Name : Fedora Update for httpd FEDORA-2010-6055 File : nvt/gb_fedora_2010_6055_httpd_fc12.nasl
2010-06-07	Name : HP-UX Update for Java HPSBUX02524 File : nvt/gb_hp_ux_HPSBUX02524.nasl
2010-05-28	Name : Fedora Update for openssl FEDORA-2010-8742 File : nvt/gb_fedora_2010_8742_openssl_fc12.nasl
2010-05-28	Name : Java for Mac OS X 10.5 Update 6 File : nvt/macosx_java_for_10_5_upd_6.nasl
2010-05-28	Name : Java for Mac OS X 10.5 Update 7 File : nvt/macosx_java_for_10_5_upd_7.nasl
2010-05-28	Name : Java for Mac OS X 10.6 Update 1 File : nvt/macosx_java_for_10_6_upd_1.nasl
2010-05-28	Name : Java for Mac OS X 10.6 Update 2 File : nvt/macosx_java_for_10_6_upd_2.nasl
2010-05-12	Name : Mac OS X 10.6.2 Update / Mac OS X Security Update 2009-006 File : nvt/macosx_upd_10_6_2_secupd_2009-006.nasl
2010-05-07	Name : Fedora Update for httpd FEDORA-2010-6131 File : nvt/gb_fedora_2010_6131_httpd_fc11.nasl
2010-04-30	Name : HP-UX Update for OpenSSL HPSBUX02517 File : nvt/gb_hp_ux_HPSBUX02517.nasl
2010-04-30	Name : Mandriva Update for java-1.6.0-openjdk MDVSA-2010:084 (java-1.6.0-openjdk) File : nvt/gb_mandriva_MDVSA_2010_084.nasl
2010-04-29	Name : Mandriva Update for firefox MDVSA-2010:070-1 (firefox) File : nvt/gb_mandriva_MDVSA_2010_070_1.nasl
2010-04-29	Name : Mandriva Update for openssl MDVSA-2010:076-1 (openssl) File : nvt/gb_mandriva_MDVSA_2010_076_1.nasl
2010-04-29	Name : SuSE Update for MozillaFirefox,MozillaThunderbird,seamonkey,mozilla-nss SUSE-... File : nvt/gb_suse_2010_021.nasl
2010-04-19	Name : Fedora Update for openssl FEDORA-2010-5357 File : nvt/gb_fedora_2010_5357_openssl_fc11.nasl
2010-04-19	Name : Mandriva Update for openssl MDVSA-2010:076 (openssl) File : nvt/gb_mandriva_MDVSA_2010_076.nasl
2010-04-16	Name : Mandriva Update for firefox MDVSA-2010:070 (firefox) File : nvt/gb_mandriva_MDVSA_2010_070.nasl
2010-04-16	Name : Ubuntu Update for nss vulnerability USN-927-1 File : nvt/gb_ubuntu_USN_927_1.nasl
2010-04-09	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2010-6025 File : nvt/gb_fedora_2010_6025_java-1.6.0-openjdk_fc12.nasl
2010-04-09	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2010-6039 File : nvt/gb_fedora_2010_6039_java-1.6.0-openjdk_fc11.nasl
2010-04-09	Name : Mandriva Update for nss MDVSA-2010:069 (nss) File : nvt/gb_mandriva_MDVSA_2010_069.nasl
2010-04-09	Name : Ubuntu Update for openjdk-6 vulnerabilities USN-923-1 File : nvt/gb_ubuntu_USN_923_1.nasl
2010-04-07	Name : Oracle Java SE Multiple Vulnerabilities (Linux) File : nvt/gb_oracle_java_se_mult_vuln_lin_apr10.nasl
2010-04-07	Name : Oracle Java SE Multiple Vulnerabilities (Windows) File : nvt/gb_oracle_java_se_mult_vuln_win_apr10.nasl
2010-04-06	Name : FreeBSD Ports: seamonkey File : nvt/freebsd_seamonkey0.nasl
2010-04-06	Name : RedHat Update for java-1.6.0-openjdk RHSA-2010:0339-01 File : nvt/gb_RHSA-2010_0339-01_java-1.6.0-openjdk.nasl
2010-04-06	Name : Mac OS X Security Update 2010-001 File : nvt/macosx_secupd_2010-001.nasl
2010-03-31	Name : CentOS Update for openssl CESA-2010:0163 centos3 i386 File : nvt/gb_CESA-2010_0163_openssl_centos3_i386.nasl
2010-03-31	Name : CentOS Update for openssl CESA-2010:0163 centos4 i386 File : nvt/gb_CESA-2010_0163_openssl_centos4_i386.nasl
2010-03-31	Name : CentOS Update for nspr CESA-2010:0165 centos4 i386 File : nvt/gb_CESA-2010_0165_nspr_centos4_i386.nasl
2010-03-31	Name : CentOS Update for gnutls CESA-2010:0167 centos4 i386 File : nvt/gb_CESA-2010_0167_gnutls_centos4_i386.nasl
2010-03-31	Name : RedHat Update for openssl RHSA-2010:0162-01 File : nvt/gb_RHSA-2010_0162-01_openssl.nasl
2010-03-31	Name : RedHat Update for openssl RHSA-2010:0163-01 File : nvt/gb_RHSA-2010_0163-01_openssl.nasl
2010-03-31	Name : RedHat Update for openssl097a RHSA-2010:0164-01 File : nvt/gb_RHSA-2010_0164-01_openssl097a.nasl
2010-03-31	Name : RedHat Update for nss RHSA-2010:0165-01 File : nvt/gb_RHSA-2010_0165-01_nss.nasl
2010-03-31	Name : RedHat Update for gnutls RHSA-2010:0166-01 File : nvt/gb_RHSA-2010_0166-01_gnutls.nasl
2010-03-31	Name : RedHat Update for gnutls RHSA-2010:0167-01 File : nvt/gb_RHSA-2010_0167-01_gnutls.nasl
2010-03-31	Name : Fedora Update for nss FEDORA-2010-3905 File : nvt/gb_fedora_2010_3905_nss_fc11.nasl
2010-03-12	Name : Mandriva Update for cacti MDVA-2010:089 (cacti) File : nvt/gb_mandriva_MDVA_2010_089.nasl
2010-03-02	Name : Fedora Update for httpd FEDORA-2009-12747 File : nvt/gb_fedora_2009_12747_httpd_fc11.nasl
2010-03-02	Name : Fedora Update for nss FEDORA-2010-1127 File : nvt/gb_fedora_2010_1127_nss_fc12.nasl
2010-03-02	Name : Mandriva Update for rsh MDVA-2010:076 (rsh) File : nvt/gb_mandriva_MDVA_2010_076.nasl
2010-03-02	Name : Mandriva Update for x11-driver-video-ati MDVA-2010:084 (x11-driver-video-ati) File : nvt/gb_mandriva_MDVA_2010_084.nasl
2010-02-19	Name : Mandriva Update for mandriva-release MDVA-2010:069 (mandriva-release) File : nvt/gb_mandriva_MDVA_2010_069.nasl
2010-02-15	Name : HP-UX Update for Java HPSBUX02503 File : nvt/gb_hp_ux_HPSBUX02503.nasl
2010-02-11	Name : Microsoft Windows TLS/SSL Spoofing Vulnerability (977377) File : nvt/gb_ms_tls_ssl_spoofing_vuln.nasl
2010-01-20	Name : RedHat Update for openssl RHSA-2010:0054-01 File : nvt/gb_RHSA-2010_0054-01_openssl.nasl
2009-12-30	Name : RedHat Security Advisory RHSA-2009:1694 File : nvt/RHSA_2009_1694.nasl
2009-12-30	Name : Fedora Core 12 FEDORA-2009-12229 (tomcat-native) File : nvt/fcore_2009_12229.nasl
2009-12-30	Name : Fedora Core 11 FEDORA-2009-12305 (tomcat-native) File : nvt/fcore_2009_12305.nasl
2009-12-30	Name : Fedora Core 12 FEDORA-2009-12606 (httpd) File : nvt/fcore_2009_12606.nasl
2009-12-30	Name : Fedora Core 11 FEDORA-2009-13236 (proftpd) File : nvt/fcore_2009_13236.nasl
