CVE-2013-3009
Fixed in a distro release EPSS 4%
The com.ibm.CORBA.iiop.ClientDelegate class in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 improperly exposes the invoke method of the java.lang.reflect.Method class, which allows remote attackers to call setSecurityManager and bypass a sandbox protection mechanism via vectors related to the AccessController doPrivileged block.
Products: ibm java
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel extras 5 | java-1.5.0-ibm | 1:1.5.0.16.3-1jpp.1.el5_9 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-accessibility | 1:1.5.0.16.3-1jpp.1.el5_9 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-demo | 1:1.5.0.16.3-1jpp.1.el5_9 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-devel | 1:1.5.0.16.3-1jpp.1.el5_9 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-javacomm | 1:1.5.0.16.3-1jpp.1.el5_9 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-jdbc | 1:1.5.0.16.3-1jpp.1.el5_9 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-plugin | 1:1.5.0.16.3-1jpp.1.el5_9 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-src | 1:1.5.0.16.3-1jpp.1.el5_9 |
| Red Hat rhel extras 5 | java-1.6.0-ibm | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-accessibility | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-demo | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-devel | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-javacomm | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-jdbc | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-plugin | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-src | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat rhel extras 5 | java-1.7.0-ibm | 1:1.7.0.5.0-1jpp.2.el5_9 |
| Red Hat rhel extras 5 | java-1.7.0-ibm-demo | 1:1.7.0.5.0-1jpp.2.el5_9 |
| Red Hat rhel extras 5 | java-1.7.0-ibm-devel | 1:1.7.0.5.0-1jpp.2.el5_9 |
| Red Hat rhel extras 5 | java-1.7.0-ibm-jdbc | 1:1.7.0.5.0-1jpp.2.el5_9 |
| Red Hat rhel extras 5 | java-1.7.0-ibm-plugin | 1:1.7.0.5.0-1jpp.2.el5_9 |
| Red Hat rhel extras 5 | java-1.7.0-ibm-src | 1:1.7.0.5.0-1jpp.2.el5_9 |
| Red Hat rhel extras 6 | java-1.5.0-ibm | 1:1.5.0.16.3-1jpp.1.el6_4 |
| Red Hat rhel extras 6 | java-1.5.0-ibm-demo | 1:1.5.0.16.3-1jpp.1.el6_4 |
| Red Hat rhel extras 6 | java-1.5.0-ibm-devel | 1:1.5.0.16.3-1jpp.1.el6_4 |
| Red Hat rhel extras 6 | java-1.5.0-ibm-javacomm | 1:1.5.0.16.3-1jpp.1.el6_4 |
| Red Hat rhel extras 6 | java-1.5.0-ibm-jdbc | 1:1.5.0.16.3-1jpp.1.el6_4 |
| Red Hat rhel extras 6 | java-1.5.0-ibm-plugin | 1:1.5.0.16.3-1jpp.1.el6_4 |
| Red Hat rhel extras 6 | java-1.5.0-ibm-src | 1:1.5.0.16.3-1jpp.1.el6_4 |
| Red Hat rhel extras 6 | java-1.6.0-ibm | 1:1.6.0.14.0-1jpp.1.el6_4 |
| Red Hat rhel extras 6 | java-1.6.0-ibm-demo | 1:1.6.0.14.0-1jpp.1.el6_4 |
| Red Hat rhel extras 6 | java-1.6.0-ibm-devel | 1:1.6.0.14.0-1jpp.1.el6_4 |
| Red Hat rhel extras 6 | java-1.6.0-ibm-javacomm | 1:1.6.0.14.0-1jpp.1.el6_4 |
| Red Hat rhel extras 6 | java-1.6.0-ibm-jdbc | 1:1.6.0.14.0-1jpp.1.el6_4 |
| Red Hat rhel extras 6 | java-1.6.0-ibm-plugin | 1:1.6.0.14.0-1jpp.1.el6_4 |
| Red Hat rhel extras 6 | java-1.6.0-ibm-src | 1:1.6.0.14.0-1jpp.1.el6_4 |
| Red Hat rhel extras 6 | java-1.7.0-ibm | 1:1.7.0.5.0-1jpp.2.el6_4 |
| Red Hat rhel extras 6 | java-1.7.0-ibm-demo | 1:1.7.0.5.0-1jpp.2.el6_4 |
| Red Hat rhel extras 6 | java-1.7.0-ibm-devel | 1:1.7.0.5.0-1jpp.2.el6_4 |
| Red Hat rhel extras 6 | java-1.7.0-ibm-jdbc | 1:1.7.0.5.0-1jpp.2.el6_4 |
| Red Hat rhel extras 6 | java-1.7.0-ibm-plugin | 1:1.7.0.5.0-1jpp.2.el6_4 |
| Red Hat rhel extras 6 | java-1.7.0-ibm-src | 1:1.7.0.5.0-1jpp.2.el6_4 |