CVE-2007-5273
Fixed in a distro release EPSS 3%
Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when an HTTP proxy server is used, allows remote attackers to violate the security model for an applet's outbound connections via a multi-pin DNS rebinding attack in which the applet download relies on DNS resolution on the proxy server, but the applet's socket operations rely on DNS resolution on the local machine, a different issue than CVE-2007-5274. NOTE: this is similar to CVE-2007-5232.
Products: sun jdk, sun jre, sun sdk
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel extras 3 | java-1.4.2-bea | 0:1.4.2.16-1jpp.1.el3 |
| Red Hat rhel extras 3 | java-1.4.2-bea-devel | 0:1.4.2.16-1jpp.1.el3 |
| Red Hat rhel extras 3 | java-1.4.2-bea-jdbc | 0:1.4.2.16-1jpp.1.el3 |
| Red Hat rhel extras 3 | java-1.4.2-ibm | 0:1.4.2.10-1jpp.2.el3 |
| Red Hat rhel extras 3 | java-1.4.2-ibm-demo | 0:1.4.2.10-1jpp.2.el3 |
| Red Hat rhel extras 3 | java-1.4.2-ibm-devel | 0:1.4.2.10-1jpp.2.el3 |
| Red Hat rhel extras 3 | java-1.4.2-ibm-jdbc | 0:1.4.2.10-1jpp.2.el3 |
| Red Hat rhel extras 3 | java-1.4.2-ibm-plugin | 0:1.4.2.10-1jpp.2.el3 |
| Red Hat rhel extras 3 | java-1.4.2-ibm-src | 0:1.4.2.10-1jpp.2.el3 |
| Red Hat rhel extras 4 | java-1.4.2-ibm | 0:1.4.2.10-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.4.2-ibm-demo | 0:1.4.2.10-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.4.2-ibm-devel | 0:1.4.2.10-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.4.2-ibm-javacomm | 0:1.4.2.10-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.4.2-ibm-jdbc | 0:1.4.2.10-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.4.2-ibm-plugin | 0:1.4.2.10-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.4.2-ibm-src | 0:1.4.2.10-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.5.0-ibm | 1:1.5.0.6-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.5.0-ibm-demo | 1:1.5.0.6-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.5.0-ibm-devel | 1:1.5.0.6-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.5.0-ibm-javacomm | 1:1.5.0.6-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.5.0-ibm-jdbc | 1:1.5.0.6-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.5.0-ibm-plugin | 1:1.5.0.6-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.5.0-ibm-src | 1:1.5.0.6-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.5.0-sun | 0:1.5.0.13-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.5.0-sun-demo | 0:1.5.0.13-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.5.0-sun-devel | 0:1.5.0.13-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.5.0-sun-jdbc | 0:1.5.0.13-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.5.0-sun-plugin | 0:1.5.0.13-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.5.0-sun-src | 0:1.5.0.13-1jpp.1.el4 |
| Red Hat rhel extras 5 | java-1.4.2-bea | 0:1.4.2.16-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.4.2-bea-demo | 0:1.4.2.16-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.4.2-bea-devel | 0:1.4.2.16-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.4.2-bea-jdbc | 0:1.4.2.16-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.4.2-bea-missioncontrol | 0:1.4.2.16-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.4.2-bea-src | 0:1.4.2.16-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.4.2-ibm | 0:1.4.2.10-1jpp.2.el5 |
| Red Hat rhel extras 5 | java-1.4.2-ibm-demo | 0:1.4.2.10-1jpp.2.el5 |
| Red Hat rhel extras 5 | java-1.4.2-ibm-devel | 0:1.4.2.10-1jpp.2.el5 |
| Red Hat rhel extras 5 | java-1.4.2-ibm-javacomm | 0:1.4.2.10-1jpp.2.el5 |
| Red Hat rhel extras 5 | java-1.4.2-ibm-jdbc | 0:1.4.2.10-1jpp.2.el5 |
| Red Hat rhel extras 5 | java-1.4.2-ibm-plugin | 0:1.4.2.10-1jpp.2.el5 |
| Red Hat rhel extras 5 | java-1.4.2-ibm-src | 0:1.4.2.10-1jpp.2.el5 |
| Red Hat rhel extras 5 | java-1.5.0-bea | 0:1.5.0.14-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-bea-demo | 0:1.5.0.14-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-bea-devel | 0:1.5.0.14-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-bea-jdbc | 0:1.5.0.14-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-bea-missioncontrol | 0:1.5.0.14-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-bea-src | 0:1.5.0.14-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm | 1:1.5.0.6-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-accessibility | 1:1.5.0.6-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-demo | 1:1.5.0.6-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-devel | 1:1.5.0.6-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-javacomm | 1:1.5.0.6-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-jdbc | 1:1.5.0.6-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-plugin | 1:1.5.0.6-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-src | 1:1.5.0.6-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-sun | 0:1.5.0.13-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-sun-demo | 0:1.5.0.13-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-sun-devel | 0:1.5.0.13-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-sun-jdbc | 0:1.5.0.13-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-sun-plugin | 0:1.5.0.13-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-sun-src | 0:1.5.0.13-1jpp.1.el5 |