| 취약점ID |
28300 |
| 위험도 |
40 |
| 포트 |
139,445 |
| 프로토콜 |
TCP |
| 분류 |
SMB |
| 상세설명 |
원격의 호스트에 Oracle(예전의 Sun) Java SE나 비지니스용 Java의 6 Update 26 / 5.0 Update 30 / 1.4.2.32 버전이 해당된다.
해당 버전에 포함된 다음의 컴포넌트들은 잠재적으로 보안 이슈를 가지고 있다 :
- AWT
- Deployment
- Deserialization
- Hotspot
- Java Runtime Environment
- Networking
- NIO
- SAAJ
- Sound
- Swing
* 알림: 이 점검항목은 이 취약점을 점검하기 위해 해당 Oracle 데이터베이스 서버의 버전 정보만을 확인한다. 따라서 거짓 양성반응(False Positive)을 보일 수 있다.
* 참고 사이트:
http://www.oracle.com/technetwork/topics/security/javacpujune2011-313339.html
http://www.zerodayinitiative.com/advisories/ZDI-11-182/
http://www.zerodayinitiative.com/advisories/ZDI-11-183/
http://www.zerodayinitiative.com/advisories/ZDI-11-184/
http://www.zerodayinitiative.com/advisories/ZDI-11-185/
http://www.zerodayinitiative.com/advisories/ZDI-11-186/
http://www.zerodayinitiative.com/advisories/ZDI-11-187/
http://www.zerodayinitiative.com/advisories/ZDI-11-188/
http://www.zerodayinitiative.com/advisories/ZDI-11-189/
http://www.zerodayinitiative.com/advisories/ZDI-11-190/
http://www.zerodayinitiative.com/advisories/ZDI-11-191/
http://www.zerodayinitiative.com/advisories/ZDI-11-192/
http://www.securityfocus.com/archive/1/518303/30/0/threaded
http://www.securityfocus.com/archive/1/518304/30/0/threaded
http://www.securityfocus.com/archive/1/518307/30/0/threaded
http://www.securityfocus.com/archive/1/518305/30/0/threaded
http://www.securityfocus.com/archive/1/518306/30/0/threaded
http://www.securityfocus.com/archive/1/518309/30/0/threaded
http://www.securityfocus.com/archive/1/518308/30/0/threaded
http://www.securityfocus.com/archive/1/518315/30/0/threaded
http://www.securityfocus.com/archive/1/518313/30/0/threaded
http://www.securityfocus.com/archive/1/518312/30/0/threaded
http://www.securityfocus.com/archive/1/518311/30/0/threaded
* 영향을 받는 플랫폼:
JDK/JRE 6 update 26, JDK update 5.0 update 30, SDK 1.4.2_32 or later
Microsoft Windows Any version
Linux Any version
Unix Any version |
| 해결책 |
Oracle 사는 이 문제들을 해결할 수 있는 Critical Patch Update를 내 놓았다. 적절한 패치 획득 및 적용에 관한 정보는 다음 2011년 6월 Oracle Critical Patch Update에서 찾을 수 있다:
http://blogs.oracle.com/security/2011/06/june_2011_java_se_and_java.html |
| 관련 URL |
CVE-2011-0786,CVE-2011-0788,CVE-2011-0802,CVE-2011-0814,CVE-2011-0815,CVE-2011-0817,CVE-2011-0862,CVE-2011-0863,CVE-2011-0864 (CVE) |
| 관련 URL |
48133,48134,48135,48136,48137,48138,48139,48140,48141,48142,48143,48144,48145,48146,48147,48148,48149 (SecurityFocus) |
| 관련 URL |
(ISS) |
|