2009-12-30	Name : Fedora Core 12 FEDORA-2009-13250 (proftpd) File : nvt/fcore_2009_13250.nasl
2009-12-14	Name : RedHat Security Advisory RHSA-2009:1643 File : nvt/RHSA_2009_1643.nasl
2009-12-14	Name : RedHat Security Advisory RHSA-2009:1647 File : nvt/RHSA_2009_1647.nasl
2009-12-14	Name : Fedora Core 10 FEDORA-2009-12604 (httpd) File : nvt/fcore_2009_12604.nasl
2009-12-14	Name : Fedora Core 12 FEDORA-2009-12968 (nss-util) File : nvt/fcore_2009_12968.nasl
2009-12-14	Name : Gentoo Security Advisory GLSA 200912-01 (openssl) File : nvt/glsa_200912_01.nasl
2009-12-10	Name : Fedora Core 12 FEDORA-2009-12750 (nginx) File : nvt/fcore_2009_12750.nasl
2009-12-10	Name : Fedora Core 10 FEDORA-2009-12775 (nginx) File : nvt/fcore_2009_12775.nasl
2009-12-10	Name : Fedora Core 11 FEDORA-2009-12782 (nginx) File : nvt/fcore_2009_12782.nasl
2009-12-10	Name : FreeBSD Security Advisory (FreeBSD-SA-09:15.ssl.asc) File : nvt/freebsdsa_ssl.nasl
2009-12-10	Name : Mandriva Security Advisory MDVSA-2009:197-3 (nss) File : nvt/mdksa_2009_197_3.nasl
2009-12-10	Name : Mandriva Security Advisory MDVSA-2009:310 (openssl) File : nvt/mdksa_2009_310.nasl
2009-12-10	Name : Mandriva Security Advisory MDVSA-2009:323 (apache) File : nvt/mdksa_2009_323.nasl
2009-11-23	Name : Debian Security Advisory DSA 1935-1 (gnutls13 gnutls26) File : nvt/deb_1935_1.nasl
2009-11-23	Name : Gentoo Security Advisory GLSA 200911-02 (sun-jre-bin sun-jdk emul-linux-x86-j... File : nvt/glsa_200911_02.nasl
2009-11-23	Name : CentOS Security Advisory CESA-2009:1584 (java-1.6.0-openjdk) File : nvt/ovcesa2009_1584.nasl
2009-11-23	Name : Sun Java SE Multiple Vulnerabilities - Nov09 (Win) File : nvt/secpod_sun_java_se_mult_vuln_nov09_win.nasl
2009-11-23	Name : SLES9: Security update for OpenSSL File : nvt/sles9p5062661.nasl
2009-11-23	Name : SuSE Security Advisory SUSE-SA:2009:057 (openssl) File : nvt/suse_sa_2009_057.nasl
2009-11-23	Name : SuSE Security Advisory SUSE-SA:2009:058 (java-1_6_0-sun) File : nvt/suse_sa_2009_058.nasl
2009-11-17	Name : RedHat Security Advisory RHSA-2009:1571 File : nvt/RHSA_2009_1571.nasl
2009-11-17	Name : RedHat Security Advisory RHSA-2009:1579 File : nvt/RHSA_2009_1579.nasl
2009-11-17	Name : RedHat Security Advisory RHSA-2009:1580 File : nvt/RHSA_2009_1580.nasl
2009-11-17	Name : RedHat Security Advisory RHSA-2009:1584 File : nvt/RHSA_2009_1584.nasl
2009-11-17	Name : Fedora Core 11 FEDORA-2009-11486 (java-1.6.0-openjdk) File : nvt/fcore_2009_11486.nasl
2009-11-17	Name : Fedora Core 12 FEDORA-2009-11489 (java-1.6.0-openjdk) File : nvt/fcore_2009_11489.nasl
2009-11-17	Name : Fedora Core 10 FEDORA-2009-11490 (java-1.6.0-openjdk) File : nvt/fcore_2009_11490.nasl
2009-11-17	Name : CentOS Security Advisory CESA-2009:1579 (httpd) File : nvt/ovcesa2009_1579.nasl
2009-11-17	Name : CentOS Security Advisory CESA-2009:1580 (httpd) File : nvt/ovcesa2009_1580.nasl
2009-11-17	Name : SLES10: Security update for OpenSSL File : nvt/sles10_compat-openssl02.nasl
2009-11-17	Name : SLES10: Security update for OpenSSL File : nvt/sles10_openssl3.nasl
2009-11-17	Name : SLES11: Security update for libopenssl File : nvt/sles11_libopenssl0_9_82.nasl
2009-11-13	Name : Sun Java JDK/JRE Multiple Vulnerabilities - Nov09 (Linux) File : nvt/gb_sun_java_jre_mult_vuln_nov09_lin.nasl
2009-11-13	Name : Sun Java JDK/JRE Multiple Vulnerabilities - Nov09 (Win) File : nvt/gb_sun_java_jre_mult_vuln_nov09_win.nasl
2009-11-11	Name : RedHat Security Advisory RHSA-2009:1560 File : nvt/RHSA_2009_1560.nasl
2009-10-13	Name : Mandrake Security Advisory MDVSA-2009:258 (openssl) File : nvt/mdksa_2009_258.nasl
2009-09-28	Name : Mandrake Security Advisory MDVSA-2009:237 (openssl) File : nvt/mdksa_2009_237.nasl
2009-09-28	Name : Mandrake Security Advisory MDVSA-2009:238 (openssl) File : nvt/mdksa_2009_238.nasl
2009-09-28	Name : Mandrake Security Advisory MDVSA-2009:239 (openssl) File : nvt/mdksa_2009_239.nasl
2009-09-21	Name : Debian Security Advisory DSA 1888-1 (openssl, openssl097) File : nvt/deb_1888_1.nasl
2009-09-15	Name : RedHat Security Advisory RHSA-2009:1432 File : nvt/RHSA_2009_1432.nasl
2009-09-15	Name : Mandrake Security Advisory MDVSA-2009:197-2 (nss) File : nvt/mdksa_2009_197_2.nasl
2009-09-15	Name : CentOS Security Advisory CESA-2009:1432 (seamonkey) File : nvt/ovcesa2009_1432.nasl
2009-09-15	Name : Ubuntu USN-830-1 (openssl) File : nvt/ubuntu_830_1.nasl
2009-09-02	Name : Debian Security Advisory DSA 1874-1 (nss) File : nvt/deb_1874_1.nasl
2009-09-02	Name : Mandrake Security Advisory MDVSA-2009:216 (mozilla-thunderbird) File : nvt/mdksa_2009_216.nasl
2009-09-02	Name : Ubuntu USN-809-1 (gnutls26) File : nvt/ubuntu_809_1.nasl
2009-08-17	Name : RedHat Security Advisory RHSA-2009:1184 File : nvt/RHSA_2009_1184.nasl
2009-08-17	Name : RedHat Security Advisory RHSA-2009:1186 File : nvt/RHSA_2009_1186.nasl
2009-08-17	Name : RedHat Security Advisory RHSA-2009:1190 File : nvt/RHSA_2009_1190.nasl
2009-08-17	Name : RedHat Security Advisory RHSA-2009:1207 File : nvt/RHSA_2009_1207.nasl
2009-08-17	Name : Mandrake Security Advisory MDVSA-2009:197 (nss) File : nvt/mdksa_2009_197.nasl
2009-08-17	Name : Ubuntu USN-810-1 (nss) File : nvt/ubuntu_810_1.nasl
2009-08-17	Name : Ubuntu USN-810-2 (fixed) File : nvt/ubuntu_810_2.nasl
2009-08-05	Name : Firefox SSL Server Spoofing Vulnerability (Win) File : nvt/gb_firefox_ssl_spoof_vuln_win.nasl
2009-08-05	Name : OpenSSL/GnuTLS SSL Server Spoofing Vulnerability (Win) File : nvt/gb_openssl_n_gnutls_ssl_spoof_vuln_win.nasl
0000-00-00	Name : Slackware Advisory SSA:2009-320-01 openssl File : nvt/esoft_slk_ssa_2009_320_01.nasl
0000-00-00	Name : Slackware Advisory SSA:2010-067-01 httpd File : nvt/esoft_slk_ssa_2010_067_01.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
