CVE

Id
61484  
CVE No.
CVE-2013-1537  
Status
Candidate  
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to the default java.rmi.server.useCodebaseOnly setting of false, which allows remote attackers to perform "dynamic class downloading" and execute arbitrary code.  
Phase
Assigned (20130130)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
615525 61484 CVE-2013-1537 FULLDISC:20130205 Re: [SE-2012-01] Details of issues fixed by Feb 2013 Java SE CPU  View
615526 61484 CVE-2013-1537 URL:http://seclists.org/fulldisclosure/2013/Feb/18  View
615527 61484 CVE-2013-1537 MLIST:[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!  View
615528 61484 CVE-2013-1537 URL:http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html  View
615529 61484 CVE-2013-1537 MISC:http://www.oracle.com/technetwork/java/javase/7u21-relnotes-1932873.html#rmichanges  View
615530 61484 CVE-2013-1537 MISC:http://www.security-explorations.com/en/SE-2012-01-details.html  View
615531 61484 CVE-2013-1537 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=952387  View
615532 61484 CVE-2013-1537 CONFIRM:http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html  View
615533 61484 CVE-2013-1537 CONFIRM:http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/  View
615534 61484 CVE-2013-1537 CONFIRM:http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/  View
615535 61484 CVE-2013-1537 CONFIRM:http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/f098e2297ff1  View
615536 61484 CVE-2013-1537 CONFIRM:http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/096ed306159f  View
615537 61484 CVE-2013-1537 CONFIRM:https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124  View
615538 61484 CVE-2013-1537 CONFIRM:https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130  View
615539 61484 CVE-2013-1537 APPLE:APPLE-SA-2013-04-16-2  View
615540 61484 CVE-2013-1537 URL:http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html  View
615541 61484 CVE-2013-1537 GENTOO:GLSA-201406-32  View
615542 61484 CVE-2013-1537 URL:http://security.gentoo.org/glsa/glsa-201406-32.xml  View
615543 61484 CVE-2013-1537 HP:HPSBUX02889  View
615544 61484 CVE-2013-1537 URL:http://marc.info/?l=bugtraq&m=137283787217316&w=2  View
615545 61484 CVE-2013-1537 HP:SSRT101252  View
615546 61484 CVE-2013-1537 URL:http://marc.info/?l=bugtraq&m=137283787217316&w=2  View
615547 61484 CVE-2013-1537 HP:HPSBUX02922  View
615548 61484 CVE-2013-1537 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880  View
615549 61484 CVE-2013-1537 HP:SSRT101305  View
615550 61484 CVE-2013-1537 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880  View
615551 61484 CVE-2013-1537 MANDRIVA:MDVSA-2013:150  View
615552 61484 CVE-2013-1537 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:150  View
615553 61484 CVE-2013-1537 MANDRIVA:MDVSA-2013:145  View
615554 61484 CVE-2013-1537 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:145  View
615555 61484 CVE-2013-1537 MANDRIVA:MDVSA-2013:161  View
615556 61484 CVE-2013-1537 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:161  View
615557 61484 CVE-2013-1537 REDHAT:RHSA-2013:0752  View
615558 61484 CVE-2013-1537 URL:http://rhn.redhat.com/errata/RHSA-2013-0752.html  View
615559 61484 CVE-2013-1537 REDHAT:RHSA-2013:0757  View
615560 61484 CVE-2013-1537 URL:http://rhn.redhat.com/errata/RHSA-2013-0757.html  View
615561 61484 CVE-2013-1537 REDHAT:RHSA-2013:0758  View
615562 61484 CVE-2013-1537 URL:http://rhn.redhat.com/errata/RHSA-2013-0758.html  View
615563 61484 CVE-2013-1537 REDHAT:RHSA-2013:1455  View
615564 61484 CVE-2013-1537 URL:http://rhn.redhat.com/errata/RHSA-2013-1455.html  View
615565 61484 CVE-2013-1537 REDHAT:RHSA-2013:1456  View
615566 61484 CVE-2013-1537 URL:http://rhn.redhat.com/errata/RHSA-2013-1456.html  View
615567 61484 CVE-2013-1537 SUSE:SUSE-SU-2013:0814  View
615568 61484 CVE-2013-1537 URL:http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html  View
615569 61484 CVE-2013-1537 SUSE:openSUSE-SU-2013:0777  View
615570 61484 CVE-2013-1537 URL:http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html  View
615571 61484 CVE-2013-1537 SUSE:SUSE-SU-2013:0835  View
615572 61484 CVE-2013-1537 URL:http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html  View
615573 61484 CVE-2013-1537 SUSE:SUSE-SU-2013:0871  View
615574 61484 CVE-2013-1537 URL:http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html  View
615575 61484 CVE-2013-1537 SUSE:SUSE-SU-2013:0934  View
615576 61484 CVE-2013-1537 URL:http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html  View
615577 61484 CVE-2013-1537 SUSE:openSUSE-SU-2013:0964  View
615578 61484 CVE-2013-1537 URL:http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html  View
615579 61484 CVE-2013-1537 UBUNTU:USN-1806-1  View
615580 61484 CVE-2013-1537 URL:http://www.ubuntu.com/usn/USN-1806-1  View
615581 61484 CVE-2013-1537 CERT:TA13-107A  View
615582 61484 CVE-2013-1537 URL:http://www.us-cert.gov/ncas/alerts/TA13-107A  View
615583 61484 CVE-2013-1537 OVAL:oval:org.mitre.oval:def:16578  View
615584 61484 CVE-2013-1537 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:16578  View
615585 61484 CVE-2013-1537 OVAL:oval:org.mitre.oval:def:19385  View
615586 61484 CVE-2013-1537 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:19385  View
615587 61484 CVE-2013-1537 OVAL:oval:org.mitre.oval:def:19550  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20778 JVNDB-2013-002353 Oracle Fusion Middleware の Oracle Containers for J2EE における Servlet Runtime の処理に関する脆弱性 Oracle Fusion Middleware の Oracle Containers for J2EE には、Servlet Runtime に関する処理に不備があるため、完全性に影響のある脆弱性が存在します。 CVE-2013-1542 61484 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002353.html  View