CVE ID:	CVE-2013-2446
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly enforce access restrictions for CORBA output streams.
Test IDs:	1.3.6.1.4.1.25623.1.0.120022   1.3.6.1.4.1.25623.1.0.120023   1.3.6.1.4.1.25623.1.1.4.2013.1255.1   1.3.6.1.4.1.25623.1.1.4.2013.1255.2   1.3.6.1.4.1.25623.1.1.4.2013.1257.1   1.3.6.1.4.1.25623.1.1.4.2013.1263.1   1.3.6.1.4.1.25623.1.1.4.2013.1255.3   1.3.6.1.4.1.25623.1.1.4.2013.1264.1   1.3.6.1.4.1.25623.1.1.4.2013.1305.1   1.3.6.1.4.1.25623.1.1.4.2013.1263.2
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-2446 BugTraq ID: 60620 http://www.securityfocus.com/bid/60620 Cert/CC Advisory: TA13-169A http://www.us-cert.gov/ncas/alerts/TA13-169A http://security.gentoo.org/glsa/glsa-201406-32.xml HPdes Security Advisory: HPSBUX02907 http://marc.info/?l=bugtraq&m=137545505800971&w=2 HPdes Security Advisory: HPSBUX02908 http://marc.info/?l=bugtraq&m=137545592101387&w=2 HPdes Security Advisory: HPSBUX02922 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880 HPdes Security Advisory: SSRT101305 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880 http://www.mandriva.com/security/advisories?name=MDVSA-2013:183 http://hg.openjdk.java.net/jdk7u/jdk7u-dev/corba/rev/161ec4dd450d https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16311 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19062 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19225 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19658 RedHat Security Advisories: RHSA-2013:0963 http://rhn.redhat.com/errata/RHSA-2013-0963.html RedHat Security Advisories: RHSA-2013:1059 http://rhn.redhat.com/errata/RHSA-2013-1059.html RedHat Security Advisories: RHSA-2013:1060 http://rhn.redhat.com/errata/RHSA-2013-1060.html RedHat Security Advisories: RHSA-2013:1081 http://rhn.redhat.com/errata/RHSA-2013-1081.html RedHat Security Advisories: RHSA-2013:1455 http://rhn.redhat.com/errata/RHSA-2013-1455.html RedHat Security Advisories: RHSA-2013:1456 http://rhn.redhat.com/errata/RHSA-2013-1456.html RedHat Security Advisories: RHSA-2014:0414 https://access.redhat.com/errata/RHSA-2014:0414 http://secunia.com/advisories/54154 SuSE Security Announcement: SUSE-SU-2013:1255 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html SuSE Security Announcement: SUSE-SU-2013:1257 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html SuSE Security Announcement: SUSE-SU-2013:1263 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html SuSE Security Announcement: SUSE-SU-2013:1264 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html SuSE Security Announcement: SUSE-SU-2013:1293 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html SuSE Security Announcement: SUSE-SU-2013:1305 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html