77832	Parallels Plesk Panel Billing System TLS Renegotiation Handshakes MiTM Plaint...
75622	Blue Coat Director TLS Renegotiation Handshakes MiTM Plaintext Data Injection
74335	Hitachi Web Server TLS Renegotiation Handshakes MiTM Plaintext Data Injection Hitachi Web Server contains a flaw related to the SSL protocol failing to properly associate renegotiation handshakes with an existing connection, allowing a man-in-the-middle attacker to insert data into HTTPS sessions, and possibly other sessions which are protected by TLS or SSL. The issue is triggered when a remote attacker sends an unauthenticated request which is processed retroactively by the server in a post-renegotiation context, related to a plaintext injection attack.
71961	Oracle Fusion Middleware Oracle WebLogic Server TLS Renegotiation Handshakes ... Oracle Fusion Middleware contains a flaw related to the Oracle WebLogic Server component. The component fails to properly associate renegotiation handshakes with an existing connection, allowing a man-in-the-middle attacker to insert data into HTTPS sessions, and possibly other sessions which are protected by TLS or SSL. The issue is triggered when a remote attacker sends an unauthenticated request which is processed retroactively by the server in a post-renegotiation context, related to a plaintext injection attack.
71951	Oracle Multiple Products Oracle Security Service TLS Renegotiation Handshakes... Oracle Database and Fusion Middleware contain a flaw related to the Oracle Security Service component. The component fails to properly associate renegotiation handshakes with an existing connection, allowing a man-in-the-middle attacker to insert data into HTTPS sessions, and possibly other sessions which are protected by TLS or SSL. The issue is triggered when a remote attacker sends an unauthenticated request which is processed retroactively by the server in a post-renegotiation context, related to a plaintext injection attack.
70620	mGuard TLS Renegotiation Handshakes MiTM Plaintext Data Injection mGuard contains a flaw related to the TLS protocol's failure to properly associate renegotiation handshakes with an existing connection. The issue is triggered when a man-in-the-middle attacker uses unauthenticated requests processed retroactively. This may allow an attacker to inject data into HTTPS sessions.
70055	Oracle Supply Chain Transportation Management TLS Renegotiation Handshakes Mi... Oracle Supply Chain contains a flaw related to the Transportation Management component. The component fails to properly associate renegotiation handshakes with an existing connection, allowing a man-in-the-middle attacker to insert data into HTTPS sessions, and possibly other sessions which are protected by TLS or SSL. The issue is triggered when a remote attacker sends an unauthenticated request which is processed retroactively by the server in a post-renegotiation context, related to a plaintext injection attack.
69561	IBM WebSphere MQ Internet Pass-Thru TLS Renegotiation Handshake MiTM Plaintex... IBM WebSphere MQ Internet Pass-Thru contains a flaw related to the TLS Renegotiation Handshake protocol. The issue is triggered when a remote attacker uses a MiTM attack to insert arbitrary plaintext into data sent by a legitimate client.
69032	Oracle Java SE / Java for Business TLS Renegotiation Handshake MiTM Plaintext... Oracle Java SE and Java for Business contains a flaw related to the JSSE component. The application fails to properly associate renegotiation handshakes with an existing connection, allowing a MiTM attacker to use an unauthenticated request to insert data into HTTPS sessions, related to a 'plaintext injection' attack
