CVE ID:	CVE-2013-2454
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via vectors related to JDBC. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly restrict access to certain class packages in the SerialJavaObject class, which allows remote attackers to bypass the Java sandbox.
Test IDs:	1.3.6.1.4.1.25623.1.0.120023   1.3.6.1.4.1.25623.1.1.4.2013.1255.1   1.3.6.1.4.1.25623.1.1.4.2013.1255.2   1.3.6.1.4.1.25623.1.1.4.2013.1257.1   1.3.6.1.4.1.25623.1.1.4.2013.1263.1   1.3.6.1.4.1.25623.1.1.4.2013.1256.1   1.3.6.1.4.1.25623.1.1.4.2013.1255.3   1.3.6.1.4.1.25623.1.1.4.2013.1305.1   1.3.6.1.4.1.25623.1.1.4.2013.1263.2
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-2454 BugTraq ID: 60650 http://www.securityfocus.com/bid/60650 Cert/CC Advisory: TA13-169A http://www.us-cert.gov/ncas/alerts/TA13-169A http://security.gentoo.org/glsa/glsa-201406-32.xml HPdes Security Advisory: HPSBUX02907 http://marc.info/?l=bugtraq&m=137545505800971&w=2 HPdes Security Advisory: HPSBUX02908 http://marc.info/?l=bugtraq&m=137545592101387&w=2 HPdes Security Advisory: HPSBUX02922 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880 HPdes Security Advisory: SSRT101305 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880 http://www.mandriva.com/security/advisories?name=MDVSA-2013:183 http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/ec931d812faa https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17236 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19237 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19407 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19470 RedHat Security Advisories: RHSA-2013:0963 http://rhn.redhat.com/errata/RHSA-2013-0963.html RedHat Security Advisories: RHSA-2013:1059 http://rhn.redhat.com/errata/RHSA-2013-1059.html RedHat Security Advisories: RHSA-2013:1060 http://rhn.redhat.com/errata/RHSA-2013-1060.html RedHat Security Advisories: RHSA-2013:1081 http://rhn.redhat.com/errata/RHSA-2013-1081.html RedHat Security Advisories: RHSA-2013:1455 http://rhn.redhat.com/errata/RHSA-2013-1455.html RedHat Security Advisories: RHSA-2013:1456 http://rhn.redhat.com/errata/RHSA-2013-1456.html RedHat Security Advisories: RHSA-2014:0414 https://access.redhat.com/errata/RHSA-2014:0414 http://secunia.com/advisories/54154 SuSE Security Announcement: SUSE-SU-2013:1255 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html SuSE Security Announcement: SUSE-SU-2013:1256 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html SuSE Security Announcement: SUSE-SU-2013:1257 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html SuSE Security Announcement: SUSE-SU-2013:1263 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html SuSE Security Announcement: SUSE-SU-2013:1293 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html SuSE Security Announcement: SUSE-SU-2013:1305 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html