KLA10344 Multiple vulnerabilities in Sun Java SE

Multiple serious vulnerabilities have been found in SUN Java SE. Malicious users can exploit these vulnerabilities to cause denial of service or bypass authentication. Below is a complete list of vulnerabilities

1. Unknown vectors can be exploited remotely via specially designed HTTP headers or specially designed DER data;
2. Unknown vectors can be exploited remotely via a timing attack.

Original advisories

Related products

Sun-Java-JRE-1.6.x

Sun-Java-JDK-1.6.x

Oracle-Java-JRE-1.4.x

CVE list

CVE-2009-3875 critical

CVE-2009-3877 critical

CVE-2009-3876 critical

Solution

Update to latest version

Java SE

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• Sun Java SE 5 updates 21 and earlierSun Java SE 6 updates 16 and earlierSun Java SE 4 versions 1.4.2 update 23 and earlierSun Java SE 3 versions 1.3.1 update 26 and earlier