67029	HP Threat Management Services zl Module TLS Renegotiation Handshakes MiTM Pla...
66315	HP Insight Manager TLS Renegotiation Handshakes MiTM Plaintext Data Injection
65202	OpenOffice.org (OOo) TLS Renegotiation Handshakes MiTM Plaintext Data Injection
64725	HP System Management Homepage (SMH) TLS Renegotiation Handshakes MiTM Plainte...
64499	ArubaOS HTTPS WebUI Admin Interface TLS Renegotiation Handshakes MiTM Plainte...
64040	IBM DB2 TLS Renegotiation Handshakes MiTM Plaintext Data Injection
63505	Oracle Java SE / Java for Business Unpack200 Malformed Data Handling Overflow
63504	Oracle Java SE / Java for Business Java 2D Unspecified Unauthenticated Remote...
63503	Oracle Java SE / Java for Business Java 2D AWT Library Multiple Method Arbitr...
63500	Oracle Java SE / Java for Business Java 2D CMM Module readMabCurveData Functi...
63499	Oracle Java SE / Java for Business HotSpot Server Unspecified Unauthenticated...
63498	Oracle Java SE / Java for Business HotSpot Server Unspecified Unauthenticated...
63489	Oracle Java SE / Java for Business JRE Unspecified Unauthenticated Remote Iss...
63488	Oracle Java SE / Java for Business JRE Unspecified Unauthenticated Remote Iss...
63487	Oracle Java SE / Java for Business JRE Unspecified Unauthenticated Remote Iss...
63486	Oracle Java SE / Java for Business JRE Mutable InetAddress Socket Policy Bypass
63485	Oracle Java SE / Java for Business JRE Unspecified Unauthenticated Remote Iss...
63484	Oracle Java SE / Java for Business JRE RMIConnectionImpl Object Handling Priv...
63483	Oracle Java SE / Java for Business JRE Trusted Methods Chaining Remote Code ...
63482	Oracle Java SE / Java for Business JRE Unspecified Remote Information Disclos...
63481	Oracle Java SE / Java for Business JRE Unspecified Remote Information Disclos...
62877	SSH Tectia Audit Player TLS Renegotiation Handshakes MiTM Plaintext Data Inje...
62536	Blue Coat Products TLS Renegotiation Handshakes MiTM Plaintext Data Injection
62273	Opera TLS Renegotiation Handshakes MiTM Plaintext Data Injection
62210	Aruba Mobility Controller TLS Renegotiation Handshakes MiTM Plaintext Data In...
62135	Network Security Services (NSS) TLS Renegotiation Handshakes MiTM Plaintext D...
62064	IBM Java TLS Renegotiation Handshakes MiTM Plaintext Data Injection
61929	IBM WebSphere Application Server TLS Renegotiation Handshakes MiTM Plaintext ...
61785	Avaya Products Multiple Product TLS Renegotiation Handshakes MiTM Plaintext D...
61784	Sun Java System Multiple Product TLS Renegotiation Handshakes MiTM Plaintext ...
61718	IBM WebSphere DataPower TLS Renegotiation Handshakes MiTM Plaintext Data Inje...
61234	IBM SDK for Java TLS Renegotiation Handshakes MiTM Plaintext Data Injection
60521	Ingate Firewall/SIParator SSL / TLS Renegotiation Handshakes MiTM Plaintext D...
60366	Cisco Multiple Devices TLS Renegotiation Handshakes MiTM Plaintext Data Injec...
59974	MatrixSSL TLS Renegotiation Handshakes MiTM Plaintext Data Injection
59973	Citrix Secure Gateway TLS Renegotiation Handshakes MiTM Plaintext Data Injection
59972	GnuTLS TLS Renegotiation Handshakes MiTM Plaintext Data Injection
59971	OpenSSL TLS Renegotiation Handshakes MiTM Plaintext Data Injection
59970	Mozilla Network Security Services (NSS) SSL / TLS Renegotiation Handshakes Mi...
59969	Apache HTTP Server mod_ssl SSL / TLS Renegotiation Handshakes MiTM Plaintext ...
59968	Microsoft Multiple Products SSL / TLS Renegotiation Handshakes MiTM Plaintext...
59922	Sun Java SE X11 / Win32GraphicsDevice Subsystems getConfigurations Function C...
59921	Sun Java SE JRE Abstract Window Toolkit (AWT) Logger Object Restriction Infor...
59920	Sun Java SE TimeZone.getTimeZone Method tz File Handling Local File Enumeration
59919	Sun Java SE BMP File ICC Profile UNC Pathname Handling DoS
59918	Sun Java SE JRE ICC_Profile.getInstance Method Traversal Arbitrary ICC Profil...
59917	Sun Java SE Resurrected ClassLoader Children Handling Unspecified Remote Priv...
59916	Sun Java SE Swing Implementation Mutable Variable Leak Unspecified Issues
59915	Sun Java SE Swing Implementation Windows Pluggable Look and Feel (PL&F) M...
59714	Sun Java JDK / JRE JPEG Image Writer Unspecified Overflow (6862968)
59710	Sun Java JDK / JRE AWT setDifflCM Library Function Overflow
59709	Sun Java JDK / JRE AWT setBytePixels Library Function Overflow
59708	Sun Java JDK / JRE JPEGImageReader Subsample Dimension Handling Overflow
59707	Sun Java JDK / JRE MessageDigest.isEqual Function HMAC Digest Signature Forge...
59706	Sun Java JDK / JRE HTTP Header Parsing Unspecified Memory Exhaustion DoS
59705	Sun Java JDK / JRE DER Encoded Data Decoding Unspecified Memory Exhaustion DoS
56752	Network Security Services (NSS) Library X.509 Certificate MD2 Hash Collision ...

Information Assurance Vulnerability Management (IAVM)

Date	Description
2012-05-03	IAVM : 2012-B-0048 - Multiple Vulnerabilities in HP Systems Insight Manager Severity : Category I - VMSKEY : V0032178
2012-04-05	IAVM : 2012-B-0038 - Multiple Vulnerabilities in HP Onboard Administrator Severity : Category I - VMSKEY : V0031972
2011-05-12	IAVM : 2011-A-0066 - Multiple Vulnerabilities in VMware Products Severity : Category I - VMSKEY : V0027158

Snort® IPS/IDS

Date	Description
2014-01-10	Phoenix exploit kit post-compromise behavior RuleID : 21860 - Revision : 5 - Type : MALWARE-CNC
2014-01-10	Phoenix exploit kit landing page RuleID : 21640 - Revision : 6 - Type : EXPLOIT-KIT
2014-01-10	Oracle Java runtime RMIConnectionImpl deserialization execution attempt RuleID : 21387 - Revision : 11 - Type : FILE-JAVA
2014-01-10	Eleanore exploit kit post-exploit page request RuleID : 21071 - Revision : 5 - Type : EXPLOIT-KIT
2014-01-10	Eleanore exploit kit pdf exploit page request RuleID : 21070 - Revision : 4 - Type : EXPLOIT-KIT
2014-01-10	Eleanore exploit kit exploit fetch request RuleID : 21069 - Revision : 4 - Type : EXPLOIT-KIT
2014-01-10	Eleanore exploit kit landing page RuleID : 21068 - Revision : 4 - Type : EXPLOIT-KIT
2014-01-10	Oracle Java trusted method chaining attempt RuleID : 20529 - Revision : 9 - Type : FILE-JAVA
2014-01-10	Oracle Java runtime JPEGImageReader overflow attempt RuleID : 20055 - Revision : 11 - Type : FILE-JAVA
2014-01-10	Oracle Java Runtime AWT setDiffICM stack buffer overflow attempt RuleID : 19926 - Revision : 10 - Type : FILE-JAVA
2014-01-10	Oracle Java Runtime CMM readMabCurveData buffer overflow attempt RuleID : 18803 - Revision : 12 - Type : SERVER-WEBAPP
2014-01-10	Oracle Java Runtime AWT setDiffICM stack buffer overflow attempt RuleID : 16288 - Revision : 11 - Type : FILE-JAVA

Nessus® Vulnerability Scanner

Date	Description
2018-04-03	Name : The remote web server may allow remote code execution. File : iis_7_pci.nasl - Type : ACT_GATHER_INFO
2018-03-09	Name : The remote web server is affected by multiple vulnerabilities. File : nginx_0_7_64.nasl - Type : ACT_GATHER_INFO
2017-11-17	Name : The remote host is affected by a MITM vulnerability. File : fortios_FG-IR-17-137.nasl - Type : ACT_GATHER_INFO
2016-03-08	Name : The remote VMware ESX host is missing a security-related patch. File : vmware_VMSA-2010-0001_remote.nasl - Type : ACT_GATHER_INFO
2016-03-08	Name : The remote VMware ESX host is missing a security-related patch. File : vmware_VMSA-2010-0002_remote.nasl - Type : ACT_GATHER_INFO
2016-03-08	Name : The remote VMware ESX / ESXi host is missing a security-related patch. File : vmware_VMSA-2010-0009_remote.nasl - Type : ACT_GATHER_INFO
2016-03-08	Name : The remote VMware ESX host is missing a security-related patch. File : vmware_VMSA-2010-0015_remote.nasl - Type : ACT_GATHER_INFO
2016-03-08	Name : The remote VMware ESX host is missing a security-related patch. File : vmware_VMSA-2010-0019_remote.nasl - Type : ACT_GATHER_INFO
2016-03-04	Name : The remote VMware ESX / ESXi host is missing a security-related patch. File : vmware_VMSA-2011-0003_remote.nasl - Type : ACT_GATHER_INFO
2016-01-25	Name : The remote Debian host is missing a security update. File : debian_DLA-400.nasl - Type : ACT_GATHER_INFO
2015-05-11	Name : The remote Debian host is missing a security-related update. File : debian_DSA-3253.nasl - Type : ACT_GATHER_INFO
2014-11-26	Name : The remote OracleVM host is missing a security update. File : oraclevm_OVMSA-2014-0007.nasl - Type : ACT_GATHER_INFO
2014-11-26	Name : The remote OracleVM host is missing a security update. File : oraclevm_OVMSA-2014-0008.nasl - Type : ACT_GATHER_INFO
