Test ID:	1.3.6.1.4.1.25623.1.0.102040
Category:	Mac OS X Local Security Checks
Title:	Java for Mac OS X 10.5 Update 2
Summary:	The remote host is missing Java for Mac OS X 10.5 Update 2.
Description:	Summary: The remote host is missing Java for Mac OS X 10.5 Update 2. Affected Software/OS: One or more of the following components are affected: Java Solution: Update your Java for Mac OS X. Please see the references for more information. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-3638 http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html BugTraq ID: 31380 http://www.securityfocus.com/bid/31380 http://www.securitytracker.com/id?1020944 http://secunia.com/advisories/32018 XForce ISS Database: java-macos-plugin-code-execution(45397) https://exchange.xforce.ibmcloud.com/vulnerabilities/45397 Common Vulnerability Exposure (CVE) ID: CVE-2008-3637 http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html BugTraq ID: 31379 http://www.securityfocus.com/bid/31379 http://www.securitytracker.com/id?1020943 XForce ISS Database: java-macos-hmac-code-execution(45396) https://exchange.xforce.ibmcloud.com/vulnerabilities/45396 Common Vulnerability Exposure (CVE) ID: CVE-2008-1185 Cert/CC Advisory: TA08-066A http://www.us-cert.gov/cas/techalerts/TA08-066A.html http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml http://security.gentoo.org/glsa/glsa-200804-28.xml http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9672 http://www.redhat.com/support/errata/RHSA-2008-0186.html http://securitytracker.com/id?1019555 http://secunia.com/advisories/29239 http://secunia.com/advisories/29273 http://secunia.com/advisories/29582 http://secunia.com/advisories/29858 http://secunia.com/advisories/30676 http://secunia.com/advisories/30780 http://sunsolve.sun.com/search/document.do?assetkey=1-26-233321-1 SuSE Security Announcement: SUSE-SA:2008:018 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html http://www.vupen.com/english/advisories/2008/0770/references http://www.vupen.com/english/advisories/2008/1856/references XForce ISS Database: java-virtualmachine-multiple-priv-escalation(41025) https://exchange.xforce.ibmcloud.com/vulnerabilities/41025 XForce ISS Database: sun-jre-unspecified-priv-escalation(41138) https://exchange.xforce.ibmcloud.com/vulnerabilities/41138 Common Vulnerability Exposure (CVE) ID: CVE-2008-1186 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9585 Common Vulnerability Exposure (CVE) ID: CVE-2008-1187 http://dev2dev.bea.com/pub/advisory/277 http://jvn.jp/en/jp/JVN04032535/index.html http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000016.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10278 http://www.redhat.com/support/errata/RHSA-2008-0210.html http://www.redhat.com/support/errata/RHSA-2008-0243.html http://www.redhat.com/support/errata/RHSA-2008-0244.html http://www.redhat.com/support/errata/RHSA-2008-0245.html http://www.redhat.com/support/errata/RHSA-2008-0267.html http://www.redhat.com/support/errata/RHSA-2008-0555.html http://www.securitytracker.com/id?1019548 http://secunia.com/advisories/29498 http://secunia.com/advisories/29841 http://secunia.com/advisories/29897 http://secunia.com/advisories/29999 http://secunia.com/advisories/30003 http://secunia.com/advisories/31067 http://secunia.com/advisories/31497 http://secunia.com/advisories/31580 http://secunia.com/advisories/31586 http://sunsolve.sun.com/search/document.do?assetkey=1-26-233322-1 SuSE Security Announcement: SUSE-SA:2008:025 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html http://www.vupen.com/english/advisories/2008/1252 Common Vulnerability Exposure (CVE) ID: CVE-2008-1188 http://www.zerodayinitiative.com/advisories/ZDI-08-009/ http://www.zerodayinitiative.com/advisories/ZDI-08-010/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11209 http://www.securitytracker.com/id?1019549 http://sunsolve.sun.com/search/document.do?assetkey=1-26-233323-1 XForce ISS Database: javawebstart-application-priv-escalation(41029) https://exchange.xforce.ibmcloud.com/vulnerabilities/41029 XForce ISS Database: javawebstart-multiple-unspecified-bo(41133) https://exchange.xforce.ibmcloud.com/vulnerabilities/41133 Common Vulnerability Exposure (CVE) ID: CVE-2008-1189 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9582 XForce ISS Database: javawebstart-unspecified-bo(41135) https://exchange.xforce.ibmcloud.com/vulnerabilities/41135 Common Vulnerability Exposure (CVE) ID: CVE-2008-1190 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9914 Common Vulnerability Exposure (CVE) ID: CVE-2008-1191 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10167 XForce ISS Database: javawebstart-unspecified-priv-escalation(41136) https://exchange.xforce.ibmcloud.com/vulnerabilities/41136 Common Vulnerability Exposure (CVE) ID: CVE-2008-1192 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11813 http://www.securitytracker.com/id?1019550 http://sunsolve.sun.com/search/document.do?assetkey=1-26-233324-1 XForce ISS Database: java-plugin-unspecified-security-bypass(41031) https://exchange.xforce.ibmcloud.com/vulnerabilities/41031 Common Vulnerability Exposure (CVE) ID: CVE-2008-1195 Bugtraq: 20080327 rPSA-2008-0128-1 firefox (Google Search) http://www.securityfocus.com/archive/1/490196/100/0/threaded Cert/CC Advisory: TA08-087A http://www.us-cert.gov/cas/techalerts/TA08-087A.html http://www.mandriva.com/security/advisories?name=MDVSA-2008:080 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9486 http://www.securitytracker.com/id?1019553 http://secunia.com/advisories/29526 http://secunia.com/advisories/29541 http://secunia.com/advisories/29547 http://secunia.com/advisories/29560 http://secunia.com/advisories/29645 http://secunia.com/advisories/30620 http://sunsolve.sun.com/search/document.do?assetkey=1-26-233326-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 SuSE Security Announcement: SUSE-SA:2008:019 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html http://www.ubuntu.com/usn/usn-592-1 http://www.vupen.com/english/advisories/2008/0998/references http://www.vupen.com/english/advisories/2008/1793/references XForce ISS Database: sun-jre-javascript-unauthorized-access(41030) https://exchange.xforce.ibmcloud.com/vulnerabilities/41030 Common Vulnerability Exposure (CVE) ID: CVE-2008-1196 CERT/CC vulnerability note: VU#223028 http://www.kb.cert.org/vuls/id/223028 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10412 http://www.securitytracker.com/id?1019552 http://sunsolve.sun.com/search/document.do?assetkey=1-26-233327-1 XForce ISS Database: sun-java-webstart-javaws-bo(41026) https://exchange.xforce.ibmcloud.com/vulnerabilities/41026 Common Vulnerability Exposure (CVE) ID: CVE-2008-3104 BugTraq ID: 30140 http://www.securityfocus.com/bid/30140 Bugtraq: 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and (Google Search) http://marc.info/?l=bugtraq&m=122331139823057&w=2 Bugtraq: 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues (Google Search) http://www.securityfocus.com/archive/1/497041/100/0/threaded Cert/CC Advisory: TA08-193A http://www.us-cert.gov/cas/techalerts/TA08-193A.html http://security.gentoo.org/glsa/glsa-200911-02.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9565 http://www.redhat.com/support/errata/RHSA-2008-0594.html http://www.redhat.com/support/errata/RHSA-2008-0595.html http://www.redhat.com/support/errata/RHSA-2008-0790.html http://www.redhat.com/support/errata/RHSA-2008-0906.html RedHat Security Advisories: RHSA-2008:0955 http://rhn.redhat.com/errata/RHSA-2008-0955.html http://www.redhat.com/support/errata/RHSA-2008-1043.html http://www.redhat.com/support/errata/RHSA-2008-1044.html http://www.redhat.com/support/errata/RHSA-2008-1045.html http://www.securitytracker.com/id?1020459 http://secunia.com/advisories/31010 http://secunia.com/advisories/31055 http://secunia.com/advisories/31269 http://secunia.com/advisories/31320 http://secunia.com/advisories/31600 http://secunia.com/advisories/31736 http://secunia.com/advisories/32179 http://secunia.com/advisories/32180 http://secunia.com/advisories/32436 http://secunia.com/advisories/32826 http://secunia.com/advisories/33194 http://secunia.com/advisories/33236 http://secunia.com/advisories/33237 http://secunia.com/advisories/33238 http://secunia.com/advisories/35065 http://secunia.com/advisories/37386 http://sunsolve.sun.com/search/document.do?assetkey=1-66-238968-1 SuSE Security Announcement: SUSE-SA:2008:042 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html SuSE Security Announcement: SUSE-SA:2008:043 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00000.html SuSE Security Announcement: SUSE-SA:2008:045 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00002.html SuSE Security Announcement: SUSE-SR:2008:028 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html SuSE Security Announcement: SUSE-SR:2009:010 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html http://www.vupen.com/english/advisories/2008/2056/references http://www.vupen.com/english/advisories/2008/2740 XForce ISS Database: sun-jre-unspecified-security-bypass(43662) https://exchange.xforce.ibmcloud.com/vulnerabilities/43662 Common Vulnerability Exposure (CVE) ID: CVE-2008-3107 BugTraq ID: 30141 http://www.securityfocus.com/bid/30141 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10219 http://www.securitytracker.com/id?1020455 http://sunsolve.sun.com/search/document.do?assetkey=1-66-238967-1 XForce ISS Database: sun-virtualmachine-unauth-access(43659) https://exchange.xforce.ibmcloud.com/vulnerabilities/43659 Common Vulnerability Exposure (CVE) ID: CVE-2008-3108 BugTraq ID: 30147 http://www.securityfocus.com/bid/30147 http://www.securitytracker.com/id?1020461 http://sunsolve.sun.com/search/document.do?assetkey=1-66-238666-1 XForce ISS Database: sun-jre-font-bo(43656) https://exchange.xforce.ibmcloud.com/vulnerabilities/43656 Common Vulnerability Exposure (CVE) ID: CVE-2008-3111 BugTraq ID: 30148 http://www.securityfocus.com/bid/30148 Bugtraq: 20080717 ZDI-08-043: Sun Java Web Start vm args Stack Buffer Overflow (Google Search) http://www.securityfocus.com/archive/1/494505/100/0/threaded http://www.zerodayinitiative.com/advisories/ZDI-08-043/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10541 http://www.securitytracker.com/id?1020452 http://sunsolve.sun.com/search/document.do?assetkey=1-66-238905-1 XForce ISS Database: sun-javawebstart-unspecified-bo(43664) https://exchange.xforce.ibmcloud.com/vulnerabilities/43664 Common Vulnerability Exposure (CVE) ID: CVE-2008-3112 http://www.zerodayinitiative.com/advisories/ZDI-08-042/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11102 XForce ISS Database: sun-javawebstart-file-create(43666) https://exchange.xforce.ibmcloud.com/vulnerabilities/43666 Common Vulnerability Exposure (CVE) ID: CVE-2008-3113 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10454 XForce ISS Database: sun-javawebstart-file-manipulation(43667) https://exchange.xforce.ibmcloud.com/vulnerabilities/43667 Common Vulnerability Exposure (CVE) ID: CVE-2008-3114 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9755 XForce ISS Database: sun-javawebstart-cache-info-disclosure(43668) https://exchange.xforce.ibmcloud.com/vulnerabilities/43668 Common Vulnerability Exposure (CVE) ID: CVE-2008-1193 BugTraq ID: 28125 http://www.securityfocus.com/bid/28125 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11409 http://www.securitytracker.com/id?1019551 http://sunsolve.sun.com/search/document.do?assetkey=1-26-233325-1 XForce ISS Database: sun-jre-imagelibrary-privilege-escalation(41028) https://exchange.xforce.ibmcloud.com/vulnerabilities/41028 Common Vulnerability Exposure (CVE) ID: CVE-2008-1194 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9542 XForce ISS Database: sun-jre-jdk-colorlibrary-dos(41132) https://exchange.xforce.ibmcloud.com/vulnerabilities/41132 Common Vulnerability Exposure (CVE) ID: CVE-2008-3103 BugTraq ID: 30146 http://www.securityfocus.com/bid/30146 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10920 http://www.redhat.com/support/errata/RHSA-2008-0891.html RedHat Security Advisories: RHSA-2009:0466 https://rhn.redhat.com/errata/RHSA-2009-0466.html http://www.securitytracker.com/id?1020458 http://secunia.com/advisories/32394 http://secunia.com/advisories/32437 http://secunia.com/advisories/34972 http://sunsolve.sun.com/search/document.do?assetkey=1-66-238965-1 SuSE Security Announcement: SUSE-SR:2008:022 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html XForce ISS Database: sun-jmx-security-bypass(43669) https://exchange.xforce.ibmcloud.com/vulnerabilities/43669 Common Vulnerability Exposure (CVE) ID: CVE-2008-3115 BugTraq ID: 30142 http://www.securityfocus.com/bid/30142 http://www.securitytracker.com/id?1020460 http://sunsolve.sun.com/search/document.do?assetkey=1-66-238966-1 XForce ISS Database: sun-securestatic-weak-security(43665) https://exchange.xforce.ibmcloud.com/vulnerabilities/43665 Common Vulnerability Exposure (CVE) ID: CVE-2008-3105 BugTraq ID: 30143 http://www.securityfocus.com/bid/30143 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11274 http://www.securitytracker.com/id?1020457 http://sunsolve.sun.com/search/document.do?assetkey=1-66-238628-1 XForce ISS Database: sun-jre-jaxws-unauth-access(43654) https://exchange.xforce.ibmcloud.com/vulnerabilities/43654 XForce ISS Database: sun-jre-xml-dos(43657) https://exchange.xforce.ibmcloud.com/vulnerabilities/43657 Common Vulnerability Exposure (CVE) ID: CVE-2008-3106 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10866 XForce ISS Database: sun-jre-xml-unauth-access(43658) https://exchange.xforce.ibmcloud.com/vulnerabilities/43658 Common Vulnerability Exposure (CVE) ID: CVE-2008-3109 BugTraq ID: 30144 http://www.securityfocus.com/bid/30144 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8540 http://www.securitytracker.com/id?1020456 http://sunsolve.sun.com/search/document.do?assetkey=1-66-238687-1 XForce ISS Database: sun-jre-scripting-unauth-access(43660) https://exchange.xforce.ibmcloud.com/vulnerabilities/43660 Common Vulnerability Exposure (CVE) ID: CVE-2008-3110 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10734 XForce ISS Database: sun-jre-scripting-info-disclosure(43661) https://exchange.xforce.ibmcloud.com/vulnerabilities/43661
Copyright	Copyright (C) 2010 LSS

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.