CVE ID:	CVE-2013-1537
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to the default java.rmi.server.useCodebaseOnly setting of false, which allows remote attackers to perform "dynamic class downloading" and execute arbitrary code.
Test IDs:	1.3.6.1.4.1.25623.1.0.881718   1.3.6.1.4.1.25623.1.0.870982   1.3.6.1.4.1.25623.1.0.881719   1.3.6.1.4.1.25623.1.0.881724   1.3.6.1.4.1.25623.1.0.870988   1.3.6.1.4.1.25623.1.0.870981   1.3.6.1.4.1.25623.1.0.881715   1.3.6.1.4.1.25623.1.1.4.2013.0871.1   1.3.6.1.4.1.25623.1.1.4.2013.0871.2   1.3.6.1.4.1.25623.1.1.4.2013.0835.2   1.3.6.1.4.1.25623.1.1.4.2013.0934.1   1.3.6.1.4.1.25623.1.1.4.2013.0835.3   1.3.6.1.4.1.25623.1.1.4.2013.0835.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1537 http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html BugTraq ID: 59194 http://www.securityfocus.com/bid/59194 Cert/CC Advisory: TA13-107A http://www.us-cert.gov/ncas/alerts/TA13-107A http://seclists.org/fulldisclosure/2013/Feb/18 http://security.gentoo.org/glsa/glsa-201406-32.xml HPdes Security Advisory: HPSBUX02889 http://marc.info/?l=bugtraq&m=137283787217316&w=2 HPdes Security Advisory: HPSBUX02922 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880 HPdes Security Advisory: SSRT101252 http://marc.info/?l=bugtraq&m=137283787217316&w=2 HPdes Security Advisory: SSRT101305 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880 http://www.mandriva.com/security/advisories?name=MDVSA-2013:145 http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 http://www.mandriva.com/security/advisories?name=MDVSA-2013:161 http://www.oracle.com/technetwork/java/javase/7u21-relnotes-1932873.html#rmichanges http://www.security-explorations.com/en/SE-2012-01-details.html https://bugzilla.redhat.com/show_bug.cgi?id=952387 http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16578 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19385 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19550 RedHat Security Advisories: RHSA-2013:0752 http://rhn.redhat.com/errata/RHSA-2013-0752.html RedHat Security Advisories: RHSA-2013:0757 http://rhn.redhat.com/errata/RHSA-2013-0757.html RedHat Security Advisories: RHSA-2013:0758 http://rhn.redhat.com/errata/RHSA-2013-0758.html RedHat Security Advisories: RHSA-2013:1455 http://rhn.redhat.com/errata/RHSA-2013-1455.html RedHat Security Advisories: RHSA-2013:1456 http://rhn.redhat.com/errata/RHSA-2013-1456.html SuSE Security Announcement: SUSE-SU-2013:0814 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html SuSE Security Announcement: SUSE-SU-2013:0835 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html SuSE Security Announcement: SUSE-SU-2013:0871 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html SuSE Security Announcement: SUSE-SU-2013:0934 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html SuSE Security Announcement: openSUSE-SU-2013:0777 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html SuSE Security Announcement: openSUSE-SU-2013:0964 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html http://www.ubuntu.com/usn/USN-1806-1