2014-10-10	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL10737.nasl - Type : ACT_GATHER_INFO
2014-10-10	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL15663.nasl - Type : ACT_GATHER_INFO
2014-06-30	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201406-32.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_compat-openssl097g-110721.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_gnutls-101025.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_gnutls-101206.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_java-1_6_0-openjdk-101103.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_java-1_6_0-sun-101019.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_compat-openssl097g-110721.nasl - Type : ACT_GATHER_INFO
2014-04-16	Name : The remote AIX host is running a vulnerable version of OpenSSL. File : aix_ssl_advisory.nasl - Type : ACT_GATHER_INFO
2013-11-21	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201311-13.nasl - Type : ACT_GATHER_INFO
2013-09-25	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201309-15.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-1184.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-1431.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-1432.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-1579.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-1580.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-1584.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0054.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0162.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0163.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2010-0164.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0165.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0166.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0167.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0333.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0339.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0768.nasl - Type : ACT_GATHER_INFO
2013-06-29	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-1579.nasl - Type : ACT_GATHER_INFO
2013-06-29	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-1580.nasl - Type : ACT_GATHER_INFO
2013-06-29	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-1584.nasl - Type : ACT_GATHER_INFO
2013-03-09	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-810-3.nasl - Type : ACT_GATHER_INFO
2013-02-22	Name : The remote Unix host contains a runtime environment that is affected by multi... File : oracle_java_cpu_mar_2010_unix.nasl - Type : ACT_GATHER_INFO
2013-02-22	Name : The remote Unix host contains a programming platform that is affected by mult... File : oracle_java_cpu_oct_2010_unix.nasl - Type : ACT_GATHER_INFO
2013-02-22	Name : The remote Unix host contains a runtime environment that is affected by multi... File : sun_java_jre_269868_unix.nasl - Type : ACT_GATHER_INFO
2013-02-18	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2626.nasl - Type : ACT_GATHER_INFO
2013-01-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1190.nasl - Type : ACT_GATHER_INFO
2013-01-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1207.nasl - Type : ACT_GATHER_INFO
2013-01-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0880.nasl - Type : ACT_GATHER_INFO
2013-01-08	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201301-01.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20090731_nspr_and_nss_for_SL_4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20090731_nspr_and_nss_for_SL_5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20090909_seamonkey_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20091109_java__jdk_1_6_0__on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20091111_httpd_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100119_openssl_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100325_gnutls_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100325_nss_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20100325_openssl097a_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100325_openssl_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100325_openssl_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100331_java_1_6_0_openjdk_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100331_java__jdk_1_6_0__on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101013_java_1_6_0_openjdk_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101014_java__jdk_1_6_0__on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101110_java_1_6_0_openjdk_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-06-25	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201206-18.nasl - Type : ACT_GATHER_INFO
2012-06-21	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201203-22.nasl - Type : ACT_GATHER_INFO
2012-06-15	Name : The remote Windows host contains software that is affected by multiple vulner... File : hp_systems_insight_manager_700_multiple_vulns.nasl - Type : ACT_GATHER_INFO
2012-05-17	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_4_2-ibm-7036.nasl - Type : ACT_GATHER_INFO
2012-01-04	Name : The remote server is affected by multiple vulnerabilities. File : openssl_0_9_8l.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_compat-openssl097g-7645.nasl - Type : ACT_GATHER_INFO
2011-10-12	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201110-05.nasl - Type : ACT_GATHER_INFO
2011-07-28	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_compat-openssl097g-110721.nasl - Type : ACT_GATHER_INFO
2011-07-28	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_compat-openssl097g-7644.nasl - Type : ACT_GATHER_INFO
2011-05-13	Name : The remote database server is affected by multiple vulnerabilities. File : oracle_rdbms_cpu_apr_2011.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_1_gnutls-101025.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_1_gnutls-101206.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_1_java-1_6_0-openjdk-101103.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_gnutls-101025.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_gnutls-101206.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_java-1_6_0-openjdk-101103.nasl - Type : ACT_GATHER_INFO
2011-05-02	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12705.nasl - Type : ACT_GATHER_INFO
2011-04-23	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1662.nasl - Type : ACT_GATHER_INFO
2011-03-17	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_MozillaFirefox-100407.nasl - Type : ACT_GATHER_INFO
2011-03-17	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_mozilla-xulrunner190-100407.nasl - Type : ACT_GATHER_INFO
2011-02-14	Name : The remote VMware ESXi / ESX host is missing one or more security-related pat... File : vmware_VMSA-2011-0003.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_gnutls-7299.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_6_0-sun-7204.nasl - Type : ACT_GATHER_INFO
2011-01-25	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_6_0-ibm-101220.nasl - Type : ACT_GATHER_INFO
2011-01-21	Name : The remote SuSE 11 host is missing a security update. File : suse_11_java-1_4_2-ibm-100510.nasl - Type : ACT_GATHER_INFO
2011-01-21	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_4_2-ibm-101112.nasl - Type : ACT_GATHER_INFO
2011-01-21	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_6_0-ibm-100525.nasl - Type : ACT_GATHER_INFO
2011-01-10	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2141.nasl - Type : ACT_GATHER_INFO
2010-12-17	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12658.nasl - Type : ACT_GATHER_INFO
2010-12-16	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0987.nasl - Type : ACT_GATHER_INFO
2010-12-16	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_gnutls-101206.nasl - Type : ACT_GATHER_INFO
2010-12-08	Name : The remote VMware ESX host is missing one or more security-related patches. File : vmware_VMSA-2010-0019.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_MozillaFirefox-100406.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_4_2-ibm-100728.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_6_0-ibm-100610.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_6_0-sun-100331.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_6_0-sun-101019.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libfreebl3-100406.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libopenssl-devel-100331.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_mozilla-xulrunner190-100406.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_5_0-ibm-7205.nasl - Type : ACT_GATHER_INFO
