CVE

Id
60373  
CVE No.
CVE-2013-0426  
Status
Candidate  
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-0425 and CVE-2013-0428. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect "access control checks" in the logging API that allow remote attackers to bypass Java sandbox restrictions.  
Phase
Assigned (20121207)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
609031 60373 CVE-2013-0426 CONFIRM:http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html  View
609032 60373 CVE-2013-0426 CONFIRM:http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907346  View
609033 60373 CVE-2013-0426 CONFIRM:http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS  View
609034 60373 CVE-2013-0426 CONFIRM:http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/ce105dd2e4de  View
609035 60373 CVE-2013-0426 CONFIRM:https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056  View
609036 60373 CVE-2013-0426 GENTOO:GLSA-201406-32  View
609037 60373 CVE-2013-0426 URL:http://security.gentoo.org/glsa/glsa-201406-32.xml  View
609038 60373 CVE-2013-0426 HP:HPSBUX02864  View
609039 60373 CVE-2013-0426 URL:http://marc.info/?l=bugtraq&m=136570436423916&w=2  View
609040 60373 CVE-2013-0426 HP:SSRT101156  View
609041 60373 CVE-2013-0426 URL:http://marc.info/?l=bugtraq&m=136570436423916&w=2  View
609042 60373 CVE-2013-0426 HP:HPSBMU02874  View
609043 60373 CVE-2013-0426 URL:http://marc.info/?l=bugtraq&m=136733161405818&w=2  View
609044 60373 CVE-2013-0426 HP:HPSBUX02857  View
609045 60373 CVE-2013-0426 URL:http://marc.info/?l=bugtraq&m=136439120408139&w=2  View
609046 60373 CVE-2013-0426 HP:SSRT101103  View
609047 60373 CVE-2013-0426 URL:http://marc.info/?l=bugtraq&m=136439120408139&w=2  View
609048 60373 CVE-2013-0426 HP:SSRT101184  View
609049 60373 CVE-2013-0426 URL:http://marc.info/?l=bugtraq&m=136733161405818&w=2  View
609050 60373 CVE-2013-0426 MANDRIVA:MDVSA-2013:095  View
609051 60373 CVE-2013-0426 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:095  View
609052 60373 CVE-2013-0426 REDHAT:RHSA-2013:0236  View
609053 60373 CVE-2013-0426 URL:http://rhn.redhat.com/errata/RHSA-2013-0236.html  View
609054 60373 CVE-2013-0426 REDHAT:RHSA-2013:0237  View
609055 60373 CVE-2013-0426 URL:http://rhn.redhat.com/errata/RHSA-2013-0237.html  View
609056 60373 CVE-2013-0426 REDHAT:RHSA-2013:0245  View
609057 60373 CVE-2013-0426 URL:http://rhn.redhat.com/errata/RHSA-2013-0245.html  View
609058 60373 CVE-2013-0426 REDHAT:RHSA-2013:0246  View
609059 60373 CVE-2013-0426 URL:http://rhn.redhat.com/errata/RHSA-2013-0246.html  View
609060 60373 CVE-2013-0426 REDHAT:RHSA-2013:0247  View
609061 60373 CVE-2013-0426 URL:http://rhn.redhat.com/errata/RHSA-2013-0247.html  View
609062 60373 CVE-2013-0426 REDHAT:RHSA-2013:1455  View
609063 60373 CVE-2013-0426 URL:http://rhn.redhat.com/errata/RHSA-2013-1455.html  View
609064 60373 CVE-2013-0426 REDHAT:RHSA-2013:1456  View
609065 60373 CVE-2013-0426 URL:http://rhn.redhat.com/errata/RHSA-2013-1456.html  View
609066 60373 CVE-2013-0426 SUSE:openSUSE-SU-2013:0312  View
609067 60373 CVE-2013-0426 URL:http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html  View
609068 60373 CVE-2013-0426 SUSE:openSUSE-SU-2013:0377  View
609069 60373 CVE-2013-0426 URL:http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html  View
609070 60373 CVE-2013-0426 SUSE:SUSE-SU-2013:0478  View
609071 60373 CVE-2013-0426 URL:http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00034.html  View
609072 60373 CVE-2013-0426 CERT:TA13-032A  View
609073 60373 CVE-2013-0426 URL:http://www.us-cert.gov/cas/techalerts/TA13-032A.html  View
609074 60373 CVE-2013-0426 CERT-VN:VU#858729  View
609075 60373 CVE-2013-0426 URL:http://www.kb.cert.org/vuls/id/858729  View
609076 60373 CVE-2013-0426 OVAL:oval:org.mitre.oval:def:15888  View
609077 60373 CVE-2013-0426 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15888  View
609078 60373 CVE-2013-0426 OVAL:oval:org.mitre.oval:def:19261  View
609079 60373 CVE-2013-0426 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:19261  View
609080 60373 CVE-2013-0426 OVAL:oval:org.mitre.oval:def:19471  View
609081 60373 CVE-2013-0426 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:19471  View
609082 60373 CVE-2013-0426 OVAL:oval:org.mitre.oval:def:19484  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
19770 JVNDB-2013-001345 Oracle Java SE の Java Runtime Environment における JMX の処理に関する脆弱性 Oracle Java SE の Java Runtime Environment (JRE) には、JMX に関する処理に不備があるため、Java セキュリティサンドボックスを回避される脆弱性が存在します。 CVE-2013-0431 60373 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001345.html  View