Upstream information

CVE-2007-3922 at MITRE

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) Applet Class Loader in Sun JDK and JRE 5.0 Update 11 and earlier, 6 through 6 Update 1, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to violate the security model for an applet's outbound connections by connecting to certain localhost services running on the machine that loaded the applet.

SUSE information

Overall state of this security issue: Ignore

This issue is currently rated as having moderate severity.

CVSS v2 Scores
  National Vulnerability Database
Base Score 6.8
Vector AV:N/AC:M/Au:N/C:P/I:P/A:P
Access Vector Network
Access Complexity Medium
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact Partial
SUSE Bugzilla entries: 295756 [RESOLVED / FIXED], 303898 [RESOLVED / FIXED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Server 11 SP1
  • java-1_4_2-ibm >= 1.4.2_sr13.3-1.1.1
  • java-1_4_2-ibm-jdbc >= 1.4.2_sr13.3-1.1.1
  • java-1_4_2-ibm-plugin >= 1.4.2_sr13.3-1.1.1
Patchnames:
SUSE Linux Enterprise Server 11 SP1 GA java-1_4_2-ibm
SUSE Linux Enterprise Server 11 SP2
  • java-1_4_2-ibm >= 1.4.2_sr13.10-0.4.1
  • java-1_4_2-ibm-jdbc >= 1.4.2_sr13.10-0.4.1
  • java-1_4_2-ibm-plugin >= 1.4.2_sr13.10-0.4.1
Patchnames:
SUSE Linux Enterprise Server 11 SP2 GA java-1_4_2-ibm
SUSE LINUX Retail Solution 8
SuSE Linux Enterprise Server 8 for AMD64
SuSE Linux Enterprise Server 8 for IBM iSeries and IBM pSeries
SuSE Linux Openexchange Server 4
SuSE Linux School Server for i386
SuSE Linux Standard Server 8
UnitedLinux 1.0
  • IBMJava2-JRE >= 1.3.1-246
  • IBMJava2-SDK >= 1.3.1-246
core9.s390
core9.x86
slrs8.x86
YOU Patch Nr: 11918
Open Enterprise Server
  • IBMJava2-JRE >= 1.4.2-0.92.5
  • IBMJava2-SDK >= 1.4.2-0.92.5
core9.s390
core9.x86
slrs8.x86
YOU Patch Nr: 11918
SUSE LINUX Retail Solution 8
SuSE Linux Enterprise Server 8 for AMD64
SuSE Linux Enterprise Server 8 for IBM iSeries and IBM pSeries
SuSE Linux Openexchange Server 4
SuSE Linux School Server for i386
SuSE Linux Standard Server 8
UnitedLinux 1.0
  • IBMJava2-JRE_1_4 >= 1.4.2-0.22
  • IBMJava2-SDK_1_4 >= 1.4.2-0.22
ul1.s390
slrs8.x86
YOU Patch Nr: 11919
SuSE Linux Enterprise Server 8 for IBM zSeries
  • IBMJava2-SDK_1_4 >= 1.4.2-0.22
ul1.s390
slrs8.x86
YOU Patch Nr: 11919