2010-12-01	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12659.nasl - Type : ACT_GATHER_INFO
2010-11-18	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0865.nasl - Type : ACT_GATHER_INFO
2010-10-29	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1010-1.nasl - Type : ACT_GATHER_INFO
2010-10-28	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0807.nasl - Type : ACT_GATHER_INFO
2010-10-22	Name : The remote Fedora host is missing a security update. File : fedora_2010-16240.nasl - Type : ACT_GATHER_INFO
2010-10-22	Name : The remote openSUSE host is missing a security update. File : suse_11_1_java-1_6_0-sun-101019.nasl - Type : ACT_GATHER_INFO
2010-10-22	Name : The remote openSUSE host is missing a security update. File : suse_11_2_java-1_6_0-sun-101019.nasl - Type : ACT_GATHER_INFO
2010-10-21	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0786.nasl - Type : ACT_GATHER_INFO
2010-10-20	Name : The remote web server is affected by multiple vulnerabilities. File : apache_2_0_64.nasl - Type : ACT_GATHER_INFO
2010-10-20	Name : The remote web server is affected by multiple vulnerabilities File : apache_2_2_15.nasl - Type : ACT_GATHER_INFO
2010-10-20	Name : The remote Fedora host is missing a security update. File : fedora_2010-16294.nasl - Type : ACT_GATHER_INFO
2010-10-20	Name : The remote host has a version of Java that is affected by multiple vulnerabil... File : macosx_java_10_5_update8.nasl - Type : ACT_GATHER_INFO
2010-10-20	Name : The remote host has a version of Java that is affected by multiple vulnerabil... File : macosx_java_10_6_update3.nasl - Type : ACT_GATHER_INFO
2010-10-18	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0768.nasl - Type : ACT_GATHER_INFO
2010-10-18	Name : The remote Fedora host is missing a security update. File : fedora_2010-16312.nasl - Type : ACT_GATHER_INFO
2010-10-15	Name : The remote Windows host contains a programming platform that is affected by m... File : oracle_java_cpu_oct_2010.nasl - Type : ACT_GATHER_INFO
2010-10-15	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0770.nasl - Type : ACT_GATHER_INFO
2010-10-14	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0768.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_MozillaFirefox-6979.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_compat-openssl097g-6657.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_4_2-ibm-6755.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_5_0-ibm-6741.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_5_0-ibm-7077.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_mozilla-nss-6978.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_mozilla-xulrunner190-6971.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_openssl-6655.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_openssl-6944.nasl - Type : ACT_GATHER_INFO
2010-10-04	Name : The remote VMware ESX host is missing one or more security-related patches. File : vmware_VMSA-2010-0015.nasl - Type : ACT_GATHER_INFO
2010-09-22	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-990-1.nasl - Type : ACT_GATHER_INFO
2010-09-22	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-990-2.nasl - Type : ACT_GATHER_INFO
2010-09-17	Name : The remote web server is affected by multiple vulnerabilities. File : hpsmh_6_2_0_12.nasl - Type : ACT_GATHER_INFO
2010-09-07	Name : The remote database server is affected by multiple vulnerabilities. File : db2_95fp6.nasl - Type : ACT_GATHER_INFO
2010-09-03	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12626.nasl - Type : ACT_GATHER_INFO
2010-08-11	Name : It may be possible to execute arbitrary code on the remote Windows host using... File : smb_nt_ms10-049.nasl - Type : ACT_GATHER_INFO
2010-07-30	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-239.nasl - Type : ACT_GATHER_INFO
2010-07-30	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0574.nasl - Type : ACT_GATHER_INFO
2010-07-26	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-927-6.nasl - Type : ACT_GATHER_INFO
2010-07-07	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12623.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2009-12747.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-1127.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-3905.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-3929.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-3956.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-5357.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-5942.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-6025.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-6039.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-6131.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-6279.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-8742.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-9487.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-9518.nasl - Type : ACT_GATHER_INFO
2010-06-30	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-927-4.nasl - Type : ACT_GATHER_INFO
2010-06-18	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0489.nasl - Type : ACT_GATHER_INFO
2010-06-15	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0471.nasl - Type : ACT_GATHER_INFO
2010-06-14	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0339.nasl - Type : ACT_GATHER_INFO
2010-06-11	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12621.nasl - Type : ACT_GATHER_INFO
2010-06-07	Name : The remote Windows host has an application installed that is affected by mult... File : openoffice_321.nasl - Type : ACT_GATHER_INFO
2010-06-04	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201006-18.nasl - Type : ACT_GATHER_INFO
2010-06-01	Name : The remote database server is affected by multiple vulnerabilities. File : db2_97fp2.nasl - Type : ACT_GATHER_INFO
2010-06-01	Name : The remote VMware ESXi / ESX host is missing one or more security-related pat... File : vmware_VMSA-2010-0009.nasl - Type : ACT_GATHER_INFO
2010-05-19	Name : The remote web server has multiple vulnerabilities. File : hpsmh_6_1_0_102.nasl - Type : ACT_GATHER_INFO
2010-05-19	Name : The remote host has a version of Java that is affected by multiple vulnerabil... File : macosx_java_10_5_update7.nasl - Type : ACT_GATHER_INFO
2010-05-19	Name : The remote host has a version of Java that is affected by multiple vulnerabil... File : macosx_java_10_6_update2.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0155.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0162.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0163.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2010-0164.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0165.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0166.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0167.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0333.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0337.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2010-0338.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0339.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0383.nasl - Type : ACT_GATHER_INFO
2010-04-30	Name : The remote openSUSE host is missing a security update. File : suse_11_0_java-1_6_0-openjdk-100428.nasl - Type : ACT_GATHER_INFO
2010-04-30	Name : The remote openSUSE host is missing a security update. File : suse_11_1_java-1_6_0-openjdk-100428.nasl - Type : ACT_GATHER_INFO
2010-04-30	Name : The remote openSUSE host is missing a security update. File : suse_11_2_java-1_6_0-openjdk-100412.nasl - Type : ACT_GATHER_INFO
2010-04-29	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-084.nasl - Type : ACT_GATHER_INFO
2010-04-28	Name : The remote database server is affected by multiple issues. File : db2_9fp9.nasl - Type : ACT_GATHER_INFO
2010-04-19	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-076.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-070.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote openSUSE host is missing a security update. File : suse_11_0_firefox35upgrade-100407.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote openSUSE host is missing a security update. File : suse_11_0_mozilla-xulrunner190-100407.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote openSUSE host is missing a security update. File : suse_11_1_MozillaFirefox-branding-openSUSE-100413.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote openSUSE host is missing a security update. File : suse_11_1_firefox35upgrade-100407.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote openSUSE host is missing a security update. File : suse_11_1_mozilla-xulrunner190-100407.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote openSUSE host is missing a security update. File : suse_11_2_MozillaFirefox-100412.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote openSUSE host is missing a security update. File : suse_11_0_libfreebl3-100407.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote openSUSE host is missing a security update. File : suse_11_1_libfreebl3-100407.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote openSUSE host is missing a security update. File : suse_11_2_MozillaThunderbird-100406.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote openSUSE host is missing a security update. File : suse_11_2_libfreebl3-100406.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote openSUSE host is missing a security update. File : suse_11_2_seamonkey-100406.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_MozillaFirefox-6970.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_mozilla-nspr-6977.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_mozilla-xulrunner190-6976.nasl - Type : ACT_GATHER_INFO
2010-04-12	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-927-1.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0333.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-069.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote openSUSE host is missing a security update. File : suse_11_0_java-1_6_0-sun-100331.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote openSUSE host is missing a security update. File : suse_11_1_java-1_6_0-sun-100331.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote openSUSE host is missing a security update. File : suse_11_1_libopenssl-devel-100331.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote openSUSE host is missing a security update. File : suse_11_2_java-1_6_0-sun-100331.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote openSUSE host is missing a security update. File : suse_11_2_libopenssl-devel-100401.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-923-1.nasl - Type : ACT_GATHER_INFO
2010-04-02	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12606.nasl - Type : ACT_GATHER_INFO
2010-03-31	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_9ccfee393c3b11df9edc000f20797ede.nasl - Type : ACT_GATHER_INFO
2010-03-31	Name : The remote Windows host contains a web browser that is affected by multiple v... File : mozilla_firefox_359.nasl - Type : ACT_GATHER_INFO
2010-03-31	Name : The remote Windows host contains a mail client that is affected by multiple v... File : mozilla_thunderbird_304.nasl - Type : ACT_GATHER_INFO
2010-03-31	Name : The remote Windows host contains a web browser that is affected by multiple v... File : seamonkey_204.nasl - Type : ACT_GATHER_INFO
2010-03-31	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_openssl-6943.nasl - Type : ACT_GATHER_INFO
2010-03-31	Name : The remote VMware ESX host is missing a security-related patch. File : vmware_VMSA-2010-0002.nasl - Type : ACT_GATHER_INFO
2010-03-30	Name : The remote Windows host contains a runtime environment that is affected by mu... File : oracle_java_cpu_mar_2010.nasl - Type : ACT_GATHER_INFO
2010-03-29	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0162.nasl - Type : ACT_GATHER_INFO
2010-03-29	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2010-0164.nasl - Type : ACT_GATHER_INFO
2010-03-29	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0165.nasl - Type : ACT_GATHER_INFO
2010-03-29	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0166.nasl - Type : ACT_GATHER_INFO
2010-03-29	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0167.nasl - Type : ACT_GATHER_INFO
2010-03-26	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0163.nasl - Type : ACT_GATHER_INFO
2010-03-23	Name : The remote Windows host contains a web browser that is affected by Multiple V... File : mozilla_firefox_362.nasl - Type : ACT_GATHER_INFO
2010-03-11	Name : The remote web server has multiple SSL-related vulnerabilities. File : openssl_0_9_8m.nasl - Type : ACT_GATHER_INFO
2010-03-09	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2010-067-01.nasl - Type : ACT_GATHER_INFO
2010-03-04	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0130.nasl - Type : ACT_GATHER_INFO
2010-03-02	Name : The remote host contains a web browser that is affected by multiple issues. File : opera_1050.nasl - Type : ACT_GATHER_INFO
2010-02-24	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1874.nasl - Type : ACT_GATHER_INFO
2010-02-24	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1888.nasl - Type : ACT_GATHER_INFO
2010-02-24	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1934.nasl - Type : ACT_GATHER_INFO
2010-02-24	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1935.nasl - Type : ACT_GATHER_INFO
2010-01-21	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0054.nasl - Type : ACT_GATHER_INFO
2010-01-20	Name : The remote host is missing a Mac OS X update that fixes various security issues. File : macosx_SecUpd2010-001.nasl - Type : ACT_GATHER_INFO
2010-01-20	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0054.nasl - Type : ACT_GATHER_INFO
2010-01-15	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0043.nasl - Type : ACT_GATHER_INFO
2010-01-13	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_6_0-ibm-100105.nasl - Type : ACT_GATHER_INFO
2010-01-12	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12565.nasl - Type : ACT_GATHER_INFO
2010-01-12	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_4_2-ibm-100105.nasl - Type : ACT_GATHER_INFO
2010-01-12	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_4_2-ibm-6757.nasl - Type : ACT_GATHER_INFO
2010-01-08	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_5_0-ibm-6740.nasl - Type : ACT_GATHER_INFO
2010-01-08	Name : The remote VMware ESX host is missing a security-related patch. File : vmware_VMSA-2010-0001.nasl - Type : ACT_GATHER_INFO
2009-12-28	Name : The remote Fedora host is missing a security update. File : fedora_2009-13236.nasl - Type : ACT_GATHER_INFO
2009-12-28	Name : The remote Fedora host is missing a security update. File : fedora_2009-13250.nasl - Type : ACT_GATHER_INFO
2009-12-27	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1694.nasl - Type : ACT_GATHER_INFO
2009-12-27	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12564.nasl - Type : ACT_GATHER_INFO
2009-12-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-337.nasl - Type : ACT_GATHER_INFO
2009-12-18	Name : The remote Fedora host is missing a security update. File : fedora_2009-12229.nasl - Type : ACT_GATHER_INFO
2009-12-18	Name : The remote Fedora host is missing a security update. File : fedora_2009-12305.nasl - Type : ACT_GATHER_INFO
2009-12-18	Name : The remote Fedora host is missing a security update. File : fedora_2009-12606.nasl - Type : ACT_GATHER_INFO
2009-12-10	Name : The remote Fedora host is missing a security update. File : fedora_2009-12604.nasl - Type : ACT_GATHER_INFO
2009-12-10	Name : The remote Fedora host is missing a security update. File : fedora_2009-12968.nasl - Type : ACT_GATHER_INFO
2009-12-09	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1647.nasl - Type : ACT_GATHER_INFO
2009-12-08	Name : The remote Fedora host is missing a security update. File : fedora_2009-12750.nasl - Type : ACT_GATHER_INFO
2009-12-08	Name : The remote Fedora host is missing a security update. File : fedora_2009-12775.nasl - Type : ACT_GATHER_INFO
2009-12-08	Name : The remote Fedora host is missing a security update. File : fedora_2009-12782.nasl - Type : ACT_GATHER_INFO
2009-12-08	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-323.nasl - Type : ACT_GATHER_INFO
2009-12-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1643.nasl - Type : ACT_GATHER_INFO
2009-12-04	Name : The remote host has a version of Java that is affected by multiple vulnerabil... File : macosx_java_10_5_update6.nasl - Type : ACT_GATHER_INFO
2009-12-04	Name : The remote host has a version of Java that is affected by multiple vulnerabil... File : macosx_java_10_6_update1.nasl - Type : ACT_GATHER_INFO
2009-12-04	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-310.nasl - Type : ACT_GATHER_INFO
2009-12-02	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200912-01.nasl - Type : ACT_GATHER_INFO
2009-11-30	Name : The remote openSUSE host is missing a security update. File : suse_11_0_java-1_6_0-openjdk-091125.nasl - Type : ACT_GATHER_INFO
2009-11-30	Name : The remote openSUSE host is missing a security update. File : suse_11_1_java-1_6_0-openjdk-091125.nasl - Type : ACT_GATHER_INFO
2009-11-30	Name : The remote openSUSE host is missing a security update. File : suse_11_2_java-1_6_0-openjdk-091127.nasl - Type : ACT_GATHER_INFO
2009-11-24	Name : The remote service allows insecure renegotiation of TLS / SSL connections. File : ssl_renegotiation.nasl - Type : ACT_GATHER_INFO
2009-11-19	Name : The remote openSUSE host is missing a security update. File : suse_11_0_java-1_6_0-sun-091113.nasl - Type : ACT_GATHER_INFO
2009-11-19	Name : The remote openSUSE host is missing a security update. File : suse_11_0_libopenssl-devel-091112.nasl - Type : ACT_GATHER_INFO
2009-11-19	Name : The remote openSUSE host is missing a security update. File : suse_11_1_java-1_6_0-sun-091113.nasl - Type : ACT_GATHER_INFO
2009-11-19	Name : The remote openSUSE host is missing a security update. File : suse_11_1_libopenssl-devel-091112.nasl - Type : ACT_GATHER_INFO
2009-11-19	Name : The remote openSUSE host is missing a security update. File : suse_11_2_java-1_6_0-sun-091113.nasl - Type : ACT_GATHER_INFO
2009-11-19	Name : The remote openSUSE host is missing a security update. File : suse_11_2_libopenssl-devel-091113.nasl - Type : ACT_GATHER_INFO
2009-11-19	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_6_0-sun-091113.nasl - Type : ACT_GATHER_INFO
2009-11-19	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-860-1.nasl - Type : ACT_GATHER_INFO
2009-11-18	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200911-02.nasl - Type : ACT_GATHER_INFO
2009-11-18	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12550.nasl - Type : ACT_GATHER_INFO
2009-11-18	Name : The remote openSUSE host is missing a security update. File : suse_11_0_compat-openssl097g-091113.nasl - Type : ACT_GATHER_INFO
2009-11-18	Name : The remote openSUSE host is missing a security update. File : suse_11_1_compat-openssl097g-091113.nasl - Type : ACT_GATHER_INFO
2009-11-18	Name : The remote openSUSE host is missing a security update. File : suse_11_2_compat-openssl097g-091113.nasl - Type : ACT_GATHER_INFO
2009-11-18	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_compat-openssl097g-6656.nasl - Type : ACT_GATHER_INFO
2009-11-18	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_openssl-6654.nasl - Type : ACT_GATHER_INFO
2009-11-17	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2009-320-01.nasl - Type : ACT_GATHER_INFO
2009-11-17	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1584.nasl - Type : ACT_GATHER_INFO
2009-11-17	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_compat-openssl097g-091113.nasl - Type : ACT_GATHER_INFO
2009-11-17	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libopenssl-devel-091112.nasl - Type : ACT_GATHER_INFO
2009-11-16	Name : The remote Fedora host is missing a security update. File : fedora_2009-11486.nasl - Type : ACT_GATHER_INFO
2009-11-16	Name : The remote Fedora host is missing a security update. File : fedora_2009-11489.nasl - Type : ACT_GATHER_INFO
2009-11-16	Name : The remote Fedora host is missing a security update. File : fedora_2009-11490.nasl - Type : ACT_GATHER_INFO
2009-11-16	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-859-1.nasl - Type : ACT_GATHER_INFO
2009-11-12	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1579.nasl - Type : ACT_GATHER_INFO
2009-11-12	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1580.nasl - Type : ACT_GATHER_INFO
2009-11-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1571.nasl - Type : ACT_GATHER_INFO
2009-11-11	Name : The remote openSUSE host is missing a security update. File : suse_11_0_java-1_5_0-sun-091109.nasl - Type : ACT_GATHER_INFO
2009-11-11	Name : The remote openSUSE host is missing a security update. File : suse_11_1_java-1_5_0-sun-091109.nasl - Type : ACT_GATHER_INFO
2009-11-10	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1560.nasl - Type : ACT_GATHER_INFO
2009-11-09	Name : The remote host is missing a Mac OS X update that fixes various security issues. File : macosx_10_6_2.nasl - Type : ACT_GATHER_INFO
2009-11-09	Name : The remote host is missing a Mac OS X update that fixes various security issues. File : macosx_SecUpd2009-006.nasl - Type : ACT_GATHER_INFO
2009-11-09	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-295.nasl - Type : ACT_GATHER_INFO
2009-11-04	Name : The remote Windows host contains a runtime environment that is affected by mu... File : sun_java_jre_269868.nasl - Type : ACT_GATHER_INFO
2009-10-08	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-258.nasl - Type : ACT_GATHER_INFO
2009-09-22	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-238.nasl - Type : ACT_GATHER_INFO
2009-09-15	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-830-1.nasl - Type : ACT_GATHER_INFO
2009-09-11	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-1431.nasl - Type : ACT_GATHER_INFO
2009-09-11	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-1432.nasl - Type : ACT_GATHER_INFO
2009-09-10	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1431.nasl - Type : ACT_GATHER_INFO
2009-09-10	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1432.nasl - Type : ACT_GATHER_INFO
2009-08-20	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-809-1.nasl - Type : ACT_GATHER_INFO
2009-08-10	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-197.nasl - Type : ACT_GATHER_INFO
2009-08-05	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-810-1.nasl - Type : ACT_GATHER_INFO
2009-08-05	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-810-2.nasl - Type : ACT_GATHER_INFO
2009-07-31	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1184.nasl - Type : ACT_GATHER_INFO
2009-07-31	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1186.nasl - Type : ACT_GATHER_INFO
2009-01-19	Name : The remote host is missing Sun Security Patch number 128640-30 File : solaris10_128640.nasl - Type : ACT_GATHER_INFO
2009-01-19	Name : The remote host is missing Sun Security Patch number 128641-30 File : solaris10_x86_128641.nasl - Type : ACT_GATHER_INFO
2009-01-19	Name : The remote host is missing Sun Security Patch number 128640-30 File : solaris9_128640.nasl - Type : ACT_GATHER_INFO
2009-01-19	Name : The remote host is missing Sun Security Patch number 128641-30 File : solaris9_x86_128641.nasl - Type : ACT_GATHER_INFO
2007-10-12	Name : The remote host is missing Sun Security Patch number 125437-22 File : solaris10_125437.nasl - Type : ACT_GATHER_INFO
2007-10-12	Name : The remote host is missing Sun Security Patch number 125438-22 File : solaris10_x86_125438.nasl - Type : ACT_GATHER_INFO
2007-10-12	Name : The remote host is missing Sun Security Patch number 125437-22 File : solaris8_125437.nasl - Type : ACT_GATHER_INFO
2007-10-12	Name : The remote host is missing Sun Security Patch number 125437-22 File : solaris9_125437.nasl - Type : ACT_GATHER_INFO
2007-10-12	Name : The remote host is missing Sun Security Patch number 125438-22 File : solaris9_x86_125438.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 11:41:26	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	14
Oval ID(s)	129
CPE ID(s)	1752
Saint Exploit(s)	2
osvdb(s)	66
ExploitDB Exploit(s)	5
Openvas Exploit(s)	148
IAVM(s)	3
Snort® Rule(s)	12
Nessus® Exploit(s)	328

	Related
9.8	CVE-2010-0840
9.3	CVE-2009-3874
9.3	CVE-2009-3873
9.3	CVE-2009-3871
9.3	CVE-2009-3869
7.5	CVE-2010-0848
7.5	CVE-2010-0847
7.5	CVE-2010-0838
7.5	CVE-2010-0837
7.5	CVE-2010-0094
7.5	CVE-2009-3883
7.5	CVE-2009-3882
7.5	CVE-2009-3881
7.5	CVE-2009-3879
6.8	CVE-2010-0095
6.8	CVE-2010-0088
5.8	CVE-2009-3555
5.1	CVE-2010-0845
5.1	CVE-2010-0093
5.1	CVE-2010-0092
5.1	CVE-2010-0085
5.1	CVE-2010-0082
5.1	CVE-2009-2409
5	CVE-2010-0084
5	CVE-2009-3885
5	CVE-2009-3884
5	CVE-2009-3880
5	CVE-2009-3877
5	CVE-2009-3876
5	CVE-2009-3875
5	CVE-2009-3728
4.3	CVE-2010-0091
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 32 more Alert(s)